This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json) Hash identifier: ixHkNWqdwQjJeEoEAbj5p5tDabq5UM4AM/tpkySUadU= Subject key identifier: 1C:FC:DB:17:A4:4F:77:AB:91:01:31:13:6B:37:72:82:61:D3:C9:F2 Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c Certificate serial: 019B5674D5456573615C134310E5A8384E74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft Manifest number: 1797 Signing time: Thu 25 Dec 2025 17:00:55 +0000 Manifest this update: Thu 25 Dec 2025 17:00:55 +0000 Manifest next update: Fri 26 Dec 2025 17:00:55 +0000 Files and hashes: 1: 1lSa1sl-dNBGB6RIspgIufADhjs.roa (hash: ZUkq8NELozqtJDfHgnQK7IOC8L6Hnu5OT9um+2WKleM=) 2: TB1SNMK17klLvRw1OV09EGXDsjg.roa (hash: 3s2Ua7bRSNfwEdFtiO4U1p/wzm3QtvPjfYSSDJ4385k=) 3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: fIoVUnBKj5Bx/IookE0hKBO2P+SPcrC+P4KtGoxOj7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 17:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:74:d5:45:65:73:61:5c:13:43:10:e5:a8:38:4e:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c Validity Not Before: Dec 25 17:00:55 2025 GMT Not After : Dec 26 17:00:55 2025 GMT Subject: CN=1cfcdb17a44f77ab910131136b37728261d3c9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:70:65:08:7f:09:20:7f:57:cf:ef:91:4f:ff: 1a:8b:78:e5:0d:bf:6e:0a:24:8a:6f:6d:d7:fa:4e: b0:c2:3a:5a:77:26:e7:d3:9e:1b:dc:16:d0:76:85: 8d:0f:98:bd:3f:c0:a7:43:7c:60:06:fa:58:86:08: 29:67:5b:31:fe:a8:9a:c8:9c:3b:bf:85:ad:64:b1: 78:51:76:bc:f8:e4:ec:ec:7d:00:3e:1e:35:e1:98: f8:e6:74:ba:58:b0:51:c2:ad:db:63:30:78:6c:5c: e6:7c:35:02:f9:f2:b6:d3:f1:cf:57:84:b1:de:37: 45:af:e1:c6:41:56:4a:40:53:1c:3f:04:f6:ff:c1: b1:fc:75:4c:17:80:6e:64:b4:98:0e:c8:05:e0:5b: 8a:ca:33:51:ba:bb:b1:76:2b:3b:2d:37:98:37:d0: 37:ba:46:b2:8d:f2:03:0c:fb:02:81:b1:99:67:19: 53:2b:2b:dc:69:ef:be:3a:63:bc:c0:ad:8b:d7:88: 49:b4:71:7a:65:67:f4:e1:b6:23:80:f8:ad:cb:15: 6f:3a:d6:11:2f:09:b0:bb:d0:87:45:21:e3:79:ad: e0:1e:6b:6b:39:73:e1:7d:98:40:d1:70:0b:0a:86: 20:97:eb:41:76:3a:bf:43:2d:7b:b5:3e:9d:24:fd: d5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FC:DB:17:A4:4F:77:AB:91:01:31:13:6B:37:72:82:61:D3:C9:F2 X509v3 Authority Key Identifier: keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:37:43:f3:a1:af:45:e1:1f:db:7a:74:2a:f3:2e:74:21:6c: ae:f3:e0:86:c1:1e:e6:24:a5:fc:ca:5b:ed:2d:ad:dd:a9:5d: 9d:66:85:6d:18:e9:b6:77:6c:d4:9d:79:4e:05:51:2c:bd:94: 51:0e:27:0d:e8:cf:09:93:76:7e:9e:19:48:4c:8b:7a:28:3f: 03:51:2f:07:ae:e2:d1:8a:43:10:81:96:3c:bd:51:37:e2:23: bd:36:f4:94:eb:34:18:ea:21:bf:5b:45:6b:05:68:f6:72:c4: 73:92:68:b6:34:89:ce:b1:f3:09:13:1b:41:7f:1b:d9:f7:46: d9:08:6e:06:39:6f:6f:ac:68:a0:92:fe:f0:f7:77:3a:d6:89: ea:1d:11:a2:3f:10:46:ee:83:e6:17:34:7e:cd:f4:90:a3:13: f6:94:53:19:65:4f:1c:49:87:11:4a:9e:f7:a0:80:13:6d:5f: e1:44:40:00:95:8c:c8:86:86:fb:9a:e1:49:b4:2f:45:ab:9c: 3b:9a:17:bd:d0:43:cd:2b:2e:a5:69:8b:ca:7a:32:b6:ca:c4: a7:08:e8:52:84:90:4e:a9:0f:e4:93:38:7c:7b:c9:cf:98:6d: f9:24:2e:7a:3f:9b:89:a2:13:05:a9:ae:2e:90:f0:61:ec:d7: b0:77:c2:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWdNVFZXNhXBNDEOWoOE50MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1OTkwOWVkMTcxYjM4YzFmZGM0MzYyMjI5ZTc4ZDY5ODUx ZGUxMWMwHhcNMjUxMjI1MTcwMDU1WhcNMjUxMjI2MTcwMDU1WjAzMTEwLwYDVQQD EygxY2ZjZGIxN2E0NGY3N2FiOTEwMTMxMTM2YjM3NzI4MjYxZDNjOWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXBlCH8JIH9Xz++RT/8ai3jlDb9u CiSKb23X+k6wwjpadybn054b3BbQdoWND5i9P8CnQ3xgBvpYhggpZ1sx/qiayJw7 v4WtZLF4UXa8+OTs7H0APh414Zj45nS6WLBRwq3bYzB4bFzmfDUC+fK20/HPV4Sx 3jdFr+HGQVZKQFMcPwT2/8Gx/HVMF4BuZLSYDsgF4FuKyjNRuruxdis7LTeYN9A3 ukayjfIDDPsCgbGZZxlTKyvcae++OmO8wK2L14hJtHF6ZWf04bYjgPityxVvOtYR Lwmwu9CHRSHjea3gHmtrOXPhfZhA0XALCoYgl+tBdjq/Qy17tT6dJP3VAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBz82xekT3erkQExE2s3coJh08nyMB8GA1UdIwQY MBaAFLWZCe0XGzjB/cQ2IinnjWmFHeEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2Et ZmRlMDczNTg4ZjBmLzEvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2EtZmRlMDczNTg4ZjBm LzEvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjdD86Gv ReEf23p0KvMudCFsrvPghsEe5iSl/Mpb7S2t3aldnWaFbRjptnds1J15TgVRLL2U UQ4nDejPCZN2fp4ZSEyLeig/A1EvB67i0YpDEIGWPL1RN+IjvTb0lOs0GOohv1tF awVo9nLEc5JotjSJzrHzCRMbQX8b2fdG2QhuBjlvb6xooJL+8Pd3OtaJ6h0Roj8Q Ru6D5hc0fs30kKMT9pRTGWVPHEmHEUqe96CAE21f4URAAJWMyIaG+5rhSbQvRauc O5oXvdBDzSsupWmLynoytsrEpwjoUoSQTqkP5JM4fHvJz5ht+SQuej+biaITBamu LpDwYezXsHfCBQ== -----END CERTIFICATE-----Generated at Thu Dec 25 22:15:59 2025 by rpki-client