This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft File: tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json) Hash identifier: Is3DSJA/ScKWa30ixx6J8Q4J/xvwvFzwRyXP8prWMKg= Subject key identifier: 7F:B7:19:C4:4E:CD:BC:82:06:4B:DE:FA:1C:98:28:26:71:E7:5D:DF Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b Certificate serial: 019B4A715DA592CAFDB81FC25234E2EEBAC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft Manifest number: 13A0 Signing time: Tue 23 Dec 2025 09:01:42 +0000 Manifest this update: Tue 23 Dec 2025 09:01:42 +0000 Manifest next update: Wed 24 Dec 2025 09:01:42 +0000 Files and hashes: 1: iONsIN03z4IKNXYg6US72IxJBcU.roa (hash: X7Mx72vOONyXDgxRP6UfNMJzZuu3rnCgwN1U1ZoR2/s=) 2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: fxlrxf7NT3bsQD1dnq2lVd3xnczv4A/ce8Qt+btGEo8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:5d:a5:92:ca:fd:b8:1f:c2:52:34:e2:ee:ba:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b60aac104376b79dd6829091947b779c989af68b Validity Not Before: Dec 23 09:01:42 2025 GMT Not After : Dec 24 09:01:42 2025 GMT Subject: CN=7fb719c44ecdbc82064bdefa1c98282671e75ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:79:cd:bf:1a:4d:ff:48:06:3e:b9:2a:8b:32: a0:98:3b:da:53:43:e5:6f:c6:5a:b6:c2:7a:40:f8: 54:4d:14:21:62:f8:8a:31:7e:a7:14:c6:8e:5f:04: 81:b1:64:7e:fc:d0:45:07:fa:80:86:eb:00:e6:70: 84:a3:a2:71:63:68:c3:4e:e4:85:25:d2:6f:1f:f4: a5:50:50:37:48:36:52:20:61:54:68:90:0a:74:3c: cb:1a:d7:d6:a0:1b:df:58:a1:b8:4b:8c:bd:66:ab: 20:26:90:31:6a:1b:33:b0:e4:1c:b9:75:04:99:c1: 1d:ca:47:46:d4:fb:df:a7:b7:54:af:78:44:b8:e8: f9:e8:83:a9:82:a1:b7:6b:ca:71:4c:9b:88:0a:df: 9c:c2:cf:d2:8e:85:ac:8c:ba:7a:66:af:5c:ee:26: 46:83:e4:49:13:cd:fb:4a:3c:a1:eb:08:2a:ed:4b: 3c:4e:da:f9:23:dc:6e:5d:00:b5:28:ef:f9:40:94: 4c:45:ad:50:32:b3:46:c7:b9:72:0b:d3:54:e8:49: d3:01:45:e4:d4:d4:0d:cb:7a:40:21:2d:fc:9b:e8: 4c:44:b5:69:25:ed:7f:ac:d7:b5:9f:56:99:f6:0b: 5e:93:ea:73:6e:1d:35:0a:0b:52:c4:af:3e:b9:20: fa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B7:19:C4:4E:CD:BC:82:06:4B:DE:FA:1C:98:28:26:71:E7:5D:DF X509v3 Authority Key Identifier: keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d9:d4:0d:89:c5:aa:40:70:aa:ca:fc:aa:68:f2:7a:b0:e6: e1:79:74:c1:bb:6a:09:3a:7d:1e:14:f0:20:9d:73:bc:df:0a: 82:76:d5:ef:ac:c0:fa:92:43:9e:5b:20:52:23:f0:87:27:41: b8:9c:a1:53:bf:08:1e:51:2d:b6:9d:c4:22:ae:8d:1f:61:9c: 37:35:49:9c:4f:8e:4f:dd:a7:bb:c6:53:c3:68:a3:f8:cc:4d: c6:a0:ae:25:7a:ed:64:be:bc:45:14:51:a5:da:c3:14:31:c6: 41:a5:20:7d:0c:c2:11:38:7e:fd:b8:3b:ac:93:47:3d:a3:05: 54:a6:42:08:b2:17:51:8f:02:75:f0:58:76:17:2d:90:ce:8e: 54:0a:25:d7:7b:8f:2c:a6:f6:1b:df:e1:ca:64:5e:1b:91:c4: 3d:5c:69:19:dc:61:b8:5d:a0:ce:2a:fe:ba:f7:d0:7b:7c:60: cd:09:4a:b2:04:75:56:08:37:30:86:5d:8a:57:e9:e6:31:17: 48:72:8e:df:e3:fe:2d:8a:54:64:21:08:af:cd:c2:dc:09:80: 51:89:41:d5:8b:38:42:34:93:44:67:96:54:a8:b4:d6:1a:d9: 86:4b:84:70:60:da:8d:1a:c2:8a:a1:12:be:d0:fe:53:17:e0: 24:a0:f9:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcV2lksr9uB/CUjTi7rrGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MGFhYzEwNDM3NmI3OWRkNjgyOTA5MTk0N2I3NzljOTg5 YWY2OGIwHhcNMjUxMjIzMDkwMTQyWhcNMjUxMjI0MDkwMTQyWjAzMTEwLwYDVQQD Eyg3ZmI3MTljNDRlY2RiYzgyMDY0YmRlZmExYzk4MjgyNjcxZTc1ZGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3nNvxpN/0gGPrkqizKgmDvaU0Pl b8ZatsJ6QPhUTRQhYviKMX6nFMaOXwSBsWR+/NBFB/qAhusA5nCEo6JxY2jDTuSF JdJvH/SlUFA3SDZSIGFUaJAKdDzLGtfWoBvfWKG4S4y9ZqsgJpAxahszsOQcuXUE mcEdykdG1Pvfp7dUr3hEuOj56IOpgqG3a8pxTJuICt+cws/SjoWsjLp6Zq9c7iZG g+RJE837Sjyh6wgq7Us8Ttr5I9xuXQC1KO/5QJRMRa1QMrNGx7lyC9NU6EnTAUXk 1NQNy3pAIS38m+hMRLVpJe1/rNe1n1aZ9gtek+pzbh01CgtSxK8+uSD6LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+3GcROzbyCBkve+hyYKCZx513fMB8GA1UdIwQY MBaAFLYKrBBDdred1oKQkZR7d5yYmvaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWJiOWEtOWEwNy00ODY3LTk3MGIt MmIxZGE2MjRmN2JjLzEvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9lYWJiOWEtOWEwNy00ODY3LTk3MGItMmIxZGE2MjRmN2Jj LzEvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAatnUDYnF qkBwqsr8qmjyerDm4Xl0wbtqCTp9HhTwIJ1zvN8KgnbV76zA+pJDnlsgUiPwhydB uJyhU78IHlEttp3EIq6NH2GcNzVJnE+OT92nu8ZTw2ij+MxNxqCuJXrtZL68RRRR pdrDFDHGQaUgfQzCETh+/bg7rJNHPaMFVKZCCLIXUY8CdfBYdhctkM6OVAol13uP LKb2G9/hymReG5HEPVxpGdxhuF2gzir+uvfQe3xgzQlKsgR1Vgg3MIZdilfp5jEX SHKO3+P+LYpUZCEIr83C3AmAUYlB1Ys4QjSTRGeWVKi01hrZhkuEcGDajRrCiqES vtD+UxfgJKD5dQ== -----END CERTIFICATE-----Generated at Tue Dec 23 12:37:21 2025 by rpki-client