This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft File: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft (raw, json) Hash identifier: L3yw6FuB4cjkF7kVAwdBCALr6AYccdKVoUdYYEvUszQ= Subject key identifier: BC:FB:8C:60:46:12:AE:7C:A5:A4:3E:65:65:75:4C:3B:93:D5:F5:1A Authority key identifier: B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60 Certificate issuer: /CN=b48184549e12e9934bffb7615bca3d0c25681360 Certificate serial: 019B47700B5E7DC517528E63FE02C43934AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 19:01:23 +0000 Manifest this update: Mon 22 Dec 2025 19:01:23 +0000 Manifest next update: Tue 23 Dec 2025 19:01:23 +0000 Files and hashes: 1: Pmrx9HZexDjQdROL1xOD1S-BjzQ.roa (hash: aBRM8zJUU2ZF0wAF5h20OpU3VGQ3W++oIRE8v06cZXM=) 2: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl (hash: GXqN5F8B0/60T6f1NuPuFU1k2tIQDr0EG9TVb5FnI3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:70:0b:5e:7d:c5:17:52:8e:63:fe:02:c4:39:34:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b48184549e12e9934bffb7615bca3d0c25681360 Validity Not Before: Dec 22 19:01:23 2025 GMT Not After : Dec 23 19:01:23 2025 GMT Subject: CN=bcfb8c604612ae7ca5a43e6565754c3b93d5f51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b9:3c:ac:8a:2a:ce:a1:f1:23:13:50:2d:ab: c9:ae:fc:59:a1:1f:ac:d1:0d:1b:12:5e:41:39:5e: 6f:f7:af:86:0f:59:9e:56:75:10:cc:7a:b7:a0:01: 21:f2:71:cb:8f:4c:2f:2d:a3:0b:d1:13:0d:85:96: ce:cf:8b:8e:10:83:fc:11:27:86:d2:f7:d9:b1:3a: bc:83:74:69:e9:bf:ec:82:ab:fb:86:9b:b5:1d:ea: 8c:55:31:52:0c:5b:b1:7c:c2:aa:43:07:c2:0d:ba: 36:7b:d4:e3:f9:1f:3c:18:dc:ed:c5:c4:f2:86:e1: 6e:38:a8:a3:42:8e:c6:13:6b:35:24:88:15:de:af: 24:26:f9:8f:37:79:58:0e:72:e5:00:93:d5:84:c1: c7:5b:f3:98:ad:88:69:9d:1a:15:3c:17:41:d9:b2: 3b:03:0c:c5:ac:03:fb:84:92:3a:0e:97:b6:cd:1b: 73:1e:0f:36:2b:7a:46:4c:3b:01:1b:e4:c5:2e:45: 23:a8:ea:27:9c:cd:09:29:5f:ea:6e:c9:45:53:2f: 80:f2:3e:42:09:5e:f3:47:9d:9d:6b:55:32:fc:42: 9c:a9:3b:b4:5c:93:7b:2b:34:09:0c:1c:63:d1:d1: 7a:5b:0f:e5:99:e5:2a:ba:08:b7:cb:7c:c5:2d:66: bc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FB:8C:60:46:12:AE:7C:A5:A4:3E:65:65:75:4C:3B:93:D5:F5:1A X509v3 Authority Key Identifier: keyid:B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:31:52:cf:d8:c1:3a:86:45:04:90:fa:50:18:26:d3:1e:14: db:4b:f5:51:09:84:ad:9c:49:ad:5f:5d:61:e7:2a:1c:87:ed: 3b:53:2b:90:5a:90:15:98:90:97:6f:4b:f6:f7:b9:ca:69:fb: b8:e9:42:a7:34:c1:70:51:02:09:ce:4f:2b:22:42:cf:a7:04: 2c:71:50:f3:2b:01:83:0b:40:18:df:0f:af:c5:cf:ab:db:63: 95:25:af:94:1a:8a:7b:53:33:e6:f1:50:ac:2d:c4:ee:d1:c5: ab:5a:b4:93:60:72:57:46:a0:00:9c:0a:1e:12:c3:b7:a0:8b: 3f:07:17:25:5d:63:8e:49:7b:e1:81:3c:ff:59:98:27:e6:41: 89:54:b6:b4:a4:64:17:72:a4:d1:3d:70:ce:f5:18:0b:7c:f2: a7:b8:28:e7:ed:c7:c7:ed:e1:6f:52:fa:9e:b8:c2:80:c2:88: 3f:95:19:5c:00:78:fd:0c:33:c8:90:49:5f:54:44:52:4c:c4: b5:77:85:e5:32:65:60:d5:52:28:38:44:ad:3c:c4:f2:c8:3c: 17:96:ce:2e:ca:d9:bc:18:63:dd:2d:e5:06:14:d5:b6:9e:0f: a6:75:b1:75:bc:52:83:e8:ba:2f:1f:94:d8:a7:78:95:5d:be: f1:59:a8:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHcAtefcUXUo5j/gLEOTSqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODE4NDU0OWUxMmU5OTM0YmZmYjc2MTViY2EzZDBjMjU2 ODEzNjAwHhcNMjUxMjIyMTkwMTIzWhcNMjUxMjIzMTkwMTIzWjAzMTEwLwYDVQQD EyhiY2ZiOGM2MDQ2MTJhZTdjYTVhNDNlNjU2NTc1NGMzYjkzZDVmNTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrk8rIoqzqHxIxNQLavJrvxZoR+s 0Q0bEl5BOV5v96+GD1meVnUQzHq3oAEh8nHLj0wvLaML0RMNhZbOz4uOEIP8ESeG 0vfZsTq8g3Rp6b/sgqv7hpu1HeqMVTFSDFuxfMKqQwfCDbo2e9Tj+R88GNztxcTy huFuOKijQo7GE2s1JIgV3q8kJvmPN3lYDnLlAJPVhMHHW/OYrYhpnRoVPBdB2bI7 AwzFrAP7hJI6Dpe2zRtzHg82K3pGTDsBG+TFLkUjqOonnM0JKV/qbslFUy+A8j5C CV7zR52da1Uy/EKcqTu0XJN7KzQJDBxj0dF6Ww/lmeUqugi3y3zFLWa8mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLz7jGBGEq58paQ+ZWV1TDuT1fUaMB8GA1UdIwQY MBaAFLSBhFSeEumTS/+3YVvKPQwlaBNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElHRVZKNFM2Wk5MXzdkaFc4bzlEQ1ZvRTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mNjcxNzctNzhkNS00Mzg4LWEyMWEt MjgyNjM2NTZjNmRlLzEvdElHRVZKNFM2Wk5MXzdkaFc4bzlEQ1ZvRTJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mNjcxNzctNzhkNS00Mzg4LWEyMWEtMjgyNjM2NTZjNmRl LzEvdElHRVZKNFM2Wk5MXzdkaFc4bzlEQ1ZvRTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzFSz9jB OoZFBJD6UBgm0x4U20v1UQmErZxJrV9dYecqHIftO1MrkFqQFZiQl29L9ve5ymn7 uOlCpzTBcFECCc5PKyJCz6cELHFQ8ysBgwtAGN8Pr8XPq9tjlSWvlBqKe1Mz5vFQ rC3E7tHFq1q0k2ByV0agAJwKHhLDt6CLPwcXJV1jjkl74YE8/1mYJ+ZBiVS2tKRk F3Kk0T1wzvUYC3zyp7go5+3Hx+3hb1L6nrjCgMKIP5UZXAB4/QwzyJBJX1REUkzE tXeF5TJlYNVSKDhErTzE8sg8F5bOLsrZvBhj3S3lBhTVtp4PpnWxdbxSg+i6Lx+U 2Kd4lV2+8VmoPA== -----END CERTIFICATE-----Generated at Mon Dec 22 21:59:29 2025 by rpki-client