This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft File: tkB0qoRJgw2psgs6-waC08Ay-f4.mft (raw, json) Hash identifier: l922f8FpxDR2PvYFIjKFTJwsvdPIWZnq63XiCEsqOTU= Subject key identifier: CA:69:F5:93:81:35:7E:53:7D:92:55:3B:38:8E:AA:B5:F8:0E:2F:54 Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe Certificate serial: 019B679F345D040D7839D87A85C2AA03386D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft Manifest number: 17A6 Signing time: Mon 29 Dec 2025 01:00:45 +0000 Manifest this update: Mon 29 Dec 2025 01:00:45 +0000 Manifest next update: Tue 30 Dec 2025 01:00:45 +0000 Files and hashes: 1: BdOIN-x7p5NQNZFat3HBRk8aNP8.roa (hash: E6O+SQKCroETYNOj7yjRqDXwGgY2i2+LPEeaEfVM6HA=) 2: SvbWjBtA5USrFJEFyfsvP-SCofs.roa (hash: La++FukCI88aoCCAWTG9ojz1zryPe+WC1BNRSElIvDw=) 3: ZqMh09XL_OuL0ICq-TfvGdj4pmM.roa (hash: l5g5wXS3ZWKojPoOXqpehHnI+SHAfeYcurBv6Xo/WU8=) 4: tkB0qoRJgw2psgs6-waC08Ay-f4.crl (hash: pwpZ14lblfU6Wc77Ldt5rdiDtWdFJypL62tWLRSp6bA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:9f:34:5d:04:0d:78:39:d8:7a:85:c2:aa:03:38:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe Validity Not Before: Dec 29 01:00:45 2025 GMT Not After : Dec 30 01:00:45 2025 GMT Subject: CN=ca69f59381357e537d92553b388eaab5f80e2f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:62:7b:2d:d1:ee:76:53:f1:35:c0:74:f8: f4:ce:4d:85:b8:91:cd:33:95:fb:ed:5b:a6:14:5f: 45:c5:a7:88:d5:03:97:a0:ce:f5:b2:7d:ea:27:69: 4f:14:f4:28:77:ac:85:86:6a:72:97:b5:94:c9:a4: 71:0e:99:28:fa:df:78:10:b7:8b:12:00:26:e8:83: 24:0e:d2:33:61:87:f9:87:df:d3:6c:85:56:c9:9a: 66:7d:e1:5b:67:c9:43:94:4b:35:50:99:f2:25:ca: 63:f1:c4:f7:61:d6:94:ff:9c:3c:b0:40:45:96:4e: 61:d1:f0:ba:9a:c6:95:5b:e5:b4:70:2c:ae:cd:78: 69:4a:78:66:b0:5e:e8:35:89:d9:1b:d2:8d:82:c7: f0:77:16:f4:45:db:25:88:a9:da:ae:e3:b5:e9:17: 78:25:4f:ea:e2:79:76:2c:0d:73:49:69:cf:a8:2b: 39:56:a1:9a:6f:2d:5c:29:18:34:e1:a6:aa:3b:7e: c5:50:ec:20:83:49:05:0c:7c:e1:03:c5:94:5b:e4: 9b:77:5e:cd:c9:b7:6b:0f:13:ad:fb:49:7e:b8:ad: bb:95:7b:4a:23:f0:75:f0:6a:02:a8:cc:e2:99:d4: 3a:8b:9f:68:60:28:ee:56:bc:fc:bc:7a:cb:d8:b3: b7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:69:F5:93:81:35:7E:53:7D:92:55:3B:38:8E:AA:B5:F8:0E:2F:54 X509v3 Authority Key Identifier: keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:35:de:30:ba:30:e1:fb:22:1f:8b:3f:45:22:3a:52:b1:93: 66:6e:5f:a9:5b:20:70:bf:79:3f:17:1a:2a:bf:6b:b3:8f:1f: 47:4d:72:3a:a2:97:a1:cf:ff:1e:99:b3:b0:d6:84:a0:91:03: 9d:85:1c:cc:0d:6e:b9:8b:34:41:84:ee:dc:47:b2:9f:7e:2d: 72:92:2f:7c:8a:7c:01:c0:99:cc:c1:4c:ed:16:64:82:58:ff: b2:0e:d2:51:b6:61:04:2b:6f:86:b9:90:f6:91:9c:2d:b1:ed: 6e:5c:99:f3:be:15:dc:b6:10:0b:f6:09:52:9c:e4:29:2b:96: 27:90:63:67:ed:53:9b:fd:2e:c2:ed:6e:58:24:91:23:59:89: bb:73:51:8d:fb:69:18:c7:fc:e3:89:7d:7b:42:c8:f3:5c:8b: 36:46:ff:55:0b:c9:2a:ab:1e:7a:0d:1b:eb:08:66:cd:f4:87: 48:9a:ed:cb:0e:dc:e5:27:fd:d7:68:8e:b2:ff:5f:4f:64:06: 4d:40:4d:2d:79:53:e5:d5:61:29:88:53:9f:dc:6e:2b:82:99: f4:3b:5e:78:f3:2f:69:8c:60:73:41:3f:74:eb:07:13:9c:5b: b0:9d:96:e5:97:6b:04:16:1a:a2:1b:a5:98:ca:c8:dc:1e:ba: 66:39:f0:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnnzRdBA14Odh6hcKqAzhtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NDA3NGFhODQ0OTgzMGRhOWIyMGIzYWZiMDY4MmQzYzAz MmY5ZmUwHhcNMjUxMjI5MDEwMDQ1WhcNMjUxMjMwMDEwMDQ1WjAzMTEwLwYDVQQD EyhjYTY5ZjU5MzgxMzU3ZTUzN2Q5MjU1M2IzODhlYWFiNWY4MGUyZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQdiey3R7nZT8TXAdPj0zk2FuJHN M5X77VumFF9FxaeI1QOXoM71sn3qJ2lPFPQod6yFhmpyl7WUyaRxDpko+t94ELeL EgAm6IMkDtIzYYf5h9/TbIVWyZpmfeFbZ8lDlEs1UJnyJcpj8cT3YdaU/5w8sEBF lk5h0fC6msaVW+W0cCyuzXhpSnhmsF7oNYnZG9KNgsfwdxb0RdsliKnaruO16Rd4 JU/q4nl2LA1zSWnPqCs5VqGaby1cKRg04aaqO37FUOwgg0kFDHzhA8WUW+Sbd17N ybdrDxOt+0l+uK27lXtKI/B18GoCqMzimdQ6i59oYCjuVrz8vHrL2LO3PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpp9ZOBNX5TfZJVOziOqrX4Di9UMB8GA1UdIwQY MBaAFLZAdKqESYMNqbILOvsGgtPAMvn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mYzdjODItMzE1OS00ZDU0LWEwYTEt MzUxNzFhZWRkMzEzLzEvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mYzdjODItMzE1OS00ZDU0LWEwYTEtMzUxNzFhZWRkMzEz LzEvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDXeMLow 4fsiH4s/RSI6UrGTZm5fqVsgcL95PxcaKr9rs48fR01yOqKXoc//HpmzsNaEoJED nYUczA1uuYs0QYTu3Eeyn34tcpIvfIp8AcCZzMFM7RZkglj/sg7SUbZhBCtvhrmQ 9pGcLbHtblyZ874V3LYQC/YJUpzkKSuWJ5BjZ+1Tm/0uwu1uWCSRI1mJu3NRjftp GMf844l9e0LI81yLNkb/VQvJKqseeg0b6whmzfSHSJrtyw7c5Sf912iOsv9fT2QG TUBNLXlT5dVhKYhTn9xuK4KZ9DteePMvaYxgc0E/dOsHE5xbsJ2W5ZdrBBYaohul mMrI3B66Zjnw+Q== -----END CERTIFICATE-----Generated at Mon Dec 29 03:31:02 2025 by rpki-client