This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json) Hash identifier: Z6OVszNIsv41qYgRLo++QBs+N/6noAD8rKvUIWqDwfA= Subject key identifier: 82:04:D1:FA:BA:23:47:9D:31:00:B6:24:B2:AD:7D:5F:BA:A1:05:52 Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c Certificate serial: 019B38A1C88232783819FBD833B7D6193E27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 22:01:25 +0000 Manifest this update: Fri 19 Dec 2025 22:01:25 +0000 Manifest next update: Sat 20 Dec 2025 22:01:25 +0000 Files and hashes: 1: 0WgKhjREJrZPp5eivCc5Ledwy08.roa (hash: g1cMz695Vu5b1v4C7JspTc1yMqOrx6XRuND1g3o80ZU=) 2: c4XFDsuP3oiOPuoN5dW6Mp7swps.roa (hash: RShjOJ6yyL7rh4X46zYbqRc79tC1/dWZp0uZXHk88jM=) 3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: yX2EY6DMNZ0BYpGWbfMSPuaW9aUErMKlLmFx7bTU4mQ=) 4: x8qy1V86ggKXIYJ47lPp7-bEQ08.roa (hash: Tid2ObTc99hFnnGIy0KhVlQV4ZEsaX9AQcsvz/R/sw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:c8:82:32:78:38:19:fb:d8:33:b7:d6:19:3e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c Validity Not Before: Dec 19 22:01:25 2025 GMT Not After : Dec 20 22:01:25 2025 GMT Subject: CN=8204d1faba23479d3100b624b2ad7d5fbaa10552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c6:0e:8c:b5:24:25:b8:83:99:3a:86:64:d5: bb:3e:31:55:4a:a5:f4:e2:0c:69:74:a9:a3:a2:e6: 88:d3:78:c2:0f:00:5f:fb:aa:66:14:14:81:b0:79: a6:06:1f:fa:a9:e1:91:a8:69:33:be:05:ee:61:99: 41:05:6f:ca:6c:8d:0e:75:8b:4b:6a:34:d5:1d:0b: cb:64:74:ae:2d:4d:a3:4d:fb:f5:de:6d:52:df:fa: 34:dd:00:64:96:24:7f:b8:0c:6c:28:a2:9f:5b:ae: 85:6a:07:af:b0:91:c7:cd:7b:d1:e3:31:e4:95:f3: c9:c4:21:40:50:03:11:a3:cb:db:35:e4:f6:65:37: c7:24:03:8d:bc:0f:bd:c3:8f:27:3a:b3:7b:03:aa: 5f:ce:7f:84:fe:fb:67:36:82:cf:e9:4a:4c:7a:de: b3:62:eb:4a:32:46:cb:b8:b8:60:30:90:bc:d0:1c: 7e:f9:2e:07:41:57:1e:2b:b2:d6:2f:88:07:63:e3: cd:d6:9d:bd:ed:53:a9:a1:04:cb:db:d7:17:58:e7: b8:74:6e:c4:2a:42:aa:8b:24:15:11:75:ea:fe:b1: 7c:e0:58:21:6a:d1:c1:23:af:10:cd:10:be:cc:76: ac:11:0a:3d:cf:a9:e6:a2:6e:77:20:b6:f0:4f:c4: f9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:04:D1:FA:BA:23:47:9D:31:00:B6:24:B2:AD:7D:5F:BA:A1:05:52 X509v3 Authority Key Identifier: keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:0c:93:ad:0c:77:50:0e:44:cc:4e:48:c7:4b:ba:af:ae:31: 2d:a8:98:e4:94:e9:f5:a7:e7:23:0b:ef:9f:02:f4:82:cf:d1: d0:56:f8:71:03:b8:ce:cb:42:98:96:3e:73:61:eb:83:04:d7: d2:07:88:0e:e3:63:24:a6:f5:d2:be:f1:e6:2e:b7:3c:32:a4: b5:d5:2b:78:93:d2:32:a2:76:52:cd:ee:12:11:9a:82:6b:d6: cc:31:67:71:f3:25:81:f5:6f:59:bb:69:ef:fb:1f:67:6f:03: 81:c2:64:28:d2:ae:a9:99:e4:b5:a3:dd:71:eb:29:a7:0c:24: f8:8a:4b:5f:f9:9e:70:d1:90:cb:f7:81:c7:90:e7:c2:be:f9: b7:52:49:35:3c:4a:f2:a8:2c:24:5b:bf:c4:95:33:be:dc:18: 7a:e4:b2:8f:62:d9:b1:11:77:ec:9d:6b:ef:eb:bd:1d:74:d9: 83:73:e8:ee:27:da:e1:ed:63:64:63:c8:e9:e9:29:fc:73:65: d0:d5:42:2d:d3:79:df:30:fa:a2:c5:d1:2f:1a:90:44:ca:9a: 49:45:b4:05:fd:08:10:dd:2b:47:1c:f7:b4:ea:4e:bc:d5:85: f8:49:ce:7f:ca:f3:8e:a9:81:c7:6a:00:c6:88:85:e9:6e:be: 55:06:b1:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ociCMng4GfvYM7fWGT4nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZWM2YzBhNWViZWM1ODE3ZDkxYjkxZTc5YTZiYzYxMzJl YjlkMmMwHhcNMjUxMjE5MjIwMTI1WhcNMjUxMjIwMjIwMTI1WjAzMTEwLwYDVQQD Eyg4MjA0ZDFmYWJhMjM0NzlkMzEwMGI2MjRiMmFkN2Q1ZmJhYTEwNTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MYOjLUkJbiDmTqGZNW7PjFVSqX0 4gxpdKmjouaI03jCDwBf+6pmFBSBsHmmBh/6qeGRqGkzvgXuYZlBBW/KbI0OdYtL ajTVHQvLZHSuLU2jTfv13m1S3/o03QBkliR/uAxsKKKfW66FagevsJHHzXvR4zHk lfPJxCFAUAMRo8vbNeT2ZTfHJAONvA+9w48nOrN7A6pfzn+E/vtnNoLP6UpMet6z YutKMkbLuLhgMJC80Bx++S4HQVceK7LWL4gHY+PN1p297VOpoQTL29cXWOe4dG7E KkKqiyQVEXXq/rF84FghatHBI68QzRC+zHasEQo9z6nmom53ILbwT8T5sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIE0fq6I0edMQC2JLKtfV+6oQVSMB8GA1UdIwQY MBaAFLTsbApevsWBfZG5HnmmvGEy650sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWIt MTNmYjdhNTEzMGNhLzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWItMTNmYjdhNTEzMGNh LzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQyTrQx3 UA5EzE5Ix0u6r64xLaiY5JTp9afnIwvvnwL0gs/R0Fb4cQO4zstCmJY+c2HrgwTX 0geIDuNjJKb10r7x5i63PDKktdUreJPSMqJ2Us3uEhGagmvWzDFncfMlgfVvWbtp 7/sfZ28DgcJkKNKuqZnktaPdcesppwwk+IpLX/mecNGQy/eBx5Dnwr75t1JJNTxK 8qgsJFu/xJUzvtwYeuSyj2LZsRF37J1r7+u9HXTZg3Po7ifa4e1jZGPI6ekp/HNl 0NVCLdN53zD6osXRLxqQRMqaSUW0Bf0IEN0rRxz3tOpOvNWF+EnOf8rzjqmBx2oA xoiF6W6+VQax8A== -----END CERTIFICATE-----Generated at Sat Dec 20 03:31:16 2025 by rpki-client