This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft File: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft (raw, json) Hash identifier: Nj61ssBvJnR8RYoh0J+XKGG8c/iz5BjL63WlXcLwLNw= Subject key identifier: B8:5A:92:A2:7F:4F:96:BD:01:ED:C7:85:79:B8:70:5B:2E:9E:D9:77 Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F Certificate issuer: /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f Certificate serial: 019B5E6583AA4789BF966DD5C5C45B7289EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft Manifest number: 179E Signing time: Sat 27 Dec 2025 06:01:09 +0000 Manifest this update: Sat 27 Dec 2025 06:01:09 +0000 Manifest next update: Sun 28 Dec 2025 06:01:09 +0000 Files and hashes: 1: A19KF2VhmqgRITxahuDcRts8KJs.roa (hash: YirbVHhxW1CKNUwQAz3dz5QapLv5A3zZT5MHBNEVZ34=) 2: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl (hash: LkdIe14x8vlU90suWxqf98W8cRayTTXjYcpvecy8d7o=) 3: tlghKI1hug3w1Vn3mY8-TRwHvyM.roa (hash: 6SDpu3HmXsvFN7j0J4OgAxM8GrLPzifIsTaLSJMzqa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:65:83:aa:47:89:bf:96:6d:d5:c5:c4:5b:72:89:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f Validity Not Before: Dec 27 06:01:09 2025 GMT Not After : Dec 28 06:01:09 2025 GMT Subject: CN=b85a92a27f4f96bd01edc78579b8705b2e9ed977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4e:ca:a4:a3:4e:d0:dd:aa:13:76:8e:55:3e: 7c:3f:b2:9d:ca:53:a8:1a:94:1b:0e:ee:2d:4a:0f: 47:e5:79:71:d3:44:a8:e1:b5:4a:66:a5:88:be:ad: c7:bc:5f:43:17:0d:c0:da:3e:fd:ec:87:6b:6e:72: 4b:25:98:0c:37:0f:02:5c:30:67:88:36:cf:97:99: ae:78:48:16:ab:0a:cc:75:26:48:3b:7e:e7:d2:2e: 7d:4f:c0:ba:19:43:f8:94:8b:63:30:49:5e:69:9d: 7f:e2:be:bc:00:28:a3:a1:67:bf:98:ce:83:43:61: b1:7d:d9:12:86:98:e8:39:c6:3b:68:8b:03:65:16: 7b:96:23:82:b8:38:4b:b1:76:57:c3:59:39:d9:91: d0:c8:27:8b:7f:6b:9e:ab:82:62:aa:2f:e5:7c:ef: 9e:51:cb:bd:01:bf:69:ba:ef:f8:c6:99:b6:7a:7a: 00:ed:b4:a9:b3:f4:be:ab:76:65:44:b7:cf:b7:d5: 5f:3e:c5:26:fd:a3:42:16:96:15:19:84:46:d7:8a: 73:a3:f4:e5:ad:a9:4c:18:6d:10:0a:fc:e3:d7:46: 73:7d:f2:88:5f:32:ea:e8:a1:eb:f4:5b:68:60:35: ec:a8:c0:bd:78:c3:b1:31:93:6d:4c:ed:66:0d:e1: 78:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5A:92:A2:7F:4F:96:BD:01:ED:C7:85:79:B8:70:5B:2E:9E:D9:77 X509v3 Authority Key Identifier: keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:de:69:f0:ac:dd:8e:0c:db:ff:f4:00:c8:2a:12:7f:b9:57: 34:e1:74:c8:4c:43:b5:1a:68:72:0e:c7:1f:df:ef:99:34:74: ab:84:03:ac:b2:8d:bf:6b:e5:31:78:68:38:15:08:c7:02:53: 80:b4:f5:cd:67:3b:7a:7b:ff:e5:f0:72:18:aa:cf:e9:00:92: 24:16:52:25:59:95:80:14:64:3c:1c:ab:e6:73:39:3f:e5:65: 82:30:2c:32:c2:a4:7e:de:e7:1a:16:b7:f4:c8:98:a8:0b:7e: f2:0b:28:14:69:84:ef:c8:41:92:7d:d3:f9:8d:e6:76:3d:8d: a6:5d:83:1a:92:c8:14:32:90:52:73:41:40:1b:f6:9a:75:e0: 23:83:66:37:82:ec:73:9b:2a:8e:5d:9c:e0:0b:98:4d:08:f4: da:7d:8e:61:a9:be:3f:bd:e3:c6:7d:c6:4b:96:3b:39:89:57: b0:bd:cc:f2:8b:ec:62:96:87:68:53:57:29:45:39:18:e8:67: f7:b8:ea:4a:92:b9:b1:07:f9:bb:ed:ec:3b:d6:e9:16:df:bf: fb:a8:51:0d:dc:f9:3d:f6:c2:66:ba:b6:54:81:a6:e1:72:3d: 66:f5:0b:08:cc:46:e4:ac:2a:43:f8:ba:a9:ce:7b:05:42:78: 6c:b1:34:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZteZYOqR4m/lm3VxcRbconuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZjBmODM4YWZiYzEzMjI2ODA1NDRlZDFjOWM1YTJiMDk5 NjVkOWYwHhcNMjUxMjI3MDYwMTA5WhcNMjUxMjI4MDYwMTA5WjAzMTEwLwYDVQQD EyhiODVhOTJhMjdmNGY5NmJkMDFlZGM3ODU3OWI4NzA1YjJlOWVkOTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw07KpKNO0N2qE3aOVT58P7KdylOo GpQbDu4tSg9H5Xlx00So4bVKZqWIvq3HvF9DFw3A2j797IdrbnJLJZgMNw8CXDBn iDbPl5mueEgWqwrMdSZIO37n0i59T8C6GUP4lItjMEleaZ1/4r68ACijoWe/mM6D Q2GxfdkShpjoOcY7aIsDZRZ7liOCuDhLsXZXw1k52ZHQyCeLf2ueq4Jiqi/lfO+e Ucu9Ab9puu/4xpm2enoA7bSps/S+q3ZlRLfPt9VfPsUm/aNCFpYVGYRG14pzo/Tl ralMGG0QCvzj10ZzffKIXzLq6KHr9FtoYDXsqMC9eMOxMZNtTO1mDeF4CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhakqJ/T5a9Ae3HhXm4cFsuntl3MB8GA1UdIwQY MBaAFLXw+DivvBMiaAVE7RycWisJll2fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGZENE9LLThFeUpvQlVUdEhKeGFLd21XWFo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zMjA1MTItOTFjYi00MzgzLTk3NjEt YTUyZGM5YzIyMDdjLzEvdGZENE9LLThFeUpvQlVUdEhKeGFLd21XWFo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8zMjA1MTItOTFjYi00MzgzLTk3NjEtYTUyZGM5YzIyMDdj LzEvdGZENE9LLThFeUpvQlVUdEhKeGFLd21XWFo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdd5p8Kzd jgzb//QAyCoSf7lXNOF0yExDtRpocg7HH9/vmTR0q4QDrLKNv2vlMXhoOBUIxwJT gLT1zWc7env/5fByGKrP6QCSJBZSJVmVgBRkPByr5nM5P+VlgjAsMsKkft7nGha3 9MiYqAt+8gsoFGmE78hBkn3T+Y3mdj2Npl2DGpLIFDKQUnNBQBv2mnXgI4NmN4Ls c5sqjl2c4AuYTQj02n2OYam+P73jxn3GS5Y7OYlXsL3M8ovsYpaHaFNXKUU5GOhn 97jqSpK5sQf5u+3sO9bpFt+/+6hRDdz5PfbCZrq2VIGm4XI9ZvULCMxG5KwqQ/i6 qc57BUJ4bLE0Dg== -----END CERTIFICATE-----Generated at Sat Dec 27 07:20:16 2025 by rpki-client