This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft File: tqiXx5jwGbJHexqc47I7tddhZsM.mft (raw, json) Hash identifier: oA0rvNw3hiaSV+oaV3sg0+q9JL75TDP9rrnrNlDPI+M= Subject key identifier: E5:2C:CB:B9:D7:F4:61:6D:36:92:04:67:D7:26:1D:44:CA:64:2F:68 Authority key identifier: B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3 Certificate issuer: /CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3 Certificate serial: 019B4136AE50CB9814C7E642B817A04D67FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft Manifest number: 152B Signing time: Sun 21 Dec 2025 14:01:01 +0000 Manifest this update: Sun 21 Dec 2025 14:01:01 +0000 Manifest next update: Mon 22 Dec 2025 14:01:01 +0000 Files and hashes: 1: f9JCdqsJLWfadd987fFlDNk7mdM.roa (hash: 5CurkeU+eAkjrTT560cBjUlbg7hvGNi0G0d/Uo5/6r0=) 2: tqiXx5jwGbJHexqc47I7tddhZsM.crl (hash: 3JVy/wvn1u/JhMqqBrZyMQybsQUrvkqA+LH9k8IrWfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:ae:50:cb:98:14:c7:e6:42:b8:17:a0:4d:67:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3 Validity Not Before: Dec 21 14:01:01 2025 GMT Not After : Dec 22 14:01:01 2025 GMT Subject: CN=e52ccbb9d7f4616d36920467d7261d44ca642f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:90:5a:96:95:7b:79:0b:65:0c:2f:fb:45:92: fa:51:26:a8:de:5b:53:a1:19:ff:98:3f:5b:92:4e: aa:24:52:63:b9:9c:ec:4e:9d:cf:f8:4c:da:33:a3: 26:d3:a8:20:97:21:8e:c9:0c:fd:94:04:3f:c0:18: 33:34:fe:b0:44:5f:98:77:e4:c7:fd:ad:71:d4:87: 69:bb:ee:00:17:f2:5a:7d:0a:54:db:d7:e1:66:78: 83:b3:75:28:54:37:10:c0:c0:2e:f3:12:d8:6e:6c: e0:6d:fb:78:45:59:a8:76:67:df:91:47:88:3c:b2: 68:13:7c:00:b2:8b:11:b1:4a:2c:3a:a2:78:b9:ee: 5b:4a:51:f9:50:2e:13:6e:ec:c5:04:6b:f7:da:ef: 65:e0:11:60:57:b2:23:24:60:b0:de:bc:98:fa:38: 88:fc:58:bb:d7:3c:62:47:f7:45:f6:a9:f7:9c:b1: 45:27:7a:af:ee:c9:74:84:f2:3d:d4:18:f8:04:e1: c1:33:8a:76:d3:56:d0:4e:1f:f2:69:6b:27:c1:01: 0c:f5:6e:15:0d:2f:55:09:e6:d0:41:e9:b8:60:41: d1:64:39:9c:10:e4:e8:06:a8:19:50:60:93:d4:72: 1f:29:f8:53:82:5b:8a:ed:fb:52:87:83:46:70:59: 49:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2C:CB:B9:D7:F4:61:6D:36:92:04:67:D7:26:1D:44:CA:64:2F:68 X509v3 Authority Key Identifier: keyid:B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:75:33:a6:dd:47:56:62:91:9c:3d:23:54:93:bf:df:6b:00: d7:1c:88:79:86:38:11:d5:70:ef:15:ba:6b:d8:83:0f:0c:2e: 95:6c:ce:ae:8c:cc:a5:f2:3e:fe:01:ec:9e:92:02:c9:e9:b1: 03:12:dd:89:a2:3f:7a:24:bb:82:9f:50:55:23:73:4d:47:9a: 22:ca:68:01:f4:84:21:a0:44:0d:0c:cb:09:37:49:5d:f3:2d: 49:2e:57:6c:cf:c4:1d:0d:2c:f8:22:42:49:5e:fa:82:08:63: 96:1b:47:5f:9c:15:e0:b4:ba:b0:dd:4c:79:51:54:b2:c4:5d: 24:e0:13:5b:41:d4:66:3e:17:49:49:61:83:b1:58:7e:55:77: bf:7b:bb:6b:2f:eb:cd:9d:23:02:40:eb:04:b1:4b:0c:a9:39: 39:29:3e:5c:e5:ea:e6:64:04:cf:9a:20:cb:b8:94:77:54:19: a2:3f:f3:d9:c4:8e:0c:48:0f:4e:1b:cb:21:22:75:a0:52:9c: a7:c4:0b:54:e9:54:b4:2a:13:b5:3f:7c:99:82:b7:d7:0d:35: 2d:89:46:2a:11:e9:f7:0b:d9:d7:58:b5:d3:86:45:10:c5:44: 9b:1b:38:12:ff:f4:38:b7:b1:37:14:90:cb:d4:73:98:1a:32: 78:60:ae:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNq5Qy5gUx+ZCuBegTWf6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YTg5N2M3OThmMDE5YjI0NzdiMWE5Y2UzYjIzYmI1ZDc2 MTY2YzMwHhcNMjUxMjIxMTQwMTAxWhcNMjUxMjIyMTQwMTAxWjAzMTEwLwYDVQQD EyhlNTJjY2JiOWQ3ZjQ2MTZkMzY5MjA0NjdkNzI2MWQ0NGNhNjQyZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZBalpV7eQtlDC/7RZL6USao3ltT oRn/mD9bkk6qJFJjuZzsTp3P+EzaM6Mm06gglyGOyQz9lAQ/wBgzNP6wRF+Yd+TH /a1x1Idpu+4AF/JafQpU29fhZniDs3UoVDcQwMAu8xLYbmzgbft4RVmodmffkUeI PLJoE3wAsosRsUosOqJ4ue5bSlH5UC4TbuzFBGv32u9l4BFgV7IjJGCw3ryY+jiI /Fi71zxiR/dF9qn3nLFFJ3qv7sl0hPI91Bj4BOHBM4p201bQTh/yaWsnwQEM9W4V DS9VCebQQem4YEHRZDmcEOToBqgZUGCT1HIfKfhTgluK7ftSh4NGcFlJMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUsy7nX9GFtNpIEZ9cmHUTKZC9oMB8GA1UdIwQY MBaAFLaol8eY8BmyR3sanOOyO7XXYWbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHFpWHg1andHYkpIZXhxYzQ3STd0ZGRoWnNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTdkZDctN2Y3Yy00OTRkLWI4ODYt NTJmODUwY2E1NWM2LzEvdHFpWHg1andHYkpIZXhxYzQ3STd0ZGRoWnNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTdkZDctN2Y3Yy00OTRkLWI4ODYtNTJmODUwY2E1NWM2 LzEvdHFpWHg1andHYkpIZXhxYzQ3STd0ZGRoWnNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnUzpt1H VmKRnD0jVJO/32sA1xyIeYY4EdVw7xW6a9iDDwwulWzOrozMpfI+/gHsnpICyemx AxLdiaI/eiS7gp9QVSNzTUeaIspoAfSEIaBEDQzLCTdJXfMtSS5XbM/EHQ0s+CJC SV76gghjlhtHX5wV4LS6sN1MeVFUssRdJOATW0HUZj4XSUlhg7FYflV3v3u7ay/r zZ0jAkDrBLFLDKk5OSk+XOXq5mQEz5ogy7iUd1QZoj/z2cSODEgPThvLISJ1oFKc p8QLVOlUtCoTtT98mYK31w01LYlGKhHp9wvZ11i104ZFEMVEmxs4Ev/0OLexNxSQ y9RzmBoyeGCuKQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:15:16 2025 by rpki-client