This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft File: TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json) Hash identifier: OVcGWvHmss5KRhmu42syy8uBZx8qP2usfeQ8iv26R4s= Subject key identifier: 81:1B:AC:44:75:D5:B8:03:CC:86:66:65:E0:B6:49:08:B7:32:F2:6B Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9 Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9 Certificate serial: 019B5298496AB49398FEB29F0DE2A34F73FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft Manifest number: 1796 Signing time: Wed 24 Dec 2025 23:01:10 +0000 Manifest this update: Wed 24 Dec 2025 23:01:10 +0000 Manifest next update: Thu 25 Dec 2025 23:01:10 +0000 Files and hashes: 1: 6L1wb6rk6JRmH0kdueo5VHSR6sA.roa (hash: v/vwNDFKpqZbOrt+k+dslXb31bPIeE6v/BAFBhGcR04=) 2: Q1ID3jqh-PT7k00It8t9krcFrp0.roa (hash: 53/LWfxj68LBwdUpxNq1PQF6QDcY5qwZBSFj5Skh+H4=) 3: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: e7q2o7pEG6rNSaLLnLsXVeyGkrLitDZaA/f/QjBxSoE=) 4: uAwoVI3dpDeVF6OQWKoCJ5jN8xY.roa (hash: tIErXtWim6v8+5J+f3v+yr7n8hWCWnrcd2Ahi85yzJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:49:6a:b4:93:98:fe:b2:9f:0d:e2:a3:4f:73:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9 Validity Not Before: Dec 24 23:01:10 2025 GMT Not After : Dec 25 23:01:10 2025 GMT Subject: CN=811bac4475d5b803cc866665e0b64908b732f26b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c7:6c:f5:22:5d:1b:d2:da:c7:c9:36:75:b8: 93:d5:ed:1c:07:bf:e0:25:72:09:dd:95:35:36:74: 37:ed:0c:04:9c:bc:ad:d5:b2:ae:d4:14:91:a9:ed: b8:c5:31:23:c4:5c:ca:a4:e7:e2:9f:1f:73:b1:c1: 6a:46:c3:ec:68:26:c2:52:49:da:b2:77:f6:40:68: 07:26:ac:c4:f2:67:5e:47:3b:7c:26:9e:ae:28:ce: 71:74:c2:99:b9:48:8d:1a:9b:89:cf:34:94:52:6f: ed:01:10:68:bd:db:39:6b:66:a3:43:12:b1:ac:99: 29:f1:cb:3a:ad:93:3a:85:a4:3e:74:81:7b:a2:9e: e3:f0:5f:ca:6c:06:5b:2a:27:28:d6:da:35:4b:7d: 3f:f6:7d:2b:6a:93:44:cc:c9:cc:e0:d1:aa:f2:26: 57:fe:da:7d:bd:b2:5b:f1:ed:f5:82:7a:26:6d:18: 1d:dd:fe:d5:29:ed:a9:2d:c3:ac:ae:df:81:08:dd: 91:cd:57:18:67:5b:1f:63:14:76:be:bc:e8:b6:ae: d1:84:d3:75:ec:43:23:11:5a:c4:ba:88:95:5e:76: 3b:1c:bb:1d:5b:81:21:8c:e4:3e:c3:d6:2f:4a:d1: a4:3d:e6:ed:75:c7:bd:d8:fd:c8:91:e1:ac:85:30: be:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1B:AC:44:75:D5:B8:03:CC:86:66:65:E0:B6:49:08:B7:32:F2:6B X509v3 Authority Key Identifier: keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:ed:a2:2f:2a:d8:e6:f6:dd:03:4f:fc:dd:9d:17:81:d7:d5: 3d:8e:49:78:54:eb:33:b5:a8:a8:51:4b:9f:4c:ac:e7:1e:5f: 54:87:66:bb:ef:72:61:db:2c:91:51:09:46:1b:41:25:a2:15: 11:de:26:41:46:5a:b8:99:fa:3f:7d:f8:fa:59:77:39:83:d1: 81:1c:55:22:5b:e0:a2:3c:f1:4d:5b:a9:e4:60:5c:38:36:f5: 9c:4b:b1:8a:24:3f:10:6d:71:31:f6:fb:44:af:85:39:e3:bb: 9d:d1:eb:57:84:e8:1e:64:d5:05:2c:c2:57:66:b1:63:65:bd: c4:ae:be:80:fc:04:51:38:c3:b7:47:e8:01:11:cc:b0:42:e1: 09:fe:95:eb:e1:c1:d1:7d:1c:d9:ab:03:e6:ee:ec:4d:ae:d1: 88:9f:29:52:17:2b:c3:1e:bd:79:75:b3:c5:00:5b:e9:f7:9d: 2d:6f:46:ea:73:2c:24:73:f1:9d:6a:d9:bb:56:33:0c:37:e7: 69:c7:5a:be:b5:4d:b2:df:70:96:90:ba:d2:06:4f:e8:20:bf: 90:b7:90:22:b3:5b:7f:30:f4:44:ef:27:23:5d:c8:88:fa:c0: 49:7a:7c:f7:ff:e7:19:13:3d:7a:e5:a6:44:ac:6c:bf:2b:e1: 66:a9:a6:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmElqtJOY/rKfDeKjT3P6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMmEyOTlmMTgyYTFmZDUxZDRiMDM2Mjk5N2FmN2FhYWUw ZDZiZTkwHhcNMjUxMjI0MjMwMTEwWhcNMjUxMjI1MjMwMTEwWjAzMTEwLwYDVQQD Eyg4MTFiYWM0NDc1ZDViODAzY2M4NjY2NjVlMGI2NDkwOGI3MzJmMjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sds9SJdG9Lax8k2dbiT1e0cB7/g JXIJ3ZU1NnQ37QwEnLyt1bKu1BSRqe24xTEjxFzKpOfinx9zscFqRsPsaCbCUkna snf2QGgHJqzE8mdeRzt8Jp6uKM5xdMKZuUiNGpuJzzSUUm/tARBovds5a2ajQxKx rJkp8cs6rZM6haQ+dIF7op7j8F/KbAZbKico1to1S30/9n0rapNEzMnM4NGq8iZX /tp9vbJb8e31gnombRgd3f7VKe2pLcOsrt+BCN2RzVcYZ1sfYxR2vrzotq7RhNN1 7EMjEVrEuoiVXnY7HLsdW4EhjOQ+w9YvStGkPebtdce92P3IkeGshTC+AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEbrER11bgDzIZmZeC2SQi3MvJrMB8GA1UdIwQY MBaAFE4qKZ8YKh/VHUsDYpl696quDWvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kM2RmMjYtM2RiNS00NTM5LTgwMzAt ZjJjZTc3ZTMxOTFlLzEvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kM2RmMjYtM2RiNS00NTM5LTgwMzAtZjJjZTc3ZTMxOTFl LzEvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUO2iLyrY 5vbdA0/83Z0XgdfVPY5JeFTrM7WoqFFLn0ys5x5fVIdmu+9yYdsskVEJRhtBJaIV Ed4mQUZauJn6P334+ll3OYPRgRxVIlvgojzxTVup5GBcODb1nEuxiiQ/EG1xMfb7 RK+FOeO7ndHrV4ToHmTVBSzCV2axY2W9xK6+gPwEUTjDt0foARHMsELhCf6V6+HB 0X0c2asD5u7sTa7RiJ8pUhcrwx69eXWzxQBb6fedLW9G6nMsJHPxnWrZu1YzDDfn acdavrVNst9wlpC60gZP6CC/kLeQIrNbfzD0RO8nI13IiPrASXp89//nGRM9euWm RKxsvyvhZqmmyA== -----END CERTIFICATE-----Generated at Thu Dec 25 02:44:02 2025 by rpki-client