This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft File: tEORSkjl2uWnVrHjuPvkN-4Niww.mft (raw, json) Hash identifier: rZGDCopObiZ4vSnEnmH+oaQ5BUN8vHPD9C6bkJRKEGY= Subject key identifier: 5B:39:D8:D8:75:31:61:E2:88:E8:51:98:4D:7F:D9:76:17:73:66:EA Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C Certificate issuer: /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c Certificate serial: 019B390F81F14F64E004726DF7620B24E525 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 00:01:16 +0000 Manifest this update: Sat 20 Dec 2025 00:01:16 +0000 Manifest next update: Sun 21 Dec 2025 00:01:16 +0000 Files and hashes: 1: 4lhTaQhjom1qkpeBd0ZsbdWiEJ4.roa (hash: XdHlLCQ2Kh6iuUQP6DmaSkVFP47PPhEh+iIit9uDq/c=) 2: Loamkgq2liGt_WerD0xhgg9VD4c.roa (hash: HJiMbQmWc3n1Lwl3vm8HBtMiaI2Ev5JS4MMKRu/Y4gU=) 3: kTZKdp3t576jj7V1laKryCYz0Og.roa (hash: HbtSMYd2T/15rtkOhZspTZMKwAPA+sik9h0BqyVd10U=) 4: rZB_JVvkOIqma6Wh66SCnHCJS8Q.roa (hash: UNrRcAyslLxjeDmqjrPzHbwMyZ4AtgV3GxOrJgdzxQg=) 5: tEORSkjl2uWnVrHjuPvkN-4Niww.crl (hash: E4pXgqC3mwMLA+JeEgPzFm76UY7v5VIUYNe3K5Whm34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:81:f1:4f:64:e0:04:72:6d:f7:62:0b:24:e5:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c Validity Not Before: Dec 20 00:01:16 2025 GMT Not After : Dec 21 00:01:16 2025 GMT Subject: CN=5b39d8d8753161e288e851984d7fd976177366ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9b:58:8e:70:28:d7:eb:9d:79:21:5d:5f:56: ee:df:59:6f:fc:43:52:2a:7a:48:a1:e7:57:8e:a7: 8b:d0:a2:b5:67:17:65:54:56:d0:31:68:31:0f:02: 64:f5:fe:0f:8c:f2:4d:be:ce:38:8d:1f:78:36:f3: 3d:c2:24:a9:e9:dc:f6:5c:96:8b:e5:d1:f6:e3:02: e4:5d:2a:67:52:8a:b1:f3:fe:be:1d:1c:bd:0d:4f: b2:cc:b2:bd:33:86:65:36:85:1d:6d:3e:3d:11:83: fd:76:9f:43:6a:0e:21:7c:74:6d:4e:2d:65:2b:15: 14:10:ca:42:30:94:1c:75:d0:32:56:e9:ff:24:b8: 82:47:77:40:4b:5f:91:8a:2d:b4:db:64:32:4d:48: 1b:ce:1f:cb:a1:e8:8f:3a:3c:1d:1f:06:98:6d:7e: e7:0f:99:ff:e4:e3:55:84:a8:ad:a7:6d:b7:1c:ea: b5:37:2b:81:89:e6:8b:35:ec:cd:44:fa:8a:4e:6e: f7:bc:61:02:9a:cb:35:50:ac:9e:4e:83:bf:af:0c: b6:0e:c1:5a:86:76:f2:fb:a1:3f:68:f1:da:b7:be: f7:3e:57:89:66:07:05:62:1c:81:55:9b:bc:f3:e4: 3c:40:f0:b1:cd:6e:fa:d4:6a:b8:f6:e4:4c:cc:50: bb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:39:D8:D8:75:31:61:E2:88:E8:51:98:4D:7F:D9:76:17:73:66:EA X509v3 Authority Key Identifier: keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:7c:d7:ee:7f:c2:e7:7e:f4:df:b1:5d:18:98:6c:ae:68:a0: 1a:df:d5:30:61:31:45:21:96:34:42:84:43:e6:75:6a:bc:c1: 4d:2f:6c:03:01:b0:84:95:26:f7:69:89:14:b8:70:4b:50:7b: 20:77:5b:2f:a9:d0:3a:98:8f:71:bd:c1:99:db:b7:8c:c3:bd: c1:3c:1e:5f:84:a8:9b:01:17:c2:48:4d:6e:10:17:49:23:58: 94:bf:96:42:bb:3f:89:38:9f:c7:c5:b6:f5:19:8e:b0:ec:48: 87:de:72:6f:f1:78:2d:a1:ae:1b:97:a8:c4:05:98:e2:69:39: 4e:9f:4e:b3:38:ff:67:37:88:78:f2:79:23:15:b0:58:3f:94: 77:b2:c6:04:28:69:ce:d1:79:7d:cb:19:0a:3a:69:a4:2a:79: ca:3a:28:9a:a5:c6:5a:81:5a:3f:18:d8:4d:ec:e9:bd:88:48: cf:d2:ad:76:98:eb:85:62:ff:a8:6b:ef:7b:d9:f7:4c:40:f0: 88:d8:bf:fa:c9:49:92:f3:82:ba:bd:74:c3:0d:64:15:d6:f3: a6:39:dd:db:a3:de:b5:a0:b1:f8:fc:37:23:d9:ba:f6:89:6d: b6:42:5c:0a:b0:2b:4b:6a:95:76:eb:30:b5:7b:84:73:92:0e: 81:57:1a:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D4HxT2TgBHJt92ILJOUlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NDM5MTRhNDhlNWRhZTVhNzU2YjFlM2I4ZmJlNDM3ZWUw ZDhiMGMwHhcNMjUxMjIwMDAwMTE2WhcNMjUxMjIxMDAwMTE2WjAzMTEwLwYDVQQD Eyg1YjM5ZDhkODc1MzE2MWUyODhlODUxOTg0ZDdmZDk3NjE3NzM2NmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5tYjnAo1+udeSFdX1bu31lv/ENS KnpIoedXjqeL0KK1ZxdlVFbQMWgxDwJk9f4PjPJNvs44jR94NvM9wiSp6dz2XJaL 5dH24wLkXSpnUoqx8/6+HRy9DU+yzLK9M4ZlNoUdbT49EYP9dp9Dag4hfHRtTi1l KxUUEMpCMJQcddAyVun/JLiCR3dAS1+Rii2022QyTUgbzh/LoeiPOjwdHwaYbX7n D5n/5ONVhKitp223HOq1NyuBieaLNezNRPqKTm73vGECmss1UKyeToO/rwy2DsFa hnby+6E/aPHat773PleJZgcFYhyBVZu88+Q8QPCxzW761Gq49uRMzFC7owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFs52Nh1MWHiiOhRmE1/2XYXc2bqMB8GA1UdIwQY MBaAFLRDkUpI5drlp1ax47j75DfuDYsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82OTIwZDItYTdhNi00MWE1LTk2ZTAt MzE0ZWY3NDZkOGE2LzEvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC82OTIwZDItYTdhNi00MWE1LTk2ZTAtMzE0ZWY3NDZkOGE2 LzEvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnzX7n/C 537037FdGJhsrmigGt/VMGExRSGWNEKEQ+Z1arzBTS9sAwGwhJUm92mJFLhwS1B7 IHdbL6nQOpiPcb3Bmdu3jMO9wTweX4SomwEXwkhNbhAXSSNYlL+WQrs/iTifx8W2 9RmOsOxIh95yb/F4LaGuG5eoxAWY4mk5Tp9Oszj/ZzeIePJ5IxWwWD+Ud7LGBChp ztF5fcsZCjpppCp5yjoomqXGWoFaPxjYTezpvYhIz9KtdpjrhWL/qGvve9n3TEDw iNi/+slJkvOCur10ww1kFdbzpjnd26PetaCx+Pw3I9m69olttkJcCrArS2qVdusw tXuEc5IOgVcaJg== -----END CERTIFICATE-----Generated at Sat Dec 20 04:28:27 2025 by rpki-client