This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft File: TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json) Hash identifier: 5th4fF7tdbOpDmxoq59NaH0fiR03eeLuohbm+4IcaI0= Subject key identifier: F4:37:FD:39:FA:BC:B0:49:B1:C9:E9:28:7A:FB:57:59:7B:AA:23:F9 Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9 Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9 Certificate serial: 019B3F4843F66283E24848BCB04BB5720EDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 05:00:59 +0000 Manifest this update: Sun 21 Dec 2025 05:00:59 +0000 Manifest next update: Mon 22 Dec 2025 05:00:59 +0000 Files and hashes: 1: 6L1wb6rk6JRmH0kdueo5VHSR6sA.roa (hash: v/vwNDFKpqZbOrt+k+dslXb31bPIeE6v/BAFBhGcR04=) 2: Q1ID3jqh-PT7k00It8t9krcFrp0.roa (hash: 53/LWfxj68LBwdUpxNq1PQF6QDcY5qwZBSFj5Skh+H4=) 3: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: ul1fb5SKPqlEsp7UsjzXtvK3t3CvU5gYpIQxWqcq29k=) 4: uAwoVI3dpDeVF6OQWKoCJ5jN8xY.roa (hash: tIErXtWim6v8+5J+f3v+yr7n8hWCWnrcd2Ahi85yzJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:43:f6:62:83:e2:48:48:bc:b0:4b:b5:72:0e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9 Validity Not Before: Dec 21 05:00:59 2025 GMT Not After : Dec 22 05:00:59 2025 GMT Subject: CN=f437fd39fabcb049b1c9e9287afb57597baa23f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c4:06:79:63:39:47:7d:61:50:f5:3a:98:56: 6a:e7:90:28:d0:0f:74:96:5b:70:26:86:41:64:e6: 8c:5e:39:99:d3:bf:81:41:10:ae:3d:c1:fd:01:f3: 64:1a:94:af:a3:4f:c5:bf:c5:8e:14:42:b8:7f:89: f1:79:a4:bc:f2:f4:1d:7e:0f:97:a4:9d:9a:8c:6b: ef:91:50:65:af:de:05:77:18:a0:cb:df:38:70:3f: 75:2d:40:62:9f:87:0e:89:49:98:85:d5:70:01:96: 69:3d:fa:cf:7d:a9:0b:73:87:2c:cd:4b:79:5e:5c: 68:b4:c7:ee:17:3a:f7:b2:3a:1e:ab:40:04:be:03: 2d:03:d3:b5:3c:aa:36:10:7c:bf:94:23:81:3d:50: dd:90:78:08:77:8f:6a:42:cb:a5:b3:84:b9:a2:12: 10:6a:1f:91:17:9c:fd:fb:8d:92:6f:ee:32:b4:c6: ab:14:f8:ec:c8:d6:ec:ea:49:00:5a:11:8f:43:7c: 73:ac:60:39:01:4e:16:55:a2:09:ab:46:f0:12:25: 7d:30:5a:08:31:da:54:07:48:5c:d9:63:0e:96:ba: 07:de:8e:51:04:9c:78:28:f7:49:44:94:24:5a:cf: e0:1c:db:9b:ae:52:23:70:d6:4f:da:c2:9d:79:43: 05:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:37:FD:39:FA:BC:B0:49:B1:C9:E9:28:7A:FB:57:59:7B:AA:23:F9 X509v3 Authority Key Identifier: keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:2f:90:b8:2a:d1:ff:f0:d5:19:62:2c:e5:59:e6:b6:7f:f5: 36:f0:6f:73:d8:89:d8:06:0e:36:ab:f0:fa:11:1f:c5:23:e0: 6a:42:a4:53:4e:d3:ac:5c:ff:9f:99:2f:a9:17:23:b0:48:91: 99:d9:e1:9c:a7:41:7a:34:23:3c:2d:7c:a2:3b:2d:ab:23:a9: 62:42:ce:e8:4e:2f:52:ec:d5:c5:05:36:60:9b:95:80:bc:29: 72:ff:9d:b1:22:a9:7d:6a:ea:89:a6:54:b4:0d:ea:14:83:57: 2c:d9:a2:e3:95:43:5b:fa:ae:8d:db:26:86:90:98:c9:63:74: 27:86:a9:19:06:6f:30:66:52:5d:1e:5d:8c:68:0f:27:c0:2e: 5c:b1:26:ad:10:03:3d:e1:e9:09:29:0a:a6:98:44:e4:f7:d3: ce:ce:dd:62:15:d5:05:03:c0:43:4d:d5:ef:48:27:e9:10:d6: c5:29:e4:89:5d:1b:00:18:06:ec:4a:cd:e2:f5:6b:74:ef:e3: 05:93:5d:51:d5:ca:f6:ba:5e:93:53:58:31:1e:0d:8e:e8:e4: 2f:b4:6c:31:88:31:4a:74:96:c3:9e:02:a3:c2:06:90:b9:66: 68:12:74:82:76:67:3b:49:6d:9d:4a:04:f9:14:ba:21:d9:95: 15:e9:44:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SEP2YoPiSEi8sEu1cg7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMmEyOTlmMTgyYTFmZDUxZDRiMDM2Mjk5N2FmN2FhYWUw ZDZiZTkwHhcNMjUxMjIxMDUwMDU5WhcNMjUxMjIyMDUwMDU5WjAzMTEwLwYDVQQD EyhmNDM3ZmQzOWZhYmNiMDQ5YjFjOWU5Mjg3YWZiNTc1OTdiYWEyM2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcQGeWM5R31hUPU6mFZq55Ao0A90 lltwJoZBZOaMXjmZ07+BQRCuPcH9AfNkGpSvo0/Fv8WOFEK4f4nxeaS88vQdfg+X pJ2ajGvvkVBlr94Fdxigy984cD91LUBin4cOiUmYhdVwAZZpPfrPfakLc4cszUt5 XlxotMfuFzr3sjoeq0AEvgMtA9O1PKo2EHy/lCOBPVDdkHgId49qQsuls4S5ohIQ ah+RF5z9+42Sb+4ytMarFPjsyNbs6kkAWhGPQ3xzrGA5AU4WVaIJq0bwEiV9MFoI MdpUB0hc2WMOlroH3o5RBJx4KPdJRJQkWs/gHNubrlIjcNZP2sKdeUMF7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQ3/Tn6vLBJscnpKHr7V1l7qiP5MB8GA1UdIwQY MBaAFE4qKZ8YKh/VHUsDYpl696quDWvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kM2RmMjYtM2RiNS00NTM5LTgwMzAt ZjJjZTc3ZTMxOTFlLzEvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kM2RmMjYtM2RiNS00NTM5LTgwMzAtZjJjZTc3ZTMxOTFl LzEvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvy+QuCrR //DVGWIs5Vnmtn/1NvBvc9iJ2AYONqvw+hEfxSPgakKkU07TrFz/n5kvqRcjsEiR mdnhnKdBejQjPC18ojstqyOpYkLO6E4vUuzVxQU2YJuVgLwpcv+dsSKpfWrqiaZU tA3qFINXLNmi45VDW/qujdsmhpCYyWN0J4apGQZvMGZSXR5djGgPJ8AuXLEmrRAD PeHpCSkKpphE5PfTzs7dYhXVBQPAQ03V70gn6RDWxSnkiV0bABgG7ErN4vVrdO/j BZNdUdXK9rpek1NYMR4NjujkL7RsMYgxSnSWw54Co8IGkLlmaBJ0gnZnO0ltnUoE +RS6IdmVFelEIQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:00:37 2025 by rpki-client