This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json) Hash identifier: rAH2gAxzso1njBR17h2BqmpMPaeeftZLySUtFysQgok= Subject key identifier: B8:19:DA:3E:06:87:21:10:79:37:33:4D:4A:C9:71:50:3E:53:EA:4C Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa Certificate serial: 019B38A2358D7A6B38F444D10CA5A184B9AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 22:01:53 +0000 Manifest this update: Fri 19 Dec 2025 22:01:53 +0000 Manifest next update: Sat 20 Dec 2025 22:01:53 +0000 Files and hashes: 1: J7n-Yd5XTH7n67jouruR47yViJQ.roa (hash: uOcoBZNZsx1gjsqlLawiv97uMdypKgT5mBdaC/TonUs=) 2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: AnlKvL1ewLxUdeb95ysn3R+7o0uFcv35J43YiPpcGEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:35:8d:7a:6b:38:f4:44:d1:0c:a5:a1:84:b9:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa Validity Not Before: Dec 19 22:01:53 2025 GMT Not After : Dec 20 22:01:53 2025 GMT Subject: CN=b819da3e068721107937334d4ac971503e53ea4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c3:21:3b:05:d4:36:67:25:24:5f:bb:75:7a: 8c:7d:a8:a9:d8:f5:f3:b5:97:4b:ed:2d:00:51:ab: 3b:e1:bd:8a:27:10:8d:23:b3:80:86:1e:09:17:4b: c4:d6:85:15:03:c8:cf:fd:5f:2c:07:40:e2:ff:27: 9b:28:44:9f:fc:1f:30:15:87:96:63:3f:99:6a:37: de:6a:44:88:39:b7:d6:bf:e6:dd:ba:7d:4f:6e:36: e6:1d:17:33:ce:a6:9f:cd:31:8d:46:40:59:e7:12: 8f:23:41:ec:25:a6:e4:04:43:d1:29:ac:14:f0:dc: 04:a5:ab:69:a7:69:88:8e:3e:17:0b:86:9f:7b:b0: ac:40:44:95:e9:fb:ee:96:6e:fc:f8:e1:8c:64:ce: 36:4d:d3:13:61:24:9d:66:fe:69:14:7d:48:ff:82: 45:ae:87:91:05:d1:f6:75:e9:40:1c:0b:6f:17:e2: 32:5c:17:a3:1d:8d:51:fc:94:45:93:8e:54:df:39: 1c:5c:8f:db:f3:36:1c:d1:15:9d:92:2d:4b:40:ab: 57:ea:1d:a1:be:60:33:d6:21:7f:a6:75:4a:7b:6f: 81:17:ec:ac:e6:a2:c4:4c:b1:79:fb:fb:82:5b:a3: c1:4f:68:cb:39:4e:e6:d2:09:9d:b7:de:c0:1b:ea: 61:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:19:DA:3E:06:87:21:10:79:37:33:4D:4A:C9:71:50:3E:53:EA:4C X509v3 Authority Key Identifier: keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:37:df:72:55:05:61:2a:e4:cb:a1:4e:f5:ca:c6:ee:35:49: 39:a4:cc:e5:bb:99:32:27:21:33:d3:02:7b:b1:16:4d:c2:da: 87:54:d3:82:71:64:e4:3f:6c:a2:0c:40:64:a4:3c:bd:77:47: 58:06:44:cf:bc:68:50:f3:22:68:8e:b5:06:6f:c1:70:72:4f: e7:75:8e:ea:9b:c3:f3:a2:44:2b:a9:4f:30:89:43:59:41:f5: cc:ac:d7:c5:22:cc:6c:b6:27:0b:7b:b0:31:49:3b:9f:d3:48: cd:1e:e4:af:60:ba:e3:af:34:ba:f1:33:89:f3:d1:07:69:fc: a6:4d:c8:2a:af:54:c9:20:c0:fc:28:ee:7f:c2:03:5a:f4:38: 56:1b:2d:1f:25:86:19:71:82:77:d2:34:1c:57:7d:4f:82:6e: 0c:28:d2:9f:d9:48:9f:b6:7d:03:de:78:63:3f:ad:f0:15:44: fa:f7:9d:97:2b:7e:fe:1d:ab:0e:e3:db:e6:69:09:bb:19:8c: c3:bc:48:b9:07:88:b7:47:ff:ec:26:c7:9b:bf:6f:6c:4b:e9: 63:3c:42:a1:f7:6b:d9:c8:24:64:7b:f7:21:04:e7:cb:56:47: 58:9c:fb:3d:3f:e8:a1:d4:b0:2a:da:67:48:64:64:d6:28:3e: 92:e7:83:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ojWNems49ETRDKWhhLmsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OWViNTBjYjhiYWM5MmRjMTc2ZThhODdjZjI1NTUyODIy MTk0ZmEwHhcNMjUxMjE5MjIwMTUzWhcNMjUxMjIwMjIwMTUzWjAzMTEwLwYDVQQD EyhiODE5ZGEzZTA2ODcyMTEwNzkzNzMzNGQ0YWM5NzE1MDNlNTNlYTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsMhOwXUNmclJF+7dXqMfaip2PXz tZdL7S0AUas74b2KJxCNI7OAhh4JF0vE1oUVA8jP/V8sB0Di/yebKESf/B8wFYeW Yz+ZajfeakSIObfWv+bdun1PbjbmHRczzqafzTGNRkBZ5xKPI0HsJabkBEPRKawU 8NwEpatpp2mIjj4XC4afe7CsQESV6fvulm78+OGMZM42TdMTYSSdZv5pFH1I/4JF roeRBdH2delAHAtvF+IyXBejHY1R/JRFk45U3zkcXI/b8zYc0RWdki1LQKtX6h2h vmAz1iF/pnVKe2+BF+ys5qLETLF5+/uCW6PBT2jLOU7m0gmdt97AG+phOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgZ2j4GhyEQeTczTUrJcVA+U+pMMB8GA1UdIwQY MBaAFLSetQy4usktwXboqHzyVVKCIZT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zZWFhNzAtMDUyMC00NTU5LTg0MWEt NGNhOTU2YjA4YTQxLzEvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zZWFhNzAtMDUyMC00NTU5LTg0MWEtNGNhOTU2YjA4YTQx LzEvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzffclUF YSrky6FO9crG7jVJOaTM5buZMichM9MCe7EWTcLah1TTgnFk5D9sogxAZKQ8vXdH WAZEz7xoUPMiaI61Bm/BcHJP53WO6pvD86JEK6lPMIlDWUH1zKzXxSLMbLYnC3uw MUk7n9NIzR7kr2C64680uvEzifPRB2n8pk3IKq9UySDA/Cjuf8IDWvQ4VhstHyWG GXGCd9I0HFd9T4JuDCjSn9lIn7Z9A954Yz+t8BVE+vedlyt+/h2rDuPb5mkJuxmM w7xIuQeIt0f/7CbHm79vbEvpYzxCofdr2cgkZHv3IQTny1ZHWJz7PT/oodSwKtpn SGRk1ig+kueDig== -----END CERTIFICATE-----Generated at Sat Dec 20 02:23:56 2025 by rpki-client