This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft File: tqNouOZvnhWmEOwY1rFHtrokzuc.mft (raw, json) Hash identifier: /MXwjEl+wZfW6DNO4rUlvr5l4SVEle/xmxkZBWwJ/3w= Subject key identifier: 6D:11:9D:29:07:93:E7:FD:08:4E:AE:58:2D:27:E5:24:D3:4B:34:44 Authority key identifier: B6:A3:68:B8:E6:6F:9E:15:A6:10:EC:18:D6:B1:47:B6:BA:24:CE:E7 Certificate issuer: /CN=b6a368b8e66f9e15a610ec18d6b147b6ba24cee7 Certificate serial: 019B5E2E7B3BC1200B071DA38DC76951BFF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqNouOZvnhWmEOwY1rFHtrokzuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft Manifest number: 0226 Signing time: Sat 27 Dec 2025 05:01:03 +0000 Manifest this update: Sat 27 Dec 2025 05:01:03 +0000 Manifest next update: Sun 28 Dec 2025 05:01:03 +0000 Files and hashes: 1: 76JdDApMBw2HG_-2b61i99W245Q.roa (hash: NIJoLQsfvrL/qonBB3ZwrtyRIgvdYG24/geuGhv0roI=) 2: tqNouOZvnhWmEOwY1rFHtrokzuc.crl (hash: MIIeMmAipkqGRvPD30rI6DqrBZM9ouwmTdXvt78oxTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft rsync://rpki.ripe.net/repository/DEFAULT/tqNouOZvnhWmEOwY1rFHtrokzuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:2e:7b:3b:c1:20:0b:07:1d:a3:8d:c7:69:51:bf:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6a368b8e66f9e15a610ec18d6b147b6ba24cee7 Validity Not Before: Dec 27 05:01:03 2025 GMT Not After : Dec 28 05:01:03 2025 GMT Subject: CN=6d119d290793e7fd084eae582d27e524d34b3444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ee:a3:28:be:cb:90:bf:7c:75:52:e2:cf:de: 82:53:54:31:15:47:d0:af:8d:8f:e1:d3:be:c9:f5: 71:86:82:d9:ff:3e:4f:bd:d6:1d:ff:26:4a:2c:8a: 04:3e:65:49:a7:b1:7d:03:51:18:08:b0:8d:08:62: 54:5c:30:33:7c:36:3e:63:a9:b7:15:ee:28:41:ba: 68:6d:05:bf:6e:ff:a2:fb:33:21:10:11:8e:be:d2: 54:49:6d:12:57:c4:e4:80:cd:58:70:14:be:54:d7: c3:2d:49:4a:77:13:9c:19:3b:c0:81:62:b9:13:fd: d9:78:6d:fc:2f:4c:d1:9e:e8:c2:02:60:4a:57:7f: 46:d9:14:93:3b:80:4b:7f:33:30:a3:db:a0:00:35: 48:16:64:82:6a:4b:92:19:e2:db:3c:6c:2d:2c:fa: 57:bb:9e:53:a3:6d:a0:c7:d8:40:42:d2:0f:e6:6d: cc:d7:1f:c7:70:ca:23:cf:7a:e8:69:f6:79:05:e5: d3:6c:f5:1a:86:4d:38:58:0f:04:5d:e2:4b:b0:63: ec:63:73:d9:60:0f:87:83:b0:06:f0:77:5c:bb:4d: 00:97:6c:7a:5d:19:fb:79:5e:0b:52:14:8e:24:5c: 52:35:b9:52:78:42:6d:15:1c:15:76:a2:d3:c2:3d: 10:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:11:9D:29:07:93:E7:FD:08:4E:AE:58:2D:27:E5:24:D3:4B:34:44 X509v3 Authority Key Identifier: keyid:B6:A3:68:B8:E6:6F:9E:15:A6:10:EC:18:D6:B1:47:B6:BA:24:CE:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqNouOZvnhWmEOwY1rFHtrokzuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:71:1c:1c:85:12:86:b8:83:a8:05:91:ed:5b:95:c5:3e:cc: 62:87:af:dd:e2:02:7e:c0:52:f6:de:49:4f:a3:e8:bc:8b:c2: be:63:17:a7:75:6a:35:3d:bb:a9:5c:00:99:39:b6:e4:a5:98: 35:18:09:49:78:5b:47:51:3d:ee:e8:48:7e:45:ef:d4:55:67: 0e:b2:27:5e:11:a9:b5:a3:19:23:51:1b:e2:80:3f:ce:0e:bf: 03:d2:b0:b5:d4:1c:2b:86:ba:42:f7:2c:75:09:db:6a:ed:6d: c2:38:95:6f:fe:5c:6a:38:e8:5e:ab:cb:69:cc:da:ef:e4:6c: c8:bd:39:87:5b:a0:6c:a1:43:81:e2:c1:8a:ee:ff:9a:64:74: 25:24:4c:06:3d:10:f6:15:33:2e:a0:1f:ea:59:63:85:7a:79: 54:62:ca:d0:42:02:51:f5:c6:51:45:67:ca:81:30:55:0a:9d: 06:54:0c:1d:4c:a2:47:ed:d2:f6:22:19:0d:46:5d:b7:58:f0: e3:84:33:ac:56:6d:27:c0:46:a9:c3:3a:c7:d0:ed:44:26:9e: 28:9f:ab:f1:43:ef:92:08:e8:e9:70:81:d4:e3:f4:1f:75:15: 3b:f2:40:1b:4f:a1:d2:59:ad:c1:06:a3:36:bc:59:ea:fb:bc: cd:0e:c1:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZteLns7wSALBx2jjcdpUb/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YTM2OGI4ZTY2ZjllMTVhNjEwZWMxOGQ2YjE0N2I2YmEy NGNlZTcwHhcNMjUxMjI3MDUwMTAzWhcNMjUxMjI4MDUwMTAzWjAzMTEwLwYDVQQD Eyg2ZDExOWQyOTA3OTNlN2ZkMDg0ZWFlNTgyZDI3ZTUyNGQzNGIzNDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO6jKL7LkL98dVLiz96CU1QxFUfQ r42P4dO+yfVxhoLZ/z5PvdYd/yZKLIoEPmVJp7F9A1EYCLCNCGJUXDAzfDY+Y6m3 Fe4oQbpobQW/bv+i+zMhEBGOvtJUSW0SV8TkgM1YcBS+VNfDLUlKdxOcGTvAgWK5 E/3ZeG38L0zRnujCAmBKV39G2RSTO4BLfzMwo9ugADVIFmSCakuSGeLbPGwtLPpX u55To22gx9hAQtIP5m3M1x/HcMojz3roafZ5BeXTbPUahk04WA8EXeJLsGPsY3PZ YA+Hg7AG8Hdcu00Al2x6XRn7eV4LUhSOJFxSNblSeEJtFRwVdqLTwj0Q1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0RnSkHk+f9CE6uWC0n5STTSzREMB8GA1UdIwQY MBaAFLajaLjmb54VphDsGNaxR7a6JM7nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHFOb3VPWnZuaFdtRU93WTFyRkh0cm9renVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9iYTE4NjgtYWI3Ni00YmUxLWJjNTMt NzQ4MGQ4YTJmMWJlLzEvdHFOb3VPWnZuaFdtRU93WTFyRkh0cm9renVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9iYTE4NjgtYWI3Ni00YmUxLWJjNTMtNzQ4MGQ4YTJmMWJl LzEvdHFOb3VPWnZuaFdtRU93WTFyRkh0cm9renVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHEcHIUS hriDqAWR7VuVxT7MYoev3eICfsBS9t5JT6PovIvCvmMXp3VqNT27qVwAmTm25KWY NRgJSXhbR1E97uhIfkXv1FVnDrInXhGptaMZI1Eb4oA/zg6/A9KwtdQcK4a6Qvcs dQnbau1twjiVb/5cajjoXqvLacza7+RsyL05h1ugbKFDgeLBiu7/mmR0JSRMBj0Q 9hUzLqAf6lljhXp5VGLK0EICUfXGUUVnyoEwVQqdBlQMHUyiR+3S9iIZDUZdt1jw 44QzrFZtJ8BGqcM6x9DtRCaeKJ+r8UPvkgjo6XCB1OP0H3UVO/JAG0+h0lmtwQaj NrxZ6vu8zQ7Biw== -----END CERTIFICATE-----Generated at Sat Dec 27 06:17:17 2025 by rpki-client