This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft File: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft (raw, json) Hash identifier: 0Wz/jdUPaWyRw4/vzqMzMgLEluYcRY94Tii1Gh6UKAY= Subject key identifier: 00:98:44:E2:91:68:5F:73:40:5E:AD:3B:51:D1:9F:2D:B4:1B:C4:80 Authority key identifier: 4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5 Certificate issuer: /CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5 Certificate serial: 019B4EBB28B10A036939D9E8CB87B11F9BE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft Manifest number: 0E77 Signing time: Wed 24 Dec 2025 05:00:47 +0000 Manifest this update: Wed 24 Dec 2025 05:00:47 +0000 Manifest next update: Thu 25 Dec 2025 05:00:47 +0000 Files and hashes: 1: 4f1jI7-qAw-Fm-OtnESqUBoebm0.roa (hash: Yj15262IImuG/zvO4RGd+KynWz9BG4CJpl9H3lrssA0=) 2: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl (hash: berS5mCDaaBcXMcjP6ro6j/yHC1oGfMUNh7t+NTGTHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:28:b1:0a:03:69:39:d9:e8:cb:87:b1:1f:9b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5 Validity Not Before: Dec 24 05:00:47 2025 GMT Not After : Dec 25 05:00:47 2025 GMT Subject: CN=009844e291685f73405ead3b51d19f2db41bc480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a3:0b:e2:30:59:64:44:8a:bd:7b:e1:65:2d: d3:a3:69:46:53:63:d4:63:56:e5:0c:af:8a:c5:bc: 52:5e:2c:ac:5a:2b:ea:5e:27:b7:77:b1:a3:cf:57: 12:10:43:eb:37:be:ef:3d:37:16:76:4f:65:9b:8d: 97:8b:af:b8:60:52:ff:ae:b8:ed:ae:d1:3a:da:3b: a4:df:ef:18:c7:3e:56:18:90:b1:25:f9:aa:3c:b6: bb:e8:81:57:63:c8:12:b1:2f:83:6d:3e:3f:ba:5c: ef:a8:1e:61:c6:9e:18:8e:9a:37:ad:46:5f:f2:8b: c1:04:12:41:00:05:09:c4:08:74:ea:25:c3:a7:52: ef:bd:ed:b2:0b:ad:ac:1c:d3:ac:17:1f:80:1e:d0: 8d:0b:b4:ef:1d:ee:3e:43:3a:0d:b7:85:ff:91:44: a7:16:00:3b:9b:b1:e3:51:30:75:ff:99:de:ea:1b: b4:ba:47:93:59:7e:14:aa:65:94:c3:65:c7:6c:9c: 9c:1b:c8:7c:32:d7:67:96:94:db:c6:57:8a:b9:c0: 7f:ca:bb:70:08:66:c6:f4:af:ae:e2:32:43:8b:16: 64:dc:40:b5:ff:19:ad:ba:96:26:6a:e5:14:4f:25: 95:25:76:7b:a0:e9:c7:24:5b:49:72:b7:f2:50:0f: 7e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:98:44:E2:91:68:5F:73:40:5E:AD:3B:51:D1:9F:2D:B4:1B:C4:80 X509v3 Authority Key Identifier: keyid:4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:2f:33:17:ea:d6:ff:60:05:cf:46:20:1c:a1:d8:b1:4a:23: a6:7d:97:8d:da:c0:c2:95:ab:e6:c9:bc:fa:5d:aa:d0:4c:25: af:53:5f:14:85:46:17:68:70:47:2e:10:32:be:0b:e8:bf:56: 72:aa:99:a6:21:9b:2d:88:81:7d:99:59:29:5b:06:78:e3:2f: 91:ac:65:b9:c1:3e:80:88:82:cd:77:ce:e2:6e:6f:19:cf:45: 6a:bf:de:8a:4e:13:4b:97:ae:87:43:b2:ab:f6:e4:e4:08:61: 3c:f4:9f:79:9c:e3:77:64:58:ed:5b:15:98:33:01:49:f3:47: 2b:31:71:5b:36:1a:5e:64:0e:9f:c8:aa:77:bf:d1:08:f2:1a: f8:e4:22:4d:87:0b:13:1d:0c:f5:da:0e:05:8b:e3:44:44:88: 0c:d4:71:74:26:8d:ca:e1:5f:bf:39:53:5e:be:9e:62:33:1d: a2:19:cc:7e:6a:13:43:18:42:0a:3b:a0:35:d6:50:5b:1e:a5: 54:95:9a:7c:8a:d3:08:ad:2c:8b:99:24:61:1c:ae:01:64:7e: 0b:f3:5f:3f:14:19:81:f0:e4:41:b3:b6:e2:b5:0d:ac:4f:3e: ad:68:f3:6a:a2:94:07:61:88:d3:d3:c0:0b:ba:f7:cd:e0:4b: 18:19:09:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOuyixCgNpOdnoy4exH5vnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYmUzMWI2YmVkYzUxZjJhYTJlYzBhNjQ1M2YyZTQzNWU4 MDhmYjUwHhcNMjUxMjI0MDUwMDQ3WhcNMjUxMjI1MDUwMDQ3WjAzMTEwLwYDVQQD EygwMDk4NDRlMjkxNjg1ZjczNDA1ZWFkM2I1MWQxOWYyZGI0MWJjNDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqML4jBZZESKvXvhZS3To2lGU2PU Y1blDK+KxbxSXiysWivqXie3d7Gjz1cSEEPrN77vPTcWdk9lm42Xi6+4YFL/rrjt rtE62juk3+8Yxz5WGJCxJfmqPLa76IFXY8gSsS+DbT4/ulzvqB5hxp4Yjpo3rUZf 8ovBBBJBAAUJxAh06iXDp1Lvve2yC62sHNOsFx+AHtCNC7TvHe4+QzoNt4X/kUSn FgA7m7HjUTB1/5ne6hu0ukeTWX4UqmWUw2XHbJycG8h8MtdnlpTbxleKucB/yrtw CGbG9K+u4jJDixZk3EC1/xmtupYmauUUTyWVJXZ7oOnHJFtJcrfyUA9+qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACYROKRaF9zQF6tO1HRny20G8SAMB8GA1UdIwQY MBaAFE2+Mba+3FHyqi7ApkU/LkNegI+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAt ZmJkNDZkOWNhMzcyLzEvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAtZmJkNDZkOWNhMzcy LzEvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXS8zF+rW /2AFz0YgHKHYsUojpn2XjdrAwpWr5sm8+l2q0Ewlr1NfFIVGF2hwRy4QMr4L6L9W cqqZpiGbLYiBfZlZKVsGeOMvkaxlucE+gIiCzXfO4m5vGc9Far/eik4TS5euh0Oy q/bk5AhhPPSfeZzjd2RY7VsVmDMBSfNHKzFxWzYaXmQOn8iqd7/RCPIa+OQiTYcL Ex0M9doOBYvjRESIDNRxdCaNyuFfvzlTXr6eYjMdohnMfmoTQxhCCjugNdZQWx6l VJWafIrTCK0si5kkYRyuAWR+C/NfPxQZgfDkQbO24rUNrE8+rWjzaqKUB2GI09PA C7r3zeBLGBkJWQ== -----END CERTIFICATE-----Generated at Wed Dec 24 10:48:53 2025 by rpki-client