This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: zA77fOrzJFXmfLL1pGETw58R7VdVrTvpH7+jQ5+Dxek= Subject key identifier: F4:02:2E:8F:C4:DB:45:AB:19:59:79:8D:6E:22:57:BC:16:51:27:EA Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 019B465D4C288B48487138847FD8E36BC64B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 17A2 Signing time: Mon 22 Dec 2025 14:01:17 +0000 Manifest this update: Mon 22 Dec 2025 14:01:17 +0000 Manifest next update: Tue 23 Dec 2025 14:01:17 +0000 Files and hashes: 1: 2zBG6wv0zKBe2XlbGkfLL9rOdtY.roa (hash: lxNpEB+wfb/SASGgTTjYX3zTxUdrCP8FyxAXU//G0JE=) 2: 60ZaPiBpi8SxBTjOjQUT9FiEU2Q.roa (hash: +EenJI8/Zu0itO/r18F94M+NWWU8CW03dUIDwunEbUc=) 3: EU2O-Gd0BV713EAdFoGJuGMnLgQ.roa (hash: DIGhFlsty46rXCRlbLUopCZPIy0Ap7bO0kln0jsUUZQ=) 4: O3sXFCWDkxRLQArJVgciZYJOH2k.roa (hash: wEiLpu8rEygqvBvHCRoBqicZ9xgf2J+eV7J8nj+KxjA=) 5: ZjHl0XpQM8CCJz6Om67G0wOmvS4.roa (hash: xCetPcOL8RFsZEGexQBgMW05eQfuM1TVnSNp6oyXZtQ=) 6: d8mFLNhZassFfsIT0V6Pg-FoNgA.roa (hash: G1lxk+WJgE19vtZBUhgAhwauP4CikNyKzPmcQ0hwXlc=) 7: dEvm44MVXindQlOEmPEQUDFIhOs.roa (hash: dVgBBC/Rmim2eB3c1PNCO34aKUguzhPQDH4vqUewLA0=) 8: l1wLvb6NKoGEYg4t8n0m6fJ0nkM.roa (hash: ql0IO639qJqy1cMjdHcoEEjUejhdun3XvEvt+WT91vI=) 9: nf_J-Be6PvK26ukKjJl6IQe1MJY.roa (hash: 0NfHfYZttT9eDOJu1RyDhX+/FDw371Nzr/BlGE9d+BA=) 10: sAE-Hl68vnhnSeOEkdOvbCITI3s.roa (hash: +zv5NFL3GNnw57mEaHIY7DHrB2enuzSZniAXWNA14go=) 11: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: dinDB4vfl/SY+G++q/hgjxz/EyKrhDls2YrJPoVTZmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5d:4c:28:8b:48:48:71:38:84:7f:d8:e3:6b:c6:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Dec 22 14:01:17 2025 GMT Not After : Dec 23 14:01:17 2025 GMT Subject: CN=f4022e8fc4db45ab1959798d6e2257bc165127ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d6:3f:c3:61:f9:00:8f:56:48:e9:bc:f2:4c: a7:5a:26:90:91:7e:b2:58:9f:94:92:6a:bc:69:84: 0d:6b:a3:a8:d0:c7:3f:04:b8:ce:07:99:e4:c7:14: 74:52:5d:ac:cd:fc:9e:c6:1a:eb:dc:6b:7a:bf:22: 82:31:07:62:0c:43:88:1c:9e:9d:d1:60:87:f0:04: 96:3a:bc:26:b7:b7:46:3a:f3:13:a4:5e:05:d1:f1: 30:8e:3d:9e:6a:e0:ac:55:d3:38:20:e0:81:ca:c9: 12:e4:4c:d5:b5:90:80:32:f7:4f:d9:83:e4:31:17: 0e:57:40:40:63:52:77:de:3e:8e:4f:35:36:5f:14: 15:10:29:8b:d6:43:54:22:90:02:cc:5b:25:66:32: dc:38:d2:5b:00:63:a1:68:47:3d:a7:ae:18:8f:51: 22:c1:db:bd:dc:2d:a3:d3:b9:89:cb:89:b8:22:14: cb:b8:76:e2:9a:96:9f:c3:a1:bb:85:39:b7:4d:0c: 09:eb:6c:fb:6c:89:21:8a:0c:7e:ca:7d:5a:d9:20: 22:98:13:29:16:25:8c:5e:f2:d6:21:24:b5:27:3d: 1c:37:48:6a:e2:d1:1a:42:1b:ab:48:ef:41:2a:ef: 02:1a:fa:a4:0d:1c:1b:2c:28:36:2d:e2:d6:ff:ed: 35:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:02:2E:8F:C4:DB:45:AB:19:59:79:8D:6E:22:57:BC:16:51:27:EA X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:91:2e:0e:a6:94:a7:c1:82:c8:f7:2e:d2:70:8e:f8:c6:2f: c5:bc:e3:77:e3:b7:d1:15:5d:c9:c6:db:f9:bf:dd:8b:f9:be: 99:fd:01:62:8f:95:40:c0:0b:ea:c3:e7:bb:de:46:a8:d6:47: 66:1e:f3:09:3d:d9:19:bf:95:4c:11:d2:de:91:d3:5c:7e:02: e6:02:4c:8c:cb:b4:d2:80:02:ad:d4:c2:1a:0d:86:d6:16:87: cc:10:96:18:26:01:17:b2:d4:65:5c:32:63:6e:a7:d8:68:06: e8:b3:99:cd:49:c8:2c:ba:cd:e9:af:35:bb:08:01:4f:9a:ac: 54:8a:34:47:54:97:6d:9f:37:7f:db:b6:e7:dc:5f:d4:93:40: ee:a8:b6:4c:1a:d4:3c:72:46:41:1d:3a:5e:32:6b:fc:30:4b: 3b:25:71:d7:ce:b1:ca:4b:ed:3c:18:07:9d:00:da:be:5d:e9: be:0b:f5:55:62:c4:ef:41:69:4b:77:4c:47:29:c8:f6:dc:0b: 1c:5d:33:36:37:a4:2a:8d:0f:75:eb:48:a7:4b:a1:74:06:bb: 1a:d6:cb:e2:4c:be:6a:ba:82:25:25:08:34:7e:f4:14:fa:2d: 34:44:31:69:b4:80:43:26:66:5c:cf:b6:dd:de:8e:00:d1:36: a0:26:fc:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXUwoi0hIcTiEf9jja8ZLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjUxMjIyMTQwMTE3WhcNMjUxMjIzMTQwMTE3WjAzMTEwLwYDVQQD EyhmNDAyMmU4ZmM0ZGI0NWFiMTk1OTc5OGQ2ZTIyNTdiYzE2NTEyN2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdY/w2H5AI9WSOm88kynWiaQkX6y WJ+Ukmq8aYQNa6Oo0Mc/BLjOB5nkxxR0Ul2szfyexhrr3Gt6vyKCMQdiDEOIHJ6d 0WCH8ASWOrwmt7dGOvMTpF4F0fEwjj2eauCsVdM4IOCByskS5EzVtZCAMvdP2YPk MRcOV0BAY1J33j6OTzU2XxQVECmL1kNUIpACzFslZjLcONJbAGOhaEc9p64Yj1Ei wdu93C2j07mJy4m4IhTLuHbimpafw6G7hTm3TQwJ62z7bIkhigx+yn1a2SAimBMp FiWMXvLWISS1Jz0cN0hq4tEaQhurSO9BKu8CGvqkDRwbLCg2LeLW/+01ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQCLo/E20WrGVl5jW4iV7wWUSfqMB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5EuDqaU p8GCyPcu0nCO+MYvxbzjd+O30RVdycbb+b/di/m+mf0BYo+VQMAL6sPnu95GqNZH Zh7zCT3ZGb+VTBHS3pHTXH4C5gJMjMu00oACrdTCGg2G1haHzBCWGCYBF7LUZVwy Y26n2GgG6LOZzUnILLrN6a81uwgBT5qsVIo0R1SXbZ83f9u259xf1JNA7qi2TBrU PHJGQR06XjJr/DBLOyVx186xykvtPBgHnQDavl3pvgv1VWLE70FpS3dMRynI9twL HF0zNjekKo0PdetIp0uhdAa7GtbL4ky+arqCJSUINH70FPotNEQxabSAQyZmXM+2 3d6OANE2oCb8BA== -----END CERTIFICATE-----Generated at Mon Dec 22 22:53:28 2025 by rpki-client