This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft File: tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json) Hash identifier: vLthCdo+vIwuAX5ak94wf7O124axDALvT2VEZcgeFZY= Subject key identifier: 7F:A8:B2:30:40:DF:2D:87:FD:87:E4:91:AA:AB:63:5D:5D:21:D7:2A Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 019B72C75980D30D78E7F18C86BDCA2EFA96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft Manifest number: 17AE Signing time: Wed 31 Dec 2025 05:00:25 +0000 Manifest this update: Wed 31 Dec 2025 05:00:25 +0000 Manifest next update: Thu 01 Jan 2026 05:00:25 +0000 Files and hashes: 1: 668BLkySdWDDmr5lSsB-YtLZ80Q.roa (hash: wAlTOv+x5XHci96XsqbLWx0e5eMWTNKBMvsGMhRIW5g=) 2: CaGm-a6CxApZqirxxCCZ9rx1aiM.roa (hash: in3Qvj8lVIdQByC2i0yNl5XLhAZsdDWoJ0Q3xc4mK5w=) 3: G7X7b_-2524mL2utRjqA_p3x1ko.roa (hash: eNBADPehKuBiSWTNdfZV2c/hvceCYObCQ47OijZj/IM=) 4: Ha2aIsE24z_1EZsUwFVaBMCEfdM.roa (hash: xkTrIuXJyp+z7TixxHSY5VnwKcm94LBvzrBz6XRQmHA=) 5: U4BB4H7P7Xc6wcR_Q3KuEg8MoBI.roa (hash: QxEX5rbeLCQiv5QJ1QrJpxAQPPcED/CkB9BmO957WyU=) 6: ZGbxcZi9cS52WoJdVb-r0w_TFVk.roa (hash: UaSAvffUeAya0sIHPIbsIDALMTsblptod9P+M2JwLlw=) 7: _JHDbAZ2ATmmU2h8LNTts0pQdRw.roa (hash: ydLyrnNRvtcOwVHilzuoONY7T6CbRsMdyLBgcqYGqyo=) 8: sCoMzCi05UrDFtmTnulnnY6R09o.roa (hash: ZM5RYx3VNWn9QHDFDvEBjHCFQTlKZaYcsLAypuanz3s=) 9: tPcgE7Dec0le1j4-lCiliZGhMhA.roa (hash: rqY7E+ZB4onuPYp0NQezTIDslFC1HqRDysd/HXAkW7Y=) 10: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: KFJiFGB71MCuljv2xbf0j4YzL8JoqTheHrOUMhsLmOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:c7:59:80:d3:0d:78:e7:f1:8c:86:bd:ca:2e:fa:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Dec 31 05:00:25 2025 GMT Not After : Jan 1 05:00:25 2026 GMT Subject: CN=7fa8b23040df2d87fd87e491aaab635d5d21d72a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:45:7d:da:5c:2e:7b:9e:8a:4b:40:db:40:8f: 46:a7:b5:d6:c9:ce:51:09:8f:f9:66:74:de:3c:0d: 17:fc:00:83:d9:41:85:0a:54:dc:77:83:01:b4:da: fc:3c:b9:46:81:6d:b4:be:0e:d6:66:1d:53:d4:69: 08:85:87:e6:e0:27:68:80:20:76:98:99:98:f8:1e: 99:49:66:53:0d:43:b8:ee:b4:44:c3:32:a0:2d:68: 55:90:5c:1a:f2:ca:92:7a:ae:12:1c:43:5d:f8:eb: 67:84:7e:bc:c5:84:07:32:85:98:b6:5a:9e:2a:e0: 67:bd:68:b9:dc:54:b1:62:2f:d0:d9:05:26:0e:7d: 1a:88:50:65:ce:5b:ea:db:f9:6c:07:d4:1b:b3:52: 98:e4:ea:3a:43:8d:eb:1a:83:d3:ee:7f:86:dd:7c: a9:d7:a4:59:53:60:e0:46:01:9f:20:dc:fc:d3:51: e7:6e:dd:8a:fd:2e:76:fb:a9:0b:fe:74:10:62:15: c9:33:cd:8f:54:ad:9e:9f:dd:c1:26:51:69:d7:0c: 96:ff:27:76:14:f7:3e:86:d2:a6:8f:93:cd:db:d4: 6b:e3:eb:93:89:8d:d6:9d:c9:5a:e5:fa:a4:ac:e5: 0e:74:39:75:96:7c:1b:6e:f7:46:cd:5e:4e:79:42: b6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A8:B2:30:40:DF:2D:87:FD:87:E4:91:AA:AB:63:5D:5D:21:D7:2A X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:a0:b2:62:b6:a9:8f:10:0b:4a:2c:f9:83:7a:55:c5:e9:9f: 43:d7:f6:77:44:06:e4:ac:cf:c6:2e:f1:68:8d:96:fc:06:35: 7c:01:16:a1:8c:4f:97:34:fa:6d:29:2b:37:ec:42:62:f6:fc: eb:b5:f4:8d:6a:a3:a3:b9:43:c7:86:76:f1:8c:e2:02:35:57: d1:08:f1:f4:fa:c4:a4:a2:27:8f:79:57:96:2f:a4:f6:f7:fb: 19:0d:5c:2c:a6:43:1a:d4:eb:d7:ac:84:fc:ea:4f:e9:8d:c3: f9:db:89:24:a6:0b:77:cf:49:6d:9f:f2:1c:dd:89:f4:a5:21: 80:b7:92:c6:44:6d:0e:05:47:3d:c3:e9:8d:5c:7a:b1:44:1b: 64:0a:d2:0a:f3:ff:83:25:11:91:7d:a1:5c:74:99:5f:90:89: e1:09:34:b6:76:1f:37:10:37:f7:85:79:db:78:77:e2:95:df: 61:aa:ca:22:a6:a4:b3:69:d3:1a:80:c7:f4:f6:a5:07:cb:21: e9:a7:ea:99:f0:8d:c5:9a:98:b8:50:fa:bf:39:d3:74:61:26: f0:7e:fd:dd:f0:d3:9b:af:a6:5a:92:eb:ce:db:f1:0a:a3:8a: 77:76:dd:69:34:b8:13:a7:6c:37:99:48:75:1a:6a:4d:4d:13: 77:47:08:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyx1mA0w145/GMhr3KLvqWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjUxMjMxMDUwMDI1WhcNMjYwMTAxMDUwMDI1WjAzMTEwLwYDVQQD Eyg3ZmE4YjIzMDQwZGYyZDg3ZmQ4N2U0OTFhYWFiNjM1ZDVkMjFkNzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEV92lwue56KS0DbQI9Gp7XWyc5R CY/5ZnTePA0X/ACD2UGFClTcd4MBtNr8PLlGgW20vg7WZh1T1GkIhYfm4CdogCB2 mJmY+B6ZSWZTDUO47rREwzKgLWhVkFwa8sqSeq4SHENd+OtnhH68xYQHMoWYtlqe KuBnvWi53FSxYi/Q2QUmDn0aiFBlzlvq2/lsB9Qbs1KY5Oo6Q43rGoPT7n+G3Xyp 16RZU2DgRgGfINz801Hnbt2K/S52+6kL/nQQYhXJM82PVK2en93BJlFp1wyW/yd2 FPc+htKmj5PN29Rr4+uTiY3Wncla5fqkrOUOdDl1lnwbbvdGzV5OeUK2FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+osjBA3y2H/YfkkaqrY11dIdcqMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqCyYrap jxALSiz5g3pVxemfQ9f2d0QG5KzPxi7xaI2W/AY1fAEWoYxPlzT6bSkrN+xCYvb8 67X0jWqjo7lDx4Z28YziAjVX0Qjx9PrEpKInj3lXli+k9vf7GQ1cLKZDGtTr16yE /OpP6Y3D+duJJKYLd89JbZ/yHN2J9KUhgLeSxkRtDgVHPcPpjVx6sUQbZArSCvP/ gyURkX2hXHSZX5CJ4Qk0tnYfNxA394V523h34pXfYarKIqaks2nTGoDH9PalB8sh 6afqmfCNxZqYuFD6vznTdGEm8H793fDTm6+mWpLrztvxCqOKd3bdaTS4E6dsN5lI dRpqTU0Td0cI/w== -----END CERTIFICATE-----Generated at Wed Dec 31 09:30:04 2025 by rpki-client