This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft File: TphKWkt4CLtOoy0xC90H7MlXURM.mft (raw, json) Hash identifier: m22bWS8euc778fs1nVF74Im0j0Pln7uGr9hBUW90ysY= Subject key identifier: D8:74:BD:72:8A:A1:D2:B6:D6:0E:A7:2E:C7:BC:40:F8:B8:36:C4:14 Authority key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13 Certificate issuer: /CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113 Certificate serial: 019B3D9092419936411347C969020C1274DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 21:00:43 +0000 Manifest this update: Sat 20 Dec 2025 21:00:43 +0000 Manifest next update: Sun 21 Dec 2025 21:00:43 +0000 Files and hashes: 1: 8ZKbnPniu913SnjXvn3kXFXoTm0.roa (hash: 5HixzWr+kvtOLRKOe0GySJFEoBIN8n7Szdz/SR3iCoA=) 2: TphKWkt4CLtOoy0xC90H7MlXURM.crl (hash: ADs295t5UabFRJa8HvJuAZIxEgrlZGaE8c3EUKAE6c8=) 3: c5p1cEEnGb5RFBRHp7Sxm_tjKvM.roa (hash: M29Br9NKk77+hhhlGq1bhWv7l0daFqIJWaEI7ntt2wY=) 4: iDLcfc6aCabj7RN8rRXRQoXvHeA.roa (hash: UvXUgafoqKLsjB+HeAD02OLRE2t5kuX7jZTUuLZ1nRA=) 5: u6tKtCCW-Dj0-HkdzJ6yaeEuRAI.roa (hash: dfQrij6E/OioNCwBaUVfNrimg1NkdqgGbAXbWqoJr0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:92:41:99:36:41:13:47:c9:69:02:0c:12:74:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113 Validity Not Before: Dec 20 21:00:43 2025 GMT Not After : Dec 21 21:00:43 2025 GMT Subject: CN=d874bd728aa1d2b6d60ea72ec7bc40f8b836c414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:10:88:8b:b0:dc:12:71:bf:0f:ed:44:ff:66: 2f:fe:95:e4:c7:ed:a1:1e:02:4c:71:c4:b3:e8:68: 27:33:a6:93:62:94:9b:d4:ed:26:c2:4f:4f:89:5b: cf:ee:51:e2:c8:eb:36:36:7d:76:19:c2:98:49:3e: ca:19:14:b5:08:b3:6d:46:62:8b:e9:b7:4e:1b:d6: 51:89:30:03:4e:26:bd:68:2c:d3:5a:5c:38:9b:7b: 9e:41:64:99:d2:17:34:d3:3d:ac:1d:75:fd:86:36: 15:9c:99:c9:41:f3:06:a3:6a:fb:40:04:eb:b5:a9: 63:32:b1:dd:d4:f6:e1:6f:ef:92:75:dc:b7:90:96: 32:ec:ff:8c:a9:3b:92:ee:7d:35:65:76:75:d0:ed: f1:d1:dc:6c:5c:36:e1:40:f8:a6:3c:fd:08:a3:ed: c3:9c:aa:00:04:4e:4e:9e:e9:d6:e1:92:22:d1:b7: 94:40:95:b0:db:15:56:84:01:f0:f3:e6:10:19:a7: 2a:ff:53:45:ec:17:79:a5:e2:3d:d4:62:75:a0:4f: c1:c3:0f:f7:71:6a:99:68:1a:05:91:e4:d3:56:1c: d9:5d:56:6f:46:b0:cb:b1:c1:f5:67:1f:1b:06:76: 88:5e:c0:64:62:a2:f8:4c:f5:e5:96:7d:22:c3:90: 83:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:74:BD:72:8A:A1:D2:B6:D6:0E:A7:2E:C7:BC:40:F8:B8:36:C4:14 X509v3 Authority Key Identifier: keyid:4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c7:9f:95:e3:6f:f7:a6:3f:00:e8:59:5f:10:82:a4:71:a3: ff:fe:ca:e0:43:c8:fb:34:2c:49:c4:aa:fb:fd:34:94:94:3b: ab:3f:2d:e7:1a:35:9e:71:52:3f:4c:87:45:98:fb:2b:eb:d6: f3:bc:fa:ba:a7:1d:1a:9f:67:8d:a4:d5:ab:f2:d8:01:b0:6f: 47:93:17:7e:0f:7a:e2:63:2f:d3:ed:8e:d6:a0:79:69:83:04: 2c:c4:60:ea:50:60:9b:0b:00:f1:48:fe:78:e4:89:41:83:9b: e7:00:1d:60:35:52:83:4e:49:1e:5f:4e:4d:2e:89:32:86:89: 88:ef:af:99:79:e9:07:0e:bb:b3:75:98:d5:6f:8e:e8:7b:07: d5:82:7a:d2:c0:8e:cb:ab:a9:09:bc:00:49:a6:ec:a4:e8:d6: fa:5b:22:f2:8c:d0:b5:18:e2:59:5e:72:d5:f0:05:77:62:b0: b6:b2:a5:5a:c4:49:3d:d8:00:6c:32:67:e6:7f:18:13:bd:ec: 7f:97:ae:2a:d3:0d:e0:f2:31:51:08:c1:2e:a2:6d:d6:bd:4e: 6d:c3:ad:f5:f5:60:fe:f1:26:81:03:9a:f9:c6:35:1f:82:11: 83:8a:f9:d0:9a:e6:40:66:5d:5e:e2:d3:c9:00:26:56:b5:d3: fb:d9:f1:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kJJBmTZBE0fJaQIMEnTbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlOTg0YTVhNGI3ODA4YmI0ZWEzMmQzMTBiZGQwN2VjYzk1 NzUxMTMwHhcNMjUxMjIwMjEwMDQzWhcNMjUxMjIxMjEwMDQzWjAzMTEwLwYDVQQD EyhkODc0YmQ3MjhhYTFkMmI2ZDYwZWE3MmVjN2JjNDBmOGI4MzZjNDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBCIi7DcEnG/D+1E/2Yv/pXkx+2h HgJMccSz6GgnM6aTYpSb1O0mwk9PiVvP7lHiyOs2Nn12GcKYST7KGRS1CLNtRmKL 6bdOG9ZRiTADTia9aCzTWlw4m3ueQWSZ0hc00z2sHXX9hjYVnJnJQfMGo2r7QATr taljMrHd1Pbhb++Sddy3kJYy7P+MqTuS7n01ZXZ10O3x0dxsXDbhQPimPP0Io+3D nKoABE5OnunW4ZIi0beUQJWw2xVWhAHw8+YQGacq/1NF7Bd5peI91GJ1oE/Bww/3 cWqZaBoFkeTTVhzZXVZvRrDLscH1Zx8bBnaIXsBkYqL4TPXlln0iw5CDGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNh0vXKKodK21g6nLse8QPi4NsQUMB8GA1UdIwQY MBaAFE6YSlpLeAi7TqMtMQvdB+zJV1ETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHBoS1drdDRDTHRPb3kweEM5MEg3TWxYVVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC80MWRlYzEtMWViMS00OWM3LTlkNTAt Y2E1OTVlMzRkNWFjLzEvVHBoS1drdDRDTHRPb3kweEM5MEg3TWxYVVJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC80MWRlYzEtMWViMS00OWM3LTlkNTAtY2E1OTVlMzRkNWFj LzEvVHBoS1drdDRDTHRPb3kweEM5MEg3TWxYVVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsefleNv 96Y/AOhZXxCCpHGj//7K4EPI+zQsScSq+/00lJQ7qz8t5xo1nnFSP0yHRZj7K+vW 87z6uqcdGp9njaTVq/LYAbBvR5MXfg964mMv0+2O1qB5aYMELMRg6lBgmwsA8Uj+ eOSJQYOb5wAdYDVSg05JHl9OTS6JMoaJiO+vmXnpBw67s3WY1W+O6HsH1YJ60sCO y6upCbwASabspOjW+lsi8ozQtRjiWV5y1fAFd2KwtrKlWsRJPdgAbDJn5n8YE73s f5euKtMN4PIxUQjBLqJt1r1ObcOt9fVg/vEmgQOa+cY1H4IRg4r50JrmQGZdXuLT yQAmVrXT+9nxjg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:59:47 2025 by rpki-client