This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft File: tPgsjv3jS9meROrwcxtsUltFShk.mft (raw, json) Hash identifier: n+z891LUq/g1KxcpfKunxVrp8vz22nVrSeShUpTLFCM= Subject key identifier: 00:A2:73:16:E6:01:B9:08:4A:E3:65:24:6C:8A:88:05:3C:9D:B8:BB Authority key identifier: B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19 Certificate issuer: /CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19 Certificate serial: 019B42B74908F4F612546558C712ADA4E252 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 21:01:06 +0000 Manifest this update: Sun 21 Dec 2025 21:01:06 +0000 Manifest next update: Mon 22 Dec 2025 21:01:06 +0000 Files and hashes: 1: qLkt693aVmyKYJQGNdNxcAXdJ9w.roa (hash: D8tW4gMgnbvNPYFRk3OMpyQUNWmp5AcbpxituaqMb+A=) 2: tPgsjv3jS9meROrwcxtsUltFShk.crl (hash: IDqGWii1td9spPSjxtlV6kxsp6+LOD7ugpYx0ujYSeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:49:08:f4:f6:12:54:65:58:c7:12:ad:a4:e2:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19 Validity Not Before: Dec 21 21:01:06 2025 GMT Not After : Dec 22 21:01:06 2025 GMT Subject: CN=00a27316e601b9084ae365246c8a88053c9db8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d3:5a:9d:4b:aa:f6:82:96:66:be:b5:5d:27: be:bc:6c:c2:04:f4:37:ec:b8:b7:2d:9a:a6:3f:eb: bf:8b:c7:6a:2f:eb:95:e3:b4:fe:fa:df:48:a6:18: 56:19:0c:2a:7b:9b:96:f7:4d:a5:be:e3:13:70:9a: a4:48:07:e3:5c:42:f8:83:bd:8d:cc:c9:5f:d7:57: 9c:10:23:b7:0e:35:2d:fb:88:f1:a8:58:b0:90:90: 6a:4b:c3:c6:b6:f6:f4:a7:10:d3:4b:b5:eb:de:d8: da:57:c0:99:44:f0:29:0b:8c:67:1a:55:f2:38:cf: 2a:1f:09:4c:86:55:e1:2f:47:78:c5:4c:d9:e6:25: 33:60:22:8b:41:a0:fb:da:6b:01:fb:f0:6c:60:10: 1a:e1:3c:a6:2c:b2:d5:db:74:7c:46:10:e5:f6:94: fa:64:c5:99:4b:7c:0e:39:c3:ff:c0:97:fe:28:10: 10:08:1e:cb:8a:3b:7d:97:6e:0f:ad:dc:26:52:94: a5:e1:aa:41:6b:a2:9e:b2:b7:d0:dd:17:1a:a3:2d: 95:4b:6b:02:14:b0:96:85:5e:04:3d:81:12:6a:4b: b0:f0:8e:9b:f1:09:7f:1a:be:ea:a8:e6:b3:7e:d9: 39:a4:92:8e:35:0e:be:15:14:65:70:89:95:26:7a: 65:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A2:73:16:E6:01:B9:08:4A:E3:65:24:6C:8A:88:05:3C:9D:B8:BB X509v3 Authority Key Identifier: keyid:B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:22:9d:ac:5b:c1:dd:b1:6b:86:d0:ca:07:df:40:79:4b:90: d5:68:ba:08:4b:a2:61:64:2d:74:af:5d:c4:3e:32:06:df:3a: 6a:8a:f2:ea:ce:18:fc:94:fb:5f:21:2e:bb:2d:d9:2f:80:e6: 41:a7:b2:3a:52:a4:9e:dc:79:1c:78:ca:9f:2c:9e:08:cd:4f: 02:d4:90:c8:3c:08:e2:10:4e:a6:7a:f9:51:6b:c4:a2:50:20: a8:49:0c:32:92:e0:cb:ef:bd:ab:81:4f:d1:b2:b2:ba:b8:cd: fb:e6:d4:7c:38:7d:e8:1e:40:b1:47:5c:c3:59:8b:fd:0e:e6: 91:c4:2c:b4:ca:5e:66:f8:07:1d:9a:58:44:5e:36:a9:bb:89: 2b:82:10:94:92:41:36:bf:76:fa:41:7b:94:ea:fe:a5:54:e7: 6c:5f:41:9e:23:62:3a:c7:80:bc:c2:0f:28:78:f1:ab:1f:98: 1f:f7:70:76:a1:33:77:1f:01:bd:b9:36:7d:b5:1f:5a:64:90: c2:6b:73:42:21:7f:eb:2f:53:47:1e:df:fc:e6:9b:7d:01:c9: a6:74:84:49:d9:b0:59:60:e9:cd:96:17:63:73:94:81:8c:c1: 20:d0:9b:02:08:a9:b0:b7:03:fe:2f:5e:52:76:aa:22:0a:1d: 03:2c:cf:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt0kI9PYSVGVYxxKtpOJSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZjgyYzhlZmRlMzRiZDk5ZTQ0ZWFmMDczMWI2YzUyNWI0 NTRhMTkwHhcNMjUxMjIxMjEwMTA2WhcNMjUxMjIyMjEwMTA2WjAzMTEwLwYDVQQD EygwMGEyNzMxNmU2MDFiOTA4NGFlMzY1MjQ2YzhhODgwNTNjOWRiOGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNNanUuq9oKWZr61XSe+vGzCBPQ3 7Li3LZqmP+u/i8dqL+uV47T++t9IphhWGQwqe5uW902lvuMTcJqkSAfjXEL4g72N zMlf11ecECO3DjUt+4jxqFiwkJBqS8PGtvb0pxDTS7Xr3tjaV8CZRPApC4xnGlXy OM8qHwlMhlXhL0d4xUzZ5iUzYCKLQaD72msB+/BsYBAa4TymLLLV23R8RhDl9pT6 ZMWZS3wOOcP/wJf+KBAQCB7Lijt9l24PrdwmUpSl4apBa6KesrfQ3Rcaoy2VS2sC FLCWhV4EPYESakuw8I6b8Ql/Gr7qqOazftk5pJKONQ6+FRRlcImVJnpluQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACicxbmAbkISuNlJGyKiAU8nbi7MB8GA1UdIwQY MBaAFLT4LI7940vZnkTq8HMbbFJbRUoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBnc2p2M2pTOW1lUk9yd2N4dHNVbHRGU2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82MDhmZGItYTQwNi00Yjg1LWIxNGEt ZDI0NDFlOGY2YzdhLzEvdFBnc2p2M2pTOW1lUk9yd2N4dHNVbHRGU2hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82MDhmZGItYTQwNi00Yjg1LWIxNGEtZDI0NDFlOGY2Yzdh LzEvdFBnc2p2M2pTOW1lUk9yd2N4dHNVbHRGU2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyKdrFvB 3bFrhtDKB99AeUuQ1Wi6CEuiYWQtdK9dxD4yBt86aory6s4Y/JT7XyEuuy3ZL4Dm QaeyOlKkntx5HHjKnyyeCM1PAtSQyDwI4hBOpnr5UWvEolAgqEkMMpLgy++9q4FP 0bKyurjN++bUfDh96B5AsUdcw1mL/Q7mkcQstMpeZvgHHZpYRF42qbuJK4IQlJJB Nr92+kF7lOr+pVTnbF9BniNiOseAvMIPKHjxqx+YH/dwdqEzdx8Bvbk2fbUfWmSQ wmtzQiF/6y9TRx7f/OabfQHJpnSESdmwWWDpzZYXY3OUgYzBINCbAgipsLcD/i9e UnaqIgodAyzPtw== -----END CERTIFICATE-----Generated at Mon Dec 22 01:23:46 2025 by rpki-client