This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft File: tPSWmNCOjCg8DfKoLxaZfmJZurY.mft (raw, json) Hash identifier: FPsNPjNmp8dYOsDXmGiw1roacWCtmh8ZoxU7QwhXRXg= Subject key identifier: 43:D3:03:21:4C:D3:2E:7F:2A:1A:9B:BC:14:76:DF:C3:0C:C6:CE:AB Authority key identifier: B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6 Certificate issuer: /CN=b4f49698d08e8c283c0df2a82f16997e6259bab6 Certificate serial: 019B3D5A1D730F211C6BB288FF6A5235C83D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft Manifest number: 0955 Signing time: Sat 20 Dec 2025 20:01:14 +0000 Manifest this update: Sat 20 Dec 2025 20:01:14 +0000 Manifest next update: Sun 21 Dec 2025 20:01:14 +0000 Files and hashes: 1: tPSWmNCOjCg8DfKoLxaZfmJZurY.crl (hash: gDFkALF1NvKEHqDThDFkTf0Bm3/mFPXoUstoRfWzJFU=) 2: xzawIGSZ9gaUq6klJYybOrl_u8k.roa (hash: 1673awjNQrA/kSjVn3AcQmjZN9mvF8MpaJPKmYa0E/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:1d:73:0f:21:1c:6b:b2:88:ff:6a:52:35:c8:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f49698d08e8c283c0df2a82f16997e6259bab6 Validity Not Before: Dec 20 20:01:14 2025 GMT Not After : Dec 21 20:01:14 2025 GMT Subject: CN=43d303214cd32e7f2a1a9bbc1476dfc30cc6ceab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:df:0d:42:ce:77:fb:b5:a3:2a:9e:bc:6c:36: ea:b4:16:d5:b9:84:25:0e:ae:f7:bb:51:24:97:4b: 42:3e:68:0c:a2:05:02:35:42:24:24:db:7b:29:80: d1:7b:e9:6e:0e:f4:4f:a2:d0:d0:0b:8f:46:c3:82: 0b:d3:48:5f:5e:03:dd:d8:d5:78:e2:d5:79:92:05: 27:5d:89:61:0d:3e:c6:a5:23:8c:8f:8f:ba:1e:8a: ea:09:a0:3e:51:82:c2:6d:2d:b1:c0:97:f5:c7:e7: ef:8a:4f:50:05:b3:10:42:e1:75:c3:a8:3c:12:df: 17:f6:1a:29:18:c3:29:c7:46:d3:72:70:de:db:f9: fe:3f:af:b0:cf:3a:00:d3:92:d8:7d:d5:14:75:f3: 39:99:6c:b4:0f:61:09:1a:23:c9:9b:12:91:c7:ad: cf:7c:ea:23:aa:29:0c:8d:64:aa:cc:4f:b9:a1:2c: 7b:bf:a3:1d:83:6a:d0:af:4f:f1:c7:63:91:3b:67: 6a:61:24:99:55:19:b8:d8:26:e7:85:1e:fb:67:ac: 8b:1f:5f:3e:c5:f2:71:3e:8f:6c:a5:19:18:e8:44: 52:c8:27:57:3c:19:49:c1:f7:5f:b7:2c:a1:99:ce: 11:93:eb:68:5e:95:a9:d3:3e:12:d1:e4:1a:ba:ce: 99:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D3:03:21:4C:D3:2E:7F:2A:1A:9B:BC:14:76:DF:C3:0C:C6:CE:AB X509v3 Authority Key Identifier: keyid:B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:98:06:ad:b2:17:74:9b:d7:a1:42:c3:4c:01:7a:5a:55:2d: d4:fb:b3:ea:7f:52:95:61:19:b9:3b:e3:7e:5e:ea:d6:ba:35: aa:ee:cf:1f:1d:90:6e:91:d2:79:27:f1:a8:08:7f:ab:d5:ef: 93:2a:b5:15:03:a0:47:fa:64:f0:8e:32:7b:3d:ef:10:12:06: 87:b4:8a:7b:db:6a:4b:08:9d:97:4c:7f:8c:0a:e3:6c:ac:08: c7:55:40:c1:51:f5:c4:c7:e5:80:c7:d9:23:54:89:5a:07:cf: ba:e4:a9:51:21:38:4d:83:4e:be:a6:ff:60:4a:a5:42:cc:8d: 7c:71:b8:91:eb:55:21:8a:bf:83:f2:07:89:af:58:de:65:60: 07:32:2e:c6:31:61:a7:63:c7:83:8f:48:42:1b:7e:72:fb:84: 41:99:7d:72:1e:30:a3:ab:4f:d6:b2:ff:3d:7b:44:fc:f3:57: 08:48:83:cc:74:b2:2a:f0:f0:bd:fa:4e:f7:af:43:c0:ca:7a: d5:51:0a:cf:df:03:03:d9:ed:7a:28:ff:fe:d3:66:45:86:9f: 95:6c:91:16:01:cd:c4:6b:bd:9f:35:38:66:3a:00:6e:0a:04: b5:45:ab:0a:1a:2f:59:90:9f:53:3b:7e:10:cf:65:af:fd:4b: 71:1c:73:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wh1zDyEca7KI/2pSNcg9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZjQ5Njk4ZDA4ZThjMjgzYzBkZjJhODJmMTY5OTdlNjI1 OWJhYjYwHhcNMjUxMjIwMjAwMTE0WhcNMjUxMjIxMjAwMTE0WjAzMTEwLwYDVQQD Eyg0M2QzMDMyMTRjZDMyZTdmMmExYTliYmMxNDc2ZGZjMzBjYzZjZWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot8NQs53+7WjKp68bDbqtBbVuYQl Dq73u1Ekl0tCPmgMogUCNUIkJNt7KYDRe+luDvRPotDQC49Gw4IL00hfXgPd2NV4 4tV5kgUnXYlhDT7GpSOMj4+6HorqCaA+UYLCbS2xwJf1x+fvik9QBbMQQuF1w6g8 Et8X9hopGMMpx0bTcnDe2/n+P6+wzzoA05LYfdUUdfM5mWy0D2EJGiPJmxKRx63P fOojqikMjWSqzE+5oSx7v6Mdg2rQr0/xx2ORO2dqYSSZVRm42CbnhR77Z6yLH18+ xfJxPo9spRkY6ERSyCdXPBlJwfdftyyhmc4Rk+toXpWp0z4S0eQaus6ZtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPTAyFM0y5/KhqbvBR238MMxs6rMB8GA1UdIwQY MBaAFLT0lpjQjowoPA3yqC8WmX5iWbq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBTV21OQ09qQ2c4RGZLb0x4YVpmbUpadXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mNjNkNzYtMmZiNi00M2EyLWJmZWMt OWY3YWEwOTQzMDNiLzEvdFBTV21OQ09qQ2c4RGZLb0x4YVpmbUpadXJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mNjNkNzYtMmZiNi00M2EyLWJmZWMtOWY3YWEwOTQzMDNi LzEvdFBTV21OQ09qQ2c4RGZLb0x4YVpmbUpadXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApgGrbIX dJvXoULDTAF6WlUt1Puz6n9SlWEZuTvjfl7q1ro1qu7PHx2QbpHSeSfxqAh/q9Xv kyq1FQOgR/pk8I4yez3vEBIGh7SKe9tqSwidl0x/jArjbKwIx1VAwVH1xMflgMfZ I1SJWgfPuuSpUSE4TYNOvqb/YEqlQsyNfHG4ketVIYq/g/IHia9Y3mVgBzIuxjFh p2PHg49IQht+cvuEQZl9ch4wo6tP1rL/PXtE/PNXCEiDzHSyKvDwvfpO969DwMp6 1VEKz98DA9nteij//tNmRYaflWyRFgHNxGu9nzU4ZjoAbgoEtUWrChovWZCfUzt+ EM9lr/1LcRxzVw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:41:44 2025 by rpki-client