This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft File: tkB0qoRJgw2psgs6-waC08Ay-f4.mft (raw, json) Hash identifier: lpY6cDPq/M84/t2vPVxP2uWP1FLDSxIijUlauy0AZPc= Subject key identifier: 03:E8:FF:2C:5D:E1:58:0E:18:51:1A:65:61:26:68:71:7B:9F:37:39 Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe Certificate serial: 019B48B8DF4224E28054C286CB42C173C771 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft Manifest number: 1796 Signing time: Tue 23 Dec 2025 01:00:33 +0000 Manifest this update: Tue 23 Dec 2025 01:00:33 +0000 Manifest next update: Wed 24 Dec 2025 01:00:33 +0000 Files and hashes: 1: BdOIN-x7p5NQNZFat3HBRk8aNP8.roa (hash: E6O+SQKCroETYNOj7yjRqDXwGgY2i2+LPEeaEfVM6HA=) 2: SvbWjBtA5USrFJEFyfsvP-SCofs.roa (hash: La++FukCI88aoCCAWTG9ojz1zryPe+WC1BNRSElIvDw=) 3: ZqMh09XL_OuL0ICq-TfvGdj4pmM.roa (hash: l5g5wXS3ZWKojPoOXqpehHnI+SHAfeYcurBv6Xo/WU8=) 4: tkB0qoRJgw2psgs6-waC08Ay-f4.crl (hash: my8qiG+bqk6hJcIUtAvOU6QVwiEyOIOEfNVl1GuP6SY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b8:df:42:24:e2:80:54:c2:86:cb:42:c1:73:c7:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe Validity Not Before: Dec 23 01:00:33 2025 GMT Not After : Dec 24 01:00:33 2025 GMT Subject: CN=03e8ff2c5de1580e18511a65612668717b9f3739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:2c:54:9f:09:d2:5b:b2:b2:77:cf:b6:6a: 00:72:00:10:ca:3b:17:ab:65:dc:98:f0:0c:a0:fd: 1d:d6:b7:e9:53:a0:0a:48:5e:02:c9:4c:00:27:c3: db:2a:ae:a3:99:ce:85:dc:57:04:c3:66:99:fd:5c: 3c:31:a2:90:ec:b3:71:2e:69:ff:09:cb:ad:2f:77: b9:cf:4a:53:fd:4c:51:7c:03:71:78:b7:19:60:d4: 26:d3:ee:bc:b2:67:ea:33:b3:ba:f1:11:c0:ea:03: cb:e2:5b:fa:69:53:c7:d4:f1:65:a1:73:40:84:b1: 9b:39:62:b5:bc:6c:c2:c0:2d:77:59:5e:9c:55:b9: e0:60:47:c6:9a:f0:43:94:5f:25:3a:f0:c8:62:a3: b2:8e:00:fb:9b:75:a1:ce:5f:5c:69:7a:44:5b:ac: 75:c8:e6:2e:8b:48:2e:95:c8:50:90:44:e3:ef:f2: 69:c1:80:dd:53:2c:0b:16:1f:0e:6a:8f:6f:f9:be: 1e:5f:76:01:47:52:58:d8:93:e1:3a:74:d7:78:b9: 04:f7:1a:50:6d:1a:8c:c7:00:6c:bb:92:48:70:55: d6:61:da:af:4e:07:22:c9:61:b3:de:0e:5a:66:44: 94:6f:f8:10:45:48:37:47:f1:c4:7d:5a:dc:4e:44: c8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E8:FF:2C:5D:E1:58:0E:18:51:1A:65:61:26:68:71:7B:9F:37:39 X509v3 Authority Key Identifier: keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:41:0c:f1:97:dc:1d:22:0e:97:f6:08:43:b7:4d:53:f9:3f: c0:97:36:d1:f5:da:54:c4:70:92:13:63:3a:7e:74:04:4a:65: aa:32:91:cc:ef:6f:85:42:2a:d7:01:94:6a:21:9a:5b:b9:f3: 50:68:cd:09:a1:e1:c8:7c:9c:c1:04:44:37:72:5c:d4:7c:fc: 27:bb:24:bb:af:a7:66:36:70:7b:dc:62:c2:2b:b1:9e:e1:6b: 24:02:21:e6:e9:38:f7:cf:39:22:cd:a6:c0:df:da:01:02:ed: 5e:ad:e7:8c:ee:73:55:2c:fb:33:cc:87:5c:c2:78:29:ba:10: 6f:e2:0d:9f:40:85:03:a7:d3:5b:d3:11:2f:77:9d:fc:d9:02: 62:f3:3a:e5:b7:4d:e9:eb:dd:33:23:bf:31:b8:9f:28:bb:be: 7e:a6:f2:3c:60:b7:1d:03:0f:79:12:18:b3:34:99:7b:4f:db: d4:66:b4:57:91:a5:df:db:d0:3e:b7:40:24:b5:ca:e8:89:46: b8:03:4c:d9:64:e2:f3:85:7d:9c:06:ba:fe:97:7d:2e:07:3f: 70:f2:b9:3d:2d:57:83:a1:12:6c:a0:f3:9f:52:22:d9:d9:3e: 9e:62:1d:a9:a5:14:a1:89:c8:f4:80:af:54:d0:b6:9e:0f:83: 7d:64:a1:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuN9CJOKAVMKGy0LBc8dxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NDA3NGFhODQ0OTgzMGRhOWIyMGIzYWZiMDY4MmQzYzAz MmY5ZmUwHhcNMjUxMjIzMDEwMDMzWhcNMjUxMjI0MDEwMDMzWjAzMTEwLwYDVQQD EygwM2U4ZmYyYzVkZTE1ODBlMTg1MTFhNjU2MTI2Njg3MTdiOWYzNzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoIsVJ8J0luysnfPtmoAcgAQyjsX q2XcmPAMoP0d1rfpU6AKSF4CyUwAJ8PbKq6jmc6F3FcEw2aZ/Vw8MaKQ7LNxLmn/ CcutL3e5z0pT/UxRfANxeLcZYNQm0+68smfqM7O68RHA6gPL4lv6aVPH1PFloXNA hLGbOWK1vGzCwC13WV6cVbngYEfGmvBDlF8lOvDIYqOyjgD7m3Whzl9caXpEW6x1 yOYui0gulchQkETj7/JpwYDdUywLFh8Oao9v+b4eX3YBR1JY2JPhOnTXeLkE9xpQ bRqMxwBsu5JIcFXWYdqvTgciyWGz3g5aZkSUb/gQRUg3R/HEfVrcTkTINwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPo/yxd4VgOGFEaZWEmaHF7nzc5MB8GA1UdIwQY MBaAFLZAdKqESYMNqbILOvsGgtPAMvn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mYzdjODItMzE1OS00ZDU0LWEwYTEt MzUxNzFhZWRkMzEzLzEvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mYzdjODItMzE1OS00ZDU0LWEwYTEtMzUxNzFhZWRkMzEz LzEvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0EM8Zfc HSIOl/YIQ7dNU/k/wJc20fXaVMRwkhNjOn50BEplqjKRzO9vhUIq1wGUaiGaW7nz UGjNCaHhyHycwQREN3Jc1Hz8J7sku6+nZjZwe9xiwiuxnuFrJAIh5uk49885Is2m wN/aAQLtXq3njO5zVSz7M8yHXMJ4KboQb+INn0CFA6fTW9MRL3ed/NkCYvM65bdN 6evdMyO/MbifKLu+fqbyPGC3HQMPeRIYszSZe0/b1Ga0V5Gl39vQPrdAJLXK6IlG uANM2WTi84V9nAa6/pd9Lgc/cPK5PS1Xg6ESbKDzn1Ii2dk+nmIdqaUUoYnI9ICv VNC2ng+DfWShAw== -----END CERTIFICATE-----Generated at Tue Dec 23 02:40:06 2025 by rpki-client