This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft File: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft (raw, json) Hash identifier: vc+06e4SneHn6qjqREoFW+t7EkQg/b6OYikwDpTrZ48= Subject key identifier: AF:E0:29:36:AA:DD:1D:32:4C:BB:C4:31:F5:C7:61:AE:15:3F:D1:88 Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d Certificate serial: 019B3E357257A221B68FD7075A5E9919C2A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 00:00:48 +0000 Manifest this update: Sun 21 Dec 2025 00:00:48 +0000 Manifest next update: Mon 22 Dec 2025 00:00:48 +0000 Files and hashes: 1: AuQnPlvYaXKRlM4K_qYnSQH8XhU.roa (hash: qvJ/L4CGhxXYThfrwcSRz9uge4t0blzZ120bzRELDv8=) 2: F7DtnHMe2aPaEVwgJdRXETJ3B3E.roa (hash: MXWzMDDGEU1JVdMLECcVtcWDfSvCJBYg9H2NNF7s8es=) 3: NT96ZXytZXeLYG8nYXbccb_AzMM.roa (hash: jF7i9U0X2AT56VYqylel02ci97XBnH5+7EoAI42ntOM=) 4: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl (hash: OCU3oopvePmFJl7942/RLWRY0ElSbBOZKxgXRU36MGI=) 5: dZ8FONS7KKnXtPOWC1aUQDIHQr4.roa (hash: eYi/BgNAuN/BBQLuz4zrndBhjJKwJ84q4OAoqSVG8XI=) 6: kw0uZTx7n5NT55NNgp7YJmoV9Go.roa (hash: 8XlRvDMZFDhRr5qjjN+VGMeejBbNLMwpbYD6/C4LFwY=) 7: mLDvK3-bwZrItlCvgdik3bR3f2M.roa (hash: YyM0oKefpsy5Jzp3sMVhcN2qGFNdHn75iID1HMnlHcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:72:57:a2:21:b6:8f:d7:07:5a:5e:99:19:c2:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d Validity Not Before: Dec 21 00:00:48 2025 GMT Not After : Dec 22 00:00:48 2025 GMT Subject: CN=afe02936aadd1d324cbbc431f5c761ae153fd188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:65:16:33:2b:56:5c:c7:ac:fc:79:ef:a1:e5: f0:fc:eb:51:3d:28:27:7f:0d:cc:49:8b:73:e8:1e: e7:69:8c:f7:08:a7:18:5c:3c:98:ba:a4:8d:94:d2: be:52:24:b2:15:18:a9:ba:e3:5a:a0:12:96:25:63: ea:56:c6:cd:42:07:07:6e:b8:5f:62:38:17:a6:c6: a0:1c:7a:b4:0f:bb:37:54:ad:9e:85:18:21:05:42: 5f:4c:74:02:d5:9e:e3:c8:0a:05:0a:32:aa:95:03: a1:80:99:d1:29:9f:91:3b:ab:db:ca:8f:f0:33:e5: 06:9f:e5:37:d0:5b:1d:48:0e:48:4b:87:b3:20:83: e2:46:d2:b5:9a:7c:4c:37:b9:55:4e:b5:bb:d4:e4: e4:8b:d2:b6:5d:81:b6:49:8d:09:b2:ca:29:d8:05: 5b:ec:06:4e:7b:80:b6:5c:df:f8:e4:3f:e5:0a:0a: db:01:c7:06:e9:f3:c7:4e:a9:fc:0c:04:77:70:d3: a4:95:cc:66:47:fe:ff:43:e3:4c:8a:a2:fe:8c:f4: 24:03:fd:69:51:e8:aa:6d:d9:0f:d3:05:80:3a:d7: fa:ed:8d:c7:4e:2e:38:04:b5:39:01:5e:32:dd:15: 0f:95:47:02:cd:9c:03:41:b4:04:b8:af:4b:7b:98: 8f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E0:29:36:AA:DD:1D:32:4C:BB:C4:31:F5:C7:61:AE:15:3F:D1:88 X509v3 Authority Key Identifier: keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:af:1f:c6:07:76:b0:67:34:40:23:a0:28:d3:10:48:68:ba: 10:00:74:4e:85:8e:61:59:e0:fc:39:ce:11:c3:51:04:36:d9: 2b:1c:18:a3:4f:92:b7:36:84:db:c8:7f:4c:a8:98:6d:be:8d: cf:59:50:e6:1a:49:cd:c5:e4:f5:f0:9e:76:2c:17:c4:77:8b: 55:19:1f:f6:33:eb:55:0c:9e:42:5b:ca:53:34:cf:2a:47:59: 0b:df:d1:6e:40:c7:1a:b8:80:bc:a2:70:6e:e9:fd:56:21:12: c2:14:ea:be:04:ec:ff:05:d1:2e:b4:e2:40:65:6b:3d:0b:49: 0d:e4:96:66:9c:6a:64:3b:78:b6:30:c2:b0:55:35:58:2c:87: 34:56:7d:44:de:86:c6:2d:1b:35:3e:14:e5:54:0c:39:0f:21: 68:08:ca:25:4a:75:08:a8:1e:1a:f4:31:f8:11:88:35:19:f7: 6c:8c:62:47:5e:be:a8:4c:ae:00:1b:db:b2:9c:a4:89:7b:ed: 59:96:70:f5:8e:14:27:8b:8f:78:c7:11:34:00:d4:f7:79:62: 73:fc:3b:0f:d3:3f:8c:cf:b2:5c:ca:c1:78:b4:0a:78:24:68: 94:7e:97:41:6c:d0:bb:1c:de:31:b3:e9:42:ab:4f:0a:a6:39: 60:5c:ac:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NXJXoiG2j9cHWl6ZGcKnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlY2ExMDVjZTRhZjZjMjFjZDQyOWU5OTJkMDZlYTdkMDZk OGE1NmQwHhcNMjUxMjIxMDAwMDQ4WhcNMjUxMjIyMDAwMDQ4WjAzMTEwLwYDVQQD EyhhZmUwMjkzNmFhZGQxZDMyNGNiYmM0MzFmNWM3NjFhZTE1M2ZkMTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmUWMytWXMes/HnvoeXw/OtRPSgn fw3MSYtz6B7naYz3CKcYXDyYuqSNlNK+UiSyFRipuuNaoBKWJWPqVsbNQgcHbrhf YjgXpsagHHq0D7s3VK2ehRghBUJfTHQC1Z7jyAoFCjKqlQOhgJnRKZ+RO6vbyo/w M+UGn+U30FsdSA5IS4ezIIPiRtK1mnxMN7lVTrW71OTki9K2XYG2SY0Jssop2AVb 7AZOe4C2XN/45D/lCgrbAccG6fPHTqn8DAR3cNOklcxmR/7/Q+NMiqL+jPQkA/1p UeiqbdkP0wWAOtf67Y3HTi44BLU5AV4y3RUPlUcCzZwDQbQEuK9Le5iPfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/gKTaq3R0yTLvEMfXHYa4VP9GIMB8GA1UdIwQY MBaAFE7KEFzkr2whzUKemS0G6n0G2KVtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgt NDZlZTBjZDdmY2JhLzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgtNDZlZTBjZDdmY2Jh LzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAya8fxgd2 sGc0QCOgKNMQSGi6EAB0ToWOYVng/DnOEcNRBDbZKxwYo0+StzaE28h/TKiYbb6N z1lQ5hpJzcXk9fCediwXxHeLVRkf9jPrVQyeQlvKUzTPKkdZC9/RbkDHGriAvKJw bun9ViESwhTqvgTs/wXRLrTiQGVrPQtJDeSWZpxqZDt4tjDCsFU1WCyHNFZ9RN6G xi0bNT4U5VQMOQ8haAjKJUp1CKgeGvQx+BGINRn3bIxiR16+qEyuABvbspykiXvt WZZw9Y4UJ4uPeMcRNADU93lic/w7D9M/jM+yXMrBeLQKeCRolH6XQWzQuxzeMbPp QqtPCqY5YFys6Q== -----END CERTIFICATE-----Generated at Sun Dec 21 06:43:16 2025 by rpki-client