This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft File: TphKWkt4CLtOoy0xC90H7MlXURM.mft (raw, json) Hash identifier: Ny1hKDjmeJ9NSEwye0MFey+OOVv2i93Wax39IUM+cQ8= Subject key identifier: 66:64:A7:0B:55:C3:BE:2E:F5:86:99:98:5A:85:1F:56:94:00:6A:44 Authority key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13 Certificate issuer: /CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113 Certificate serial: 019B39B3B87FCE0D6915FAEF6D3E6E2B4BED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 03:00:38 +0000 Manifest this update: Sat 20 Dec 2025 03:00:38 +0000 Manifest next update: Sun 21 Dec 2025 03:00:38 +0000 Files and hashes: 1: 8ZKbnPniu913SnjXvn3kXFXoTm0.roa (hash: 5HixzWr+kvtOLRKOe0GySJFEoBIN8n7Szdz/SR3iCoA=) 2: TphKWkt4CLtOoy0xC90H7MlXURM.crl (hash: x6nkklxzWU5QH6cJx53WBlpXUwXhtKC0+fppJQOGk7E=) 3: c5p1cEEnGb5RFBRHp7Sxm_tjKvM.roa (hash: M29Br9NKk77+hhhlGq1bhWv7l0daFqIJWaEI7ntt2wY=) 4: iDLcfc6aCabj7RN8rRXRQoXvHeA.roa (hash: UvXUgafoqKLsjB+HeAD02OLRE2t5kuX7jZTUuLZ1nRA=) 5: u6tKtCCW-Dj0-HkdzJ6yaeEuRAI.roa (hash: dfQrij6E/OioNCwBaUVfNrimg1NkdqgGbAXbWqoJr0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:b8:7f:ce:0d:69:15:fa:ef:6d:3e:6e:2b:4b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113 Validity Not Before: Dec 20 03:00:38 2025 GMT Not After : Dec 21 03:00:38 2025 GMT Subject: CN=6664a70b55c3be2ef58699985a851f5694006a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0a:ef:2c:04:e1:46:7d:cd:67:0d:a0:10:de: 30:2b:76:54:47:17:bb:f1:70:7b:92:59:e3:c4:9f: bd:3e:6a:b0:91:7a:44:c4:c8:19:c6:b0:f2:42:d4: d1:a9:69:de:7f:41:8f:4e:89:22:f1:c3:e2:f5:cd: 79:06:b9:da:c5:91:61:51:ff:8d:7e:47:7e:a3:a4: 21:6f:da:ff:92:ae:9a:5f:c3:1b:07:31:6d:e3:3c: fb:3e:b3:dd:52:18:09:ed:43:2b:a3:4d:7e:e4:d2: a9:13:1c:c7:42:7f:ab:33:75:bb:14:e5:61:be:5b: ed:b9:f6:b9:9c:03:34:02:71:9f:d5:a6:89:8d:cd: d0:67:32:0a:93:3d:57:17:02:0e:bc:71:d5:f1:aa: e3:9a:cb:40:85:2e:47:dc:02:fc:1d:1d:83:56:0d: 20:0a:13:93:05:38:db:10:f2:19:c3:c9:07:0f:3c: 31:35:78:ff:9b:cf:f8:08:93:55:0f:e7:a7:86:5e: ee:af:5c:f8:fe:5c:68:42:b2:13:ca:90:70:a4:1e: af:12:b3:91:c6:1d:49:60:1f:9c:41:77:97:32:fb: 93:15:d3:3b:99:24:99:1e:36:36:58:5f:8e:80:46: 4c:71:bb:a3:f1:c8:bc:20:41:af:bc:cc:05:a7:2f: ec:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:64:A7:0B:55:C3:BE:2E:F5:86:99:98:5A:85:1F:56:94:00:6A:44 X509v3 Authority Key Identifier: keyid:4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:94:85:d3:6d:20:d2:a1:74:e9:a4:03:46:0a:19:50:c4:2e: 21:35:26:73:75:32:79:99:3f:50:16:35:e1:c5:1f:ef:cb:1a: 1c:38:1d:48:ec:22:59:fe:e0:7e:e9:a3:48:24:a6:28:5e:84: fa:78:6f:8c:d6:53:01:e3:9d:d3:41:c2:4b:6f:ac:92:55:bc: 2e:4f:f2:61:0a:59:96:e5:3b:00:3c:7f:e1:f9:5c:93:8f:de: 54:3c:3c:a1:b2:99:5a:00:85:e9:0c:4f:87:e5:29:6c:8a:95: cc:96:a8:da:91:22:fb:cb:fd:de:d6:86:26:6d:dd:18:4d:78: 0c:3e:ff:c0:be:19:2f:66:84:1f:10:23:ba:a9:fc:57:63:85: 44:4a:9f:47:ed:c3:69:bf:2b:f5:14:fa:59:4a:c2:9d:2f:56: 37:89:5a:58:f2:1f:92:55:e9:ca:af:b0:f4:55:5f:28:3c:d0: 61:bb:54:cb:64:78:9b:7d:7c:57:16:25:ce:a2:d9:1b:44:46: 47:1e:ae:29:d5:26:e7:bd:c3:b1:a7:61:11:94:79:2c:57:4a: 74:88:a7:c8:75:31:3f:bf:fc:8c:39:ac:bf:5e:c0:1f:00:26: 97:e0:30:ad:28:f8:c5:2f:5d:d5:15:8d:f7:08:24:7e:77:61: 00:ef:4d:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s7h/zg1pFfrvbT5uK0vtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlOTg0YTVhNGI3ODA4YmI0ZWEzMmQzMTBiZGQwN2VjYzk1 NzUxMTMwHhcNMjUxMjIwMDMwMDM4WhcNMjUxMjIxMDMwMDM4WjAzMTEwLwYDVQQD Eyg2NjY0YTcwYjU1YzNiZTJlZjU4Njk5OTg1YTg1MWY1Njk0MDA2YTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwrvLAThRn3NZw2gEN4wK3ZURxe7 8XB7klnjxJ+9PmqwkXpExMgZxrDyQtTRqWnef0GPToki8cPi9c15BrnaxZFhUf+N fkd+o6Qhb9r/kq6aX8MbBzFt4zz7PrPdUhgJ7UMro01+5NKpExzHQn+rM3W7FOVh vlvtufa5nAM0AnGf1aaJjc3QZzIKkz1XFwIOvHHV8arjmstAhS5H3AL8HR2DVg0g ChOTBTjbEPIZw8kHDzwxNXj/m8/4CJNVD+enhl7ur1z4/lxoQrITypBwpB6vErOR xh1JYB+cQXeXMvuTFdM7mSSZHjY2WF+OgEZMcbuj8ci8IEGvvMwFpy/snwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZkpwtVw74u9YaZmFqFH1aUAGpEMB8GA1UdIwQY MBaAFE6YSlpLeAi7TqMtMQvdB+zJV1ETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHBoS1drdDRDTHRPb3kweEM5MEg3TWxYVVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC80MWRlYzEtMWViMS00OWM3LTlkNTAt Y2E1OTVlMzRkNWFjLzEvVHBoS1drdDRDTHRPb3kweEM5MEg3TWxYVVJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC80MWRlYzEtMWViMS00OWM3LTlkNTAtY2E1OTVlMzRkNWFj LzEvVHBoS1drdDRDTHRPb3kweEM5MEg3TWxYVVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZSF020g 0qF06aQDRgoZUMQuITUmc3UyeZk/UBY14cUf78saHDgdSOwiWf7gfumjSCSmKF6E +nhvjNZTAeOd00HCS2+sklW8Lk/yYQpZluU7ADx/4flck4/eVDw8obKZWgCF6QxP h+UpbIqVzJao2pEi+8v93taGJm3dGE14DD7/wL4ZL2aEHxAjuqn8V2OFREqfR+3D ab8r9RT6WUrCnS9WN4laWPIfklXpyq+w9FVfKDzQYbtUy2R4m318VxYlzqLZG0RG Rx6uKdUm573DsadhEZR5LFdKdIinyHUxP7/8jDmsv17AHwAml+AwrSj4xS9d1RWN 9wgkfndhAO9NiA== -----END CERTIFICATE-----Generated at Sat Dec 20 06:54:24 2025 by rpki-client