This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft File: tIoonrst1oBtYLjFrQNseY9mugY.mft (raw, json) Hash identifier: WTpAf5itSfaU799hHfBAMTprbV2cG/Gwaw3fDhzV4D0= Subject key identifier: AC:34:AB:FD:CD:A2:09:F1:DC:9C:17:23:40:78:93:1C:29:62:15:5F Authority key identifier: B4:8A:28:9E:BB:2D:D6:80:6D:60:B8:C5:AD:03:6C:79:8F:66:BA:06 Certificate issuer: /CN=b48a289ebb2dd6806d60b8c5ad036c798f66ba06 Certificate serial: 019B33E8B455CF1109FBB3938ECD01007CD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft Manifest number: 063E Signing time: Fri 19 Dec 2025 00:00:47 +0000 Manifest this update: Fri 19 Dec 2025 00:00:47 +0000 Manifest next update: Sat 20 Dec 2025 00:00:47 +0000 Files and hashes: 1: nKxswHwUBE_XIOIyQ1Qpw5XOFvo.roa (hash: xZYcCOMTf00TiuBXWvG+qaD8S6ouJ5YlmrR2oW0i9z0=) 2: tIoonrst1oBtYLjFrQNseY9mugY.crl (hash: 1m3btMOmQW1aWL+EeJVLai8GUT57BTlJ6cGBZn0RtEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:b4:55:cf:11:09:fb:b3:93:8e:cd:01:00:7c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b48a289ebb2dd6806d60b8c5ad036c798f66ba06 Validity Not Before: Dec 19 00:00:47 2025 GMT Not After : Dec 20 00:00:47 2025 GMT Subject: CN=ac34abfdcda209f1dc9c17234078931c2962155f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:07:20:5d:e9:29:48:38:a2:0e:5a:4a:c8:81: ef:1e:a6:7c:82:ad:ff:41:28:33:0c:1b:12:9c:47: 18:53:93:c7:a8:e6:4d:ef:91:55:ac:a8:96:c5:20: 7f:65:5c:95:22:bc:44:80:81:44:73:fa:47:b1:16: d3:73:18:16:51:45:6b:74:7e:3c:8f:90:43:a9:90: cf:0e:10:27:24:5c:80:a9:7b:68:f9:35:f8:d5:ec: d5:70:e2:41:90:e1:67:9e:bb:96:be:10:fc:e6:d4: 99:c7:c2:a2:01:9f:07:83:c9:a8:58:c5:c6:2e:c9: ab:25:08:2d:b2:90:46:bb:ab:1c:dc:be:d7:dd:e2: 3a:bd:fb:26:01:22:f8:78:90:f0:37:43:ec:00:ac: 2a:1f:4a:f0:2a:96:a3:e9:a1:2c:4b:5a:37:3f:6b: c6:29:95:79:b3:8e:1e:85:92:c5:06:7b:0e:e1:1b: 68:f5:e9:61:19:cf:8c:f6:7a:35:ee:a3:ba:38:5a: 83:30:d4:de:c0:3a:65:1e:03:ec:6d:5e:00:ff:8e: 71:80:ca:31:7a:73:c9:33:43:df:0c:d9:ad:64:8f: 33:34:85:c1:81:86:95:06:1f:0d:4a:06:91:50:f0: b2:e8:ed:d5:81:b3:22:41:6f:0d:9f:9c:e9:cb:81: 2e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:34:AB:FD:CD:A2:09:F1:DC:9C:17:23:40:78:93:1C:29:62:15:5F X509v3 Authority Key Identifier: keyid:B4:8A:28:9E:BB:2D:D6:80:6D:60:B8:C5:AD:03:6C:79:8F:66:BA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:0f:1b:a1:d4:bf:ff:46:09:8f:9d:73:04:d4:6a:9e:6a:4a: 9f:dc:86:a7:11:54:e4:dd:7f:10:1d:a5:10:48:d4:86:fb:c1: ad:f8:47:4c:2a:ed:0a:ef:6c:42:f6:7b:ae:71:cc:71:fb:ef: 19:8a:bb:b7:24:26:7b:6f:8b:b9:a9:69:3f:7d:8b:43:85:38: 2d:c7:97:49:11:29:0f:b2:8c:75:9e:b5:35:82:c2:4a:7c:7d: d5:ce:28:d0:10:08:94:84:0c:79:ba:b7:f1:14:1e:2f:fe:eb: e0:d1:90:19:eb:ba:c1:d7:ff:61:13:f1:f1:8d:d6:e0:77:dc: 8e:5e:f7:45:fb:7f:ee:75:bb:5e:61:f7:5a:ff:43:7a:0b:a0: 28:c2:0c:f9:cf:f3:87:a5:9f:dd:4a:3d:2b:e8:41:73:d8:93: 5d:a0:cf:8c:2f:5c:a2:fb:39:3a:6f:ad:01:4f:3d:00:d3:40: ee:a9:e4:cf:3e:5d:ac:1d:f1:4c:9b:97:e0:8e:1e:49:fd:31: 0a:9b:e0:58:41:2e:71:7d:e1:4e:55:6c:f0:f3:bb:7e:19:69: 57:96:6d:b6:e6:e7:14:6b:80:25:c2:c3:06:42:d6:55:01:c9: 6b:0f:a4:b7:bc:31:7f:71:58:76:ec:7e:71:ae:1a:32:76:9c: d6:0f:d9:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6LRVzxEJ+7OTjs0BAHzUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OGEyODllYmIyZGQ2ODA2ZDYwYjhjNWFkMDM2Yzc5OGY2 NmJhMDYwHhcNMjUxMjE5MDAwMDQ3WhcNMjUxMjIwMDAwMDQ3WjAzMTEwLwYDVQQD EyhhYzM0YWJmZGNkYTIwOWYxZGM5YzE3MjM0MDc4OTMxYzI5NjIxNTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAcgXekpSDiiDlpKyIHvHqZ8gq3/ QSgzDBsSnEcYU5PHqOZN75FVrKiWxSB/ZVyVIrxEgIFEc/pHsRbTcxgWUUVrdH48 j5BDqZDPDhAnJFyAqXto+TX41ezVcOJBkOFnnruWvhD85tSZx8KiAZ8Hg8moWMXG LsmrJQgtspBGu6sc3L7X3eI6vfsmASL4eJDwN0PsAKwqH0rwKpaj6aEsS1o3P2vG KZV5s44ehZLFBnsO4Rto9elhGc+M9no17qO6OFqDMNTewDplHgPsbV4A/45xgMox enPJM0PfDNmtZI8zNIXBgYaVBh8NSgaRUPCy6O3VgbMiQW8Nn5zpy4Eu8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKw0q/3Nognx3JwXI0B4kxwpYhVfMB8GA1UdIwQY MBaAFLSKKJ67LdaAbWC4xa0DbHmPZroGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElvb25yc3Qxb0J0WUxqRnJRTnNlWTltdWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81OTkyZWItNGI4Mi00ZmQzLTkxMjEt ZmVlMTM3Yzg5MGJjLzEvdElvb25yc3Qxb0J0WUxqRnJRTnNlWTltdWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC81OTkyZWItNGI4Mi00ZmQzLTkxMjEtZmVlMTM3Yzg5MGJj LzEvdElvb25yc3Qxb0J0WUxqRnJRTnNlWTltdWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQ8bodS/ /0YJj51zBNRqnmpKn9yGpxFU5N1/EB2lEEjUhvvBrfhHTCrtCu9sQvZ7rnHMcfvv GYq7tyQme2+LualpP32LQ4U4LceXSREpD7KMdZ61NYLCSnx91c4o0BAIlIQMebq3 8RQeL/7r4NGQGeu6wdf/YRPx8Y3W4Hfcjl73Rft/7nW7XmH3Wv9DegugKMIM+c/z h6Wf3Uo9K+hBc9iTXaDPjC9covs5Om+tAU89ANNA7qnkzz5drB3xTJuX4I4eSf0x CpvgWEEucX3hTlVs8PO7fhlpV5ZttubnFGuAJcLDBkLWVQHJaw+kt7wxf3FYdux+ ca4aMnac1g/Z+Q== -----END CERTIFICATE-----Generated at Fri Dec 19 06:29:47 2025 by rpki-client