This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft File: TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft (raw, json) Hash identifier: ySnl0vJ1PTfk4Gg2inQwxMrIezJNsqFL+vdd+6lMZIo= Subject key identifier: 2F:82:F6:1C:85:7E:33:DE:85:D5:DB:39:E9:C7:B6:B6:06:1F:01:41 Authority key identifier: 4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C Certificate issuer: /CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c Certificate serial: 019B4C962E4FE713C85487507A77FDB3B65E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft Manifest number: 1556 Signing time: Tue 23 Dec 2025 19:01:09 +0000 Manifest this update: Tue 23 Dec 2025 19:01:09 +0000 Manifest next update: Wed 24 Dec 2025 19:01:09 +0000 Files and hashes: 1: HJZuFg-aBDGic40vRoWhakH94Zo.roa (hash: b1vEsVgABbRc+hOZI2FcJP4+qO85CVqkQZmViTsB2bU=) 2: TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl (hash: GkH/YZm+YQuav1yUqGK3XDGIpcxz/q0k3d4weG+qJj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:96:2e:4f:e7:13:c8:54:87:50:7a:77:fd:b3:b6:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c Validity Not Before: Dec 23 19:01:09 2025 GMT Not After : Dec 24 19:01:09 2025 GMT Subject: CN=2f82f61c857e33de85d5db39e9c7b6b6061f0141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:80:2b:53:1e:3c:97:1a:21:4e:02:6d:74:80: de:d1:8e:10:81:11:5b:d5:6d:f5:2b:e2:17:e7:f0: cb:10:c3:e8:9d:20:1f:30:45:e0:72:ec:7c:ad:26: 92:2b:78:4f:65:55:66:6d:c1:ed:fc:f0:d3:d2:a6: 3a:74:40:9d:11:32:b1:e1:b8:6b:b9:51:f6:e0:61: c2:02:8e:e6:b5:80:36:c4:86:75:77:15:e7:63:b7: 29:50:a3:3b:4e:0d:87:f5:1d:fd:45:65:5f:63:f4: 61:e7:85:f0:94:03:5a:39:2e:a4:bc:f3:a2:b2:97: f4:25:cf:e7:8a:ce:1e:43:76:ae:1e:6c:6e:38:26: b5:f8:cd:70:6d:6d:d5:75:21:83:2f:c5:59:3e:90: 5b:98:33:0b:a2:69:3c:36:6c:15:bf:4b:bb:2a:24: 25:67:9a:47:5b:28:af:91:58:b5:2e:a6:a5:06:26: 77:d2:66:c5:0c:ce:de:9e:d6:ec:29:1a:e7:0a:09: c3:e7:d4:9b:da:ff:63:4e:e0:c0:0a:c8:c0:12:da: b0:12:ea:0a:17:9b:46:06:a5:7c:8f:83:67:89:10: 12:cb:ee:f5:42:20:c3:f9:2b:10:19:6f:93:c3:cd: d6:e6:30:b8:c7:1e:6d:05:36:a7:60:b4:c0:9d:fb: 25:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:82:F6:1C:85:7E:33:DE:85:D5:DB:39:E9:C7:B6:B6:06:1F:01:41 X509v3 Authority Key Identifier: keyid:4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:8e:f3:e1:4d:14:de:51:65:c3:cf:82:d2:46:4e:8c:6a:15: 12:38:87:ed:9c:91:a8:58:dd:60:41:53:63:f3:3a:25:0e:35: d8:16:fa:86:8e:b1:1c:4a:63:4d:4a:d0:f8:75:b1:15:3a:9c: 59:51:e4:cb:c0:ca:46:04:43:bf:d5:6c:d2:67:8c:bf:a3:26: 0b:b0:6b:5e:04:f8:0e:8c:f7:29:2c:45:a4:e5:47:ab:20:e4: d5:b9:80:40:82:c4:dd:8b:4e:5c:f7:94:2c:c0:e1:03:02:2d: 77:c5:4a:61:96:ca:fe:b2:be:0b:d4:f9:a2:d8:5e:5f:20:4b: 2b:30:db:74:de:cc:77:dc:b0:90:70:cc:d1:9b:5d:e7:cd:58: 63:ef:b6:b4:13:75:15:7c:03:43:3b:23:f5:5b:56:60:82:2c: d8:5c:74:5a:b2:d3:58:dc:f0:5f:aa:30:43:27:70:1b:ed:9e: fa:b2:82:ca:d5:13:77:86:7d:5f:c8:61:37:31:93:f3:7f:9d: 14:62:03:f0:da:98:0e:ad:bf:19:dd:c4:8a:83:02:f2:54:53: 7d:f6:c3:f6:51:87:dc:aa:cc:b0:4a:f0:34:44:11:76:af:e7: 5a:d5:d2:94:58:d2:f1:9e:7b:db:13:f2:0d:6c:62:6f:26:f4: d4:4a:41:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMli5P5xPIVIdQenf9s7ZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYTViMmYzNzUyNGMzZDM4ZGM4MGE3MWQ4ZjAwMWVkMmM0 NWU4OWMwHhcNMjUxMjIzMTkwMTA5WhcNMjUxMjI0MTkwMTA5WjAzMTEwLwYDVQQD EygyZjgyZjYxYzg1N2UzM2RlODVkNWRiMzllOWM3YjZiNjA2MWYwMTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroArUx48lxohTgJtdIDe0Y4QgRFb 1W31K+IX5/DLEMPonSAfMEXgcux8rSaSK3hPZVVmbcHt/PDT0qY6dECdETKx4bhr uVH24GHCAo7mtYA2xIZ1dxXnY7cpUKM7Tg2H9R39RWVfY/Rh54XwlANaOS6kvPOi spf0Jc/nis4eQ3auHmxuOCa1+M1wbW3VdSGDL8VZPpBbmDMLomk8NmwVv0u7KiQl Z5pHWyivkVi1LqalBiZ30mbFDM7entbsKRrnCgnD59Sb2v9jTuDACsjAEtqwEuoK F5tGBqV8j4NniRASy+71QiDD+SsQGW+Tw83W5jC4xx5tBTanYLTAnfsl9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+C9hyFfjPehdXbOenHtrYGHwFBMB8GA1UdIwQY MBaAFE6lsvN1JMPTjcgKcdjwAe0sReicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHFXeTgzVWt3OU9OeUFweDJQQUI3U3hGNkp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85MDQxYjctZjU0My00YzYzLThlMmIt MzY2YTk3NjFlYTIwLzEvVHFXeTgzVWt3OU9OeUFweDJQQUI3U3hGNkp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS85MDQxYjctZjU0My00YzYzLThlMmItMzY2YTk3NjFlYTIw LzEvVHFXeTgzVWt3OU9OeUFweDJQQUI3U3hGNkp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2o7z4U0U 3lFlw8+C0kZOjGoVEjiH7ZyRqFjdYEFTY/M6JQ412Bb6ho6xHEpjTUrQ+HWxFTqc WVHky8DKRgRDv9Vs0meMv6MmC7BrXgT4Doz3KSxFpOVHqyDk1bmAQILE3YtOXPeU LMDhAwItd8VKYZbK/rK+C9T5otheXyBLKzDbdN7Md9ywkHDM0Ztd581YY++2tBN1 FXwDQzsj9VtWYIIs2Fx0WrLTWNzwX6owQydwG+2e+rKCytUTd4Z9X8hhNzGT83+d FGID8NqYDq2/Gd3EioMC8lRTffbD9lGH3KrMsErwNEQRdq/nWtXSlFjS8Z572xPy DWxibyb01EpBXg== -----END CERTIFICATE-----Generated at Tue Dec 23 20:52:02 2025 by rpki-client