This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft File: tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json) Hash identifier: QpyXNle9R7hzoBmRyEkZUebTKKGaPBmfiPWSPTvsv+k= Subject key identifier: 40:7E:2C:0B:FA:23:4E:BB:B0:04:36:5B:86:FC:14:5E:F7:AB:6E:D4 Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73 Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073 Certificate serial: 019B3FED4B73B4518D73FE713C44D25839BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft Manifest number: 1395 Signing time: Sun 21 Dec 2025 08:01:14 +0000 Manifest this update: Sun 21 Dec 2025 08:01:14 +0000 Manifest next update: Mon 22 Dec 2025 08:01:14 +0000 Files and hashes: 1: Qy8FTgX-yC1O4CbCQWKLq95mgp4.roa (hash: 8nqh6t/tTyxk7G3+i4dwwKWP/5EMA1y/MU+wzRFmne4=) 2: kj9rgsBpPLepIKPHD5eAEuwwvw0.roa (hash: EHHLSrODdY/NFx0Xqw8ficGV0VFf608vkoi6uBTcBb0=) 3: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: uO2ol75uHxLCEEkzbi36xps0e+N+263D04auR1wL5bU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:4b:73:b4:51:8d:73:fe:71:3c:44:d2:58:39:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073 Validity Not Before: Dec 21 08:01:14 2025 GMT Not After : Dec 22 08:01:14 2025 GMT Subject: CN=407e2c0bfa234ebbb004365b86fc145ef7ab6ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:83:46:f6:91:f6:49:56:47:df:c0:d7:f1:c1: 5c:a9:2e:97:91:82:be:6c:4a:4b:f7:47:46:c3:73: 0d:bb:92:9f:c1:60:2f:cb:a0:78:df:bc:d8:11:06: 65:e3:42:8d:1e:9a:ab:5f:2d:d7:27:a2:b6:17:07: 5f:84:7e:d4:f0:95:a1:38:f2:06:5d:3d:56:d1:dd: 28:2f:82:28:70:c5:bc:f9:8c:b1:81:f6:b5:7d:ff: 81:da:84:f6:6d:a8:0f:b9:0e:4b:75:3a:3a:ea:62: d4:d5:4c:cd:6b:6f:da:a8:34:48:aa:5f:5f:22:48: 27:18:8d:9c:0c:e5:84:ff:a6:cf:a7:a1:6c:09:bd: 1c:93:46:cd:47:3c:27:0e:4d:aa:ce:7a:ca:6f:22: 22:5c:b3:ec:26:6d:da:80:e7:6d:ec:e3:0e:30:01: 60:8f:86:32:f5:c5:4f:da:a0:1b:d1:3c:90:21:1d: 1f:f5:32:8f:d1:06:9b:b4:5b:e8:90:e9:60:7e:03: 98:3c:0a:7e:ce:cb:ce:8d:b7:44:6e:39:66:e2:59: d6:0f:4e:c1:0f:f9:0c:d6:0a:bb:52:9f:be:25:b2: 6a:68:02:75:3f:cb:82:ad:e4:8d:b3:6b:07:f6:f9: af:4d:28:76:a6:75:73:a6:67:2d:d5:10:1a:ac:d8: 5f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7E:2C:0B:FA:23:4E:BB:B0:04:36:5B:86:FC:14:5E:F7:AB:6E:D4 X509v3 Authority Key Identifier: keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:5f:31:92:be:d3:fd:fc:e7:97:b6:62:8e:11:6d:07:e6:55: ba:12:9c:d2:d6:45:df:37:f0:5d:19:aa:92:9f:e7:bb:c9:23: 7d:d2:ac:88:2b:f7:ad:91:a7:59:7d:cc:d0:8b:6a:99:b3:7f: 75:90:82:fe:57:8b:ec:7f:98:b8:5b:db:c5:ca:fe:b5:01:fc: 81:03:b1:fa:e1:14:03:f5:88:9b:c9:d5:e2:8c:91:55:a6:29: ca:b9:83:57:32:94:91:70:bb:c5:ff:80:be:4b:d3:4a:7e:63: 07:6e:e2:48:5f:a0:31:40:9b:9a:73:c6:8c:a0:ff:24:ef:01: 57:5e:70:ae:fa:33:b1:f3:e0:9d:92:51:e3:01:9a:0c:20:63: 70:a4:9e:67:36:16:4c:e9:27:fa:77:7c:98:52:ad:44:af:fc: ba:1f:7d:fd:38:27:7e:fb:f0:28:ed:f2:26:de:f8:60:00:4d: 9a:a2:a5:69:34:bf:16:15:21:79:f3:1b:50:13:35:4b:f2:3e: 5f:87:03:b1:f2:b2:68:26:67:bb:24:99:26:e7:ce:cb:3d:a9: 4f:eb:52:2a:93:11:02:29:d9:5c:f0:8a:60:76:91:e3:9e:e2: 6d:a1:6c:bc:bf:e8:97:14:55:85:39:fd:05:20:f2:b5:9d:cb: 8b:2c:54:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7UtztFGNc/5xPETSWDm7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NDI1Y2Y1NTAxMzQ0YWM1YWNjMzA3YWJkMGFmMDEzZmFj NjcwNzMwHhcNMjUxMjIxMDgwMTE0WhcNMjUxMjIyMDgwMTE0WjAzMTEwLwYDVQQD Eyg0MDdlMmMwYmZhMjM0ZWJiYjAwNDM2NWI4NmZjMTQ1ZWY3YWI2ZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoNG9pH2SVZH38DX8cFcqS6XkYK+ bEpL90dGw3MNu5KfwWAvy6B437zYEQZl40KNHpqrXy3XJ6K2FwdfhH7U8JWhOPIG XT1W0d0oL4IocMW8+Yyxgfa1ff+B2oT2bagPuQ5LdTo66mLU1UzNa2/aqDRIql9f IkgnGI2cDOWE/6bPp6FsCb0ck0bNRzwnDk2qznrKbyIiXLPsJm3agOdt7OMOMAFg j4Yy9cVP2qAb0TyQIR0f9TKP0QabtFvokOlgfgOYPAp+zsvOjbdEbjlm4lnWD07B D/kM1gq7Up++JbJqaAJ1P8uCreSNs2sH9vmvTSh2pnVzpmct1RAarNhfdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEB+LAv6I067sAQ2W4b8FF73q27UMB8GA1UdIwQY MBaAFLRCXPVQE0SsWswwer0K8BP6xnBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82YWMwYTItNWM2Yy00MzU3LTk3ZTQt Y2ViOGFiNmQxMTJlLzEvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS82YWMwYTItNWM2Yy00MzU3LTk3ZTQtY2ViOGFiNmQxMTJl LzEvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzV8xkr7T /fznl7ZijhFtB+ZVuhKc0tZF3zfwXRmqkp/nu8kjfdKsiCv3rZGnWX3M0ItqmbN/ dZCC/leL7H+YuFvbxcr+tQH8gQOx+uEUA/WIm8nV4oyRVaYpyrmDVzKUkXC7xf+A vkvTSn5jB27iSF+gMUCbmnPGjKD/JO8BV15wrvozsfPgnZJR4wGaDCBjcKSeZzYW TOkn+nd8mFKtRK/8uh99/TgnfvvwKO3yJt74YABNmqKlaTS/FhUhefMbUBM1S/I+ X4cDsfKyaCZnuySZJufOyz2pT+tSKpMRAinZXPCKYHaR457ibaFsvL/olxRVhTn9 BSDytZ3LiyxUqg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:06 2025 by rpki-client