This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft File: tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft (raw, json) Hash identifier: unNtU0YiEBhp5i7XWBV7IPUraPurguzt+Ae/qM+F4ek= Subject key identifier: D3:D8:A4:4C:D0:D9:9D:DD:C7:78:95:2A:E1:46:9C:B9:FF:86:51:95 Authority key identifier: B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9 Certificate issuer: /CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9 Certificate serial: 019B3A908DEBBC585087013424373AE96113 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft Manifest number: 163B Signing time: Sat 20 Dec 2025 07:01:50 +0000 Manifest this update: Sat 20 Dec 2025 07:01:50 +0000 Manifest next update: Sun 21 Dec 2025 07:01:50 +0000 Files and hashes: 1: EMcvovEYE0weVYExSrcia69GSOA.roa (hash: OJBdQmyJiJbXqpTEN6hCoMQhIqdAMMZRqxqDd5UOvg4=) 2: TUnXBzr-7-tBP6GdN78mI5ahxe8.roa (hash: xFiJ6sW6C+HN63QoP5r6OyDOw7tPBAVqmIPMSnDnKbc=) 3: qS4NQoySScwU3zHXzq6HsEt5IDs.roa (hash: jlv4YTMjTvaq8qodzyyZpHbeudK0kBUwOoEXewAmNyo=) 4: t_X4QuW3--N3561kP8RWk8vRzAw.roa (hash: 2ahNsLwCOZ1nVC1o0aItVno4KD1+MsUZ68JOkj0O5Wo=) 5: tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl (hash: 0DpzCKngeYFojxvJU0aSThYvB/MHr0Ml1c/l8qc/8Fs=) 6: xtJ3lZ04sv_4bqAlJ24ZbtoJeiU.roa (hash: ZKVGTwwxi9fVOYidTSfA/TmCkWo94r19B530igg9je4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:8d:eb:bc:58:50:87:01:34:24:37:3a:e9:61:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9 Validity Not Before: Dec 20 07:01:50 2025 GMT Not After : Dec 21 07:01:50 2025 GMT Subject: CN=d3d8a44cd0d99dddc778952ae1469cb9ff865195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:64:01:30:8b:b9:bc:04:35:b5:8d:70:5b:18: 18:38:b3:49:f8:3a:61:e2:85:7e:54:8b:e4:df:23: 1b:04:10:c7:09:76:a1:58:00:1d:13:31:16:53:c1: b9:74:a6:1d:15:6a:2e:ce:f2:5c:9d:bb:16:35:fb: f5:c1:c8:17:d6:73:1e:54:ec:e0:a3:02:f2:73:c7: 32:c9:d8:26:e7:69:69:5b:a7:c3:2a:ec:28:90:15: cb:2c:dc:79:fe:db:0f:21:b3:2b:4a:af:42:c9:ad: 40:b4:00:80:e5:a3:c0:0e:5c:c3:2a:10:90:80:3f: 73:b8:61:65:a5:f3:a5:05:07:fc:7e:b1:68:2e:56: e7:31:78:5f:d4:5c:28:2e:af:8c:71:51:98:51:f0: d3:7b:07:8b:e3:be:ac:59:be:04:90:92:f4:19:d0: fe:14:96:17:23:18:98:cf:34:e1:e6:f5:e8:a0:8f: 71:73:1e:4b:e6:88:a2:c2:d8:7b:22:cc:ee:5f:1a: 28:0a:a0:55:2c:e6:cf:ee:97:62:a8:49:50:d9:59: 9e:3c:01:74:fd:bd:4a:67:61:2c:68:3e:1b:36:01: df:0d:dc:de:05:e4:ff:bf:2c:39:57:87:5f:9b:0d: a5:e7:fc:3f:df:f3:52:4c:1b:3e:3a:97:4a:65:fa: 8f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D8:A4:4C:D0:D9:9D:DD:C7:78:95:2A:E1:46:9C:B9:FF:86:51:95 X509v3 Authority Key Identifier: keyid:B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:11:bc:32:45:2c:a7:92:eb:03:3c:bc:2e:b8:ba:b9:ba:78: 33:57:a5:8a:bc:f2:54:42:88:8d:d3:dc:fe:dc:58:34:2a:54: 14:03:2b:9d:c5:1d:64:1a:d4:d1:a0:a6:93:86:e2:77:bb:0c: 83:b1:bc:58:06:ea:0a:f3:80:37:96:ed:4f:69:70:e4:98:5a: 8f:11:e0:9e:fe:3f:88:f1:d9:af:1a:51:6a:2e:3a:ab:cf:f3: d2:4f:42:d4:6b:66:6d:a0:26:ae:22:06:6e:a3:2b:58:05:0c: ac:4b:31:8d:71:9b:f6:ea:5d:5f:69:59:79:fb:8f:13:19:f1: 8f:94:7a:0a:16:c6:5c:39:bf:a3:5b:8c:4e:01:3a:04:cc:fb: f7:3e:c5:e7:82:e7:9e:c2:e9:2e:21:50:00:19:7c:fa:2e:a1: cb:cd:e1:62:47:4d:75:d7:bb:e0:8e:9a:1b:ee:c6:87:76:98: 24:ff:9c:e0:cb:82:f6:1e:d5:22:ff:af:c9:db:e1:53:f8:e9: ed:86:e4:23:0a:d3:89:0d:3a:2a:5f:6f:95:1b:62:3d:98:5b: 09:a3:1b:02:5f:50:98:49:f1:41:b6:2d:c8:c7:c5:e5:95:af: d0:ba:31:6a:0d:fc:2f:97:bf:0f:58:9c:a6:a7:1a:93:db:86: 43:3b:c9:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kI3rvFhQhwE0JDc66WETMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YjBhODY2NTllYzMxNGYxM2EwNGUzYTAzZGJkYjEyNDRh MGUwYTkwHhcNMjUxMjIwMDcwMTUwWhcNMjUxMjIxMDcwMTUwWjAzMTEwLwYDVQQD EyhkM2Q4YTQ0Y2QwZDk5ZGRkYzc3ODk1MmFlMTQ2OWNiOWZmODY1MTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWQBMIu5vAQ1tY1wWxgYOLNJ+Dph 4oV+VIvk3yMbBBDHCXahWAAdEzEWU8G5dKYdFWouzvJcnbsWNfv1wcgX1nMeVOzg owLyc8cyydgm52lpW6fDKuwokBXLLNx5/tsPIbMrSq9Cya1AtACA5aPADlzDKhCQ gD9zuGFlpfOlBQf8frFoLlbnMXhf1FwoLq+McVGYUfDTeweL476sWb4EkJL0GdD+ FJYXIxiYzzTh5vXooI9xcx5L5oiiwth7IszuXxooCqBVLObP7pdiqElQ2VmePAF0 /b1KZ2EsaD4bNgHfDdzeBeT/vyw5V4dfmw2l5/w/3/NSTBs+OpdKZfqP5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPYpEzQ2Z3dx3iVKuFGnLn/hlGVMB8GA1UdIwQY MBaAFLWwqGZZ7DFPE6BOOgPb2xJEoOCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wNDQ0MDItYzRkNC00MjU5LTkzZTIt N2ZiZjVlZTI5MGFjLzEvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wNDQ0MDItYzRkNC00MjU5LTkzZTItN2ZiZjVlZTI5MGFj LzEvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxG8MkUs p5LrAzy8Lri6ubp4M1elirzyVEKIjdPc/txYNCpUFAMrncUdZBrU0aCmk4bid7sM g7G8WAbqCvOAN5btT2lw5JhajxHgnv4/iPHZrxpRai46q8/z0k9C1GtmbaAmriIG bqMrWAUMrEsxjXGb9updX2lZefuPExnxj5R6ChbGXDm/o1uMTgE6BMz79z7F54Ln nsLpLiFQABl8+i6hy83hYkdNdde74I6aG+7Gh3aYJP+c4MuC9h7VIv+vydvhU/jp 7YbkIwrTiQ06Kl9vlRtiPZhbCaMbAl9QmEnxQbYtyMfF5ZWv0Loxag38L5e/D1ic pqcak9uGQzvJAQ== -----END CERTIFICATE-----Generated at Sat Dec 20 08:20:46 2025 by rpki-client