This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft File: tpQiR24a5eoNWOT4_fkfBfEC_vs.mft (raw, json) Hash identifier: q/vFDgFIcx+497RJdbLWK5lTIEdczVcrJIMtzFKpoZc= Subject key identifier: 99:47:25:78:1B:31:3E:92:C7:B2:99:5C:64:A6:7C:43:44:4E:2F:52 Authority key identifier: B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB Certificate issuer: /CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb Certificate serial: 019B53E1C0B80C0DE9BAEBBFB61C7F1812B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft Manifest number: 1793 Signing time: Thu 25 Dec 2025 05:01:02 +0000 Manifest this update: Thu 25 Dec 2025 05:01:02 +0000 Manifest next update: Fri 26 Dec 2025 05:01:02 +0000 Files and hashes: 1: 1-CfAQPnHbYYCEoKxuhItskljCHs.roa (hash: WTELyKm4OH4Q12BiZgyRDXiy7VL64q36cWNiezWQuws=) 2: QdZdK2qqiI5aoCKgtqiHNktyi64.roa (hash: VYo7wX1xPM2gvfQMUvdssqSygBbHWq6CXy3NXKo/nzM=) 3: tpQiR24a5eoNWOT4_fkfBfEC_vs.crl (hash: ivTzQ7VlFGcWtxLjMJGYx4F3X3ncZ2VwB2JJlWgFahU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:c0:b8:0c:0d:e9:ba:eb:bf:b6:1c:7f:18:12:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb Validity Not Before: Dec 25 05:01:02 2025 GMT Not After : Dec 26 05:01:02 2025 GMT Subject: CN=994725781b313e92c7b2995c64a67c43444e2f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8d:c9:46:06:bc:93:cb:a3:b3:64:2d:bc:c7: 27:95:3f:e0:66:44:d0:01:65:dd:df:57:8d:7b:64: 82:25:1f:e7:79:c3:60:0b:5c:e9:e9:94:13:02:c3: da:97:9f:b0:12:de:52:82:f9:05:f0:90:37:39:87: cc:67:9e:5b:1c:ed:49:c1:4c:ae:8b:c6:da:f7:f1: 93:04:5a:a5:92:62:20:70:e5:17:57:b7:6e:7d:de: 84:cd:85:10:8c:70:2e:1d:f1:ca:81:21:9e:3f:c4: df:fa:03:66:92:f3:cf:ab:2a:5b:ad:ac:71:59:92: 55:d9:4c:03:86:6d:4a:c2:1d:93:17:d6:fe:75:7d: c2:cf:12:79:1f:7c:c4:7b:6e:ff:e5:6e:c6:27:c7: f9:81:4e:63:d5:61:54:ee:7c:cc:c5:c7:46:08:f4: 0b:5a:e1:5d:f5:dd:d0:60:4d:06:25:48:e9:b8:5a: ed:74:fd:f5:1a:fa:54:5e:e2:8f:19:d6:6d:0f:86: 40:50:98:44:f8:88:42:15:bd:04:21:65:49:d3:24: 9f:87:42:48:54:5f:83:51:3f:c8:8d:b8:32:16:81: 45:98:b8:0f:db:0b:c2:25:10:c4:5b:c4:43:17:03: b5:97:fc:55:43:97:e0:08:ef:e9:db:a9:7a:18:7e: da:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:47:25:78:1B:31:3E:92:C7:B2:99:5C:64:A6:7C:43:44:4E:2F:52 X509v3 Authority Key Identifier: keyid:B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:66:4b:63:ba:92:aa:8c:39:ea:8e:c2:36:96:e3:2e:0a:87: 4a:e8:1a:bf:9f:16:a6:96:52:a3:e3:ca:f1:55:40:17:8c:36: 41:a5:85:b5:cf:86:cd:67:55:be:9b:d2:5d:9e:ee:88:21:f0: 0b:83:84:57:43:ae:e4:23:52:68:7a:bf:45:c0:fa:1e:55:a8: a9:ba:92:b7:6e:8e:cb:85:f3:8a:42:28:03:7f:30:8d:40:b7: 82:d2:5e:6a:b5:01:48:db:f4:98:00:86:fc:c9:f5:a4:58:84: bd:90:a2:07:6b:ec:0e:32:f2:79:70:b8:9d:cd:82:79:4a:7c: a3:72:4b:df:3c:af:18:89:29:0c:92:0e:01:d5:59:1c:6a:07: 49:7f:4a:5a:a2:4e:85:d6:20:68:1b:85:b0:8e:b3:e3:c4:a4: 0b:1f:20:f1:5a:44:6d:1e:5e:2d:ea:95:94:57:cf:cd:75:c2: 1c:f5:4b:bb:b4:f3:d0:37:81:e1:15:c1:b7:7a:3a:4b:b6:d0: f5:f1:1c:ff:64:13:1c:20:ba:8a:29:39:8e:dd:16:c1:df:de: 6e:70:59:f1:6a:5f:f9:dd:ff:6d:37:ea:06:be:c2:01:5f:82: 7c:9d:06:9c:4f:26:aa:65:e7:66:3f:5f:82:9d:0f:17:9f:a2: 1c:3b:52:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4cC4DA3puuu/thx/GBK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OTQyMjQ3NmUxYWU1ZWEwZDU4ZTRmOGZkZjkxZjA1ZjEw MmZlZmIwHhcNMjUxMjI1MDUwMTAyWhcNMjUxMjI2MDUwMTAyWjAzMTEwLwYDVQQD Eyg5OTQ3MjU3ODFiMzEzZTkyYzdiMjk5NWM2NGE2N2M0MzQ0NGUyZjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA543JRga8k8ujs2QtvMcnlT/gZkTQ AWXd31eNe2SCJR/necNgC1zp6ZQTAsPal5+wEt5SgvkF8JA3OYfMZ55bHO1JwUyu i8ba9/GTBFqlkmIgcOUXV7dufd6EzYUQjHAuHfHKgSGeP8Tf+gNmkvPPqypbraxx WZJV2UwDhm1Kwh2TF9b+dX3CzxJ5H3zEe27/5W7GJ8f5gU5j1WFU7nzMxcdGCPQL WuFd9d3QYE0GJUjpuFrtdP31GvpUXuKPGdZtD4ZAUJhE+IhCFb0EIWVJ0ySfh0JI VF+DUT/IjbgyFoFFmLgP2wvCJRDEW8RDFwO1l/xVQ5fgCO/p26l6GH7acQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlHJXgbMT6Sx7KZXGSmfENETi9SMB8GA1UdIwQY MBaAFLaUIkduGuXqDVjk+P35HwXxAv77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHBRaVIyNGE1ZW9OV09UNF9ma2ZCZkVDX3ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lNDlhZmUtMTVhZS00ODVhLWFmNzYt NjY1MTZmZmNlNzUwLzEvdHBRaVIyNGE1ZW9OV09UNF9ma2ZCZkVDX3ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lNDlhZmUtMTVhZS00ODVhLWFmNzYtNjY1MTZmZmNlNzUw LzEvdHBRaVIyNGE1ZW9OV09UNF9ma2ZCZkVDX3ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGZLY7qS qow56o7CNpbjLgqHSugav58WppZSo+PK8VVAF4w2QaWFtc+GzWdVvpvSXZ7uiCHw C4OEV0Ou5CNSaHq/RcD6HlWoqbqSt26Oy4XzikIoA38wjUC3gtJearUBSNv0mACG /Mn1pFiEvZCiB2vsDjLyeXC4nc2CeUp8o3JL3zyvGIkpDJIOAdVZHGoHSX9KWqJO hdYgaBuFsI6z48SkCx8g8VpEbR5eLeqVlFfPzXXCHPVLu7Tz0DeB4RXBt3o6S7bQ 9fEc/2QTHCC6iik5jt0Wwd/ebnBZ8Wpf+d3/bTfqBr7CAV+CfJ0GnE8mqmXnZj9f gp0PF5+iHDtSmw== -----END CERTIFICATE-----Generated at Thu Dec 25 09:20:56 2025 by rpki-client