This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft File: thpyv6TKq8uk7ASEE3pRb580Q0Y.mft (raw, json) Hash identifier: Cu7rrYRHnISVQ+sEbMv0I1MRpr/WtjLTVlZahvxIvQk= Subject key identifier: 63:53:62:E6:AE:02:D0:64:3D:2A:C0:4F:61:5E:B3:9A:8B:EA:FB:41 Authority key identifier: B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46 Certificate issuer: /CN=b61a72bfa4caabcba4ec0484137a516f9f344346 Certificate serial: 019B65B0D2F4DD57F550AF2B93029BE86755 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft Manifest number: 179F Signing time: Sun 28 Dec 2025 16:00:45 +0000 Manifest this update: Sun 28 Dec 2025 16:00:45 +0000 Manifest next update: Mon 29 Dec 2025 16:00:45 +0000 Files and hashes: 1: _PvMfBQqU6jjldV1ydf8UKmzB00.roa (hash: 24OxToSBrVSS6AXxMxL0W6j/CNzWhFy38ZdtMKAbWe4=) 2: thpyv6TKq8uk7ASEE3pRb580Q0Y.crl (hash: oRrPwjr4Lgp8S8Zd/ArQGspbU03qDqAAm0pskVjBjms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:b0:d2:f4:dd:57:f5:50:af:2b:93:02:9b:e8:67:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b61a72bfa4caabcba4ec0484137a516f9f344346 Validity Not Before: Dec 28 16:00:45 2025 GMT Not After : Dec 29 16:00:45 2025 GMT Subject: CN=635362e6ae02d0643d2ac04f615eb39a8beafb41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:17:cf:77:b8:25:1e:e1:e7:62:db:60:3f:a1: 77:c8:dd:6e:7a:24:af:1c:63:33:bc:af:c3:cf:21: 22:9c:a7:6e:09:28:07:07:b3:9e:00:11:86:2a:b2: 69:78:9e:04:b9:a8:f4:db:f2:d8:6f:9c:b0:c1:02: 65:fe:70:59:d6:ff:a3:6d:4c:c1:20:c4:2a:7d:86: 8f:40:c3:e0:a8:a8:6c:6e:e7:be:b1:42:00:b3:71: 64:86:08:2c:c2:ee:c1:c2:46:3e:f7:d8:5f:0d:00: 99:dc:ac:14:98:c3:f9:4f:8d:ff:1b:a8:b2:36:c5: 67:7a:75:45:0c:14:11:b1:24:04:35:61:2c:4f:08: 2b:c8:53:76:df:cd:5d:b9:d5:3d:6d:f1:e6:1b:85: 5a:64:18:74:3e:d1:f2:b6:ec:79:43:2a:36:bb:f6: 0d:f1:18:33:0a:c3:1f:a6:87:93:bd:c1:3c:86:75: 83:89:de:c8:50:35:8d:ba:96:f0:94:b0:6e:52:88: 99:98:20:5c:d8:19:18:7f:ba:ac:e9:99:da:03:f8: 65:c3:75:7e:9f:88:18:3d:03:30:1a:7c:9a:47:cf: a0:13:70:d4:8f:31:1a:bd:07:f2:c2:d8:f9:7b:d1: 6f:76:4b:97:db:02:41:c8:a4:33:3d:06:35:01:83: 21:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:53:62:E6:AE:02:D0:64:3D:2A:C0:4F:61:5E:B3:9A:8B:EA:FB:41 X509v3 Authority Key Identifier: keyid:B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:83:ad:15:fe:99:01:c0:45:b7:82:9d:96:a7:2f:f8:a8:78: df:ee:80:23:bc:cc:6b:21:98:ed:c0:ee:38:78:64:57:da:f6: 57:f4:c2:c6:a6:a2:97:f4:f4:e2:ff:14:71:6d:51:9d:61:e4: 7f:dc:a5:02:6a:33:c3:bc:58:71:cc:e3:6f:0c:62:9b:f1:ab: 05:51:01:21:7f:61:94:f7:aa:57:b5:b9:47:de:23:c2:08:3c: b1:72:0c:12:d8:7a:4f:dc:4d:8d:50:cf:bb:8e:64:a4:87:73: 48:77:3e:dd:b7:72:b5:e1:b9:70:4d:ae:f5:7e:d5:fe:fe:78: 77:a2:4d:82:6d:87:31:b2:88:c4:5a:7b:8f:c3:66:65:83:01: 8d:6e:68:d2:12:b5:07:e4:41:93:ca:32:42:2b:49:fc:a5:74: a6:5f:c3:9e:10:61:12:73:e1:3c:84:b6:84:e9:28:b0:2d:43: a3:52:ee:60:e3:aa:df:64:1b:72:ff:67:b6:8a:8f:66:79:21: ae:63:17:ce:d2:2e:5c:26:f0:c7:4e:54:1a:01:a2:b1:43:b0: db:d8:fe:7b:f1:6d:e2:55:2b:1a:c6:ce:31:49:4c:9a:18:95: 69:1b:ba:d6:7e:1b:d5:c9:27:62:b1:99:f8:fc:9b:f6:e2:c7: ea:9c:62:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlsNL03Vf1UK8rkwKb6GdVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MWE3MmJmYTRjYWFiY2JhNGVjMDQ4NDEzN2E1MTZmOWYz NDQzNDYwHhcNMjUxMjI4MTYwMDQ1WhcNMjUxMjI5MTYwMDQ1WjAzMTEwLwYDVQQD Eyg2MzUzNjJlNmFlMDJkMDY0M2QyYWMwNGY2MTVlYjM5YThiZWFmYjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhfPd7glHuHnYttgP6F3yN1ueiSv HGMzvK/DzyEinKduCSgHB7OeABGGKrJpeJ4Euaj02/LYb5ywwQJl/nBZ1v+jbUzB IMQqfYaPQMPgqKhsbue+sUIAs3Fkhggswu7BwkY+99hfDQCZ3KwUmMP5T43/G6iy NsVnenVFDBQRsSQENWEsTwgryFN2381dudU9bfHmG4VaZBh0PtHytux5Qyo2u/YN 8RgzCsMfpoeTvcE8hnWDid7IUDWNupbwlLBuUoiZmCBc2BkYf7qs6ZnaA/hlw3V+ n4gYPQMwGnyaR8+gE3DUjzEavQfywtj5e9FvdkuX2wJByKQzPQY1AYMhSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNTYuauAtBkPSrAT2Fes5qL6vtBMB8GA1UdIwQY MBaAFLYacr+kyqvLpOwEhBN6UW+fNENGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGhweXY2VEtxOHVrN0FTRUUzcFJiNTgwUTBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hMjQ4NzQtOThkMy00NzM0LThlZmEt OGMyNTNjNDU5MjcxLzEvdGhweXY2VEtxOHVrN0FTRUUzcFJiNTgwUTBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hMjQ4NzQtOThkMy00NzM0LThlZmEtOGMyNTNjNDU5Mjcx LzEvdGhweXY2VEtxOHVrN0FTRUUzcFJiNTgwUTBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYOtFf6Z AcBFt4Kdlqcv+Kh43+6AI7zMayGY7cDuOHhkV9r2V/TCxqail/T04v8UcW1RnWHk f9ylAmozw7xYcczjbwxim/GrBVEBIX9hlPeqV7W5R94jwgg8sXIMEth6T9xNjVDP u45kpIdzSHc+3bdyteG5cE2u9X7V/v54d6JNgm2HMbKIxFp7j8NmZYMBjW5o0hK1 B+RBk8oyQitJ/KV0pl/DnhBhEnPhPIS2hOkosC1Do1LuYOOq32Qbcv9ntoqPZnkh rmMXztIuXCbwx05UGgGisUOw29j+e/Ft4lUrGsbOMUlMmhiVaRu61n4b1cknYrGZ +Pyb9uLH6pxizA== -----END CERTIFICATE-----Generated at Sun Dec 28 18:51:55 2025 by rpki-client