This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft File: tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft (raw, json) Hash identifier: pKIDgSwrP49RzsefRbO458OVDq24/9m44/C6b5TzJtc= Subject key identifier: 2F:56:90:C9:84:C6:83:03:B3:1D:93:6F:71:EE:99:0D:C0:81:D6:93 Authority key identifier: B6:91:FF:C8:65:9E:2E:63:A6:DE:CE:C7:D6:F3:6D:60:B6:64:09:61 Certificate issuer: /CN=b691ffc8659e2e63a6decec7d6f36d60b6640961 Certificate serial: 019B251A563E06AE4143C09F94C99BB0F520 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft Manifest number: 26 Signing time: Tue 16 Dec 2025 03:00:41 +0000 Manifest this update: Tue 16 Dec 2025 03:00:41 +0000 Manifest next update: Wed 17 Dec 2025 03:00:41 +0000 Files and hashes: 1: CnAOgW0v2FHhY7xG5Ek16W61Xwo.asa (hash: BYtVtXvNLu7yhVLJxNiUtZ/vkS0B93JK13XOxYFj8W8=) 2: tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl (hash: BcCwH5k0tkeF2ikSKfbAY4xXys7OaWuGA+bLDeHqSLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:1a:56:3e:06:ae:41:43:c0:9f:94:c9:9b:b0:f5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b691ffc8659e2e63a6decec7d6f36d60b6640961 Validity Not Before: Dec 16 03:00:41 2025 GMT Not After : Dec 17 03:00:41 2025 GMT Subject: CN=2f5690c984c68303b31d936f71ee990dc081d693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2a:7e:d4:71:8e:6c:40:35:e6:b6:71:08:31: a6:ef:6d:8a:7c:d2:46:74:73:b6:17:aa:c5:d5:c3: 71:23:da:59:e2:69:c0:eb:3e:1d:d5:08:1e:d1:56: 84:c0:a0:e4:97:6a:ed:fc:52:b6:16:d7:e1:6c:a4: 93:e5:a2:75:13:96:7b:c4:2f:d5:25:57:a4:a6:89: 71:7d:37:da:19:3f:44:42:9d:97:50:a3:2f:91:47: 40:c7:61:28:c7:b2:a8:74:b9:c6:e8:73:91:79:c2: ac:65:90:eb:e9:b0:84:dd:99:ea:d9:ed:96:4e:2c: c0:5f:46:5c:32:b9:bc:d8:1f:f4:12:e8:9c:f8:15: c6:87:09:ec:f8:f6:58:9c:e6:24:d6:af:4f:de:52: 5d:6f:7f:c5:1f:4f:97:46:49:46:1a:46:73:95:1d: 12:76:07:e8:6a:80:41:bf:62:9e:f6:d5:db:67:a2: 08:44:4a:b7:91:ee:5e:65:c4:95:a2:39:5b:eb:0b: 8f:74:2e:73:13:9c:b2:38:18:90:f6:ba:2b:f5:4b: 9b:e8:43:79:c3:c5:89:e5:30:ce:02:61:4c:f5:3a: bb:56:0b:c2:5e:31:40:76:ae:a1:ea:ac:7b:43:7f: 76:25:1f:59:ba:d4:57:60:29:5b:96:a4:ef:fa:fe: c5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:56:90:C9:84:C6:83:03:B3:1D:93:6F:71:EE:99:0D:C0:81:D6:93 X509v3 Authority Key Identifier: keyid:B6:91:FF:C8:65:9E:2E:63:A6:DE:CE:C7:D6:F3:6D:60:B6:64:09:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:90:2d:6d:3e:7d:49:19:d8:98:8d:33:34:5c:e4:ba:cb:7f: 7a:82:cb:16:cf:20:d1:3e:ee:d5:9c:6e:f6:94:0f:7d:6c:70: 0c:40:ed:d2:5d:b5:f2:14:7f:c6:1f:ec:fb:28:71:ee:f5:be: 69:97:71:2f:23:e7:c7:c7:b7:a7:71:23:8d:74:28:9b:85:04: ab:4f:f4:20:38:fb:2b:1c:5c:af:58:4d:16:9b:e7:88:2e:0d: 83:ff:4f:a8:d4:a3:f3:3a:fc:2d:44:75:92:2e:d8:32:77:4e: 1b:22:f4:46:fe:32:4d:f5:82:11:2f:d1:59:cd:84:1f:92:68: 84:7b:c0:b1:8f:e0:08:ff:04:c6:4d:d9:06:c3:24:b8:66:59: 75:4e:dc:74:43:47:ff:b8:12:77:97:a0:e4:9a:e6:64:32:3a: 70:ce:5d:c1:19:bf:bc:7c:d8:c0:a8:e8:0a:86:c8:93:4c:c3: 46:97:9e:e6:aa:ab:c9:8e:23:c4:e4:67:ad:05:65:29:b0:bd: 55:e2:a7:93:2b:05:34:06:76:80:be:f4:9a:ab:5b:fb:4e:8e: bd:a5:58:43:62:ee:bc:c9:b5:73:6d:9a:e3:77:74:68:50:ea: 93:cd:63:8b:4a:88:06:ad:1a:95:32:25:21:d8:46:e9:54:a7: ee:6f:8e:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslGlY+Bq5BQ8CflMmbsPUgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OTFmZmM4NjU5ZTJlNjNhNmRlY2VjN2Q2ZjM2ZDYwYjY2 NDA5NjEwHhcNMjUxMjE2MDMwMDQxWhcNMjUxMjE3MDMwMDQxWjAzMTEwLwYDVQQD EygyZjU2OTBjOTg0YzY4MzAzYjMxZDkzNmY3MWVlOTkwZGMwODFkNjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ip+1HGObEA15rZxCDGm722KfNJG dHO2F6rF1cNxI9pZ4mnA6z4d1Qge0VaEwKDkl2rt/FK2FtfhbKST5aJ1E5Z7xC/V JVekpolxfTfaGT9EQp2XUKMvkUdAx2Eox7KodLnG6HORecKsZZDr6bCE3Znq2e2W TizAX0ZcMrm82B/0Euic+BXGhwns+PZYnOYk1q9P3lJdb3/FH0+XRklGGkZzlR0S dgfoaoBBv2Ke9tXbZ6IIREq3ke5eZcSVojlb6wuPdC5zE5yyOBiQ9ror9Uub6EN5 w8WJ5TDOAmFM9Tq7VgvCXjFAdq6h6qx7Q392JR9ZutRXYClblqTv+v7FvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9WkMmExoMDsx2Tb3HumQ3AgdaTMB8GA1UdIwQY MBaAFLaR/8hlni5jpt7Ox9bzbWC2ZAlhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHBIX3lHV2VMbU9tM3M3SDF2TnRZTFprQ1dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yNGM0ZDEtODYzZi00NGMzLTg2YWQt OWEyOTRjNzBjNzBlLzEvdHBIX3lHV2VMbU9tM3M3SDF2TnRZTFprQ1dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yNGM0ZDEtODYzZi00NGMzLTg2YWQtOWEyOTRjNzBjNzBl LzEvdHBIX3lHV2VMbU9tM3M3SDF2TnRZTFprQ1dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZAtbT59 SRnYmI0zNFzkust/eoLLFs8g0T7u1Zxu9pQPfWxwDEDt0l218hR/xh/s+yhx7vW+ aZdxLyPnx8e3p3EjjXQom4UEq0/0IDj7Kxxcr1hNFpvniC4Ng/9PqNSj8zr8LUR1 ki7YMndOGyL0Rv4yTfWCES/RWc2EH5JohHvAsY/gCP8Exk3ZBsMkuGZZdU7cdENH /7gSd5eg5JrmZDI6cM5dwRm/vHzYwKjoCobIk0zDRpee5qqryY4jxORnrQVlKbC9 VeKnkysFNAZ2gL70mqtb+06OvaVYQ2LuvMm1c22a43d0aFDqk81ji0qIBq0alTIl IdhG6VSn7m+OGw== -----END CERTIFICATE-----Generated at Tue Dec 16 12:37:20 2025 by rpki-client