This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft File: tVG7qYKf51krGwLo1xyP18ziGrE.mft (raw, json) Hash identifier: 2FXPbxWz9kMkhgko87ojHx8Ur5PHRzuIovai4y37EGY= Subject key identifier: D4:46:C5:FC:81:78:57:DE:A8:7C:78:AC:52:A2:E3:2E:FC:43:99:57 Authority key identifier: B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1 Certificate issuer: /CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1 Certificate serial: 019B3DFEB189B564DFEF4B59497296066A9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft Manifest number: 016E Signing time: Sat 20 Dec 2025 23:01:00 +0000 Manifest this update: Sat 20 Dec 2025 23:01:00 +0000 Manifest next update: Sun 21 Dec 2025 23:01:00 +0000 Files and hashes: 1: aMimPGKaT2G8XuuZ7-2O1Nh1hh8.roa (hash: k/8LZ3MzLnclzjgMcW5jgVcEL+c+Ow+osyP79ShIXpk=) 2: tVG7qYKf51krGwLo1xyP18ziGrE.crl (hash: 1BfEOMkFMdDI78rhHk2xkhGInJ5lXOVrIDyjfTtOSvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:b1:89:b5:64:df:ef:4b:59:49:72:96:06:6a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1 Validity Not Before: Dec 20 23:01:00 2025 GMT Not After : Dec 21 23:01:00 2025 GMT Subject: CN=d446c5fc817857dea87c78ac52a2e32efc439957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fa:da:f6:1a:91:82:04:30:76:ad:0a:3c:53: ba:2e:71:bf:b9:dc:51:89:36:aa:3b:d4:b7:56:a4: de:e1:ad:e0:78:a3:23:7c:3a:a2:e1:33:c9:52:3e: 0c:1f:58:76:e3:84:aa:1f:19:29:5e:79:b8:91:01: 78:8d:89:09:fa:6d:95:da:80:67:9c:2b:8a:90:12: 7d:1f:a2:fe:1b:51:57:aa:01:6f:58:af:5b:0d:0c: aa:bb:81:f8:1a:8f:94:17:15:d1:20:e5:d2:d3:aa: 50:60:1f:4d:26:19:2e:98:1b:3f:00:f4:0c:59:7c: 81:35:5f:91:e8:63:53:3a:e8:9e:0b:7c:ba:78:de: 00:f7:cf:57:0d:53:ea:61:ba:72:39:10:ee:1a:e1: c1:20:a1:ec:d8:6f:ab:a1:34:4c:68:e8:81:54:84: 27:9c:ef:40:ef:b7:82:95:4b:e2:e2:6d:33:fc:20: 32:05:4c:56:0f:2b:12:88:37:5d:74:02:a8:8f:97: ff:7b:ee:5c:99:ea:63:a0:09:fb:e4:fe:8d:d9:16: 04:b4:37:73:3e:d2:7a:23:00:cd:15:cb:69:24:bb: 97:63:42:e8:21:f7:0f:a1:e4:b1:71:c4:b7:45:ef: 74:56:a9:b0:f6:bf:fb:04:66:e7:bd:d7:91:d4:a6: f1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:46:C5:FC:81:78:57:DE:A8:7C:78:AC:52:A2:E3:2E:FC:43:99:57 X509v3 Authority Key Identifier: keyid:B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:01:59:84:ae:42:a0:48:42:c6:33:6a:27:18:f1:1e:09:5b: ca:eb:e5:32:8b:1c:10:21:82:5f:4d:e7:3a:6b:9f:5c:b2:ed: 9a:9f:31:52:e6:43:1e:d1:1c:5e:bb:50:d9:1f:6a:57:b6:48: 12:4a:12:33:ad:18:14:e9:8a:3b:dd:af:d5:f3:ce:e4:87:45: 24:26:51:64:2f:b8:54:b6:b3:20:a4:71:de:6e:16:4b:fb:d2: e9:c0:a1:34:f4:d0:e2:27:63:4e:8a:dd:36:83:fd:22:d5:44: 6e:f1:62:f1:a5:40:ac:70:0d:2a:23:1c:fe:bd:e9:99:ec:47: bf:d9:6c:b8:7c:6e:35:50:60:8a:eb:12:eb:cf:2b:a8:01:77: 83:f4:16:a1:eb:57:e1:07:e2:87:76:f7:2f:bf:5a:61:6e:c9: fd:d0:6d:40:93:5c:8a:81:2c:6e:97:25:67:27:d3:0f:25:eb: c5:52:ae:10:4e:dc:46:7f:89:08:b3:a5:b2:6f:6d:55:a5:91: 74:23:02:cf:14:31:2e:92:46:a2:b9:e5:37:05:11:6a:aa:be: b8:38:8e:a8:1d:53:0f:3f:c4:ce:6b:72:08:64:91:77:35:c7: 78:60:87:e0:97:7c:95:e0:1c:3f:92:24:d5:17:4f:8a:5c:c6: d7:0c:90:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/rGJtWTf70tZSXKWBmqbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTFiYmE5ODI5ZmU3NTkyYjFiMDJlOGQ3MWM4ZmQ3Y2Nl MjFhYjEwHhcNMjUxMjIwMjMwMTAwWhcNMjUxMjIxMjMwMTAwWjAzMTEwLwYDVQQD EyhkNDQ2YzVmYzgxNzg1N2RlYTg3Yzc4YWM1MmEyZTMyZWZjNDM5OTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/ra9hqRggQwdq0KPFO6LnG/udxR iTaqO9S3VqTe4a3geKMjfDqi4TPJUj4MH1h244SqHxkpXnm4kQF4jYkJ+m2V2oBn nCuKkBJ9H6L+G1FXqgFvWK9bDQyqu4H4Go+UFxXRIOXS06pQYB9NJhkumBs/APQM WXyBNV+R6GNTOuieC3y6eN4A989XDVPqYbpyORDuGuHBIKHs2G+roTRMaOiBVIQn nO9A77eClUvi4m0z/CAyBUxWDysSiDdddAKoj5f/e+5cmepjoAn75P6N2RYEtDdz PtJ6IwDNFctpJLuXY0LoIfcPoeSxccS3Re90Vqmw9r/7BGbnvdeR1KbxXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRGxfyBeFfeqHx4rFKi4y78Q5lXMB8GA1UdIwQY MBaAFLVRu6mCn+dZKxsC6Nccj9fM4hqxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZHN3FZS2Y1MWtyR3dMbzF4eVAxOHppR3JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iNWQ5NTUtYzdmOC00NjNmLTgxNWEt NGViOTkyMjg2MGNkLzEvdFZHN3FZS2Y1MWtyR3dMbzF4eVAxOHppR3JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9iNWQ5NTUtYzdmOC00NjNmLTgxNWEtNGViOTkyMjg2MGNk LzEvdFZHN3FZS2Y1MWtyR3dMbzF4eVAxOHppR3JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAFZhK5C oEhCxjNqJxjxHglbyuvlMoscECGCX03nOmufXLLtmp8xUuZDHtEcXrtQ2R9qV7ZI EkoSM60YFOmKO92v1fPO5IdFJCZRZC+4VLazIKRx3m4WS/vS6cChNPTQ4idjTord NoP9ItVEbvFi8aVArHANKiMc/r3pmexHv9lsuHxuNVBgiusS688rqAF3g/QWoetX 4Qfih3b3L79aYW7J/dBtQJNcioEsbpclZyfTDyXrxVKuEE7cRn+JCLOlsm9tVaWR dCMCzxQxLpJGornlNwURaqq+uDiOqB1TDz/EzmtyCGSRdzXHeGCH4Jd8leAcP5Ik 1RdPilzG1wyQDA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:04:56 2025 by rpki-client