This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft File: tqNouOZvnhWmEOwY1rFHtrokzuc.mft (raw, json) Hash identifier: 2+VQ14s04ka/S2sYieY8GpSe3MC/3VaqLbxWo1dR5FE= Subject key identifier: 00:FB:EB:11:0C:4B:75:4F:02:63:B2:1E:49:3E:8D:AA:88:3E:08:58 Authority key identifier: B6:A3:68:B8:E6:6F:9E:15:A6:10:EC:18:D6:B1:47:B6:BA:24:CE:E7 Certificate issuer: /CN=b6a368b8e66f9e15a610ec18d6b147b6ba24cee7 Certificate serial: 019B2FD4C0E2E6EA03C74F6465E491C705E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqNouOZvnhWmEOwY1rFHtrokzuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft Manifest number: 020E Signing time: Thu 18 Dec 2025 05:00:30 +0000 Manifest this update: Thu 18 Dec 2025 05:00:30 +0000 Manifest next update: Fri 19 Dec 2025 05:00:30 +0000 Files and hashes: 1: 76JdDApMBw2HG_-2b61i99W245Q.roa (hash: NIJoLQsfvrL/qonBB3ZwrtyRIgvdYG24/geuGhv0roI=) 2: tqNouOZvnhWmEOwY1rFHtrokzuc.crl (hash: mbWVpFXIQrLUyWPSzSqA4iR8N0KtTXe80IKOZVfqYXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft rsync://rpki.ripe.net/repository/DEFAULT/tqNouOZvnhWmEOwY1rFHtrokzuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:c0:e2:e6:ea:03:c7:4f:64:65:e4:91:c7:05:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6a368b8e66f9e15a610ec18d6b147b6ba24cee7 Validity Not Before: Dec 18 05:00:30 2025 GMT Not After : Dec 19 05:00:30 2025 GMT Subject: CN=00fbeb110c4b754f0263b21e493e8daa883e0858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b9:36:1c:ac:10:a7:9d:76:1d:a4:7c:98:3e: 56:b7:11:6d:fe:82:12:ee:8b:90:11:08:2c:c4:d9: 6f:c3:04:4f:46:80:d0:71:c5:04:76:da:65:b4:2b: a9:55:02:ab:4c:21:9f:7b:0f:bd:7d:50:31:8d:54: 57:14:df:f6:38:af:b8:da:53:4d:0e:cc:a4:28:52: 64:9e:d9:36:e6:86:25:56:c2:9f:70:6b:1b:c6:20: d8:73:8a:12:e3:77:0f:56:65:b5:7f:f3:95:47:38: e6:82:3e:18:7c:fd:2e:4f:49:f9:04:a7:b7:7d:86: 2a:0d:5f:4a:7d:f8:ba:c6:6b:4d:fb:60:64:8c:d8: 13:ea:4f:28:00:c3:75:02:b4:1e:45:35:ac:69:6e: f6:b7:51:e2:d0:f8:4f:80:a7:da:70:4e:4b:1a:e0: 23:71:b6:02:23:65:29:08:d1:cd:73:c0:64:e3:99: b1:8a:ed:d0:4a:4e:cb:3f:58:b4:3d:0c:03:1f:b2: da:88:ec:9d:86:1b:97:23:9b:26:68:49:18:cd:52: da:c8:ce:e4:6d:d8:f3:67:7f:6b:4e:09:d9:45:12: d7:de:50:f0:dc:6a:e1:83:ed:ae:e1:cf:fa:cb:2a: b6:f7:c2:29:1f:2f:e4:8d:97:6d:9f:71:91:4b:d5: b9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FB:EB:11:0C:4B:75:4F:02:63:B2:1E:49:3E:8D:AA:88:3E:08:58 X509v3 Authority Key Identifier: keyid:B6:A3:68:B8:E6:6F:9E:15:A6:10:EC:18:D6:B1:47:B6:BA:24:CE:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqNouOZvnhWmEOwY1rFHtrokzuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:6d:5c:f5:91:65:c4:0c:a8:a7:7a:60:bd:e7:16:e3:23:b0: 3e:ba:37:bf:28:d7:de:7c:a3:be:ae:2c:31:ea:69:cb:cc:c2: 4d:63:c5:d9:16:52:33:5e:f3:de:30:4d:cc:dc:08:0c:a2:81: df:e2:2a:c5:1e:8e:41:42:60:cf:21:8f:d6:38:2b:22:02:1f: dd:61:61:e8:8d:a2:71:f0:cc:c2:57:4d:1d:0e:54:7f:10:32: 45:06:c1:0c:74:22:d9:50:f9:d1:7d:e5:75:7e:7f:db:b4:a1: 3c:f5:01:94:d7:92:e2:91:fa:ae:dd:99:10:6e:db:bd:71:3e: 62:97:63:3c:81:b0:42:ed:38:b9:92:40:60:73:5f:22:e1:56: 66:3d:a3:fe:a7:fb:a0:65:ae:22:aa:53:82:0f:e7:9f:0d:3a: 74:98:05:6d:81:a3:78:75:b5:ed:db:d9:6e:19:a6:3b:08:23: 35:16:fb:e3:2c:8b:e1:15:47:06:03:29:75:36:8d:89:17:e5: d0:ec:53:93:d9:9c:2d:30:2b:cd:01:b0:d8:c9:4a:43:c8:df: d0:89:8c:24:81:29:a2:39:00:b6:cb:b2:d1:51:ff:37:64:03: 4f:73:9f:50:6b:d2:d6:55:c4:bd:58:80:9b:ca:68:e7:d8:f2: 0d:2d:a1:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1MDi5uoDx09kZeSRxwXkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YTM2OGI4ZTY2ZjllMTVhNjEwZWMxOGQ2YjE0N2I2YmEy NGNlZTcwHhcNMjUxMjE4MDUwMDMwWhcNMjUxMjE5MDUwMDMwWjAzMTEwLwYDVQQD EygwMGZiZWIxMTBjNGI3NTRmMDI2M2IyMWU0OTNlOGRhYTg4M2UwODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rk2HKwQp512HaR8mD5WtxFt/oIS 7ouQEQgsxNlvwwRPRoDQccUEdtpltCupVQKrTCGfew+9fVAxjVRXFN/2OK+42lNN DsykKFJkntk25oYlVsKfcGsbxiDYc4oS43cPVmW1f/OVRzjmgj4YfP0uT0n5BKe3 fYYqDV9Kffi6xmtN+2BkjNgT6k8oAMN1ArQeRTWsaW72t1Hi0PhPgKfacE5LGuAj cbYCI2UpCNHNc8Bk45mxiu3QSk7LP1i0PQwDH7LaiOydhhuXI5smaEkYzVLayM7k bdjzZ39rTgnZRRLX3lDw3Grhg+2u4c/6yyq298IpHy/kjZdtn3GRS9W5uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAD76xEMS3VPAmOyHkk+jaqIPghYMB8GA1UdIwQY MBaAFLajaLjmb54VphDsGNaxR7a6JM7nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHFOb3VPWnZuaFdtRU93WTFyRkh0cm9renVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9iYTE4NjgtYWI3Ni00YmUxLWJjNTMt NzQ4MGQ4YTJmMWJlLzEvdHFOb3VPWnZuaFdtRU93WTFyRkh0cm9renVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9iYTE4NjgtYWI3Ni00YmUxLWJjNTMtNzQ4MGQ4YTJmMWJl LzEvdHFOb3VPWnZuaFdtRU93WTFyRkh0cm9renVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGW1c9ZFl xAyop3pgvecW4yOwPro3vyjX3nyjvq4sMeppy8zCTWPF2RZSM17z3jBNzNwIDKKB 3+IqxR6OQUJgzyGP1jgrIgIf3WFh6I2icfDMwldNHQ5UfxAyRQbBDHQi2VD50X3l dX5/27ShPPUBlNeS4pH6rt2ZEG7bvXE+YpdjPIGwQu04uZJAYHNfIuFWZj2j/qf7 oGWuIqpTgg/nnw06dJgFbYGjeHW17dvZbhmmOwgjNRb74yyL4RVHBgMpdTaNiRfl 0OxTk9mcLTArzQGw2MlKQ8jf0ImMJIEpojkAtsuy0VH/N2QDT3OfUGvS1lXEvViA m8po59jyDS2hVA== -----END CERTIFICATE-----Generated at Thu Dec 18 09:40:08 2025 by rpki-client