This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft File: tKOwBTZrDhDVAulBSQHNhPri3JU.mft (raw, json) Hash identifier: bPoNLHJ/dT0HjFZla36AdP0v0bn5XWDCMbHmvyW5570= Subject key identifier: C3:09:59:21:45:7D:1C:24:C1:BC:23:AB:45:73:0D:35:F0:83:EE:C6 Authority key identifier: B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95 Certificate issuer: /CN=b4a3b005366b0e10d502e9414901cd84fae2dc95 Certificate serial: 019B44007E8576CAFCB0CFE1C3B8726E0C75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft Manifest number: 20 Signing time: Mon 22 Dec 2025 03:00:41 +0000 Manifest this update: Mon 22 Dec 2025 03:00:41 +0000 Manifest next update: Tue 23 Dec 2025 03:00:41 +0000 Files and hashes: 1: aeLq5a8kiXNujRcNnD6lfz80EEM.roa (hash: EyFxSW6yLpfJeNoBTxjBTmV96AGiGIG/MOZ8ivHN2Z4=) 2: tKOwBTZrDhDVAulBSQHNhPri3JU.crl (hash: 81aTRhtyJ5DinimaZDFxpQZv491PTRi5mZvo48oV7PY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:00:7e:85:76:ca:fc:b0:cf:e1:c3:b8:72:6e:0c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4a3b005366b0e10d502e9414901cd84fae2dc95 Validity Not Before: Dec 22 03:00:41 2025 GMT Not After : Dec 23 03:00:41 2025 GMT Subject: CN=c3095921457d1c24c1bc23ab45730d35f083eec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:55:b4:7a:22:73:57:e8:fb:89:4b:c4:b4:ba: b5:81:73:bd:92:10:cd:6a:d1:fc:3e:6d:fc:2b:0f: 4a:a1:b5:40:33:57:60:bc:57:cb:23:61:26:00:dc: c8:25:02:70:bf:16:f5:53:09:d0:c6:06:fc:78:e4: 54:e1:d2:4c:d3:a1:f6:14:92:eb:2b:42:e5:a4:b7: dd:7a:7c:aa:3a:1d:b6:4a:10:d9:be:31:34:ad:34: 83:3e:0b:46:7c:f4:da:31:c7:36:6e:74:67:70:a4: 44:ae:75:41:a8:a1:07:3b:01:52:4c:ac:a8:44:af: 36:13:70:39:86:2d:12:e7:f6:88:71:e3:d3:c3:70: 53:47:8a:5e:09:26:45:0d:5d:c9:d5:ef:17:b1:fa: d1:0e:f9:c3:cc:d4:db:65:41:9e:d3:32:ef:f8:ed: e4:41:c2:bd:ef:f8:0b:2a:b8:d2:ad:55:f9:cc:5c: 1d:31:3f:7c:fc:57:b5:d8:95:b7:53:16:93:4f:63: 02:24:0f:38:e3:1f:64:bb:9f:ad:18:01:91:85:91: f0:9d:f8:6d:be:f5:fc:55:57:51:aa:62:8d:35:b7: 58:14:4c:9a:e8:13:b1:aa:2f:7a:f1:91:e8:b5:93: 02:84:56:01:54:62:f0:3e:e9:1b:89:0d:81:5c:f0: e5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:09:59:21:45:7D:1C:24:C1:BC:23:AB:45:73:0D:35:F0:83:EE:C6 X509v3 Authority Key Identifier: keyid:B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:84:70:ad:c1:60:ca:ad:44:a4:41:b8:bd:13:22:09:05:31: ae:56:e6:a5:04:43:51:7f:89:1e:eb:98:23:bb:03:cb:b0:b0: 22:e2:c7:f8:af:c8:8b:65:6e:56:6b:2a:eb:24:b5:42:6a:6d: a9:3e:c3:9b:7b:92:7a:72:4d:9d:6d:69:25:e4:9c:99:1f:be: ad:84:b2:01:38:cb:04:e9:f1:98:5e:59:9f:7e:d4:e1:2d:2e: cc:ab:d0:21:45:18:8c:c4:04:b4:e5:3f:7b:05:4d:5c:c7:92: ce:30:ca:aa:3b:cc:29:52:9e:c3:fb:a8:35:9f:c4:b4:5e:11: 9a:ad:d6:99:23:5a:b0:c9:d6:9c:7b:bf:4f:de:8b:4c:2a:76: 47:6e:2b:75:15:e3:7f:e3:a2:ce:73:ea:ab:e6:22:65:e4:26: df:45:a3:2d:29:94:2b:9e:3e:89:a7:25:6e:41:fd:7f:d5:a8: 6c:0f:5b:97:dc:db:2f:de:f1:35:5f:3d:c9:d5:bb:60:1b:4c: 25:ae:ba:15:2d:d8:0e:9c:01:b8:bf:56:00:9e:88:72:ba:e8: 58:a3:cc:b0:15:bd:03:63:44:01:76:76:fb:28:2d:fb:21:fd: 78:3b:49:db:97:21:88:ca:ac:10:04:e4:e6:94:14:fd:74:9a: 9f:f0:0f:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEAH6Fdsr8sM/hw7hybgx1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YTNiMDA1MzY2YjBlMTBkNTAyZTk0MTQ5MDFjZDg0ZmFl MmRjOTUwHhcNMjUxMjIyMDMwMDQxWhcNMjUxMjIzMDMwMDQxWjAzMTEwLwYDVQQD EyhjMzA5NTkyMTQ1N2QxYzI0YzFiYzIzYWI0NTczMGQzNWYwODNlZWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+FW0eiJzV+j7iUvEtLq1gXO9khDN atH8Pm38Kw9KobVAM1dgvFfLI2EmANzIJQJwvxb1UwnQxgb8eORU4dJM06H2FJLr K0LlpLfdenyqOh22ShDZvjE0rTSDPgtGfPTaMcc2bnRncKRErnVBqKEHOwFSTKyo RK82E3A5hi0S5/aIcePTw3BTR4peCSZFDV3J1e8XsfrRDvnDzNTbZUGe0zLv+O3k QcK97/gLKrjSrVX5zFwdMT98/Fe12JW3UxaTT2MCJA844x9ku5+tGAGRhZHwnfht vvX8VVdRqmKNNbdYFEya6BOxqi968ZHotZMChFYBVGLwPukbiQ2BXPDl3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMJWSFFfRwkwbwjq0VzDTXwg+7GMB8GA1UdIwQY MBaAFLSjsAU2aw4Q1QLpQUkBzYT64tyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEtPd0JUWnJEaERWQXVsQlNRSE5oUHJpM0pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMmJhNzItYTg5Mi00MjZkLWFlYzkt YTE1NzVmOTFmODNiLzEvdEtPd0JUWnJEaERWQXVsQlNRSE5oUHJpM0pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMmJhNzItYTg5Mi00MjZkLWFlYzktYTE1NzVmOTFmODNi LzEvdEtPd0JUWnJEaERWQXVsQlNRSE5oUHJpM0pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4RwrcFg yq1EpEG4vRMiCQUxrlbmpQRDUX+JHuuYI7sDy7CwIuLH+K/Ii2VuVmsq6yS1Qmpt qT7Dm3uSenJNnW1pJeScmR++rYSyATjLBOnxmF5Zn37U4S0uzKvQIUUYjMQEtOU/ ewVNXMeSzjDKqjvMKVKew/uoNZ/EtF4Rmq3WmSNasMnWnHu/T96LTCp2R24rdRXj f+OiznPqq+YiZeQm30WjLSmUK54+iaclbkH9f9WobA9bl9zbL97xNV89ydW7YBtM Ja66FS3YDpwBuL9WAJ6IcrroWKPMsBW9A2NEAXZ2+ygt+yH9eDtJ25chiMqsEATk 5pQU/XSan/APsA== -----END CERTIFICATE-----Generated at Mon Dec 22 11:26:47 2025 by rpki-client