This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft File: a-tglLyrS9Ox9vVsUYK6EiDiK28.mft (raw, json) Hash identifier: PlInnIvSxp808YSDxlxDKRRSSEVkbyLBh/hw9F2DZ1s= Subject key identifier: 9F:95:F7:C1:9B:75:F3:45:13:CC:28:2C:51:89:B7:A2:64:D5:A1:AF Authority key identifier: 6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F Certificate issuer: /CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f Certificate serial: 019B52988F859654FCB07C8F440B5A2A7A8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft Manifest number: 0614 Signing time: Wed 24 Dec 2025 23:01:28 +0000 Manifest this update: Wed 24 Dec 2025 23:01:28 +0000 Manifest next update: Thu 25 Dec 2025 23:01:28 +0000 Files and hashes: 1: a-tglLyrS9Ox9vVsUYK6EiDiK28.crl (hash: N/MemHPh/jpdEzNaeq85/g00nluPDYbWBSuSFuQtH4w=) 2: n5XgGF0QABmUyoOQIOrUJsmd7XI.roa (hash: 4ZvkFvvFhalquvSw4fZG8bfQWR2v7HF+beZ3cnlKIAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:8f:85:96:54:fc:b0:7c:8f:44:0b:5a:2a:7a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f Validity Not Before: Dec 24 23:01:28 2025 GMT Not After : Dec 25 23:01:28 2025 GMT Subject: CN=9f95f7c19b75f34513cc282c5189b7a264d5a1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:51:c7:b4:3d:3c:19:db:23:9c:ba:aa:5e: 5a:2e:84:d1:8d:a3:5f:33:8e:1f:36:4a:ae:a7:26: 13:e7:64:83:fc:8a:da:94:fd:e2:c1:79:fc:bd:bf: fa:e5:33:28:95:d7:7c:ca:84:ae:e0:e6:09:cb:8c: 57:16:9c:4d:87:71:db:c0:5b:e1:87:57:22:85:d8: e7:0a:b7:98:40:7a:f0:5a:45:90:82:53:dd:dd:98: 3b:10:c1:db:34:15:28:e8:f7:31:45:47:75:f0:61: 5b:9d:ae:4f:2f:e5:42:61:54:b1:33:84:85:b4:f0: ac:72:32:bd:1d:29:c8:f4:6d:9e:1e:55:80:8e:a6: e6:3f:f1:37:91:0b:0a:39:5d:79:99:44:9d:a7:96: 1f:86:24:57:ed:d0:a8:9c:64:79:dd:b2:30:cb:b7: 49:ee:30:a5:0a:35:b7:f4:bf:a3:c4:1d:7b:dd:93: 29:af:5b:2f:27:7a:8f:4d:63:49:53:ff:84:03:de: 96:d5:3b:79:3e:ea:68:e6:00:76:1f:a1:53:97:53: 0c:a1:49:9d:a8:58:e6:7f:8f:c3:10:e5:bf:33:06: 28:67:40:57:04:c9:f9:56:a5:22:f2:83:c5:b3:f3: 10:4e:91:b0:fc:da:9b:eb:86:77:06:99:83:27:34: 18:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:95:F7:C1:9B:75:F3:45:13:CC:28:2C:51:89:B7:A2:64:D5:A1:AF X509v3 Authority Key Identifier: keyid:6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:32:25:a0:45:b2:31:f7:08:56:25:6c:02:fa:95:40:c2:31: 57:d5:63:64:a3:a1:e1:81:a4:32:a2:f9:e1:85:7d:d0:09:13: fa:49:6c:25:76:ab:2e:b8:9f:75:6e:73:33:70:7b:95:82:47: da:1e:32:05:76:bf:f3:8f:c7:00:c8:91:8c:53:c8:4d:86:9a: e3:f6:24:9e:e0:e4:44:38:ed:a6:d0:bd:07:7f:93:12:f4:36: 65:24:f4:49:1e:f1:a0:02:cb:14:5a:ea:5c:6d:87:d2:89:c5: df:1e:e2:58:24:14:40:00:e0:06:3a:30:ea:94:96:3e:b4:5b: 5b:f0:b4:27:b6:ae:23:6a:50:cb:f5:dd:e1:ea:92:65:81:4e: d4:bc:53:4e:81:99:cd:f8:1d:3d:fe:8b:15:de:af:e3:c4:34: 53:9a:80:be:4f:b9:09:5f:6d:f9:20:91:32:be:ed:bb:b4:c7: 0c:66:20:68:db:ce:8b:17:f4:2e:13:ca:85:58:45:01:e9:8b: 83:f9:7b:eb:22:fa:40:6a:1f:23:4d:7d:ba:be:18:f6:a5:ba: 16:eb:01:94:e9:06:54:3b:dd:d0:80:de:de:74:c6:c4:8f:54: 1b:6f:93:1f:26:67:fb:4a:43:5c:fb:72:24:24:fc:69:32:1f: 0d:8d:63:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmI+FllT8sHyPRAtaKnqKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZWI2MDk0YmNhYjRiZDNiMWY2ZjU2YzUxODJiYTEyMjBl MjJiNmYwHhcNMjUxMjI0MjMwMTI4WhcNMjUxMjI1MjMwMTI4WjAzMTEwLwYDVQQD Eyg5Zjk1ZjdjMTliNzVmMzQ1MTNjYzI4MmM1MTg5YjdhMjY0ZDVhMWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFdRx7Q9PBnbI5y6ql5aLoTRjaNf M44fNkqupyYT52SD/IralP3iwXn8vb/65TMoldd8yoSu4OYJy4xXFpxNh3HbwFvh h1cihdjnCreYQHrwWkWQglPd3Zg7EMHbNBUo6PcxRUd18GFbna5PL+VCYVSxM4SF tPCscjK9HSnI9G2eHlWAjqbmP/E3kQsKOV15mUSdp5YfhiRX7dConGR53bIwy7dJ 7jClCjW39L+jxB173ZMpr1svJ3qPTWNJU/+EA96W1Tt5Pupo5gB2H6FTl1MMoUmd qFjmf4/DEOW/MwYoZ0BXBMn5VqUi8oPFs/MQTpGw/Nqb64Z3BpmDJzQYvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+V98GbdfNFE8woLFGJt6Jk1aGvMB8GA1UdIwQY MBaAFGvrYJS8q0vTsfb1bFGCuhIg4itvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iYTQ2NDAtMTYzZS00NjVmLTkwZjkt ZWE1ODdmZDY1OGIyLzEvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iYTQ2NDAtMTYzZS00NjVmLTkwZjktZWE1ODdmZDY1OGIy LzEvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjIloEWy MfcIViVsAvqVQMIxV9VjZKOh4YGkMqL54YV90AkT+klsJXarLrifdW5zM3B7lYJH 2h4yBXa/84/HAMiRjFPITYaa4/YknuDkRDjtptC9B3+TEvQ2ZST0SR7xoALLFFrq XG2H0onF3x7iWCQUQADgBjow6pSWPrRbW/C0J7auI2pQy/Xd4eqSZYFO1LxTToGZ zfgdPf6LFd6v48Q0U5qAvk+5CV9t+SCRMr7tu7THDGYgaNvOixf0LhPKhVhFAemL g/l76yL6QGofI019ur4Y9qW6FusBlOkGVDvd0IDe3nTGxI9UG2+THyZn+0pDXPty JCT8aTIfDY1jaA== -----END CERTIFICATE-----Generated at Thu Dec 25 07:07:19 2025 by rpki-client