This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft File: tRYDJr5-XNw1tcA2RBFjzSWkl00.mft (raw, json) Hash identifier: ATlSCxZjzLZ5au7M6tUABbz3FKx2HrELc9EN3ZnZohk= Subject key identifier: C1:DB:7C:A6:97:D6:42:94:EC:EA:D0:6C:8B:B3:A9:AB:3C:3F:12:49 Authority key identifier: B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D Certificate issuer: /CN=b5160326be7e5cdc35b5c036441163cd25a4974d Certificate serial: 019B3A22389957A2BA499A808FBD84542A55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 05:01:19 +0000 Manifest this update: Sat 20 Dec 2025 05:01:19 +0000 Manifest next update: Sun 21 Dec 2025 05:01:19 +0000 Files and hashes: 1: 8ia-FfbPiHzFeisz5Ltz_iH4NuE.roa (hash: 2vUluYbn/ZjPa8MjPMnro3n0N0IitO4q9I7893CE2pw=) 2: tRYDJr5-XNw1tcA2RBFjzSWkl00.crl (hash: nQ4a5BCXWI/xFGPui1sU0m98U+mc/DdhNJcUHvm0U4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:38:99:57:a2:ba:49:9a:80:8f:bd:84:54:2a:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5160326be7e5cdc35b5c036441163cd25a4974d Validity Not Before: Dec 20 05:01:19 2025 GMT Not After : Dec 21 05:01:19 2025 GMT Subject: CN=c1db7ca697d64294ecead06c8bb3a9ab3c3f1249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:11:39:dd:6a:a9:ac:06:f6:c4:67:05:be:8e: 2a:52:ee:38:96:d9:00:cd:25:67:82:1b:bc:ee:99: 1c:3d:b9:c9:06:4a:82:ab:ec:81:cf:11:e7:60:7f: 17:42:10:76:df:f0:fe:c1:36:0d:cd:87:dc:cb:d5: 4e:61:00:6d:7d:92:8e:19:0f:d3:f1:ad:d5:d2:a6: ec:66:2f:c3:3a:d7:f0:96:b0:37:94:3b:12:13:81: e3:8a:22:ff:7e:b9:69:d5:55:63:b9:d9:59:f6:63: 53:d5:8e:03:ad:f2:27:c4:71:ff:1f:d1:d6:b3:1d: 30:b5:48:c8:50:78:53:c3:59:16:d5:e2:81:59:78: 02:fe:a6:8c:f2:7c:62:de:51:9d:c7:54:57:1b:b3: 07:5d:e7:d6:da:01:7c:c3:b0:64:c3:fd:57:0e:68: 04:51:86:63:c9:3d:ba:35:26:d1:32:2a:00:e3:95: 6d:8c:06:82:df:77:14:99:68:7d:2d:e8:2f:e6:63: e8:42:95:1c:ff:29:c3:68:d7:c7:a0:c5:51:9c:f0: 99:1d:f8:85:c9:1b:67:7c:d1:a7:d2:b2:88:00:0d: c3:f6:f1:3d:8c:86:b6:b5:18:6b:f8:66:0a:0a:8d: 9c:e5:d9:ee:4b:f5:cf:95:6b:66:6d:df:b8:98:40: 44:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DB:7C:A6:97:D6:42:94:EC:EA:D0:6C:8B:B3:A9:AB:3C:3F:12:49 X509v3 Authority Key Identifier: keyid:B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:bd:55:8e:af:e9:c4:5a:57:c0:6e:90:34:46:9e:94:53:43: 38:74:d6:61:a5:af:18:75:c0:38:7a:f9:3b:7d:46:71:04:44: f8:62:fe:3c:d2:85:9f:a7:4a:b7:a9:39:c0:f1:d5:27:c2:b2: bf:1e:fc:b7:8a:1e:2e:24:78:4e:e0:34:b8:ad:32:70:8b:3b: 57:b1:b8:52:4f:73:e3:8b:a3:72:f2:80:70:20:a3:37:a3:d2: 6b:6e:7b:d4:95:2d:8d:e3:e8:e7:33:1e:5b:17:a8:e6:35:e1: 45:ac:e0:8a:32:67:3c:4f:e6:5b:f1:5c:20:54:02:16:3a:0e: 83:e4:bf:4a:5f:57:ea:eb:64:c4:e1:fa:4b:e0:73:5a:d1:e0: fe:de:9a:06:c7:9b:66:60:af:5f:27:be:9d:34:d0:f6:09:0b: 96:ac:be:42:47:c0:18:d1:b8:b7:71:8e:6a:3e:df:77:c5:15: 77:ee:69:a9:64:0a:67:dc:4b:a6:1c:91:26:d0:b4:34:87:99: 63:85:98:ed:d6:55:aa:09:b6:7a:a1:97:b7:00:c0:e6:1a:e5: d0:54:65:0d:77:70:9b:e0:15:e7:a5:6f:96:55:7c:4e:80:63: 97:b7:7d:48:c1:36:32:83:ef:d8:b0:23:a4:c3:50:7d:09:67: b5:22:84:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IjiZV6K6SZqAj72EVCpVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MTYwMzI2YmU3ZTVjZGMzNWI1YzAzNjQ0MTE2M2NkMjVh NDk3NGQwHhcNMjUxMjIwMDUwMTE5WhcNMjUxMjIxMDUwMTE5WjAzMTEwLwYDVQQD EyhjMWRiN2NhNjk3ZDY0Mjk0ZWNlYWQwNmM4YmIzYTlhYjNjM2YxMjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RE53WqprAb2xGcFvo4qUu44ltkA zSVnghu87pkcPbnJBkqCq+yBzxHnYH8XQhB23/D+wTYNzYfcy9VOYQBtfZKOGQ/T 8a3V0qbsZi/DOtfwlrA3lDsSE4HjiiL/frlp1VVjudlZ9mNT1Y4DrfInxHH/H9HW sx0wtUjIUHhTw1kW1eKBWXgC/qaM8nxi3lGdx1RXG7MHXefW2gF8w7Bkw/1XDmgE UYZjyT26NSbRMioA45VtjAaC33cUmWh9Legv5mPoQpUc/ynDaNfHoMVRnPCZHfiF yRtnfNGn0rKIAA3D9vE9jIa2tRhr+GYKCo2c5dnuS/XPlWtmbd+4mEBE4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHbfKaX1kKU7OrQbIuzqas8PxJJMB8GA1UdIwQY MBaAFLUWAya+flzcNbXANkQRY80lpJdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFJZREpyNS1YTncxdGNBMlJCRmp6U1drbDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wZTVhYTItODQwOS00N2EwLWI0Nzkt ZjQ4YWEyZTc1NGU1LzEvdFJZREpyNS1YTncxdGNBMlJCRmp6U1drbDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wZTVhYTItODQwOS00N2EwLWI0NzktZjQ4YWEyZTc1NGU1 LzEvdFJZREpyNS1YTncxdGNBMlJCRmp6U1drbDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQb1Vjq/p xFpXwG6QNEaelFNDOHTWYaWvGHXAOHr5O31GcQRE+GL+PNKFn6dKt6k5wPHVJ8Ky vx78t4oeLiR4TuA0uK0ycIs7V7G4Uk9z44ujcvKAcCCjN6PSa2571JUtjePo5zMe Wxeo5jXhRazgijJnPE/mW/FcIFQCFjoOg+S/Sl9X6utkxOH6S+BzWtHg/t6aBseb ZmCvXye+nTTQ9gkLlqy+QkfAGNG4t3GOaj7fd8UVd+5pqWQKZ9xLphyRJtC0NIeZ Y4WY7dZVqgm2eqGXtwDA5hrl0FRlDXdwm+AV56VvllV8ToBjl7d9SME2MoPv2LAj pMNQfQlntSKE4w== -----END CERTIFICATE-----Generated at Sat Dec 20 10:21:27 2025 by rpki-client