This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft File: _Tq5WEdps0xpXg7zvkAN5chwX1g.mft (raw, json) Hash identifier: lFaNrIQ06/09bg6yaoODsw1PLlX8ZS9NheSXwzzCNIY= Subject key identifier: 91:EC:50:41:27:50:23:AE:3D:F7:CD:AD:DA:4C:C5:C9:C9:B9:34:3D Authority key identifier: FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58 Certificate issuer: /CN=fd3ab9584769b34c695e0ef3be400de5c8705f58 Certificate serial: 019B27E45E755687C600DE3BE2B8F445EC7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft Manifest number: 0385 Signing time: Tue 16 Dec 2025 16:00:36 +0000 Manifest this update: Tue 16 Dec 2025 16:00:36 +0000 Manifest next update: Wed 17 Dec 2025 16:00:36 +0000 Files and hashes: 1: _Tq5WEdps0xpXg7zvkAN5chwX1g.crl (hash: ALJPVhPSDlYYUjkFFLz/LbdA88S1kZ03ctLShZWpcWo=) 2: mm8C4Ou63If70LPWFRCmCNEI28c.roa (hash: g2mAP9bfs0Z2vFldLFVJmnHsqx5+Iksx21QgfS4cMys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e4:5e:75:56:87:c6:00:de:3b:e2:b8:f4:45:ec:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd3ab9584769b34c695e0ef3be400de5c8705f58 Validity Not Before: Dec 16 16:00:36 2025 GMT Not After : Dec 17 16:00:36 2025 GMT Subject: CN=91ec5041275023ae3df7cdadda4cc5c9c9b9343d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b9:ca:ca:9d:a3:1c:26:c5:21:3b:62:a8:ed: 73:65:93:c0:9a:30:d4:a4:bb:6f:f6:86:ef:68:16: c6:48:f0:78:22:25:5c:33:64:66:9c:a6:4a:79:11: cc:f6:64:a5:9c:5e:1a:c1:c6:89:f7:89:03:f9:4c: 46:11:4f:bd:7e:61:c8:7c:f9:83:aa:a2:b1:31:e4: f1:4a:5f:e3:da:7d:d5:6f:ea:7a:8c:17:4f:cc:b7: 43:b3:38:6c:f8:0c:82:b2:59:8a:fc:94:de:0f:c9: c7:d6:8c:a9:2e:f2:45:81:3d:e6:89:e1:c9:85:a8: cd:b9:30:ca:66:22:59:f0:71:be:b8:21:34:75:42: 11:15:29:ae:4a:de:43:41:06:68:6e:b5:49:57:2f: 6d:ba:49:60:54:2d:26:27:09:6c:01:8a:8a:fb:23: 04:2e:9c:3f:30:9d:53:58:22:bd:00:7d:96:80:41: f1:15:fc:ef:7c:f3:0f:18:5b:8e:5a:1b:e3:cb:86: 69:d9:de:b6:bb:e4:e2:92:32:5b:cd:1c:f5:cd:1a: 5e:f0:43:dd:f9:be:2c:79:92:6e:3c:c2:51:b6:99: c5:e3:39:42:33:40:fc:72:aa:4e:01:e1:f3:5c:06: 70:c9:05:2e:95:cf:73:a5:71:91:7e:61:d6:5a:4c: a5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EC:50:41:27:50:23:AE:3D:F7:CD:AD:DA:4C:C5:C9:C9:B9:34:3D X509v3 Authority Key Identifier: keyid:FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:dc:ff:49:de:38:00:d9:85:2f:90:c9:63:bb:0c:bf:14:48: 04:89:4d:d5:14:15:b3:45:63:6f:b0:63:32:db:5a:2a:d9:e7: 66:a1:ad:4e:95:25:a8:dd:33:d9:0b:e6:8d:31:9e:32:ba:3e: db:13:d0:de:c0:c9:f5:46:12:17:ca:f8:2c:e3:33:78:d8:e3: 17:9e:2a:f5:47:67:6d:e9:51:f6:f7:20:e9:6c:9f:54:1a:14: 11:91:31:eb:e0:90:86:2f:c9:b9:eb:86:e9:3b:31:dc:ad:61: 85:f3:68:e1:2f:8b:a2:1e:ce:58:50:6d:a4:4b:1e:97:fc:ca: 53:5f:c8:7c:79:07:f6:74:99:b5:60:16:0c:5b:bb:83:e0:9a: 81:e0:44:6a:4a:74:1d:20:10:0d:c6:1e:53:c9:d3:8f:8b:a3: 00:3d:38:dc:4d:d9:bc:f9:2c:d7:4b:c3:fb:dd:f0:46:36:90: 1a:b3:52:58:1b:42:f1:b1:9f:91:64:64:e8:e3:d1:48:94:f5: d3:6b:b7:d4:f8:d7:af:e7:81:91:fa:b7:4d:9b:fc:7c:74:69: 2a:2c:a7:e4:e9:a4:c3:39:d4:69:e8:7e:09:fc:10:4e:c7:0c: 2b:75:53:3d:d5:80:dd:11:9e:da:03:14:2e:74:f2:01:3f:59: 67:bc:d6:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5F51VofGAN474rj0Rex7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkM2FiOTU4NDc2OWIzNGM2OTVlMGVmM2JlNDAwZGU1Yzg3 MDVmNTgwHhcNMjUxMjE2MTYwMDM2WhcNMjUxMjE3MTYwMDM2WjAzMTEwLwYDVQQD Eyg5MWVjNTA0MTI3NTAyM2FlM2RmN2NkYWRkYTRjYzVjOWM5YjkzNDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LnKyp2jHCbFITtiqO1zZZPAmjDU pLtv9obvaBbGSPB4IiVcM2RmnKZKeRHM9mSlnF4awcaJ94kD+UxGEU+9fmHIfPmD qqKxMeTxSl/j2n3Vb+p6jBdPzLdDszhs+AyCslmK/JTeD8nH1oypLvJFgT3mieHJ hajNuTDKZiJZ8HG+uCE0dUIRFSmuSt5DQQZobrVJVy9tuklgVC0mJwlsAYqK+yME Lpw/MJ1TWCK9AH2WgEHxFfzvfPMPGFuOWhvjy4Zp2d62u+TikjJbzRz1zRpe8EPd +b4seZJuPMJRtpnF4zlCM0D8cqpOAeHzXAZwyQUulc9zpXGRfmHWWkylDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHsUEEnUCOuPffNrdpMxcnJuTQ9MB8GA1UdIwQY MBaAFP06uVhHabNMaV4O875ADeXIcF9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RxNVdFZHBzMHhwWGc3enZrQU41Y2h3WDFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9hZDllOWMtYWNhMi00ODBjLTgyZTgt MDZmYWYxNDk2NjkzLzEvX1RxNVdFZHBzMHhwWGc3enZrQU41Y2h3WDFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9hZDllOWMtYWNhMi00ODBjLTgyZTgtMDZmYWYxNDk2Njkz LzEvX1RxNVdFZHBzMHhwWGc3enZrQU41Y2h3WDFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9z/Sd44 ANmFL5DJY7sMvxRIBIlN1RQVs0Vjb7BjMttaKtnnZqGtTpUlqN0z2QvmjTGeMro+ 2xPQ3sDJ9UYSF8r4LOMzeNjjF54q9UdnbelR9vcg6WyfVBoUEZEx6+CQhi/JueuG 6Tsx3K1hhfNo4S+Loh7OWFBtpEsel/zKU1/IfHkH9nSZtWAWDFu7g+CageBEakp0 HSAQDcYeU8nTj4ujAD043E3ZvPks10vD+93wRjaQGrNSWBtC8bGfkWRk6OPRSJT1 02u31PjXr+eBkfq3TZv8fHRpKiyn5OmkwznUaeh+CfwQTscMK3VTPdWA3RGe2gMU LnTyAT9ZZ7zWfQ== -----END CERTIFICATE-----Generated at Wed Dec 17 00:30:00 2025 by rpki-client