This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json) Hash identifier: HRbs7RA2qtMwVdxNC4mg7Nr8Jax5olgJesjOHeiqcAI= Subject key identifier: 43:81:D5:76:B6:05:54:35:BF:0D:1B:31:7F:1F:1F:26:84:D4:84:38 Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f Certificate serial: 019B3C7F2EF0B6EAAA256CF01A16DF28F440 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 16:02:06 +0000 Manifest this update: Sat 20 Dec 2025 16:02:06 +0000 Manifest next update: Sun 21 Dec 2025 16:02:06 +0000 Files and hashes: 1: BeOIJLd8_MIXUGufXTnw_YPsJgs.roa (hash: UFekJjmZxy4vjH3dPZliRBeAZT4NRRq/0IMLKsXu0f8=) 2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: 0W0tBIWEoNx56tN6HXKMt/a4OSGZKyAFIXtWR5XcKvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:2e:f0:b6:ea:aa:25:6c:f0:1a:16:df:28:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f Validity Not Before: Dec 20 16:02:06 2025 GMT Not After : Dec 21 16:02:06 2025 GMT Subject: CN=4381d576b6055435bf0d1b317f1f1f2684d48438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2d:4b:b5:e5:d1:50:0e:39:b7:e6:5f:b7:83: a2:77:10:69:77:b6:fb:45:96:cc:4a:f1:35:23:54: 7d:c8:d4:8c:00:fa:f1:0a:69:e8:88:21:87:27:04: 1f:df:12:9c:02:4e:e7:be:09:51:c6:a0:ac:f0:a8: b3:2e:5e:eb:10:48:9b:ca:13:41:9f:9b:cc:c2:85: 4f:b6:9e:a9:3a:42:28:55:94:37:f1:ec:2c:b2:0d: 93:ff:33:2c:3c:5b:ec:48:cb:63:92:1e:fa:83:bb: 3a:5a:3e:0a:d0:6c:5d:ba:c2:d9:2c:e8:35:b2:eb: 99:18:42:2c:af:db:10:c1:5a:46:64:04:bd:f3:be: 1d:a2:33:66:fc:f1:ce:c9:44:76:4e:c2:37:7e:b6: 7f:af:05:d4:95:60:72:9a:3c:93:d4:70:e4:0c:9b: 8b:7d:ba:7a:fe:2e:02:5e:dc:41:24:02:28:76:5e: 1a:c1:d5:48:7b:11:9b:aa:1a:cf:b1:63:1b:7a:63: cf:a7:b4:f2:25:27:a2:01:fd:0f:f4:aa:1f:d4:53: 5c:92:b2:32:a8:1d:a6:ed:96:a1:e5:8e:03:89:cd: 2a:47:f4:22:45:2b:c2:df:cf:51:f5:8e:99:5b:d7: de:2a:d4:7b:47:86:1a:b4:db:c5:20:f4:66:5f:3b: b0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:81:D5:76:B6:05:54:35:BF:0D:1B:31:7F:1F:1F:26:84:D4:84:38 X509v3 Authority Key Identifier: keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b3:0c:e1:a7:7d:b8:ad:bf:16:5c:c3:46:3d:a3:6b:f5:f3: f5:90:31:c7:52:b9:c5:5d:a5:fb:e8:cc:61:2c:c2:80:b3:7c: 00:b4:09:bf:79:c6:30:8f:31:52:7d:1b:ca:b7:08:4a:af:0b: b4:de:32:c0:52:be:c4:74:16:31:f3:fb:92:77:d2:f1:09:00: 08:57:67:a9:c5:d0:ae:f9:12:b0:0f:03:f3:dd:d7:0d:24:1b: 90:ca:ce:c0:77:e3:e7:72:bd:7f:a1:f3:b0:e4:c2:7f:6c:b6: 7f:18:ea:c8:c9:e1:4c:20:f4:b9:c2:88:91:7d:f8:d3:66:dd: 73:42:4f:27:e8:14:3a:c1:46:92:fa:b5:c9:14:71:13:e8:d2: 57:08:8a:36:ec:63:97:ef:46:79:4e:cf:ba:d8:3e:fd:8a:4e: e8:6e:16:4a:d0:4f:71:5a:50:7b:46:95:6c:7f:79:ec:44:19: 54:c0:5c:a6:5f:28:75:5b:51:b6:72:3a:93:4a:b2:50:0e:9a: 8e:0b:e5:bf:f4:26:fd:2c:b6:5f:07:ea:8f:2c:af:c0:12:4d: db:3a:14:59:e1:fd:43:1c:cf:75:58:cb:fa:4c:85:7f:e2:48: 61:d0:d0:9a:8b:f2:f7:50:eb:5c:cb:cc:6f:3a:04:5c:49:4d: 05:98:dc:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fy7wtuqqJWzwGhbfKPRAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MGI1NzRmMDNkOTg4MTU1ZjQ0YmEyY2IwN2JjN2RmYjQ1 N2NmMGYwHhcNMjUxMjIwMTYwMjA2WhcNMjUxMjIxMTYwMjA2WjAzMTEwLwYDVQQD Eyg0MzgxZDU3NmI2MDU1NDM1YmYwZDFiMzE3ZjFmMWYyNjg0ZDQ4NDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S1LteXRUA45t+Zft4OidxBpd7b7 RZbMSvE1I1R9yNSMAPrxCmnoiCGHJwQf3xKcAk7nvglRxqCs8KizLl7rEEibyhNB n5vMwoVPtp6pOkIoVZQ38ewssg2T/zMsPFvsSMtjkh76g7s6Wj4K0GxdusLZLOg1 suuZGEIsr9sQwVpGZAS9874dojNm/PHOyUR2TsI3frZ/rwXUlWBymjyT1HDkDJuL fbp6/i4CXtxBJAIodl4awdVIexGbqhrPsWMbemPPp7TyJSeiAf0P9Kof1FNckrIy qB2m7Zah5Y4Dic0qR/QiRSvC389R9Y6ZW9feKtR7R4YatNvFIPRmXzuwzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOB1Xa2BVQ1vw0bMX8fHyaE1IQ4MB8GA1UdIwQY MBaAFLYLV08D2YgVX0S6LLB7x9+0V88PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0Mzgt YmJjYWUwZGYxZjJmLzEvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0MzgtYmJjYWUwZGYxZjJm LzEvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbMM4ad9 uK2/FlzDRj2ja/Xz9ZAxx1K5xV2l++jMYSzCgLN8ALQJv3nGMI8xUn0byrcISq8L tN4ywFK+xHQWMfP7knfS8QkACFdnqcXQrvkSsA8D893XDSQbkMrOwHfj53K9f6Hz sOTCf2y2fxjqyMnhTCD0ucKIkX3402bdc0JPJ+gUOsFGkvq1yRRxE+jSVwiKNuxj l+9GeU7Putg+/YpO6G4WStBPcVpQe0aVbH957EQZVMBcpl8odVtRtnI6k0qyUA6a jgvlv/Qm/Sy2XwfqjyyvwBJN2zoUWeH9QxzPdVjL+kyFf+JIYdDQmovy91DrXMvM bzoEXElNBZjc/Q== -----END CERTIFICATE-----Generated at Sat Dec 20 18:46:08 2025 by rpki-client