This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json) Hash identifier: HXhKpIp6v6MZiS+IfTmEJ4Ldt2FOryHhMkK/VwmdFYY= Subject key identifier: 39:0F:9C:92:C8:07:85:A6:15:45:5E:99:67:D3:C7:CB:5B:FB:AE:20 Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0 Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0 Certificate serial: 019B3BD9233C8AEE4D10A74B70CBFCC765F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft Manifest number: 11F8 Signing time: Sat 20 Dec 2025 13:00:44 +0000 Manifest this update: Sat 20 Dec 2025 13:00:44 +0000 Manifest next update: Sun 21 Dec 2025 13:00:44 +0000 Files and hashes: 1: 7oTB9A6lOtEjQEsvoA-hCkKE_kU.roa (hash: CgqHCnrNWT0vsnk0wl9rl++PdFLv2TYzmWCCrA7fBCY=) 2: MfO1xzaCGvzf-Tdk8sWipKC3t-8.roa (hash: TSPXY1leU0O4gZ6iWESlm1g1sCeRvbsOHxtBl16fH1g=) 3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: HQQv6Uh7fVes+3RBQ0lX4j4BWoiUNq34MdG7hXUgH7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:23:3c:8a:ee:4d:10:a7:4b:70:cb:fc:c7:65:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0 Validity Not Before: Dec 20 13:00:44 2025 GMT Not After : Dec 21 13:00:44 2025 GMT Subject: CN=390f9c92c80785a615455e9967d3c7cb5bfbae20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8b:5c:77:45:0a:cc:ec:54:6d:5a:37:ed:aa: 4a:7e:08:30:13:37:19:d6:45:33:ff:84:0d:c0:0a: 92:d9:0c:bb:22:b1:1f:e7:56:3c:87:27:61:59:7c: f5:02:ab:a4:07:d3:67:91:7f:68:a9:6c:e8:1a:d5: e7:dc:e6:c2:29:7e:59:cb:3d:06:9a:a1:e3:2c:3c: 4a:70:cd:84:fb:bd:60:a1:8d:cf:c4:d2:a3:04:0c: fb:5c:c4:02:da:76:fe:cb:de:8f:e9:ab:d4:98:70: 50:c4:b9:b0:85:91:eb:89:86:56:12:a1:c1:84:59: 29:7a:f8:61:c6:4b:e1:13:91:59:fe:24:19:94:b1: 5c:c2:e0:25:15:bd:6a:fc:18:f3:5a:82:7e:42:fb: 9a:af:2f:93:45:2f:25:60:f3:15:f9:83:0d:5a:ee: 44:a6:df:8e:fa:82:12:e0:b8:5f:0f:36:d4:2a:78: c8:ba:1e:58:cb:a5:46:f8:56:8b:d7:b6:bd:1e:2b: 4d:62:d0:53:44:e9:9e:35:f7:57:55:b9:85:77:cd: a2:90:c8:0a:83:3f:ab:22:fd:e7:bb:45:90:fa:b2: e8:ce:ae:17:23:46:ab:f6:29:47:b6:93:a9:aa:c8: e7:93:af:ac:2f:e8:95:04:30:f9:88:ed:0d:d3:4c: 54:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0F:9C:92:C8:07:85:A6:15:45:5E:99:67:D3:C7:CB:5B:FB:AE:20 X509v3 Authority Key Identifier: keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f3:a4:ff:74:69:71:0b:b8:92:0a:1f:e4:0e:2b:fa:27:90: cd:72:b7:b2:43:3e:d1:ab:99:47:88:a1:83:19:37:a8:f9:2f: 36:5e:da:81:ea:f5:63:8c:bc:68:53:80:f9:80:bb:8e:f5:73: b8:5d:c5:b5:dd:c4:bb:a8:7f:78:63:ce:19:53:43:23:4d:08: a0:00:4b:e5:f9:33:59:1f:72:9f:b0:3f:67:2e:ec:47:68:1a: bb:bc:2d:08:ec:a5:40:5c:c3:6c:3d:05:8c:18:b3:f7:16:b3: a4:d1:55:a0:59:4e:b5:8a:8c:4f:8b:07:82:2b:dc:8a:e2:5a: 6a:0c:4a:01:52:4d:ea:34:da:68:60:13:be:ee:af:71:c2:81: 49:ac:82:a3:cf:75:b5:e2:d0:72:76:5a:eb:27:94:0f:d5:83: e5:21:29:39:f2:2a:7d:95:12:8c:3e:54:83:23:7d:13:ef:8c: ad:93:3c:d7:1f:f6:14:2d:16:cf:02:b0:52:b3:fa:95:df:53: 0f:b8:e1:2b:00:0e:f8:0e:c7:b6:7d:9a:f1:0b:db:09:e7:c2: 6c:61:45:6e:63:43:fa:a2:a1:8c:3d:09:e9:25:d3:5f:8e:a4: b1:85:2d:6b:a1:16:35:5d:af:d2:65:3c:c4:10:a3:59:f5:cf: cc:58:f5:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72SM8iu5NEKdLcMv8x2X1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MjBhMjA0ZjRlMDljYzgzYTYyNThkN2FhNDRmN2QyZjBm YTQ0YTAwHhcNMjUxMjIwMTMwMDQ0WhcNMjUxMjIxMTMwMDQ0WjAzMTEwLwYDVQQD EygzOTBmOWM5MmM4MDc4NWE2MTU0NTVlOTk2N2QzYzdjYjViZmJhZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzItcd0UKzOxUbVo37apKfggwEzcZ 1kUz/4QNwAqS2Qy7IrEf51Y8hydhWXz1AqukB9NnkX9oqWzoGtXn3ObCKX5Zyz0G mqHjLDxKcM2E+71goY3PxNKjBAz7XMQC2nb+y96P6avUmHBQxLmwhZHriYZWEqHB hFkpevhhxkvhE5FZ/iQZlLFcwuAlFb1q/BjzWoJ+Qvuary+TRS8lYPMV+YMNWu5E pt+O+oIS4LhfDzbUKnjIuh5Yy6VG+FaL17a9HitNYtBTROmeNfdXVbmFd82ikMgK gz+rIv3nu0WQ+rLozq4XI0ar9ilHtpOpqsjnk6+sL+iVBDD5iO0N00xUVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkPnJLIB4WmFUVemWfTx8tb+64gMB8GA1UdIwQY MBaAFLUgogT04JzIOmJY16pE99Lw+kSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAt YjhiMWU0YjRlY2I5LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAtYjhiMWU0YjRlY2I5 LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/Ok/3Rp cQu4kgof5A4r+ieQzXK3skM+0auZR4ihgxk3qPkvNl7ager1Y4y8aFOA+YC7jvVz uF3Ftd3Eu6h/eGPOGVNDI00IoABL5fkzWR9yn7A/Zy7sR2gau7wtCOylQFzDbD0F jBiz9xazpNFVoFlOtYqMT4sHgivciuJaagxKAVJN6jTaaGATvu6vccKBSayCo891 teLQcnZa6yeUD9WD5SEpOfIqfZUSjD5UgyN9E++MrZM81x/2FC0WzwKwUrP6ld9T D7jhKwAO+A7Htn2a8QvbCefCbGFFbmND+qKhjD0J6SXTX46ksYUta6EWNV2v0mU8 xBCjWfXPzFj1/A== -----END CERTIFICATE-----Generated at Sat Dec 20 21:05:12 2025 by rpki-client