This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json) Hash identifier: i/6EcfgCP27awc5R2Uap9RiVnujznO441Y1Q/BiT26U= Subject key identifier: 4D:62:9D:21:3B:99:7C:22:45:A5:6F:83:06:EB:46:E4:F4:69:C9:28 Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a Certificate serial: 019B3CEC786005A17B067B25214B8411568C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft Manifest number: 109D Signing time: Sat 20 Dec 2025 18:01:28 +0000 Manifest this update: Sat 20 Dec 2025 18:01:28 +0000 Manifest next update: Sun 21 Dec 2025 18:01:28 +0000 Files and hashes: 1: VYJ9qKilNSj9Z30pGpYaNAGU4Z0.roa (hash: j29BGrdUX9gZWLn/MqLu3C1IYATOJG6BtpBREfenzkc=) 2: dek1yBz9hU9Sw_jKA33of_zM9K4.roa (hash: yub3ufVUEc3WS+XkUJMCp9euptnf3DjONJgSPtRCvNQ=) 3: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: 0VdtfcZWeo3OOZVjMa3R06Oss+vXlSKrgAIP8QF8SzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:78:60:05:a1:7b:06:7b:25:21:4b:84:11:56:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a Validity Not Before: Dec 20 18:01:28 2025 GMT Not After : Dec 21 18:01:28 2025 GMT Subject: CN=4d629d213b997c2245a56f8306eb46e4f469c928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0a:26:35:ac:30:a9:4d:b8:2b:2a:13:1f:50: f0:7f:51:54:31:63:75:0f:fa:a3:5c:19:0d:a0:27: f6:41:bb:85:94:16:cb:90:6f:9a:9c:21:38:07:3f: 51:3f:f2:e9:d1:b2:0e:ec:c4:f2:e5:55:47:0a:12: 71:94:97:8b:2f:c3:77:55:40:d9:67:17:07:7d:95: 57:15:3d:d8:1b:6b:cc:2a:6d:22:ad:28:90:4c:bb: 43:36:12:93:85:42:b2:46:ef:a1:c4:50:58:5b:8d: 59:c1:fd:03:01:fa:ba:ab:d3:d1:c5:a4:42:8a:50: d1:9f:5a:52:30:3d:ba:44:35:d2:56:54:88:95:e8: 8d:11:f9:bf:fd:66:16:20:50:1a:9c:39:b0:ea:86: df:55:31:0d:a9:61:d0:f3:bc:2c:11:9a:9c:66:47: 1e:ca:98:f9:02:8f:ec:84:4a:1b:5b:ad:0c:c0:91: 4b:28:12:35:1a:35:1d:ed:10:86:3d:c3:6e:57:8f: 43:d9:c1:bf:01:ec:32:c2:b9:61:04:3f:44:ed:d8: 96:71:42:0a:f5:16:ca:e3:77:3f:a6:3c:7f:a6:31: a4:c1:78:2c:d7:46:e7:dd:de:00:f3:0a:33:e9:87: e8:d8:0a:d7:a4:f1:14:fa:29:79:3b:52:9b:21:44: df:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:62:9D:21:3B:99:7C:22:45:A5:6F:83:06:EB:46:E4:F4:69:C9:28 X509v3 Authority Key Identifier: keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ca:36:bf:9d:55:80:97:ac:70:5f:95:5b:4d:61:c5:2b:ab: 20:65:85:d2:d0:c1:5b:2b:34:1a:69:94:c5:61:e8:48:0a:8c: 07:a8:86:6b:ed:00:ae:99:46:b6:ea:e0:31:9e:88:15:10:9d: ff:ec:af:e1:68:08:8b:56:8d:ed:df:45:c0:ee:63:fa:dd:68: 38:c9:cf:3d:1a:5e:0a:44:dd:66:ac:af:ee:7f:ad:be:ab:8e: 84:5f:78:7f:d7:b0:13:ac:e2:12:04:bb:8e:f5:5f:63:74:9c: 2a:7e:fb:f6:91:39:87:07:51:30:56:cb:9f:dc:30:f6:d5:64: 8e:d3:ab:8b:ee:55:ef:cb:34:dd:8f:a4:7f:cb:c0:04:12:63: 51:f4:bc:0c:fe:4e:0f:e9:4a:c8:ad:b8:58:f9:11:f5:c8:22: bf:e1:ed:2b:49:f6:63:77:ba:48:ae:d0:2e:0d:15:b5:e8:e0: 72:74:cf:c3:34:3b:0e:ae:d9:e4:80:6f:05:b2:c5:51:f5:38: 38:ca:c7:98:27:af:d7:0e:89:4a:b0:2d:60:12:1e:18:d7:b3: e0:46:bf:b4:8d:ca:a7:a0:53:13:60:fe:0a:8c:da:3f:90:db: d5:17:22:c9:04:08:6e:09:28:87:38:99:2c:6e:af:3e:84:35: 78:47:b2:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87HhgBaF7BnslIUuEEVaMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MGQ0OTQzMzNjYjRkOWU1ZmQxMGM4NDZjNDdjZjU2NDQ1 YzUwM2EwHhcNMjUxMjIwMTgwMTI4WhcNMjUxMjIxMTgwMTI4WjAzMTEwLwYDVQQD Eyg0ZDYyOWQyMTNiOTk3YzIyNDVhNTZmODMwNmViNDZlNGY0NjljOTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQomNawwqU24KyoTH1Dwf1FUMWN1 D/qjXBkNoCf2QbuFlBbLkG+anCE4Bz9RP/Lp0bIO7MTy5VVHChJxlJeLL8N3VUDZ ZxcHfZVXFT3YG2vMKm0irSiQTLtDNhKThUKyRu+hxFBYW41Zwf0DAfq6q9PRxaRC ilDRn1pSMD26RDXSVlSIleiNEfm//WYWIFAanDmw6obfVTENqWHQ87wsEZqcZkce ypj5Ao/shEobW60MwJFLKBI1GjUd7RCGPcNuV49D2cG/AewywrlhBD9E7diWcUIK 9RbK43c/pjx/pjGkwXgs10bn3d4A8woz6Yfo2ArXpPEU+il5O1KbIUTfXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1inSE7mXwiRaVvgwbrRuT0ackoMB8GA1UdIwQY MBaAFLQNSUMzy02eX9EMhGxHz1ZEXFA6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMt MTgzZjk5NzVmYzk0LzEvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMtMTgzZjk5NzVmYzk0 LzEvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApco2v51V gJescF+VW01hxSurIGWF0tDBWys0GmmUxWHoSAqMB6iGa+0ArplGturgMZ6IFRCd /+yv4WgIi1aN7d9FwO5j+t1oOMnPPRpeCkTdZqyv7n+tvquOhF94f9ewE6ziEgS7 jvVfY3ScKn779pE5hwdRMFbLn9ww9tVkjtOri+5V78s03Y+kf8vABBJjUfS8DP5O D+lKyK24WPkR9cgiv+HtK0n2Y3e6SK7QLg0VtejgcnTPwzQ7Dq7Z5IBvBbLFUfU4 OMrHmCev1w6JSrAtYBIeGNez4Ea/tI3Kp6BTE2D+CozaP5Db1RciyQQIbgkohziZ LG6vPoQ1eEeyRw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:53:57 2025 by rpki-client