This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft File: TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json) Hash identifier: REfl3ABp3NQpinWrh0FUf+B1dY4eOgozZLxv3GM7RpM= Subject key identifier: 08:DC:6D:2B:4F:98:5B:74:7C:25:E4:F7:65:F7:05:65:0F:E1:EA:04 Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9 Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9 Certificate serial: 019B4ADED2C7E1207424BDB4DA163EBA5E02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft Manifest number: 1792 Signing time: Tue 23 Dec 2025 11:01:15 +0000 Manifest this update: Tue 23 Dec 2025 11:01:15 +0000 Manifest next update: Wed 24 Dec 2025 11:01:15 +0000 Files and hashes: 1: 6L1wb6rk6JRmH0kdueo5VHSR6sA.roa (hash: v/vwNDFKpqZbOrt+k+dslXb31bPIeE6v/BAFBhGcR04=) 2: Q1ID3jqh-PT7k00It8t9krcFrp0.roa (hash: 53/LWfxj68LBwdUpxNq1PQF6QDcY5qwZBSFj5Skh+H4=) 3: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: MhlWUWlzBEsHtinCFBR6U5g1g5EQqmSgq67G89D2xB4=) 4: uAwoVI3dpDeVF6OQWKoCJ5jN8xY.roa (hash: tIErXtWim6v8+5J+f3v+yr7n8hWCWnrcd2Ahi85yzJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:d2:c7:e1:20:74:24:bd:b4:da:16:3e:ba:5e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9 Validity Not Before: Dec 23 11:01:15 2025 GMT Not After : Dec 24 11:01:15 2025 GMT Subject: CN=08dc6d2b4f985b747c25e4f765f705650fe1ea04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:61:a5:5b:5b:38:82:c8:7a:e7:70:aa:34:62: b8:38:b1:7a:19:50:aa:f4:27:ef:d2:5a:c9:78:c0: f9:a9:9f:02:92:1f:f6:56:82:e5:47:15:b2:62:35: ed:a7:a8:d7:4d:d3:cb:65:ec:22:a4:21:70:40:dd: b4:ae:e1:65:83:b2:0a:a1:0a:ef:21:de:0a:5c:7d: 7c:b0:44:0d:03:7f:fa:06:1a:1e:e3:db:b1:78:77: 51:30:36:c8:9b:7f:6d:f6:2d:c3:be:32:1b:dc:9b: 6c:d7:51:f5:fa:3d:e1:c7:54:ad:74:6d:f8:e8:a9: 6a:c4:49:ef:47:d1:ea:06:ee:8a:39:6e:51:95:4e: 93:81:8a:82:19:df:81:5e:c3:8d:7f:2c:de:5b:82: ab:5f:8e:d6:22:f5:73:94:01:06:35:42:67:57:78: 52:62:af:4b:2e:9f:3e:28:4d:2d:17:ba:07:88:5a: cb:c5:23:ce:c0:72:b6:d0:2c:fe:dc:40:b7:de:76: 56:08:cc:03:2d:93:de:d7:36:fd:c5:b3:31:91:0a: b6:f6:20:89:e6:d7:9d:cd:eb:7e:2d:51:e6:bf:58: fa:92:6d:cc:0d:6a:9d:11:6b:b6:37:24:2c:48:82: 92:d0:c0:20:5f:8c:2f:9c:30:6e:8c:90:08:b0:f6: 4d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DC:6D:2B:4F:98:5B:74:7C:25:E4:F7:65:F7:05:65:0F:E1:EA:04 X509v3 Authority Key Identifier: keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:27:99:32:f2:f4:8f:3f:eb:d2:be:0a:83:a6:06:a5:33:68: d5:25:cb:62:85:18:df:81:28:6a:ce:41:c9:a1:3d:e3:1c:49: a0:82:63:c4:f1:7a:2f:61:2a:05:45:ac:83:fa:6e:e2:5c:13: 3c:72:3d:c9:dc:c5:4b:82:b5:16:3d:24:8f:c6:df:c5:51:10: d7:e3:46:15:4d:12:c4:6d:03:4e:ed:6a:e9:46:e5:ba:73:a7: 95:9e:c6:d9:07:da:7e:5e:7d:bd:6d:ba:51:3f:e8:d7:d1:f1: 4b:82:43:80:fd:ad:76:e2:dc:a2:90:3c:bd:9a:5b:d5:f0:43: 25:6d:e1:31:20:37:51:e7:9f:df:f4:26:3f:ec:e0:e9:f9:24: 32:1c:ed:27:31:ca:9e:a2:e4:eb:9c:4c:cb:7c:34:3c:f3:38: b8:9a:dc:cf:8c:f8:f2:bd:af:19:81:59:a8:27:37:bb:cd:52: 77:57:72:70:de:7c:c7:6d:1e:bf:b0:89:e8:7a:bd:33:61:a4: 40:fa:e1:df:61:1d:4d:cb:00:6d:dc:6e:0f:93:0a:e5:d1:7b: ef:6d:4c:82:ac:a8:88:86:6f:ab:58:d8:eb:82:64:05:1d:57: da:43:c9:22:83:30:7a:c6:72:82:8d:d6:6f:dd:83:4d:36:13: ce:ad:d4:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3tLH4SB0JL202hY+ul4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMmEyOTlmMTgyYTFmZDUxZDRiMDM2Mjk5N2FmN2FhYWUw ZDZiZTkwHhcNMjUxMjIzMTEwMTE1WhcNMjUxMjI0MTEwMTE1WjAzMTEwLwYDVQQD EygwOGRjNmQyYjRmOTg1Yjc0N2MyNWU0Zjc2NWY3MDU2NTBmZTFlYTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGGlW1s4gsh653CqNGK4OLF6GVCq 9Cfv0lrJeMD5qZ8Ckh/2VoLlRxWyYjXtp6jXTdPLZewipCFwQN20ruFlg7IKoQrv Id4KXH18sEQNA3/6Bhoe49uxeHdRMDbIm39t9i3DvjIb3Jts11H1+j3hx1StdG34 6KlqxEnvR9HqBu6KOW5RlU6TgYqCGd+BXsONfyzeW4KrX47WIvVzlAEGNUJnV3hS Yq9LLp8+KE0tF7oHiFrLxSPOwHK20Cz+3EC33nZWCMwDLZPe1zb9xbMxkQq29iCJ 5tedzet+LVHmv1j6km3MDWqdEWu2NyQsSIKS0MAgX4wvnDBujJAIsPZNpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjcbStPmFt0fCXk92X3BWUP4eoEMB8GA1UdIwQY MBaAFE4qKZ8YKh/VHUsDYpl696quDWvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kM2RmMjYtM2RiNS00NTM5LTgwMzAt ZjJjZTc3ZTMxOTFlLzEvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kM2RmMjYtM2RiNS00NTM5LTgwMzAtZjJjZTc3ZTMxOTFl LzEvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqieZMvL0 jz/r0r4Kg6YGpTNo1SXLYoUY34Eoas5ByaE94xxJoIJjxPF6L2EqBUWsg/pu4lwT PHI9ydzFS4K1Fj0kj8bfxVEQ1+NGFU0SxG0DTu1q6UblunOnlZ7G2Qfafl59vW26 UT/o19HxS4JDgP2tduLcopA8vZpb1fBDJW3hMSA3Ueef3/QmP+zg6fkkMhztJzHK nqLk65xMy3w0PPM4uJrcz4z48r2vGYFZqCc3u81Sd1dycN58x20ev7CJ6Hq9M2Gk QPrh32EdTcsAbdxuD5MK5dF7721MgqyoiIZvq1jY64JkBR1X2kPJIoMwesZygo3W b92DTTYTzq3U6A== -----END CERTIFICATE-----Generated at Tue Dec 23 17:16:46 2025 by rpki-client