This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft File: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json) Hash identifier: KuagjXSeCf9lP72/xcBtE59xaK334ibC2I/XfENlQCc= Subject key identifier: 32:C3:03:88:6C:5A:99:C1:C3:3F:77:89:A4:E3:EF:92:D6:E1:76:B3 Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14 Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714 Certificate serial: 019AFBE776276B23C0CD5C666E01B0F08130 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft Manifest number: 17C8 Signing time: Mon 08 Dec 2025 03:00:41 +0000 Manifest this update: Mon 08 Dec 2025 03:00:41 +0000 Manifest next update: Tue 09 Dec 2025 03:00:41 +0000 Files and hashes: 1: 1-n-9hD734eUWTfI1sQzb2mm0u70.roa (hash: prY6VkL1Otme9e/iQnbu0E7x7kgOdTIuBs01J6UM6iw=) 2: 77nHJ74F1fFAwUbmMeRLrxeDdWA.roa (hash: 2Mtt2AaUFR4ZOfRNdKyuPT3cj2EQ+qy46BQe2ut00YY=) 3: G7v3pCkQ6hmfhpbVxzOwUWwmzDY.roa (hash: nVHjBCeWZEPbhgav/+qfuSQLmW0a+8zRMZx9D7jY6PU=) 4: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: OS6iFdY4zlWQPjL8X8Ni7gmgTdtXM4wLVvWomRvlzrM=) 5: ZLnsYJrehSHy13eQaMRY1Tbep5I.roa (hash: beMY8QS7fWlkYI5VTaRGjskfF3hsi1HR7CrNo9yaWBM=) 6: ikzzB-TS7fbu_e8Jm20uc--Bfbk.roa (hash: L3G3izasb6pEF2T5imYXwo1rhko1cZpeUonzNyfE5G4=) 7: jUW3uJuzvpMts6ZS_PpOE0-vHy4.roa (hash: QVsKQjI9Ob132etLfwnFEQDpraGA87DL9fvaD59Kiac=) 8: s2kaxqyHVyCTqaRomO4ohfBebsc.roa (hash: vuPF+RwNPBvTGLZXAOB0JJk86Umi+Vc+1JKtKmoQbqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 19:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:e7:76:27:6b:23:c0:cd:5c:66:6e:01:b0:f0:81:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714 Validity Not Before: Dec 8 03:00:41 2025 GMT Not After : Dec 9 03:00:41 2025 GMT Subject: CN=32c303886c5a99c1c33f7789a4e3ef92d6e176b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ab:68:26:45:dd:86:26:1e:df:5f:f7:54:13: 43:a5:cc:9e:b0:7b:34:c3:a5:1a:52:dd:b9:f0:9b: d1:60:89:2a:aa:d6:a1:e9:e0:d9:0a:a8:15:cf:d5: b6:9d:22:7f:34:55:b8:29:21:a6:e9:68:d6:57:d9: ea:77:b3:21:9c:85:58:1b:a6:ba:c7:48:5b:8a:99: 7e:52:9f:93:ff:e5:e9:e3:4c:20:5e:e4:bf:34:fe: cd:40:5a:4f:47:70:bf:4b:50:44:33:83:0b:7a:c7: c7:11:f1:2f:4f:08:a3:e2:09:60:a5:b1:4d:96:cb: 8a:5f:ae:3b:56:ad:ab:7c:95:de:a0:6e:87:ab:0a: cb:f9:1f:2a:ea:61:fa:b5:4a:64:1c:a3:4c:51:07: c8:0d:a5:37:91:f6:ca:54:37:43:cb:fa:97:a4:fa: 33:19:08:65:fe:b9:c7:85:c4:27:85:e9:0b:a6:f9: 1b:ff:e8:f2:fd:b4:36:e3:a6:72:c9:69:26:80:83: a1:38:b1:4f:86:bf:92:bf:20:44:61:80:04:65:4f: 32:b5:d3:a9:57:ff:d8:08:05:8c:2b:0f:68:62:50: 09:31:fa:fa:75:0b:e8:6e:07:12:af:c9:53:75:11: ba:85:fa:a4:a5:90:c9:dc:5e:68:34:8b:b8:b3:03: 6a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C3:03:88:6C:5A:99:C1:C3:3F:77:89:A4:E3:EF:92:D6:E1:76:B3 X509v3 Authority Key Identifier: keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:e7:56:24:59:1a:b3:1a:97:cd:2a:f0:84:94:ae:a5:46:f4: 7a:83:07:20:3a:17:72:6c:78:ca:97:9c:ee:b6:f1:9a:1e:15: ce:9c:ad:31:cb:f2:08:9f:fd:3c:9e:d1:b7:1b:59:87:a0:29: 42:9d:c1:d8:18:87:e7:97:ce:ac:1c:a0:c5:3f:ca:39:13:76: 48:50:45:44:24:a2:65:4b:2c:dd:20:5f:f2:a9:80:9a:6f:55: c0:17:d0:06:e9:e6:c3:f9:50:58:4c:0e:6b:ae:08:dc:b0:87: 01:70:0e:bd:78:38:c2:4a:f9:5d:ac:dc:a7:41:6a:97:ac:89: 42:b9:7c:a2:73:e9:97:93:d7:74:e5:97:d2:76:e9:d6:1b:d4: 78:8e:c9:16:24:18:ac:7c:6a:04:4e:c8:07:48:1d:8c:ff:86: b1:22:aa:c5:3a:36:29:60:e7:d1:5e:20:90:b3:f2:26:b2:d0: f7:1c:dd:3d:a2:f3:9d:6e:9a:a9:dc:9a:fd:03:cb:07:49:2a: 07:2d:5b:90:13:56:2f:5e:3e:4c:94:69:01:fe:21:0d:66:35: f6:05:3b:fe:db:3f:83:5d:60:54:70:b8:94:13:f1:f7:14:02: a2:d5:b4:ed:b0:df:fc:5d:10:5f:1a:94:ea:9c:7e:c9:cf:5c: 52:7a:a8:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr753YnayPAzVxmbgGw8IEwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlY2Y1MzAwN2M3OWNjNWUyZjJkNzM1NmJhOTEyMWE3OGMw Yzc3MTQwHhcNMjUxMjA4MDMwMDQxWhcNMjUxMjA5MDMwMDQxWjAzMTEwLwYDVQQD EygzMmMzMDM4ODZjNWE5OWMxYzMzZjc3ODlhNGUzZWY5MmQ2ZTE3NmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qtoJkXdhiYe31/3VBNDpcyesHs0 w6UaUt258JvRYIkqqtah6eDZCqgVz9W2nSJ/NFW4KSGm6WjWV9nqd7MhnIVYG6a6 x0hbipl+Up+T/+Xp40wgXuS/NP7NQFpPR3C/S1BEM4MLesfHEfEvTwij4glgpbFN lsuKX647Vq2rfJXeoG6HqwrL+R8q6mH6tUpkHKNMUQfIDaU3kfbKVDdDy/qXpPoz GQhl/rnHhcQnhekLpvkb/+jy/bQ246ZyyWkmgIOhOLFPhr+SvyBEYYAEZU8ytdOp V//YCAWMKw9oYlAJMfr6dQvobgcSr8lTdRG6hfqkpZDJ3F5oNIu4swNquwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLDA4hsWpnBwz93iaTj75LW4XazMB8GA1UdIwQY MBaAFE7PUwB8ecxeLy1zVrqRIaeMDHcUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEt Y2I4YjNhMDk0MjA5LzEvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEtY2I4YjNhMDk0MjA5 LzEvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+dWJFka sxqXzSrwhJSupUb0eoMHIDoXcmx4ypec7rbxmh4VzpytMcvyCJ/9PJ7RtxtZh6Ap Qp3B2BiH55fOrBygxT/KORN2SFBFRCSiZUss3SBf8qmAmm9VwBfQBunmw/lQWEwO a64I3LCHAXAOvXg4wkr5Xazcp0Fql6yJQrl8onPpl5PXdOWX0nbp1hvUeI7JFiQY rHxqBE7IB0gdjP+GsSKqxTo2KWDn0V4gkLPyJrLQ9xzdPaLznW6aqdya/QPLB0kq By1bkBNWL14+TJRpAf4hDWY19gU7/ts/g11gVHC4lBPx9xQCotW07bDf/F0QXxqU 6px+yc9cUnqojg== -----END CERTIFICATE-----Generated at Mon Dec 8 05:04:37 2025 by rpki-client