This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json) Hash identifier: YYUleA4khHX6xK+5ll3GjvxUVs4BxmlMWRUXmtXDxV0= Subject key identifier: C9:03:FB:C7:34:67:13:35:08:5E:1F:92:A1:C5:9C:2E:58:67:38:B6 Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54 Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54 Certificate serial: 019B397D03CD6A8186D17C533DBE1321264E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft Manifest number: 06D0 Signing time: Sat 20 Dec 2025 02:00:52 +0000 Manifest this update: Sat 20 Dec 2025 02:00:52 +0000 Manifest next update: Sun 21 Dec 2025 02:00:52 +0000 Files and hashes: 1: JboF5duYkSjIw0cFCDow2D7hhYA.roa (hash: 5ee85IvEdLLZLBu0IK/0DK9QgLyt71g8oPTMmxnM7ss=) 2: bPHOfPhRt9UxNoPYUZyx6NkEcPE.roa (hash: l5CD77LRDYrviJN2I+kUm6dy7C8YOi2kiqH568j84ZE=) 3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: bd5wrOgi8XaMrXohtZjirgDe0OWWIfFplUDJUFWeSu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:03:cd:6a:81:86:d1:7c:53:3d:be:13:21:26:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54 Validity Not Before: Dec 20 02:00:52 2025 GMT Not After : Dec 21 02:00:52 2025 GMT Subject: CN=c903fbc734671335085e1f92a1c59c2e586738b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:0c:e0:44:f9:98:a1:21:8d:3f:5b:2d:37: 21:a7:7e:28:7b:1b:61:fe:a5:dc:63:b1:ac:51:d9: 3c:57:91:0a:3a:fb:f2:f8:30:77:5f:3a:6c:9b:a2: 4f:9b:58:41:5b:bc:ae:44:f4:c4:55:a9:af:87:dc: 90:db:0b:42:60:21:1c:fe:32:14:24:ec:a8:e1:e1: 48:56:2b:1c:90:c8:ab:e7:6f:a3:06:86:dc:2b:ba: 5a:9a:18:52:27:af:b9:c6:0e:0b:8a:70:fb:f0:82: 67:7b:28:fb:d9:7c:27:02:8c:85:68:66:65:9e:02: b0:e0:7f:34:99:87:71:ce:4e:b2:44:54:30:c1:0b: 90:96:d6:40:a4:4d:d9:72:80:91:1d:63:dc:30:59: 45:a0:c2:52:e4:cc:d3:3f:b6:03:82:95:76:89:7e: 17:6e:bf:6a:50:31:82:cf:10:09:02:9c:9e:09:a4: 42:e3:ef:6b:bb:b6:26:ef:d5:ad:70:8b:f9:a1:77: 7b:d0:d5:0a:36:35:db:cb:6e:c8:e8:3b:12:f6:9f: 9a:a1:f8:6d:7c:eb:43:0e:1a:2b:6a:6c:ce:3c:6f: b1:09:9e:62:7e:fa:51:ba:b5:78:17:7b:69:48:06: 9f:cd:2f:0b:c8:2c:0f:53:e3:3f:97:18:cc:80:0e: b9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:03:FB:C7:34:67:13:35:08:5E:1F:92:A1:C5:9C:2E:58:67:38:B6 X509v3 Authority Key Identifier: keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b1:1a:10:f3:8f:01:0b:7f:ad:4b:b3:4d:af:3d:25:7f:a0: 68:38:15:de:72:40:1b:44:ee:4f:62:ab:c9:88:a2:5f:ef:17: 1e:32:cd:1a:7f:47:88:3f:b9:d4:68:c6:f0:40:bb:a9:4c:66: fa:fc:dc:90:8d:d5:90:84:2b:c8:ba:65:a2:10:59:b9:02:cd: be:89:a4:c2:30:b4:95:73:c9:4f:65:22:60:44:56:d2:b2:3c: d4:54:eb:49:5c:83:05:9e:a9:6b:c9:66:ed:8a:14:cd:b7:79: c3:43:fd:7b:16:51:6c:4c:7b:2b:a5:85:cf:3a:b8:d9:2c:dd: 26:35:03:34:87:d8:88:ef:13:99:e2:f2:38:fc:4a:50:0c:11: 7b:0c:f6:f4:de:95:24:34:97:8f:46:0b:ba:4b:b5:a2:69:d7: fc:e1:fb:ef:21:3f:a2:b3:df:ab:dd:dc:89:5d:c6:9e:95:76: fb:40:85:b3:04:54:86:59:48:9a:6d:60:1f:f7:4f:8d:fb:6a: e2:eb:79:51:f9:3f:ac:68:9c:13:e7:e2:91:1f:1d:62:e1:29: 9f:bf:c9:82:0e:82:92:e1:76:31:0f:27:a0:f6:b6:6b:41:ba: 92:f1:29:0f:a0:cb:10:d4:0e:ba:b2:4a:b6:15:ff:51:68:59: 72:d4:f9:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fQPNaoGG0XxTPb4TISZOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YzgxNGZmY2E1MzEwODYyYTIyMjRmMGFmZDkwY2FhOTZh YzBiNTQwHhcNMjUxMjIwMDIwMDUyWhcNMjUxMjIxMDIwMDUyWjAzMTEwLwYDVQQD EyhjOTAzZmJjNzM0NjcxMzM1MDg1ZTFmOTJhMWM1OWMyZTU4NjczOGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWgM4ET5mKEhjT9bLTchp34oexth /qXcY7GsUdk8V5EKOvvy+DB3Xzpsm6JPm1hBW7yuRPTEVamvh9yQ2wtCYCEc/jIU JOyo4eFIVisckMir52+jBobcK7pamhhSJ6+5xg4LinD78IJneyj72XwnAoyFaGZl ngKw4H80mYdxzk6yRFQwwQuQltZApE3ZcoCRHWPcMFlFoMJS5MzTP7YDgpV2iX4X br9qUDGCzxAJApyeCaRC4+9ru7Ym79WtcIv5oXd70NUKNjXby27I6DsS9p+aofht fOtDDhoramzOPG+xCZ5ifvpRurV4F3tpSAafzS8LyCwPU+M/lxjMgA65lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkD+8c0ZxM1CF4fkqHFnC5YZzi2MB8GA1UdIwQY MBaAFLTIFP/KUxCGKiIk8K/ZDKqWrAtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xYWFlNDUtZjZiZS00MDFjLWIzZDAt ZjQ2N2IyZjQyYWY2LzEvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8xYWFlNDUtZjZiZS00MDFjLWIzZDAtZjQ2N2IyZjQyYWY2 LzEvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrEaEPOP AQt/rUuzTa89JX+gaDgV3nJAG0TuT2KryYiiX+8XHjLNGn9HiD+51GjG8EC7qUxm +vzckI3VkIQryLplohBZuQLNvomkwjC0lXPJT2UiYERW0rI81FTrSVyDBZ6pa8lm 7YoUzbd5w0P9exZRbEx7K6WFzzq42SzdJjUDNIfYiO8TmeLyOPxKUAwRewz29N6V JDSXj0YLuku1omnX/OH77yE/orPfq93ciV3GnpV2+0CFswRUhllImm1gH/dPjftq 4ut5Ufk/rGicE+fikR8dYuEpn7/Jgg6CkuF2MQ8noPa2a0G6kvEpD6DLENQOurJK thX/UWhZctT5kQ== -----END CERTIFICATE-----Generated at Sat Dec 20 06:52:19 2025 by rpki-client