This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft File: o75019azdkTAG-1V4NsxRkuYYMY.mft (raw, json) Hash identifier: wHKA15GUwaefFRXRyDhdZaAHO/8e7numSVSV/3Cpzx0= Subject key identifier: 59:AA:45:A1:C9:D2:79:88:B6:3A:97:4B:BE:79:CC:3C:25:F5:33:2F Authority key identifier: A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6 Certificate issuer: /CN=a3be74d7d6b37644c01bed55e0db31464b9860c6 Certificate serial: 019B3EDAD4A7B39F7B12950A9E880DD2FF7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft Manifest number: 2E Signing time: Sun 21 Dec 2025 03:01:27 +0000 Manifest this update: Sun 21 Dec 2025 03:01:27 +0000 Manifest next update: Mon 22 Dec 2025 03:01:27 +0000 Files and hashes: 1: 6Fg7wtAwutmcLUzAjmzQTBDc-14.roa (hash: cgk4tzeyjppTkUWpcIbNvFnqDx/8dz1BTIJGLNKeMY4=) 2: o75019azdkTAG-1V4NsxRkuYYMY.crl (hash: Ly/9gGrBniCW3qz/yF8lF7oLnT6I9phyPW7difbg+p4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:d4:a7:b3:9f:7b:12:95:0a:9e:88:0d:d2:ff:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3be74d7d6b37644c01bed55e0db31464b9860c6 Validity Not Before: Dec 21 03:01:27 2025 GMT Not After : Dec 22 03:01:27 2025 GMT Subject: CN=59aa45a1c9d27988b63a974bbe79cc3c25f5332f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:38:95:54:e6:d0:fc:2e:a2:45:a5:e1:9f:ff: 0c:b6:d2:74:8c:9e:a1:1a:c6:38:76:9c:34:20:ae: 17:3e:8e:93:f1:f2:66:2d:f0:8d:5a:4d:f6:46:89: 9c:50:5b:ba:a5:42:84:a7:2c:22:e5:91:79:ab:97: 8e:58:0a:00:9e:00:8b:aa:83:bd:a9:92:be:c4:aa: 5b:74:3c:69:99:5e:b5:d6:4b:85:1a:a9:14:69:ee: ba:a4:9e:d2:5a:64:d9:5d:f9:75:7b:9f:22:54:89: 2e:c6:e5:79:f8:48:4c:45:67:95:43:0c:ee:86:f7: ca:df:f9:ec:55:af:a1:d8:c1:d6:3a:bd:88:0b:37: 6e:ed:40:67:52:ba:90:c6:d0:43:70:38:b4:5a:30: a4:9f:3c:85:5b:67:35:4f:5d:00:3f:52:a7:27:5c: 7e:ec:17:1d:1b:c4:db:c4:c2:c9:1b:b4:2b:ab:81: ea:6c:4d:57:59:83:9d:56:75:c2:61:e5:06:c3:74: ab:7f:e5:16:5b:32:ab:4c:b8:f6:cb:89:67:d4:43: 1c:db:e8:b2:40:bd:c1:af:06:4e:06:2f:95:e1:54: 76:79:f0:07:6f:98:57:75:34:29:a0:46:6c:d4:43: a0:b0:c2:9b:d9:2b:69:8b:21:c1:d2:e8:f9:2e:cd: 33:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AA:45:A1:C9:D2:79:88:B6:3A:97:4B:BE:79:CC:3C:25:F5:33:2F X509v3 Authority Key Identifier: keyid:A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:69:0b:5e:97:a6:c9:ff:b1:55:ad:4b:33:e6:0b:64:54:64: b2:6f:ff:af:ae:de:51:33:3a:1c:46:2e:f4:7b:1e:0e:31:1b: e4:5f:d0:e3:6f:aa:55:e6:1a:f4:c5:93:24:65:74:b2:2a:5e: 6e:2d:a2:ff:0c:17:a5:13:80:85:61:fe:c1:08:d5:7c:52:5e: a1:47:17:b4:b9:ba:e1:b9:40:eb:a4:70:2c:45:0a:4c:30:a9: 55:29:9a:f2:b2:d8:62:1f:5d:5a:ac:90:fa:7b:c0:ac:90:27: ee:08:ba:ba:8e:07:71:13:92:27:10:62:e9:82:4a:c2:44:6d: b9:b2:24:35:e1:ef:3a:c5:b1:2f:83:93:7b:5e:a8:09:94:51: 98:05:68:7e:c4:8d:a1:a5:6d:34:5d:d4:50:22:ed:c3:8a:d6: e0:57:65:a4:fb:c3:b4:33:72:bb:25:eb:8e:0a:78:2c:98:88: 6c:e8:f5:a4:86:79:14:98:57:62:50:cb:8c:f1:40:73:fd:70: bd:f5:3b:2e:d9:b6:e5:cb:ec:ee:37:89:f4:e8:bd:9f:cf:19: d8:1f:05:a0:5a:fe:62:0b:16:0e:3f:1f:c6:84:84:fb:20:8e: 2f:2f:7f:95:79:47:6a:f0:dc:25:6f:d3:24:03:13:b4:64:5c: 68:da:97:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2tSns597EpUKnogN0v97MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYmU3NGQ3ZDZiMzc2NDRjMDFiZWQ1NWUwZGIzMTQ2NGI5 ODYwYzYwHhcNMjUxMjIxMDMwMTI3WhcNMjUxMjIyMDMwMTI3WjAzMTEwLwYDVQQD Eyg1OWFhNDVhMWM5ZDI3OTg4YjYzYTk3NGJiZTc5Y2MzYzI1ZjUzMzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTiVVObQ/C6iRaXhn/8MttJ0jJ6h GsY4dpw0IK4XPo6T8fJmLfCNWk32RomcUFu6pUKEpywi5ZF5q5eOWAoAngCLqoO9 qZK+xKpbdDxpmV611kuFGqkUae66pJ7SWmTZXfl1e58iVIkuxuV5+EhMRWeVQwzu hvfK3/nsVa+h2MHWOr2ICzdu7UBnUrqQxtBDcDi0WjCknzyFW2c1T10AP1KnJ1x+ 7BcdG8TbxMLJG7Qrq4HqbE1XWYOdVnXCYeUGw3Srf+UWWzKrTLj2y4ln1EMc2+iy QL3BrwZOBi+V4VR2efAHb5hXdTQpoEZs1EOgsMKb2StpiyHB0uj5Ls0zAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmqRaHJ0nmItjqXS755zDwl9TMvMB8GA1UdIwQY MBaAFKO+dNfWs3ZEwBvtVeDbMUZLmGDGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzc1MDE5YXpka1RBRy0xVjROc3hSa3VZWU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85NjFhY2EtZjQyNS00ODg3LWFmNGEt Y2ZhMDYxMDMwMzQ2LzEvbzc1MDE5YXpka1RBRy0xVjROc3hSa3VZWU1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi85NjFhY2EtZjQyNS00ODg3LWFmNGEtY2ZhMDYxMDMwMzQ2 LzEvbzc1MDE5YXpka1RBRy0xVjROc3hSa3VZWU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGkLXpem yf+xVa1LM+YLZFRksm//r67eUTM6HEYu9HseDjEb5F/Q42+qVeYa9MWTJGV0sipe bi2i/wwXpROAhWH+wQjVfFJeoUcXtLm64blA66RwLEUKTDCpVSma8rLYYh9dWqyQ +nvArJAn7gi6uo4HcROSJxBi6YJKwkRtubIkNeHvOsWxL4OTe16oCZRRmAVofsSN oaVtNF3UUCLtw4rW4FdlpPvDtDNyuyXrjgp4LJiIbOj1pIZ5FJhXYlDLjPFAc/1w vfU7Ltm25cvs7jeJ9Oi9n88Z2B8FoFr+YgsWDj8fxoSE+yCOLy9/lXlHavDcJW/T JAMTtGRcaNqXQg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:25:59 2025 by rpki-client