This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft File: TSkoLUc3P5QvCti5HtlAk7Zuo68.mft (raw, json) Hash identifier: pBUHluUlwWmBCSDTICCHAF6sTIUB+6/Go76EYE64irg= Subject key identifier: 57:55:9D:E0:A6:62:5C:4E:7A:76:74:59:C6:B9:90:8B:65:3E:47:01 Authority key identifier: 4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF Certificate issuer: /CN=4d29282d47373f942f0ad8b91ed94093b66ea3af Certificate serial: 019B4A70BCB8918237830722A81C19231F47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft Manifest number: 1718 Signing time: Tue 23 Dec 2025 09:01:00 +0000 Manifest this update: Tue 23 Dec 2025 09:01:00 +0000 Manifest next update: Wed 24 Dec 2025 09:01:00 +0000 Files and hashes: 1: 8G7CKA2HbZHRoNb9HaqBloS90vU.roa (hash: lDvm+Nsn5gFxpzefNnpEbQ5VLuNGtuV4rwnVopzkwq0=) 2: TSkoLUc3P5QvCti5HtlAk7Zuo68.crl (hash: UvU25wE97/pRz3gEPFk2fQK6i/W+cCA0JYlF6SscQmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:70:bc:b8:91:82:37:83:07:22:a8:1c:19:23:1f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d29282d47373f942f0ad8b91ed94093b66ea3af Validity Not Before: Dec 23 09:01:00 2025 GMT Not After : Dec 24 09:01:00 2025 GMT Subject: CN=57559de0a6625c4e7a767459c6b9908b653e4701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:bd:89:74:35:49:5e:ba:4c:93:be:73:56:25: 3b:7b:9d:99:8a:f9:c9:39:66:5a:3e:25:1e:63:df: f4:bb:e7:f8:ac:e4:7e:ec:48:ec:a1:c2:d2:79:cb: 98:e9:65:29:4b:0d:44:1e:c8:a6:30:00:30:cf:70: 97:79:09:74:11:84:bb:72:0a:38:e2:b1:cd:f7:ea: 73:e5:8e:e4:6f:0f:cb:64:19:3c:34:ce:07:06:1e: 8c:b6:86:16:3d:c3:9e:8c:79:dd:2d:22:f0:80:6f: 94:6c:c1:b3:b1:53:36:dd:8a:c5:4c:28:0b:f2:b8: 28:a0:1f:eb:fb:bb:d0:b9:17:28:e7:b8:ea:9b:60: 26:d0:c3:a3:21:98:8f:62:70:fd:fa:a6:ca:80:be: 73:12:fa:ca:9b:3b:a0:26:34:20:2d:91:8f:0a:84: 3f:26:a6:e6:3a:2d:bd:df:ef:8b:10:e4:f6:cb:a3: cf:48:57:07:8a:f2:d3:d8:81:a4:05:a0:28:21:5b: 9f:12:e6:6b:43:84:69:85:76:6c:ac:27:be:81:88: a3:21:e6:f1:7e:0b:8e:df:95:8a:28:ee:b7:47:82: ae:30:aa:a7:7b:09:82:42:46:c7:1d:a8:7e:0f:61: 75:3d:26:88:2b:3b:23:97:0b:7d:7a:24:6a:ca:0d: 83:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:55:9D:E0:A6:62:5C:4E:7A:76:74:59:C6:B9:90:8B:65:3E:47:01 X509v3 Authority Key Identifier: keyid:4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2d:5f:88:3c:78:a9:0a:a0:29:ce:3a:95:d3:b2:31:78:a6: 41:45:d3:9d:00:dd:e7:62:f2:e9:dc:49:91:f0:75:06:48:76: 66:36:44:70:e7:bc:ca:f8:cc:e4:7b:ba:5f:8c:51:6e:a2:3a: e6:50:b4:ef:52:56:0a:4d:74:6b:2a:88:45:6b:72:ee:0e:cc: 6e:a9:94:0f:da:88:1a:e3:7c:de:83:5e:63:23:a5:8f:de:19: 62:34:f8:6e:4d:3e:8e:c0:47:76:c3:43:34:85:22:a2:7e:c1: df:84:6b:3e:07:c0:90:66:71:87:d7:5c:17:b9:06:e5:6a:ef: a4:37:d4:5d:9c:39:30:c0:e9:f3:77:31:00:57:4f:db:b9:21: 0d:77:32:21:c1:50:ca:41:30:77:68:1c:75:0f:27:31:48:04: ba:1c:3e:d5:90:b2:70:6d:73:4a:e2:cd:22:c6:f1:da:83:c2: 72:81:d7:25:ce:1a:2a:95:9f:6d:97:8d:88:08:e7:74:56:40: f9:58:57:8b:d2:76:5f:96:a6:3a:2f:ff:b6:c0:d5:b6:60:98: 81:99:c0:92:82:23:1e:4a:50:93:84:2d:fa:9f:a6:5d:ff:69: 7a:e3:81:b2:c4:48:48:ab:1f:4e:4a:01:42:7e:12:ca:3a:c2: 53:76:e3:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcLy4kYI3gwciqBwZIx9HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMjkyODJkNDczNzNmOTQyZjBhZDhiOTFlZDk0MDkzYjY2 ZWEzYWYwHhcNMjUxMjIzMDkwMTAwWhcNMjUxMjI0MDkwMTAwWjAzMTEwLwYDVQQD Eyg1NzU1OWRlMGE2NjI1YzRlN2E3Njc0NTljNmI5OTA4YjY1M2U0NzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8r2JdDVJXrpMk75zViU7e52ZivnJ OWZaPiUeY9/0u+f4rOR+7EjsocLSecuY6WUpSw1EHsimMAAwz3CXeQl0EYS7cgo4 4rHN9+pz5Y7kbw/LZBk8NM4HBh6MtoYWPcOejHndLSLwgG+UbMGzsVM23YrFTCgL 8rgooB/r+7vQuRco57jqm2Am0MOjIZiPYnD9+qbKgL5zEvrKmzugJjQgLZGPCoQ/ JqbmOi293++LEOT2y6PPSFcHivLT2IGkBaAoIVufEuZrQ4RphXZsrCe+gYijIebx fguO35WKKO63R4KuMKqnewmCQkbHHah+D2F1PSaIKzsjlwt9eiRqyg2DkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdVneCmYlxOenZ0Wca5kItlPkcBMB8GA1UdIwQY MBaAFE0pKC1HNz+ULwrYuR7ZQJO2bqOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFNrb0xVYzNQNVF2Q3RpNUh0bEFrN1p1bzY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82NWE0YzItMzRiMy00MjA1LWFmZDEt YzU0ODFkYjM3MThkLzEvVFNrb0xVYzNQNVF2Q3RpNUh0bEFrN1p1bzY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC82NWE0YzItMzRiMy00MjA1LWFmZDEtYzU0ODFkYjM3MThk LzEvVFNrb0xVYzNQNVF2Q3RpNUh0bEFrN1p1bzY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAni1fiDx4 qQqgKc46ldOyMXimQUXTnQDd52Ly6dxJkfB1Bkh2ZjZEcOe8yvjM5Hu6X4xRbqI6 5lC071JWCk10ayqIRWty7g7MbqmUD9qIGuN83oNeYyOlj94ZYjT4bk0+jsBHdsND NIUion7B34RrPgfAkGZxh9dcF7kG5WrvpDfUXZw5MMDp83cxAFdP27khDXcyIcFQ ykEwd2gcdQ8nMUgEuhw+1ZCycG1zSuLNIsbx2oPCcoHXJc4aKpWfbZeNiAjndFZA +VhXi9J2X5amOi//tsDVtmCYgZnAkoIjHkpQk4Qt+p+mXf9peuOBssRISKsfTkoB Qn4SyjrCU3bjhw== -----END CERTIFICATE-----Generated at Tue Dec 23 10:47:59 2025 by rpki-client