This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft File: ts9OV8vBXOTs70T1DluFkvvu7qA.mft (raw, json) Hash identifier: 6N/VrzEI63lS3nIlLPYC0cMaMOlJ3+V7o5J8sjmcPxk= Subject key identifier: D1:8D:71:46:E1:2B:87:C0:75:82:BF:E5:24:C5:37:48:87:37:1B:B8 Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0 Certificate issuer: /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0 Certificate serial: 019B4A3A1A24CEC2D6C5E8D667DFD97DF028 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft Manifest number: 0F48 Signing time: Tue 23 Dec 2025 08:01:20 +0000 Manifest this update: Tue 23 Dec 2025 08:01:20 +0000 Manifest next update: Wed 24 Dec 2025 08:01:20 +0000 Files and hashes: 1: 2bbjZnItd_WfSUsxeSim-v-qB-g.roa (hash: U3T6Blvywe2N+XOmN4d0Sfw2WTnfp19mqzXdb2WW/M8=) 2: hs7awmW5u-N7i3rafiPiNllc2Bo.roa (hash: zx9QQVE6GtEBw9ZKQW610wAAxlFBO5GbObUYOTrSVsA=) 3: ts9OV8vBXOTs70T1DluFkvvu7qA.crl (hash: 3fTQDtmOpl0nP8O1psLeb45R+EJWP9lwHXOG1sjLX1g=) 4: ucQNwDwE2vdn8aT5NeBfcaMP4xI.roa (hash: uOUVs3Rq9AKXwjmauSrDsTRXthAY0OABda9jaa1tn6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:3a:1a:24:ce:c2:d6:c5:e8:d6:67:df:d9:7d:f0:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0 Validity Not Before: Dec 23 08:01:20 2025 GMT Not After : Dec 24 08:01:20 2025 GMT Subject: CN=d18d7146e12b87c07582bfe524c5374887371bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e1:86:39:ee:2f:b3:53:a8:21:34:df:59:18: d3:f5:86:b1:0f:47:7a:93:bc:f9:ac:f0:6c:40:a8: d5:2b:96:a8:3b:42:89:24:d6:79:ab:5e:c0:cd:f1: 7b:97:a8:9b:a9:0a:d1:b1:d9:d2:93:79:73:c7:af: 47:da:d4:bd:db:81:54:ee:e9:d9:2c:56:15:a6:57: 73:b6:2b:ad:e5:78:26:89:5d:68:4c:49:71:90:a5: 43:fe:94:d9:65:57:cd:9f:9d:62:b9:e6:9e:9e:0a: 62:83:57:90:f0:fa:3d:9b:03:b6:6c:df:9d:a0:38: 0e:2d:66:2f:43:55:9e:65:40:74:e7:20:e0:af:ba: 9b:09:70:37:e6:b3:76:33:0b:aa:08:27:07:49:09: b3:fc:04:72:d9:2e:83:9b:5c:5f:40:98:15:de:1e: 2c:48:f8:ef:5e:bf:a6:ca:04:b5:5d:5f:f9:72:bd: a8:24:d9:3d:cd:9d:66:99:10:23:be:1d:3d:6e:fc: 98:80:b5:35:6b:85:ad:08:8b:b7:a3:23:8e:07:ea: 8f:55:ab:a4:10:a8:99:ff:80:cc:d7:fd:67:6d:a9: e5:93:9f:02:37:5c:0d:6e:07:58:fe:9d:2a:c1:cf: 5c:8e:4d:13:22:74:7a:da:59:82:d5:aa:34:93:94: 39:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8D:71:46:E1:2B:87:C0:75:82:BF:E5:24:C5:37:48:87:37:1B:B8 X509v3 Authority Key Identifier: keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:b0:f1:de:6f:2a:5e:5f:a5:23:58:91:4b:3d:71:8b:b2:d7: 7c:96:60:70:77:ce:da:00:0c:fd:f6:59:72:7b:37:e8:4c:f0: af:bd:7e:ed:90:b8:49:c1:d4:b7:90:ae:91:f3:0f:b6:99:d5: e1:06:7b:b6:9e:3f:31:1f:24:04:b3:65:ed:5d:b9:ad:86:ad: f9:b5:89:ed:bf:56:6a:87:17:dd:2e:a6:92:dd:e1:95:6c:1a: f3:71:a3:7c:1b:6c:b4:57:32:23:39:ff:dc:4a:60:a6:31:25: 0c:54:3a:6c:73:30:f1:b5:0b:c6:a2:b6:0a:29:bf:35:c9:0a: 2b:6d:e0:6c:de:1f:89:04:e9:99:02:32:73:e7:81:cb:06:56: ab:ca:bd:9b:15:91:8b:a2:a2:47:81:37:3d:b6:d2:b6:02:a3: 5b:ee:0d:d9:5b:84:02:6f:d4:cf:a4:00:e5:1c:6d:a1:a2:c4: 3e:fa:ee:66:51:cc:fc:ae:3b:97:27:89:11:42:d8:1d:fd:9c: 58:d9:5a:e2:59:12:39:9a:13:aa:60:02:a7:46:5c:ab:8c:51: f0:08:3f:93:eb:bc:19:f6:3a:fe:65:db:2d:09:fe:e9:6e:77: 2f:35:85:6c:3b:82:eb:29:85:1c:b5:43:73:c9:df:a8:c6:c8: 11:5f:31:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOhokzsLWxejWZ9/ZffAoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2Y2Y0ZTU3Y2JjMTVjZTRlY2VmNDRmNTBlNWI4NTkyZmJl ZWVlYTAwHhcNMjUxMjIzMDgwMTIwWhcNMjUxMjI0MDgwMTIwWjAzMTEwLwYDVQQD EyhkMThkNzE0NmUxMmI4N2MwNzU4MmJmZTUyNGM1Mzc0ODg3MzcxYmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeGGOe4vs1OoITTfWRjT9YaxD0d6 k7z5rPBsQKjVK5aoO0KJJNZ5q17AzfF7l6ibqQrRsdnSk3lzx69H2tS924FU7unZ LFYVpldztiut5XgmiV1oTElxkKVD/pTZZVfNn51iueaengpig1eQ8Po9mwO2bN+d oDgOLWYvQ1WeZUB05yDgr7qbCXA35rN2MwuqCCcHSQmz/ARy2S6Dm1xfQJgV3h4s SPjvXr+mygS1XV/5cr2oJNk9zZ1mmRAjvh09bvyYgLU1a4WtCIu3oyOOB+qPVauk EKiZ/4DM1/1nbanlk58CN1wNbgdY/p0qwc9cjk0TInR62lmC1ao0k5Q5CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGNcUbhK4fAdYK/5STFN0iHNxu4MB8GA1UdIwQY MBaAFLbPTlfLwVzk7O9E9Q5bhZL77u6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80ZTg5N2YtZTQzNS00NzE1LWEzYzUt ODViZTQyNWQzMTk5LzEvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy80ZTg5N2YtZTQzNS00NzE1LWEzYzUtODViZTQyNWQzMTk5 LzEvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLDx3m8q Xl+lI1iRSz1xi7LXfJZgcHfO2gAM/fZZcns36Ezwr71+7ZC4ScHUt5CukfMPtpnV 4QZ7tp4/MR8kBLNl7V25rYat+bWJ7b9WaocX3S6mkt3hlWwa83GjfBtstFcyIzn/ 3EpgpjElDFQ6bHMw8bULxqK2Cim/NckKK23gbN4fiQTpmQIyc+eBywZWq8q9mxWR i6KiR4E3PbbStgKjW+4N2VuEAm/Uz6QA5RxtoaLEPvruZlHM/K47lyeJEULYHf2c WNla4lkSOZoTqmACp0Zcq4xR8Ag/k+u8GfY6/mXbLQn+6W53LzWFbDuC6ymFHLVD c8nfqMbIEV8xPg== -----END CERTIFICATE-----Generated at Tue Dec 23 12:44:50 2025 by rpki-client