This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft File: tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json) Hash identifier: r8nHIxjzT0OzvguH5oEtPyzmV1Aa4RN79rZg+5O43vw= Subject key identifier: 66:21:2A:2D:DB:5C:10:BB:19:B6:90:14:2F:56:FA:17:1D:C2:4B:10 Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2 Certificate issuer: /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2 Certificate serial: 019B5674CE7B911E81FB68EC01CCB5E4DEE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 17:00:54 +0000 Manifest this update: Thu 25 Dec 2025 17:00:54 +0000 Manifest next update: Fri 26 Dec 2025 17:00:54 +0000 Files and hashes: 1: 4yLFcyM54Hv8nF5ON-TIrD-1oYQ.roa (hash: hE+OT4FiIcXi0TRuDiRDYqpuBeR4hhUYci4sdFCd/CY=) 2: jKEy0LJLh7AqTPNLnCDWho1dIJ0.roa (hash: BKRsVG5h+FxIv9YJSObhtgL9EqcN1BIPxpc/4d7NHx4=) 3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: MMbXIiIyvkfMczQg1ZdEHFM4cSx8nwL1OLs89y9lsMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:74:ce:7b:91:1e:81:fb:68:ec:01:cc:b5:e4:de:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2 Validity Not Before: Dec 25 17:00:54 2025 GMT Not After : Dec 26 17:00:54 2025 GMT Subject: CN=66212a2ddb5c10bb19b690142f56fa171dc24b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a6:5e:67:e1:63:6b:30:92:91:0a:ff:c4:78: 86:1d:96:cf:05:36:86:57:ca:00:be:d1:d3:1d:94: f4:ff:cd:d6:97:72:b4:a0:69:52:07:e1:70:d8:64: 0b:10:67:c6:77:17:f6:68:9f:4f:de:82:42:fe:1a: 3f:76:5a:b5:ef:e0:a3:4c:46:a7:bc:38:2b:3e:2c: b0:e8:03:db:27:c7:f5:b8:c8:d8:08:18:12:06:8f: 4b:37:9e:7a:8f:1b:63:73:0d:71:27:8e:95:e4:cc: ab:b1:ba:71:cc:c2:24:90:9c:a1:43:83:4c:88:9a: 13:d5:9f:ab:ff:5f:33:7d:20:dd:1b:b4:b6:1c:32: 43:28:ac:27:8e:6c:1f:00:89:4c:89:51:3e:f2:88: b8:ca:e8:29:3e:e6:ee:de:de:f8:bf:df:a9:13:68: d6:70:fb:e9:25:f1:44:d6:68:5e:ce:a3:30:42:85: 10:ff:99:eb:97:e4:56:21:59:b2:a0:a5:d3:97:64: 6e:49:ae:7f:e6:b7:9c:60:ec:84:31:ee:e7:51:ed: 2a:34:1d:cb:9b:cb:5e:fe:33:8e:f0:6c:58:23:fb: f5:05:a5:3b:e7:d9:6f:48:55:c5:e4:fe:e0:27:de: aa:fc:05:fc:ad:51:8d:be:8d:8f:af:77:af:2e:19: ec:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:21:2A:2D:DB:5C:10:BB:19:B6:90:14:2F:56:FA:17:1D:C2:4B:10 X509v3 Authority Key Identifier: keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c5:4a:ad:8c:a3:af:69:62:24:17:c1:f7:79:a1:ad:5b:a6: bf:bf:56:b0:2e:1b:20:a3:e7:a1:a6:ca:28:a5:79:f7:fb:43: 6d:bc:8e:a0:39:08:55:67:13:65:75:a0:50:e4:1e:cb:d9:bc: 3f:29:5b:f1:24:04:da:aa:03:8b:c7:05:3b:2d:90:9e:89:74: cb:c7:c7:96:a5:47:8e:31:6f:8d:5a:92:3c:91:1a:b3:40:63: f8:87:16:5a:8c:59:44:ca:64:66:c8:d2:70:7d:1c:cb:ab:c1: c6:b3:b7:6d:34:ff:7f:1a:e9:53:0a:98:4a:81:45:88:75:63: e0:bc:ae:0f:16:31:db:95:7b:8c:72:f1:7e:ef:72:8f:05:6a: 22:31:0e:09:3d:2a:55:e6:99:6d:bd:99:dd:c3:84:91:ec:eb: 64:af:97:e2:f5:64:a0:e7:2a:7b:94:f9:80:29:a3:cd:0d:4f: 69:23:58:d6:ed:86:95:b2:bb:c3:65:a6:a7:77:0d:da:3e:70: 24:d6:f9:4e:ca:ce:9e:2f:14:e0:2d:b0:e9:00:cc:ea:fe:8d: e7:cc:b2:53:43:11:fb:e2:70:32:7b:c1:fd:e4:b3:e3:55:24: dd:79:41:92:52:e2:f0:a8:ca:07:1d:6c:f3:7e:dc:9c:de:f3: 6d:e7:40:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWdM57kR6B+2jsAcy15N7iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZmFlYzRiOGQ5OTJkZDZiOWNkODlhODQ4OWQzYzNhNjUy YWVjZDIwHhcNMjUxMjI1MTcwMDU0WhcNMjUxMjI2MTcwMDU0WjAzMTEwLwYDVQQD Eyg2NjIxMmEyZGRiNWMxMGJiMTliNjkwMTQyZjU2ZmExNzFkYzI0YjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKZeZ+FjazCSkQr/xHiGHZbPBTaG V8oAvtHTHZT0/83Wl3K0oGlSB+Fw2GQLEGfGdxf2aJ9P3oJC/ho/dlq17+CjTEan vDgrPiyw6APbJ8f1uMjYCBgSBo9LN556jxtjcw1xJ46V5MyrsbpxzMIkkJyhQ4NM iJoT1Z+r/18zfSDdG7S2HDJDKKwnjmwfAIlMiVE+8oi4yugpPubu3t74v9+pE2jW cPvpJfFE1mhezqMwQoUQ/5nrl+RWIVmyoKXTl2RuSa5/5recYOyEMe7nUe0qNB3L m8te/jOO8GxYI/v1BaU759lvSFXF5P7gJ96q/AX8rVGNvo2Pr3evLhnsNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYhKi3bXBC7GbaQFC9W+hcdwksQMB8GA1UdIwQY MBaAFLX67EuNmS3Wuc2JqEidPDplKuzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGZyc1M0MlpMZGE1elltb1NKMDhPbVVxN05JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82OGMyOTYtNjliMi00MDcwLTlmZjkt NDI0M2RlY2FkMzYwLzEvdGZyc1M0MlpMZGE1elltb1NKMDhPbVVxN05JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS82OGMyOTYtNjliMi00MDcwLTlmZjktNDI0M2RlY2FkMzYw LzEvdGZyc1M0MlpMZGE1elltb1NKMDhPbVVxN05JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcVKrYyj r2liJBfB93mhrVumv79WsC4bIKPnoabKKKV59/tDbbyOoDkIVWcTZXWgUOQey9m8 Pylb8SQE2qoDi8cFOy2Qnol0y8fHlqVHjjFvjVqSPJEas0Bj+IcWWoxZRMpkZsjS cH0cy6vBxrO3bTT/fxrpUwqYSoFFiHVj4LyuDxYx25V7jHLxfu9yjwVqIjEOCT0q VeaZbb2Z3cOEkezrZK+X4vVkoOcqe5T5gCmjzQ1PaSNY1u2GlbK7w2Wmp3cN2j5w JNb5TsrOni8U4C2w6QDM6v6N58yyU0MR++JwMnvB/eSz41Uk3XlBklLi8KjKBx1s 837cnN7zbedAYA== -----END CERTIFICATE-----Generated at Thu Dec 25 19:44:28 2025 by rpki-client