This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft File: tkB0qoRJgw2psgs6-waC08Ay-f4.mft (raw, json) Hash identifier: p524OPvP/Xzi2GxqKj3O7G1tUHhPkmmfZayg9z6cLg4= Subject key identifier: 6F:B8:B9:54:95:27:12:A4:FA:13:CF:98:E5:B6:9B:41:F4:8C:27:22 Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe Certificate serial: 019B544F8EC89569E85AD1A915D95BDC7879 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft Manifest number: 179C Signing time: Thu 25 Dec 2025 07:00:58 +0000 Manifest this update: Thu 25 Dec 2025 07:00:58 +0000 Manifest next update: Fri 26 Dec 2025 07:00:58 +0000 Files and hashes: 1: BdOIN-x7p5NQNZFat3HBRk8aNP8.roa (hash: E6O+SQKCroETYNOj7yjRqDXwGgY2i2+LPEeaEfVM6HA=) 2: SvbWjBtA5USrFJEFyfsvP-SCofs.roa (hash: La++FukCI88aoCCAWTG9ojz1zryPe+WC1BNRSElIvDw=) 3: ZqMh09XL_OuL0ICq-TfvGdj4pmM.roa (hash: l5g5wXS3ZWKojPoOXqpehHnI+SHAfeYcurBv6Xo/WU8=) 4: tkB0qoRJgw2psgs6-waC08Ay-f4.crl (hash: jghC0vOlD7dXzVxXbthu98YBN/1UuDTZRl6ml1BNIOI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 07:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:8e:c8:95:69:e8:5a:d1:a9:15:d9:5b:dc:78:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe Validity Not Before: Dec 25 07:00:58 2025 GMT Not After : Dec 26 07:00:58 2025 GMT Subject: CN=6fb8b954952712a4fa13cf98e5b69b41f48c2722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8e:9e:0c:8a:5d:4b:8c:86:9e:41:6f:1e:ee: 68:e8:2e:9c:f1:e0:25:9a:f3:60:20:6b:59:65:36: 76:4b:d1:b0:79:7c:39:6c:49:91:41:17:a1:5a:b3: 12:40:04:ed:66:28:b6:7e:a8:45:b2:18:de:de:6d: ab:fc:66:a8:85:4e:29:24:88:96:72:41:79:4b:a3: 10:08:42:93:bf:a0:51:8d:d2:2d:8c:5b:e5:83:58: a2:10:ee:97:6e:f6:82:4b:e5:3e:86:d8:49:77:ae: 0b:d8:f4:9e:17:ba:02:8a:a6:88:3f:aa:99:e5:6b: 2b:48:02:d3:94:41:40:32:d9:7d:33:15:48:6f:4c: 2f:94:b3:9f:bd:63:f2:86:58:0e:53:5a:dc:ee:2b: 58:50:4d:b5:6b:61:28:59:8e:45:c9:c0:12:20:85: cc:43:91:0e:0f:51:28:b8:08:ec:1d:41:98:4b:5c: b9:db:50:8a:4e:52:04:84:27:41:87:c9:0d:40:1c: 53:9a:f7:c6:96:18:75:67:eb:4e:66:71:85:e8:a0: 60:c4:0a:4c:28:d7:bf:32:63:0b:d6:07:b9:1d:84: 19:9c:c4:7c:cd:e0:ee:3c:39:80:65:e4:56:9d:91: de:64:3b:22:f0:fb:ad:a4:78:97:08:03:f0:0f:5c: 39:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B8:B9:54:95:27:12:A4:FA:13:CF:98:E5:B6:9B:41:F4:8C:27:22 X509v3 Authority Key Identifier: keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:42:fa:41:2c:4b:03:b5:07:7a:4e:28:e4:36:6d:5a:aa:70: f4:ed:bd:07:6d:37:f6:a6:2b:a1:f4:3e:84:4b:69:79:4a:44: 7b:af:8f:93:53:6b:a9:db:3d:d9:95:e3:38:ef:54:21:b6:19: 26:d7:70:35:16:c0:44:48:c2:aa:2a:43:8b:7d:3d:87:ac:b5: 04:3a:6d:93:7a:0c:86:5b:35:d2:9f:41:30:b2:5c:3a:c7:b3: 04:48:cf:7a:c8:5c:41:33:70:30:6f:f2:81:27:35:ef:fd:1c: 3f:14:fe:13:fd:55:0c:e8:66:21:50:96:c7:ad:cb:a8:ba:bd: e0:d7:34:8c:78:f9:6b:40:b8:2f:cd:20:05:e9:f2:bf:78:43: 0a:50:87:5d:b1:3d:e0:a8:ca:33:a4:57:2c:59:b2:b3:22:d5: 1d:d1:5c:99:a9:f7:08:1c:c7:0f:8e:dc:02:ef:a7:df:cf:cc: a3:4e:45:b0:5f:28:74:03:87:af:65:bc:5d:92:79:9f:24:f6: d4:e2:03:be:16:a2:e6:d0:0f:8f:d0:56:2a:63:45:93:7f:c0: 46:99:36:d8:12:55:40:e5:85:a9:7a:18:cd:b9:b7:46:25:f8: 4e:83:cd:36:94:88:ea:fd:86:c2:47:e0:fa:5d:a4:70:b9:10: 6c:a2:77:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUT47IlWnoWtGpFdlb3Hh5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NDA3NGFhODQ0OTgzMGRhOWIyMGIzYWZiMDY4MmQzYzAz MmY5ZmUwHhcNMjUxMjI1MDcwMDU4WhcNMjUxMjI2MDcwMDU4WjAzMTEwLwYDVQQD Eyg2ZmI4Yjk1NDk1MjcxMmE0ZmExM2NmOThlNWI2OWI0MWY0OGMyNzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o6eDIpdS4yGnkFvHu5o6C6c8eAl mvNgIGtZZTZ2S9GweXw5bEmRQRehWrMSQATtZii2fqhFshje3m2r/GaohU4pJIiW ckF5S6MQCEKTv6BRjdItjFvlg1iiEO6XbvaCS+U+hthJd64L2PSeF7oCiqaIP6qZ 5WsrSALTlEFAMtl9MxVIb0wvlLOfvWPyhlgOU1rc7itYUE21a2EoWY5FycASIIXM Q5EOD1EouAjsHUGYS1y521CKTlIEhCdBh8kNQBxTmvfGlhh1Z+tOZnGF6KBgxApM KNe/MmML1ge5HYQZnMR8zeDuPDmAZeRWnZHeZDsi8PutpHiXCAPwD1w5MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+4uVSVJxKk+hPPmOW2m0H0jCciMB8GA1UdIwQY MBaAFLZAdKqESYMNqbILOvsGgtPAMvn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mYzdjODItMzE1OS00ZDU0LWEwYTEt MzUxNzFhZWRkMzEzLzEvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mYzdjODItMzE1OS00ZDU0LWEwYTEtMzUxNzFhZWRkMzEz LzEvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmUL6QSxL A7UHek4o5DZtWqpw9O29B2039qYrofQ+hEtpeUpEe6+Pk1Nrqds92ZXjOO9UIbYZ JtdwNRbAREjCqipDi309h6y1BDptk3oMhls10p9BMLJcOsezBEjPeshcQTNwMG/y gSc17/0cPxT+E/1VDOhmIVCWx63LqLq94Nc0jHj5a0C4L80gBenyv3hDClCHXbE9 4KjKM6RXLFmysyLVHdFcman3CBzHD47cAu+n38/Mo05FsF8odAOHr2W8XZJ5nyT2 1OIDvhai5tAPj9BWKmNFk3/ARpk22BJVQOWFqXoYzbm3RiX4ToPNNpSI6v2Gwkfg +l2kcLkQbKJ36Q== -----END CERTIFICATE-----Generated at Thu Dec 25 14:17:38 2025 by rpki-client