This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft File: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft (raw, json) Hash identifier: wXeGRkmWdOhRXA3wlDwo3KCyfNMLg7EIw5hcDmsvAPI= Subject key identifier: 88:6A:A0:0A:4D:01:04:63:3B:8E:82:23:E8:F8:10:41:71:65:66:7A Authority key identifier: B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3 Certificate issuer: /CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3 Certificate serial: 019B61660BA058EBA9B6F90FC001DEFDA52A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft Manifest number: 179A Signing time: Sat 27 Dec 2025 20:00:36 +0000 Manifest this update: Sat 27 Dec 2025 20:00:36 +0000 Manifest next update: Sun 28 Dec 2025 20:00:36 +0000 Files and hashes: 1: mAE3_QFYxLK2bxPNIhFbVq5Pufo.roa (hash: 8Db1Fqvg0Iw4fJZLlY1WJu1zNG21SFNmOlpLtn7VYgI=) 2: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl (hash: zw/uIV7HFeJZJBQtUGJGq/F38rckfwbmiObF1bhYFYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:66:0b:a0:58:eb:a9:b6:f9:0f:c0:01:de:fd:a5:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3 Validity Not Before: Dec 27 20:00:36 2025 GMT Not After : Dec 28 20:00:36 2025 GMT Subject: CN=886aa00a4d0104633b8e8223e8f810417165667a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:57:af:b9:60:35:8f:95:66:55:d2:73:f2:98: 03:39:8b:cb:89:3c:de:82:f4:07:bd:46:72:80:4c: 64:01:76:1f:24:d9:0c:f0:ad:18:b3:53:da:7a:ba: 01:41:ed:59:63:45:0e:89:eb:96:b2:36:eb:78:00: 86:d2:7f:f1:d1:a3:60:05:66:81:71:bb:d6:a0:bb: 0b:08:4e:70:f8:70:15:29:36:ff:d6:ee:fd:22:97: 1b:85:6d:96:34:e5:72:f4:42:47:e0:6a:38:92:cc: d3:10:96:e5:24:33:40:b4:52:40:a6:d5:8a:03:7f: df:60:8b:05:5d:02:50:5b:ba:95:c0:52:07:9c:5d: d0:4e:be:26:ed:e7:36:cf:15:30:a9:ea:c6:91:2c: a3:dc:06:6b:35:a6:4f:98:fc:9c:d3:7a:00:38:c4: db:0c:2b:c6:c4:5f:3b:1a:85:13:73:07:ab:d1:83: 63:f5:88:9b:6d:c6:5b:a4:45:10:55:cc:e7:68:9c: e0:7b:6d:83:86:f0:0f:bd:86:2f:86:8e:d2:8f:b6: 23:07:71:9d:46:a3:11:09:24:00:65:a3:2a:74:4e: 54:00:9f:eb:39:4a:ec:37:98:35:12:25:14:bc:f5: 2d:9c:00:8d:87:6e:ef:cf:fb:19:39:45:24:04:6f: b4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6A:A0:0A:4D:01:04:63:3B:8E:82:23:E8:F8:10:41:71:65:66:7A X509v3 Authority Key Identifier: keyid:B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c9:a3:cd:ae:6a:ec:f6:35:10:f4:41:a2:b8:d9:c7:ef:76: 93:e7:0d:34:c2:06:4a:92:12:30:b6:41:32:bc:bd:6d:e3:86: 8d:f0:f6:30:62:83:6f:cb:82:18:fb:0a:5d:f9:cc:30:71:12: 33:4e:16:e4:51:3e:eb:dc:f1:06:bb:f5:b9:61:4c:c9:77:fa: 98:75:fd:c9:02:4b:91:e0:3c:2a:23:d9:8a:4d:e7:58:4b:25: a6:a8:ea:07:aa:69:3c:bb:06:df:2d:f7:b2:44:fd:7a:97:f2: 89:fb:e4:51:36:c2:b3:6d:14:99:95:90:2a:c2:e2:50:e4:c5: a6:6c:26:ff:85:58:db:af:82:17:f7:39:4e:1d:4b:0e:69:6a: 76:99:43:80:cc:cc:07:b5:6c:ca:50:22:a2:61:c1:04:b9:ae: 1f:7e:67:7f:e8:57:51:aa:14:9f:66:66:da:a2:76:82:de:b0: 24:27:07:c6:11:ae:a4:1d:d5:f2:ec:f2:74:6b:e0:33:cb:2b: de:aa:83:11:21:3b:32:f9:1f:cd:bb:b5:20:9e:c5:31:2b:9b: 7f:9e:03:cb:a2:cc:25:86:bf:0b:6a:b3:19:ba:b8:5f:85:9e: c0:72:90:04:8f:09:e8:dd:8c:49:a3:2b:11:91:69:d0:e0:74: b3:b2:0f:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthZgugWOuptvkPwAHe/aUqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzVmNTI2ZDdkMDkwOWU3ZjRhN2RmMmM1Y2FkNzJkMmFm NmIyYzMwHhcNMjUxMjI3MjAwMDM2WhcNMjUxMjI4MjAwMDM2WjAzMTEwLwYDVQQD Eyg4ODZhYTAwYTRkMDEwNDYzM2I4ZTgyMjNlOGY4MTA0MTcxNjU2NjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVevuWA1j5VmVdJz8pgDOYvLiTze gvQHvUZygExkAXYfJNkM8K0Ys1PaeroBQe1ZY0UOieuWsjbreACG0n/x0aNgBWaB cbvWoLsLCE5w+HAVKTb/1u79IpcbhW2WNOVy9EJH4Go4kszTEJblJDNAtFJAptWK A3/fYIsFXQJQW7qVwFIHnF3QTr4m7ec2zxUwqerGkSyj3AZrNaZPmPyc03oAOMTb DCvGxF87GoUTcwer0YNj9YibbcZbpEUQVcznaJzge22DhvAPvYYvho7Sj7YjB3Gd RqMRCSQAZaMqdE5UAJ/rOUrsN5g1EiUUvPUtnACNh27vz/sZOUUkBG+0FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhqoApNAQRjO46CI+j4EEFxZWZ6MB8GA1UdIwQY MBaAFLQ19SbX0JCef0p98sXK1y0q9rLDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERYMUp0ZlFrSjVfU24zeXhjclhMU3Iyc3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zNmIzZmEtYzkyNS00YjA5LWI4ZWEt MzJmNTlmYTViMzExLzEvdERYMUp0ZlFrSjVfU24zeXhjclhMU3Iyc3NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8zNmIzZmEtYzkyNS00YjA5LWI4ZWEtMzJmNTlmYTViMzEx LzEvdERYMUp0ZlFrSjVfU24zeXhjclhMU3Iyc3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcmjza5q 7PY1EPRBorjZx+92k+cNNMIGSpISMLZBMry9beOGjfD2MGKDb8uCGPsKXfnMMHES M04W5FE+69zxBrv1uWFMyXf6mHX9yQJLkeA8KiPZik3nWEslpqjqB6ppPLsG3y33 skT9epfyifvkUTbCs20UmZWQKsLiUOTFpmwm/4VY26+CF/c5Th1LDmlqdplDgMzM B7VsylAiomHBBLmuH35nf+hXUaoUn2Zm2qJ2gt6wJCcHxhGupB3V8uzydGvgM8sr 3qqDESE7Mvkfzbu1IJ7FMSubf54Dy6LMJYa/C2qzGbq4X4WewHKQBI8J6N2MSaMr EZFp0OB0s7IPfA== -----END CERTIFICATE-----Generated at Sun Dec 28 04:59:34 2025 by rpki-client