This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft File: tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json) Hash identifier: bxMw5UMNxDRPbZAvoctHatmrQkZcyAtcHCJZnEUH/cU= Subject key identifier: 86:05:70:5A:28:C7:A1:78:43:D7:22:A7:F5:16:53:04:FB:90:7E:36 Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c Certificate serial: 019B5004FED83173A3FD547771A9B8B83D96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft Manifest number: 11F1 Signing time: Wed 24 Dec 2025 11:01:03 +0000 Manifest this update: Wed 24 Dec 2025 11:01:03 +0000 Manifest next update: Thu 25 Dec 2025 11:01:03 +0000 Files and hashes: 1: Tm8yT_3vBgLrxw1Lr4A3GN1Cjk4.roa (hash: cpwfuPoZQp9+xwJvstUEZKWWh0LDOj40EbCeSJBVSfw=) 2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: rftzmKlpUhq/zlg0hCS0OA9kL+JuIXmZs6sMxkxqiJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:04:fe:d8:31:73:a3:fd:54:77:71:a9:b8:b8:3d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c Validity Not Before: Dec 24 11:01:03 2025 GMT Not After : Dec 25 11:01:03 2025 GMT Subject: CN=8605705a28c7a17843d722a7f5165304fb907e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fe:32:10:0f:f1:3a:a0:1b:ca:cf:7f:cc:e5: 3e:90:33:aa:d4:29:2d:ab:25:bd:79:db:5b:9d:8d: 14:62:0d:e3:d7:a2:ff:29:99:a0:da:d5:f9:41:b9: 20:a6:a2:c0:ca:73:1d:bc:a6:bf:0c:9e:c3:57:7e: f1:a4:dc:f6:93:4e:60:ed:24:07:98:64:da:41:59: f1:46:df:31:21:6e:17:34:a0:76:e5:01:1a:f9:dc: 5d:66:01:38:b3:37:7d:4e:3e:62:05:e9:a0:21:1f: e8:c1:1c:fd:f4:39:19:2b:9b:90:69:6f:46:40:0f: ed:4f:f5:6f:92:9c:6f:7c:0a:a6:aa:85:b8:69:66: df:fa:65:95:ea:a5:6b:6d:75:37:fe:d3:49:c7:9a: 5a:f6:c0:71:e6:7b:fe:93:e5:1c:8d:32:96:89:0d: 66:1c:80:21:26:ab:5a:3a:eb:09:3a:a2:7d:74:9b: c9:36:2e:65:9e:53:7a:fa:eb:22:39:e6:bf:6a:f9: 01:d9:01:25:3c:06:77:40:f1:3f:1d:7e:98:30:31: f4:19:43:22:b5:df:f3:2f:5d:33:77:06:88:56:88: 97:18:79:22:6c:26:a8:fa:ff:17:1e:af:06:0d:01: be:d8:1d:f1:bd:0f:ee:14:78:aa:87:c8:c2:dc:17: 4f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:05:70:5A:28:C7:A1:78:43:D7:22:A7:F5:16:53:04:FB:90:7E:36 X509v3 Authority Key Identifier: keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:23:9b:ee:a6:e1:46:4e:a7:f6:b9:42:de:21:51:1e:8a:c1: b5:b8:87:f2:7c:10:50:fa:91:d1:ef:b2:b9:02:f3:5c:8f:fc: 5d:61:bf:d0:3b:75:a1:2f:86:e8:c1:a6:99:4c:24:73:38:29: 85:d4:d5:4d:ba:24:06:98:c1:23:df:d4:e3:7a:f3:58:d9:4a: e1:72:4f:fe:63:2e:0e:ab:04:f2:79:90:74:4c:13:71:60:fb: 4a:cb:a2:28:56:4f:d9:c3:94:ab:b8:58:a6:40:0b:74:70:6e: 8f:a4:52:59:0f:0f:be:39:aa:0a:d5:28:76:e2:2b:25:2f:91: 61:0c:82:5d:89:9f:5b:7f:11:73:6b:df:fb:a9:7c:ea:c3:1e: 29:3f:5f:1d:e8:48:7d:5a:9a:b2:38:8c:c0:11:55:be:db:f3: ac:d6:2c:4b:23:6e:91:3d:d1:c4:96:8e:b1:f7:a3:e6:0c:fd: 58:eb:7d:0f:09:f2:fc:91:e0:5a:ae:9c:39:02:b9:6a:4e:1c: d4:42:54:07:8e:1d:ce:fc:39:ca:c1:c9:40:b5:89:4b:78:36: 10:e8:b7:82:3b:6c:a2:4b:e7:cd:84:bf:0b:c5:a0:7a:40:3c: 62:84:46:bd:8d:72:4f:d9:c6:5c:1f:0b:75:83:28:7e:94:f2: 3c:31:c3:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQBP7YMXOj/VR3cam4uD2WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NDhkNjI2YTkyMGU0MmRhY2QwZTk0OGU5NjZhNWU0YmNj M2MxMWMwHhcNMjUxMjI0MTEwMTAzWhcNMjUxMjI1MTEwMTAzWjAzMTEwLwYDVQQD Eyg4NjA1NzA1YTI4YzdhMTc4NDNkNzIyYTdmNTE2NTMwNGZiOTA3ZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/4yEA/xOqAbys9/zOU+kDOq1Ckt qyW9edtbnY0UYg3j16L/KZmg2tX5QbkgpqLAynMdvKa/DJ7DV37xpNz2k05g7SQH mGTaQVnxRt8xIW4XNKB25QEa+dxdZgE4szd9Tj5iBemgIR/owRz99DkZK5uQaW9G QA/tT/VvkpxvfAqmqoW4aWbf+mWV6qVrbXU3/tNJx5pa9sBx5nv+k+UcjTKWiQ1m HIAhJqtaOusJOqJ9dJvJNi5lnlN6+usiOea/avkB2QElPAZ3QPE/HX6YMDH0GUMi td/zL10zdwaIVoiXGHkibCao+v8XHq8GDQG+2B3xvQ/uFHiqh8jC3BdPewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYFcFoox6F4Q9cip/UWUwT7kH42MB8GA1UdIwQY MBaAFLRI1iapIOQtrNDpSOlmpeS8w8EcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81NWQ1ODQtMTlhMS00N2MwLTk1YTYt YmM4ZTBiNjlhYzEyLzEvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81NWQ1ODQtMTlhMS00N2MwLTk1YTYtYmM4ZTBiNjlhYzEy LzEvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSOb7qbh Rk6n9rlC3iFRHorBtbiH8nwQUPqR0e+yuQLzXI/8XWG/0Dt1oS+G6MGmmUwkczgp hdTVTbokBpjBI9/U43rzWNlK4XJP/mMuDqsE8nmQdEwTcWD7SsuiKFZP2cOUq7hY pkALdHBuj6RSWQ8PvjmqCtUoduIrJS+RYQyCXYmfW38Rc2vf+6l86sMeKT9fHehI fVqasjiMwBFVvtvzrNYsSyNukT3RxJaOsfej5gz9WOt9Dwny/JHgWq6cOQK5ak4c 1EJUB44dzvw5ysHJQLWJS3g2EOi3gjtsokvnzYS/C8WgekA8YoRGvY1yT9nGXB8L dYMofpTyPDHDuw== -----END CERTIFICATE-----Generated at Wed Dec 24 13:38:52 2025 by rpki-client