This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft File: tIvY7E4wHJ57CkO-8PPd06RTFVo.mft (raw, json) Hash identifier: YnBzLzR9JsZPoKKAiEzUOGYJK0moQ8lirgUKJDIl30k= Subject key identifier: 1D:CF:19:6F:4B:6A:D2:36:D5:68:24:74:41:2A:0F:C7:80:A8:6F:2C Authority key identifier: B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A Certificate issuer: /CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a Certificate serial: 019B33B1E997406B274D71A99A2F78D9CB33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft Manifest number: 0444 Signing time: Thu 18 Dec 2025 23:00:56 +0000 Manifest this update: Thu 18 Dec 2025 23:00:56 +0000 Manifest next update: Fri 19 Dec 2025 23:00:56 +0000 Files and hashes: 1: RB7HUixrp2_fRnv8EOUDAJuY_s8.roa (hash: 8tnZtAu3C6mP5DEQfehN4BPaOTowIhr+JO1L2V82k9E=) 2: tIvY7E4wHJ57CkO-8PPd06RTFVo.crl (hash: 64Dr6MFZMKbWeT4PuUA+0Uski9ZFlmBhk4C66OKZmcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:e9:97:40:6b:27:4d:71:a9:9a:2f:78:d9:cb:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a Validity Not Before: Dec 18 23:00:56 2025 GMT Not After : Dec 19 23:00:56 2025 GMT Subject: CN=1dcf196f4b6ad236d5682474412a0fc780a86f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c2:e6:94:3f:3a:14:51:40:ee:53:ff:d2:c4: e8:1c:23:5b:0e:da:7d:0e:97:04:dd:64:b8:66:49: 63:c0:bc:9d:f1:e3:fa:68:e1:40:09:9f:af:f9:58: 77:f4:41:23:63:26:87:5d:ae:f4:97:69:4e:e3:96: 3d:6f:9b:0a:ca:c0:d5:ad:4c:60:3d:bd:10:40:c8: a7:61:6b:e4:d8:a8:30:df:b3:62:c9:a1:df:80:67: 06:ac:60:01:b5:ab:4b:fc:2c:9c:44:ff:36:da:57: a4:ed:c4:1d:80:f4:fe:5a:d0:8e:97:10:5c:2e:a9: 1a:ea:47:27:8d:c6:77:3f:28:5e:27:24:f3:2b:3e: 5d:2f:bc:cf:8e:2a:98:2e:3e:33:39:03:1b:69:cb: 3c:ab:fd:85:93:26:b9:1f:8a:9e:40:13:59:e8:d5: 18:38:1f:dd:03:aa:31:21:0b:99:6e:cb:53:a0:7a: fd:25:e4:1d:4d:30:38:2f:dc:77:3b:2d:48:ef:09: fc:49:01:4f:6c:04:9c:e5:08:f0:29:99:e4:3b:dc: 18:a9:95:cc:b9:e1:9d:82:13:28:bb:8c:1d:7a:ca: 8e:e4:cf:30:a6:c7:8f:40:6f:0d:0c:f3:e0:8a:43: 57:16:30:02:22:80:64:4c:ad:ce:d9:cc:81:bd:93: e8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CF:19:6F:4B:6A:D2:36:D5:68:24:74:41:2A:0F:C7:80:A8:6F:2C X509v3 Authority Key Identifier: keyid:B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:35:bb:a3:ba:31:16:7e:3f:16:ef:ac:0c:aa:8d:44:00:0f: 23:06:8c:65:97:4b:45:84:9b:90:eb:d9:0f:10:79:20:45:ad: 1d:46:d3:72:76:39:74:a1:60:97:e1:0e:84:72:af:e8:85:ef: a3:1b:a1:4a:7b:9f:62:3b:55:d2:18:49:cb:50:f3:12:ba:f3: dd:d6:0b:ba:45:7c:a1:79:16:52:79:62:2f:ea:d5:b6:80:28: 22:75:b4:5f:1c:c8:1a:da:e0:a7:c7:a5:a9:36:49:89:31:16: de:8e:e7:92:2c:41:8d:db:4f:13:db:83:73:d2:ec:48:b4:e7: 3e:b5:d4:d6:41:a1:bf:4a:d1:61:33:31:33:28:16:e6:34:8d: 4c:04:60:1a:03:bc:4e:cc:7d:2a:3e:85:1c:0b:5e:46:ff:5a: 40:d4:38:5a:7d:c3:f9:5e:da:3a:8b:ab:9c:59:8f:a7:ad:e2: c5:dd:65:81:9f:be:8d:99:a8:db:58:4a:e8:97:9e:34:0e:37: 21:fa:87:27:6f:80:5a:bd:45:18:20:e5:fd:5e:92:49:c2:89: 1d:fe:fa:de:5b:5d:05:6d:bc:b8:6e:a6:b1:04:d0:0b:5f:52: 35:e5:e3:ea:f5:36:c9:60:94:cd:9a:4b:35:c7:5d:d4:b3:3c: 9c:78:41:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsemXQGsnTXGpmi942cszMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OGJkOGVjNGUzMDFjOWU3YjBhNDNiZWYwZjNkZGQzYTQ1 MzE1NWEwHhcNMjUxMjE4MjMwMDU2WhcNMjUxMjE5MjMwMDU2WjAzMTEwLwYDVQQD EygxZGNmMTk2ZjRiNmFkMjM2ZDU2ODI0NzQ0MTJhMGZjNzgwYTg2ZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsLmlD86FFFA7lP/0sToHCNbDtp9 DpcE3WS4ZkljwLyd8eP6aOFACZ+v+Vh39EEjYyaHXa70l2lO45Y9b5sKysDVrUxg Pb0QQMinYWvk2Kgw37NiyaHfgGcGrGABtatL/CycRP822lek7cQdgPT+WtCOlxBc Lqka6kcnjcZ3PyheJyTzKz5dL7zPjiqYLj4zOQMbacs8q/2Fkya5H4qeQBNZ6NUY OB/dA6oxIQuZbstToHr9JeQdTTA4L9x3Oy1I7wn8SQFPbASc5QjwKZnkO9wYqZXM ueGdghMou4wdesqO5M8wpsePQG8NDPPgikNXFjACIoBkTK3O2cyBvZPofwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3PGW9LatI21WgkdEEqD8eAqG8sMB8GA1UdIwQY MBaAFLSL2OxOMByeewpDvvDz3dOkUxVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEl2WTdFNHdISjU3Q2tPLThQUGQwNlJURlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83NDM0ZTEtNzQxMy00ZjZhLWEyOWMt Y2RjODFkYjc3NTMxLzEvdEl2WTdFNHdISjU3Q2tPLThQUGQwNlJURlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC83NDM0ZTEtNzQxMy00ZjZhLWEyOWMtY2RjODFkYjc3NTMx LzEvdEl2WTdFNHdISjU3Q2tPLThQUGQwNlJURlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDW7o7ox Fn4/Fu+sDKqNRAAPIwaMZZdLRYSbkOvZDxB5IEWtHUbTcnY5dKFgl+EOhHKv6IXv oxuhSnufYjtV0hhJy1DzErrz3dYLukV8oXkWUnliL+rVtoAoInW0XxzIGtrgp8el qTZJiTEW3o7nkixBjdtPE9uDc9LsSLTnPrXU1kGhv0rRYTMxMygW5jSNTARgGgO8 Tsx9Kj6FHAteRv9aQNQ4Wn3D+V7aOournFmPp63ixd1lgZ++jZmo21hK6JeeNA43 IfqHJ2+AWr1FGCDl/V6SScKJHf763ltdBW28uG6msQTQC19SNeXj6vU2yWCUzZpL Ncdd1LM8nHhBnw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:55:10 2025 by rpki-client