This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft File: _TSxP72Tgd-Exofwa80HTkp1WAM.mft (raw, json) Hash identifier: ScGsDinckFWK3Ilbq1TbLg1+InXnyc1nbY3hso6WxbU= Subject key identifier: E8:FE:DC:81:E3:88:AD:52:14:AD:87:11:91:2E:D9:25:DF:0A:42:C9 Authority key identifier: FD:34:B1:3F:BD:93:81:DF:84:C6:87:F0:6B:CD:07:4E:4A:75:58:03 Certificate issuer: /CN=fd34b13fbd9381df84c687f06bcd074e4a755803 Certificate serial: 019B4A03E7C53FF2A1CAEEBAE316562EF5D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft Manifest number: 178D Signing time: Tue 23 Dec 2025 07:02:08 +0000 Manifest this update: Tue 23 Dec 2025 07:02:08 +0000 Manifest next update: Wed 24 Dec 2025 07:02:08 +0000 Files and hashes: 1: 0BpZrCwCrh0nhCnBWsTx8npHw5Y.roa (hash: dghoAHC17Ez/jlFwmLW4wwi4h/yLfo/iz9cDa/mgf8U=) 2: _TSxP72Tgd-Exofwa80HTkp1WAM.crl (hash: c8MeAg3ZGNOOcO7/Drz9BgItbyyfb9ty6Q1ME+//eG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:e7:c5:3f:f2:a1:ca:ee:ba:e3:16:56:2e:f5:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd34b13fbd9381df84c687f06bcd074e4a755803 Validity Not Before: Dec 23 07:02:08 2025 GMT Not After : Dec 24 07:02:08 2025 GMT Subject: CN=e8fedc81e388ad5214ad8711912ed925df0a42c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9e:1d:59:2a:e3:f6:6a:9a:5b:90:66:a5:52: 99:e0:44:fa:bc:d6:9d:59:00:88:d2:3e:60:ec:6e: d6:59:d3:05:81:97:da:00:25:30:f1:88:69:9e:7d: cf:c5:01:26:6b:77:94:9a:60:b4:ca:66:6a:4e:2c: 5c:be:b4:ff:b4:ac:4d:af:9b:86:05:2d:c1:ae:da: 0b:60:4a:ca:41:ed:1d:2b:72:fc:3a:57:d5:49:e5: 51:c6:c8:5e:7c:9e:7d:2a:9a:e2:9a:ab:31:96:ec: 8d:b2:83:47:ba:11:e4:44:1e:67:71:2e:97:a0:01: 02:2e:b6:4e:3c:c9:b5:53:c5:55:0d:61:ae:f9:e1: 78:a4:69:24:3d:a0:13:d4:cb:61:30:42:b6:e9:1f: 24:dd:1e:89:a7:87:68:ee:77:45:fb:1e:ba:48:95: 6c:59:b7:53:75:05:29:a3:31:da:6d:c5:f8:c2:5e: 10:5c:45:cd:65:a0:22:72:39:db:58:34:06:b4:22: 1d:2c:52:1a:1b:91:27:02:e7:96:aa:6b:5a:a7:28: 7d:44:da:a7:4c:1b:e9:8f:af:81:21:4d:f5:68:e0: 39:ec:29:7a:6e:87:1b:ce:ea:e8:cb:3a:97:19:f3: d7:f2:d4:88:ad:5c:68:a3:9c:a5:cd:35:f7:21:a7: c0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FE:DC:81:E3:88:AD:52:14:AD:87:11:91:2E:D9:25:DF:0A:42:C9 X509v3 Authority Key Identifier: keyid:FD:34:B1:3F:BD:93:81:DF:84:C6:87:F0:6B:CD:07:4E:4A:75:58:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:77:ae:55:7c:69:62:68:8b:39:d3:fa:d9:e1:85:0a:19:5c: a4:73:82:70:97:dd:10:23:0b:66:c1:9f:83:62:82:b0:fd:de: 56:23:43:59:54:2b:5d:42:49:39:73:02:8e:b4:d0:06:e3:f8: 6f:ac:74:27:e8:d5:6f:6f:b3:22:e1:32:ad:f5:29:f6:03:ef: 1a:57:64:72:06:6b:06:ca:46:96:ee:f2:37:d7:a4:8d:01:53: 1f:a5:1a:6f:71:63:da:bd:37:6d:40:61:d3:8d:07:ea:90:6e: 3a:a0:b6:a7:0f:cc:ea:93:b8:10:1e:1f:7b:ab:7a:d9:80:4b: 28:f6:f7:81:51:ad:dd:61:24:6b:56:78:4e:f9:8c:37:7f:ae: 8c:94:ca:89:e0:45:72:61:fd:f3:64:e3:71:8f:65:a2:a7:ed: 00:b2:2a:13:e2:bc:c4:e2:e0:8e:07:a2:ca:3e:40:b3:fb:97: 1e:7c:39:f4:e2:81:0c:f4:3c:62:0f:8b:8f:56:74:50:2f:60: 9c:ea:75:be:10:b5:7f:df:cd:a3:06:a2:d5:84:c2:9a:23:03: 4b:73:fb:a2:a3:bf:f1:79:bb:df:8a:6a:74:b2:03:2d:54:f6: c9:df:94:be:e0:a4:3c:b1:f2:48:25:11:d8:33:b2:06:d6:08: 72:46:c3:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA+fFP/Khyu664xZWLvXYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzRiMTNmYmQ5MzgxZGY4NGM2ODdmMDZiY2QwNzRlNGE3 NTU4MDMwHhcNMjUxMjIzMDcwMjA4WhcNMjUxMjI0MDcwMjA4WjAzMTEwLwYDVQQD EyhlOGZlZGM4MWUzODhhZDUyMTRhZDg3MTE5MTJlZDkyNWRmMGE0MmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ4dWSrj9mqaW5BmpVKZ4ET6vNad WQCI0j5g7G7WWdMFgZfaACUw8Yhpnn3PxQEma3eUmmC0ymZqTixcvrT/tKxNr5uG BS3BrtoLYErKQe0dK3L8OlfVSeVRxshefJ59KprimqsxluyNsoNHuhHkRB5ncS6X oAECLrZOPMm1U8VVDWGu+eF4pGkkPaAT1MthMEK26R8k3R6Jp4do7ndF+x66SJVs WbdTdQUpozHabcX4wl4QXEXNZaAicjnbWDQGtCIdLFIaG5EnAueWqmtapyh9RNqn TBvpj6+BIU31aOA57Cl6bocbzuroyzqXGfPX8tSIrVxoo5ylzTX3IafASQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOj+3IHjiK1SFK2HEZEu2SXfCkLJMB8GA1UdIwQY MBaAFP00sT+9k4HfhMaH8GvNB05KdVgDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RTeFA3MlRnZC1FeG9md2E4MEhUa3AxV0FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMTk2ZjEtNDMzOS00YmRjLTgwMzQt MmViMmYyZWQzMDI5LzEvX1RTeFA3MlRnZC1FeG9md2E4MEhUa3AxV0FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8wMTk2ZjEtNDMzOS00YmRjLTgwMzQtMmViMmYyZWQzMDI5 LzEvX1RTeFA3MlRnZC1FeG9md2E4MEhUa3AxV0FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3euVXxp YmiLOdP62eGFChlcpHOCcJfdECMLZsGfg2KCsP3eViNDWVQrXUJJOXMCjrTQBuP4 b6x0J+jVb2+zIuEyrfUp9gPvGldkcgZrBspGlu7yN9ekjQFTH6Uab3Fj2r03bUBh 040H6pBuOqC2pw/M6pO4EB4fe6t62YBLKPb3gVGt3WEka1Z4TvmMN3+ujJTKieBF cmH982TjcY9loqftALIqE+K8xOLgjgeiyj5As/uXHnw59OKBDPQ8Yg+Lj1Z0UC9g nOp1vhC1f9/Nowai1YTCmiMDS3P7oqO/8Xm734pqdLIDLVT2yd+UvuCkPLHySCUR 2DOyBtYIckbDZw== -----END CERTIFICATE-----Generated at Tue Dec 23 15:17:58 2025 by rpki-client