This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft File: tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json) Hash identifier: 3rGYxzqORhU6nrtmgq4rBZvsD5NG6FzXE2CDiX0u3W8= Subject key identifier: BA:B3:E8:BC:40:FC:ED:AD:0D:A3:1A:9E:08:55:C5:31:D3:EB:B8:DD Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf Certificate serial: 019B3A21B60AF3D57976CB1A6A34B9AF3D63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft Manifest number: 0DEA Signing time: Sat 20 Dec 2025 05:00:46 +0000 Manifest this update: Sat 20 Dec 2025 05:00:46 +0000 Manifest next update: Sun 21 Dec 2025 05:00:46 +0000 Files and hashes: 1: E_gpRXs1wyJj1CMrt4P6GzVFs4U.roa (hash: gqqgWP9QREPzkIwRRirj81r/4D9tgTwnunohsTpcA6w=) 2: HYQhj9GfS2VL1LGH2hoGRnAq_1g.roa (hash: vupLnnm29iaNTZjA+glh+6XHc5HkCkw1Lh/FCGeyQn4=) 3: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: O4JBPHPSOIeGhbQQ4R4vtFTLfpoRpRPrwF9NLXLtO34=) 4: zqLBYDBfWNqychEyI3nXYt2CCRQ.roa (hash: xPd7pskgYW4omSSyK6JduhnPOzmyiWl553qH0EzZiqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:b6:0a:f3:d5:79:76:cb:1a:6a:34:b9:af:3d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf Validity Not Before: Dec 20 05:00:46 2025 GMT Not After : Dec 21 05:00:46 2025 GMT Subject: CN=bab3e8bc40fcedad0da31a9e0855c531d3ebb8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2f:44:18:72:7a:f1:3c:46:68:42:a1:10:56: 5b:af:3d:8e:01:60:48:81:1d:bc:ac:93:bf:b7:d7: 1d:da:a3:97:a0:a9:24:04:57:7e:63:07:72:92:95: 9a:ef:44:eb:af:cb:83:30:e8:01:c0:d3:bc:74:a0: 49:50:2f:c6:4f:2d:e2:91:ff:58:6c:9d:42:64:4b: ab:b3:a8:31:94:ec:f5:7f:c0:ee:85:8d:63:de:68: ad:e1:07:37:cf:9d:50:c7:c7:e1:57:9d:f4:47:2d: 37:e2:7b:b4:bc:ce:a0:88:b7:d5:8d:86:17:7a:51: 00:c0:02:8a:74:03:8e:30:23:72:d6:0d:7f:02:77: 94:4c:23:7a:f5:91:2a:7f:69:f3:f6:55:96:32:9f: 34:9f:56:0c:74:58:0f:6d:1c:f5:b1:da:a4:3c:88: 53:15:0f:e1:76:41:09:8b:1b:02:b9:27:20:e5:db: e9:b4:a1:46:73:17:eb:a2:14:6f:1a:43:f8:f2:b2: 29:12:50:8e:7b:61:dd:f9:23:5f:89:f5:ce:ad:80: 32:b5:a6:98:39:6a:91:dc:ee:3e:80:96:85:59:d2: 5a:de:aa:81:f0:85:c2:06:37:9a:ce:bf:ef:ba:5b: 3a:4a:91:bb:7f:ad:16:ee:0f:1b:9d:70:0a:fc:d1: 78:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B3:E8:BC:40:FC:ED:AD:0D:A3:1A:9E:08:55:C5:31:D3:EB:B8:DD X509v3 Authority Key Identifier: keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:6e:1c:99:c0:31:c7:52:51:5d:07:1d:ac:9d:05:bc:d0:78: fe:b9:93:83:40:04:b2:b7:1d:0d:84:7a:e2:a6:df:9a:8f:b5: 31:09:36:c6:df:18:53:ef:61:c6:a9:d0:d9:15:cc:cf:e8:06: 44:9a:38:0c:04:42:20:a1:3d:e7:03:77:0f:08:ba:37:4c:00: 5e:71:9e:29:21:78:01:5f:f1:51:cb:8d:c9:30:04:b1:18:4f: 7e:30:3c:e4:59:bb:a3:03:aa:11:76:3c:d5:c8:17:68:8a:07: 99:f9:4d:cd:75:16:51:dd:0a:0c:d2:c8:27:ba:0a:ca:fb:e4: c7:2f:95:81:e1:b7:5e:f1:d6:fd:75:3f:43:3f:84:f5:65:8e: 8c:43:d1:ce:f8:5c:2e:92:98:91:46:58:fb:f3:83:60:d5:8f: db:a9:85:79:66:f8:6c:6f:1f:0a:71:db:bd:49:1b:75:ac:1a: 0a:38:95:a6:c4:41:5b:8e:42:c2:fa:42:e9:be:34:d1:98:78: 7c:1c:f1:f1:0a:69:5c:5c:78:5b:63:93:7c:95:e8:51:2e:8c: 0c:2a:12:d1:5b:8b:75:a9:2c:1f:7b:73:ae:80:80:38:c8:18: db:af:35:39:cf:d6:46:31:01:90:45:f2:c5:31:aa:35:65:93: 85:fa:cc:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IbYK89V5dssaajS5rz1jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YjBiYmQ2NDQ1NTc4ZWRiYzdiYTZiNWJmN2NhOTM2OGQy NDE3YmYwHhcNMjUxMjIwMDUwMDQ2WhcNMjUxMjIxMDUwMDQ2WjAzMTEwLwYDVQQD EyhiYWIzZThiYzQwZmNlZGFkMGRhMzFhOWUwODU1YzUzMWQzZWJiOGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS9EGHJ68TxGaEKhEFZbrz2OAWBI gR28rJO/t9cd2qOXoKkkBFd+YwdykpWa70Trr8uDMOgBwNO8dKBJUC/GTy3ikf9Y bJ1CZEurs6gxlOz1f8DuhY1j3mit4Qc3z51Qx8fhV530Ry034nu0vM6giLfVjYYX elEAwAKKdAOOMCNy1g1/AneUTCN69ZEqf2nz9lWWMp80n1YMdFgPbRz1sdqkPIhT FQ/hdkEJixsCuScg5dvptKFGcxfrohRvGkP48rIpElCOe2Hd+SNfifXOrYAytaaY OWqR3O4+gJaFWdJa3qqB8IXCBjeazr/vuls6SpG7f60W7g8bnXAK/NF4qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqz6LxA/O2tDaManghVxTHT67jdMB8GA1UdIwQY MBaAFLSwu9ZEVXjtvHumtb98qTaNJBe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYt NzdkNTI5YmU1M2Q3LzEvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYtNzdkNTI5YmU1M2Q3 LzEvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASG4cmcAx x1JRXQcdrJ0FvNB4/rmTg0AEsrcdDYR64qbfmo+1MQk2xt8YU+9hxqnQ2RXMz+gG RJo4DARCIKE95wN3Dwi6N0wAXnGeKSF4AV/xUcuNyTAEsRhPfjA85Fm7owOqEXY8 1cgXaIoHmflNzXUWUd0KDNLIJ7oKyvvkxy+VgeG3XvHW/XU/Qz+E9WWOjEPRzvhc LpKYkUZY+/ODYNWP26mFeWb4bG8fCnHbvUkbdawaCjiVpsRBW45CwvpC6b400Zh4 fBzx8QppXFx4W2OTfJXoUS6MDCoS0VuLdaksH3tzroCAOMgY2681Oc/WRjEBkEXy xTGqNWWThfrMlA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:37:33 2025 by rpki-client