This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft File: tXZXfSAIXEwi_IARyNGpP2MhHA8.mft (raw, json) Hash identifier: TvU/MhVcEy2EC3Hl2sRIwt3GkqrW3CYyilutHc6ZZ70= Subject key identifier: DA:85:54:A7:F6:9C:66:48:93:B9:45:27:A3:06:36:5D:8A:EF:EC:7C Authority key identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F Certificate issuer: /CN=b576577d20085c4c22fc8011c8d1a93f63211c0f Certificate serial: 019B281BEC37A9639F62566CE36FB3D6A8D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft Manifest number: 02A3 Signing time: Tue 16 Dec 2025 17:01:17 +0000 Manifest this update: Tue 16 Dec 2025 17:01:17 +0000 Manifest next update: Wed 17 Dec 2025 17:01:17 +0000 Files and hashes: 1: 0NGpBZClfqdkwT-g1SQX2TG7Voo.roa (hash: SbCdNlkd4RVvBhJ9C9nlFY+4pjkHAYs+BVh1BZ1ld+c=) 2: FrJWtoZemJx4JKpSKfeY_d7A8KU.roa (hash: mn6H512YQAxp8Xgyg/tGQdGcCEfihV9UXWWT70uzA50=) 3: tXZXfSAIXEwi_IARyNGpP2MhHA8.crl (hash: SM/7PpmvYW3jxy9+WXW2R2S2aRrzsz8PB8HNftDgd90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 17:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:ec:37:a9:63:9f:62:56:6c:e3:6f:b3:d6:a8:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b576577d20085c4c22fc8011c8d1a93f63211c0f Validity Not Before: Dec 16 17:01:17 2025 GMT Not After : Dec 17 17:01:17 2025 GMT Subject: CN=da8554a7f69c664893b94527a306365d8aefec7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b4:fd:64:11:ea:6f:4f:ad:7c:d9:23:84:e7: 2c:1a:34:77:8d:f2:ed:8a:3c:6a:e9:e9:ee:f6:08: ba:d6:f7:e0:4b:cf:ff:94:73:54:74:e3:b9:3b:f1: ac:bf:7c:ac:c3:ba:b6:16:ee:93:aa:d9:8f:10:46: 2b:cc:05:f5:59:f4:6f:f2:f1:ee:17:5c:fb:f8:de: 3e:34:2c:9c:a0:18:b4:70:20:88:dc:2a:d7:e7:e8: 8a:f1:d3:6d:26:8b:86:c2:b0:b3:01:ee:ec:45:e8: 13:d1:e0:f6:35:b7:de:25:ab:5c:6a:d7:02:49:8f: 56:3d:57:5c:c2:1c:17:82:c0:1b:15:3a:ea:c7:b5: d0:b8:4d:3d:1c:73:e1:ee:1c:bd:e5:6b:a7:48:e1: e4:fa:14:d1:30:34:0a:4e:e1:28:09:05:e7:c0:ad: bd:5e:fb:1f:4a:77:d5:a8:bf:00:8d:4c:7e:bf:ab: 90:54:25:3f:8a:41:a5:3f:76:6b:a3:8d:82:58:02: 64:22:90:c0:50:d8:53:3d:ea:4c:f7:7a:23:a7:07: 36:37:6a:0e:8f:b4:01:16:14:6f:7f:f9:9b:ca:a6: 1f:01:b6:b8:a2:91:f3:67:f3:3f:17:02:5e:ff:06: e1:4e:c5:f1:18:62:56:e0:b6:77:b5:eb:92:cb:2f: 4b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:85:54:A7:F6:9C:66:48:93:B9:45:27:A3:06:36:5D:8A:EF:EC:7C X509v3 Authority Key Identifier: keyid:B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:fe:04:fb:23:29:35:df:52:bf:e4:d1:eb:6b:e8:86:61:1a: 10:72:56:dc:ac:90:6d:d3:7f:14:c0:49:3c:77:8a:94:d5:9e: c0:61:7c:87:77:28:10:cf:5b:44:68:b6:1c:2a:1d:ca:6a:30: dd:99:30:df:f1:37:35:bf:82:89:07:86:29:73:fc:70:90:57: a8:dd:47:03:ac:c5:20:1d:b7:7a:4a:fe:df:b7:e8:1c:ed:8b: 4b:13:52:9e:ce:5a:5f:89:44:5e:36:8c:c0:5c:1c:e7:75:52: 8d:31:b3:6e:37:b1:ef:e1:52:6d:b1:89:55:41:7e:0b:b2:55: 29:0f:80:ec:97:31:99:8b:f3:04:d6:c6:8e:02:4e:10:48:ce: 4b:5a:da:f4:25:4a:64:94:bb:9d:ef:c3:32:8b:79:cc:d4:31: b0:ae:cd:da:aa:92:99:d3:a0:da:64:da:b7:86:27:c6:d8:cc: bc:fa:37:92:38:0b:37:1d:82:19:77:37:ae:5b:5a:51:cc:3e: f7:e9:a6:49:66:d1:92:1b:cf:55:5e:30:f4:98:0b:a0:e1:d0: 2d:6d:61:95:bd:56:f6:c5:71:4a:64:7b:7a:7e:24:98:a7:e8: 4d:c1:7e:1e:49:bc:94:78:2c:65:8e:c4:1d:04:38:1b:b1:b8: 68:15:35:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG+w3qWOfYlZs42+z1qjZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NzY1NzdkMjAwODVjNGMyMmZjODAxMWM4ZDFhOTNmNjMy MTFjMGYwHhcNMjUxMjE2MTcwMTE3WhcNMjUxMjE3MTcwMTE3WjAzMTEwLwYDVQQD EyhkYTg1NTRhN2Y2OWM2NjQ4OTNiOTQ1MjdhMzA2MzY1ZDhhZWZlYzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbT9ZBHqb0+tfNkjhOcsGjR3jfLt ijxq6enu9gi61vfgS8//lHNUdOO5O/Gsv3ysw7q2Fu6TqtmPEEYrzAX1WfRv8vHu F1z7+N4+NCycoBi0cCCI3CrX5+iK8dNtJouGwrCzAe7sRegT0eD2NbfeJatcatcC SY9WPVdcwhwXgsAbFTrqx7XQuE09HHPh7hy95WunSOHk+hTRMDQKTuEoCQXnwK29 XvsfSnfVqL8AjUx+v6uQVCU/ikGlP3Zro42CWAJkIpDAUNhTPepM93ojpwc2N2oO j7QBFhRvf/mbyqYfAba4opHzZ/M/FwJe/wbhTsXxGGJW4LZ3teuSyy9LNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqFVKf2nGZIk7lFJ6MGNl2K7+x8MB8GA1UdIwQY MBaAFLV2V30gCFxMIvyAEcjRqT9jIRwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xNTE3MDUtMGIwYy00OGJmLWE0MGUt YjdjYTFmZTZjMTg0LzEvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xNTE3MDUtMGIwYy00OGJmLWE0MGUtYjdjYTFmZTZjMTg0 LzEvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEf4E+yMp Nd9Sv+TR62vohmEaEHJW3KyQbdN/FMBJPHeKlNWewGF8h3coEM9bRGi2HCodymow 3Zkw3/E3Nb+CiQeGKXP8cJBXqN1HA6zFIB23ekr+37foHO2LSxNSns5aX4lEXjaM wFwc53VSjTGzbjex7+FSbbGJVUF+C7JVKQ+A7JcxmYvzBNbGjgJOEEjOS1ra9CVK ZJS7ne/DMot5zNQxsK7N2qqSmdOg2mTat4YnxtjMvPo3kjgLNx2CGXc3rltaUcw+ 9+mmSWbRkhvPVV4w9JgLoOHQLW1hlb1W9sVxSmR7en4kmKfoTcF+Hkm8lHgsZY7E HQQ4G7G4aBU15w== -----END CERTIFICATE-----Generated at Wed Dec 17 01:00:42 2025 by rpki-client