This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft File: tF9VYNefBKktehUPPtjaQwir6jM.mft (raw, json) Hash identifier: GjIufvaTWmM/zoPaE5gut7L+fZAq0tcKZCnbxxb5+/I= Subject key identifier: C9:2E:BB:BA:AD:AE:BC:CA:B8:40:F4:87:BD:D1:2A:3B:7C:E7:68:6F Authority key identifier: B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33 Certificate issuer: /CN=b45f5560d79f04a92d7a150f3ed8da4308abea33 Certificate serial: 019B311EA6BEAC594BF7C04030683DA2E261 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft Manifest number: 130A Signing time: Thu 18 Dec 2025 11:00:50 +0000 Manifest this update: Thu 18 Dec 2025 11:00:50 +0000 Manifest next update: Fri 19 Dec 2025 11:00:50 +0000 Files and hashes: 1: rFHksT2fJAQ7epdh-sMDgGR2SM4.roa (hash: Z/iFpAzmqAm2KrlQVqRFy4X3KTo7SXYWoBA5a7g2HG4=) 2: tF9VYNefBKktehUPPtjaQwir6jM.crl (hash: flSJWrHKyUppmhakfpZQw4MSPSKQdwFwolZI/EJOlzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1e:a6:be:ac:59:4b:f7:c0:40:30:68:3d:a2:e2:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45f5560d79f04a92d7a150f3ed8da4308abea33 Validity Not Before: Dec 18 11:00:50 2025 GMT Not After : Dec 19 11:00:50 2025 GMT Subject: CN=c92ebbbaadaebccab840f487bdd12a3b7ce7686f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:09:ae:ab:29:9c:af:f0:12:35:99:7d:04: 5d:d8:07:fe:01:2a:67:12:44:45:03:2e:e1:dd:ef: c2:05:13:9b:e0:c7:9e:fb:4d:31:8b:bd:83:aa:3e: 23:8e:08:f2:b7:81:24:0d:43:5f:06:61:ca:40:56: b9:91:d6:a5:94:ac:6d:ab:47:db:07:0f:0f:18:fe: 46:14:5a:0b:e9:09:06:a3:f3:3e:02:5d:96:f2:af: be:8a:95:77:dd:4c:7c:72:70:e3:f7:6e:9d:86:fc: e3:95:54:f1:94:f7:ca:32:06:84:a1:a5:b5:2e:6f: 1f:96:aa:ea:d9:51:99:b0:fc:e4:5c:26:3f:bf:c8: 75:c6:81:a4:66:9f:12:07:d3:57:3d:8d:6f:6f:5f: fe:77:59:2d:08:d5:b3:aa:8e:63:36:1d:eb:cf:38: be:fc:e4:9e:39:2c:ee:54:83:bc:51:75:a9:ec:e1: 24:b6:69:65:4a:6f:78:fe:50:ee:04:8d:17:a2:f8: 98:1b:39:c0:b5:f2:1d:92:2e:6a:3d:af:d8:12:67: 4b:09:26:7b:30:d7:3f:f9:4b:b0:d0:2c:52:79:72: 5d:c7:48:77:f5:98:f0:5e:fc:a2:e8:d1:65:36:e4: e6:11:c0:b9:ca:12:e7:62:cf:89:7c:64:9f:06:fd: 4d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2E:BB:BA:AD:AE:BC:CA:B8:40:F4:87:BD:D1:2A:3B:7C:E7:68:6F X509v3 Authority Key Identifier: keyid:B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:bc:f8:dd:91:c1:4c:4a:b4:74:8a:45:30:81:87:05:c0:da: 0f:b5:51:2c:56:23:a0:77:31:e3:39:df:a9:0c:d2:8c:0e:bb: a0:8e:4f:9c:93:d9:00:71:38:f3:e9:16:ac:15:42:2d:56:b9: 85:e6:88:f6:33:74:c1:c4:18:06:12:71:70:28:88:ee:eb:79: f3:91:e1:b6:17:6f:46:89:57:02:71:bc:f2:9c:d8:85:f9:b1: c7:f1:c1:27:97:8f:64:51:14:db:5d:70:7c:1e:fb:e2:40:6e: 4c:6f:a3:30:1c:c5:19:c1:ee:b6:2f:a2:4f:d5:72:6a:48:eb: ed:7b:fb:43:58:1c:3c:f6:3d:3b:2e:ee:59:f0:14:29:a0:a1: 90:25:97:b4:0a:cb:11:d3:0d:70:7c:41:bd:47:2b:70:8f:1d: af:27:d9:67:0e:87:d4:3a:c1:bd:0b:23:76:08:a7:bc:af:31: 6a:72:bf:55:93:42:e0:8a:c6:2d:1f:3d:ab:1c:7e:7d:9c:f8: 4a:a6:37:be:d4:40:6b:5c:cc:b9:4d:d7:f1:82:5c:c6:31:d4: e8:45:6f:3e:65:f7:79:e7:1c:c1:06:b5:74:16:af:c4:91:a7: 43:30:3c:83:6c:49:60:c2:f5:0a:a6:0d:28:9b:33:71:8d:89: 8d:43:b2:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHqa+rFlL98BAMGg9ouJhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NWY1NTYwZDc5ZjA0YTkyZDdhMTUwZjNlZDhkYTQzMDhh YmVhMzMwHhcNMjUxMjE4MTEwMDUwWhcNMjUxMjE5MTEwMDUwWjAzMTEwLwYDVQQD EyhjOTJlYmJiYWFkYWViY2NhYjg0MGY0ODdiZGQxMmEzYjdjZTc2ODZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshIJrqspnK/wEjWZfQRd2Af+ASpn EkRFAy7h3e/CBROb4Mee+00xi72Dqj4jjgjyt4EkDUNfBmHKQFa5kdallKxtq0fb Bw8PGP5GFFoL6QkGo/M+Al2W8q++ipV33Ux8cnDj926dhvzjlVTxlPfKMgaEoaW1 Lm8flqrq2VGZsPzkXCY/v8h1xoGkZp8SB9NXPY1vb1/+d1ktCNWzqo5jNh3rzzi+ /OSeOSzuVIO8UXWp7OEktmllSm94/lDuBI0XoviYGznAtfIdki5qPa/YEmdLCSZ7 MNc/+Uuw0CxSeXJdx0h39ZjwXvyi6NFlNuTmEcC5yhLnYs+JfGSfBv1NawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkuu7qtrrzKuED0h73RKjt852hvMB8GA1UdIwQY MBaAFLRfVWDXnwSpLXoVDz7Y2kMIq+ozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEY5VllOZWZCS2t0ZWhVUFB0amFRd2lyNmpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83YjE2OWQtZmMwOS00OWJiLTk2Njkt YzMyMjI0NzRlZWYxLzEvdEY5VllOZWZCS2t0ZWhVUFB0amFRd2lyNmpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy83YjE2OWQtZmMwOS00OWJiLTk2NjktYzMyMjI0NzRlZWYx LzEvdEY5VllOZWZCS2t0ZWhVUFB0amFRd2lyNmpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLz43ZHB TEq0dIpFMIGHBcDaD7VRLFYjoHcx4znfqQzSjA67oI5PnJPZAHE48+kWrBVCLVa5 heaI9jN0wcQYBhJxcCiI7ut585HhthdvRolXAnG88pzYhfmxx/HBJ5ePZFEU211w fB774kBuTG+jMBzFGcHuti+iT9Vyakjr7Xv7Q1gcPPY9Oy7uWfAUKaChkCWXtArL EdMNcHxBvUcrcI8dryfZZw6H1DrBvQsjdginvK8xanK/VZNC4IrGLR89qxx+fZz4 SqY3vtRAa1zMuU3X8YJcxjHU6EVvPmX3eeccwQa1dBavxJGnQzA8g2xJYML1CqYN KJszcY2JjUOyiw== -----END CERTIFICATE-----Generated at Thu Dec 18 18:35:11 2025 by rpki-client