This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft File: TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json) Hash identifier: WQ+Xq21HtEPPWUqt5cmIJ9D8V88qMKINJ0GStnmJHOo= Subject key identifier: 67:F2:2B:F1:BC:35:A3:EC:58:23:6A:8E:50:1F:38:38:3B:62:C6:CB Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c Certificate serial: 019B3CEBED4AC0275D8A1C4B11EF4B55505E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft Manifest number: 178F Signing time: Sat 20 Dec 2025 18:00:53 +0000 Manifest this update: Sat 20 Dec 2025 18:00:53 +0000 Manifest next update: Sun 21 Dec 2025 18:00:53 +0000 Files and hashes: 1: 93DmKZhPP6C3A8rfNYLNAOSD7nY.roa (hash: dt3s4SYU1dR+fLajxJTR3/3GKKVmv0f+WTIVOmO+2as=) 2: A1lFiDlkwzd2kuuHtwLxrVifjIM.roa (hash: bheq6y6BKOc+FBTnE7aA9p7E54SloHCzl+8cgE33f9o=) 3: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: ovjQ0pkEctO64EgFoba58pe/w1yN+aabWcdot60ns+Q=) 4: UD9G2KurtNeaAxJdizQiQcSD0uc.roa (hash: Es9ToT28+rspmgTLqxqTlnHgsgNlKjrlO13bAnzcF2g=) 5: XDIQZzxZW5-uUuoXNVfYPGALZY8.roa (hash: xZyhu94HluR+zrM/qfXRNVxIfS3klNJwNP/Gh4p7kNE=) 6: cYs_upIMBFM1qTzwqySxwaPDCLc.roa (hash: xI0Q9MYkvDP8hv/SnI33zJTsy3M/0ZO4tON1nbaFCD4=) 7: jk-_IfFTaD-MzFizpWx0AA1TkH4.roa (hash: wezPiSGoo0rul4hPDHDdcRTaZb8xQPAVvKZ9GBZZNU8=) 8: luOuJQnFXQhNggwM6MUJDK19PDQ.roa (hash: yd7LbwhPMHWjUutNzr3ySSl/LTeLlprMji5U1R9GXsM=) 9: mmpsKeeO5JUD0kNNB4aUsbfsoEs.roa (hash: mRAg2xOUvTrNMtJyTqYFatxVEZidyGOVjXZ4XpUtMSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:ed:4a:c0:27:5d:8a:1c:4b:11:ef:4b:55:50:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c Validity Not Before: Dec 20 18:00:53 2025 GMT Not After : Dec 21 18:00:53 2025 GMT Subject: CN=67f22bf1bc35a3ec58236a8e501f38383b62c6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:28:3b:8e:f4:a9:52:98:11:c6:44:73:f7:9a: df:47:b4:07:0a:2e:ad:00:3c:c5:9c:16:3f:a4:57: 8e:f1:2e:e4:f8:fd:1d:6f:01:fc:b1:77:7f:06:b9: 8e:34:c7:2a:54:76:bf:c5:8c:2a:e5:14:a2:c4:eb: ba:73:a0:cd:b5:be:4e:44:62:be:66:a5:7a:b5:84: 36:ba:98:34:a0:dc:09:81:af:13:c0:40:ba:20:9f: 72:f0:7f:17:c6:15:da:1b:5d:7d:d6:e5:b5:53:c2: fa:ac:ab:1e:50:45:a0:b9:33:79:70:65:b4:55:63: 18:ae:1d:f6:2d:23:a9:13:3b:cc:e2:c2:66:04:c3: ee:d1:2e:a3:9d:1b:7b:a3:32:3a:b6:6a:31:38:f1: 0e:d6:bd:84:d4:68:60:7c:ba:fc:be:a9:31:99:37: 58:97:17:27:8f:1c:84:96:16:5b:c8:14:33:bf:7b: 0a:f8:a1:04:9f:25:07:20:bd:43:22:01:33:80:25: 57:90:4f:d8:c3:27:bd:f9:0b:81:f5:d9:6a:ef:31: 52:f5:93:13:ae:4b:dc:6d:c1:f4:57:ad:49:db:1a: c6:b4:5d:a2:94:ed:56:20:5e:f6:fd:f0:8c:d9:14: 57:24:a8:93:00:e2:56:5b:a0:55:17:87:9a:b1:89: f7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F2:2B:F1:BC:35:A3:EC:58:23:6A:8E:50:1F:38:38:3B:62:C6:CB X509v3 Authority Key Identifier: keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:60:70:2a:31:f5:08:fa:21:6d:02:b6:90:e7:4f:03:9e:c2: 07:c2:5d:f6:0d:2b:ab:c6:64:dd:19:5d:15:49:b6:70:5c:55: 2b:02:5d:f7:bb:e0:17:ad:a2:3b:45:07:53:60:c5:5d:ff:1e: d5:33:f9:97:52:11:c0:47:66:09:46:69:86:bd:a1:7c:b1:5d: 66:f8:9c:ad:99:a2:f1:6c:b5:96:10:fe:9a:74:57:70:3a:07: e5:86:96:9a:71:b3:f8:86:a4:13:2a:a6:41:0e:e9:b9:0f:e5: ff:7e:d1:8d:ff:56:45:53:25:23:2e:16:f6:c4:08:a8:0a:13: c6:03:72:5e:ff:66:ec:b7:6b:aa:c2:f2:ad:7c:65:b2:11:08: 81:d3:2f:e9:97:0e:d4:04:7d:b0:a3:ca:f8:4e:45:08:d0:e7: d1:c8:5d:ff:0a:4d:06:a6:2a:6d:8f:86:30:8d:b7:66:c3:d1: b7:44:7b:20:b7:ab:4f:7f:d3:d6:23:1d:70:d3:cf:3d:4f:c1: 3f:21:0d:d9:1d:36:de:5d:a7:ea:66:5e:83:01:a6:08:f2:bd: ee:ad:7e:59:72:e5:63:7a:06:4f:47:a1:bb:17:04:de:7e:b1: 63:cd:b1:c7:2f:ba:81:36:0d:7f:bd:da:c7:a0:c3:61:24:66: b3:2a:a9:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86+1KwCddihxLEe9LVVBeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMGFkZTU0YzI3ZTZmY2RkYWNlMjYyYzRmZGY3OTBmMzIw ZmVkOWMwHhcNMjUxMjIwMTgwMDUzWhcNMjUxMjIxMTgwMDUzWjAzMTEwLwYDVQQD Eyg2N2YyMmJmMWJjMzVhM2VjNTgyMzZhOGU1MDFmMzgzODNiNjJjNmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmig7jvSpUpgRxkRz95rfR7QHCi6t ADzFnBY/pFeO8S7k+P0dbwH8sXd/BrmONMcqVHa/xYwq5RSixOu6c6DNtb5ORGK+ ZqV6tYQ2upg0oNwJga8TwEC6IJ9y8H8XxhXaG1191uW1U8L6rKseUEWguTN5cGW0 VWMYrh32LSOpEzvM4sJmBMPu0S6jnRt7ozI6tmoxOPEO1r2E1GhgfLr8vqkxmTdY lxcnjxyElhZbyBQzv3sK+KEEnyUHIL1DIgEzgCVXkE/Ywye9+QuB9dlq7zFS9ZMT rkvcbcH0V61J2xrGtF2ilO1WIF72/fCM2RRXJKiTAOJWW6BVF4easYn3XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfyK/G8NaPsWCNqjlAfODg7YsbLMB8GA1UdIwQY MBaAFE0K3lTCfm/N2s4mLE/feQ8yD+2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2It ODkyOTZjY2IzNWY1LzEvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2ItODkyOTZjY2IzNWY1 LzEvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomBwKjH1 CPohbQK2kOdPA57CB8Jd9g0rq8Zk3RldFUm2cFxVKwJd97vgF62iO0UHU2DFXf8e 1TP5l1IRwEdmCUZphr2hfLFdZvicrZmi8Wy1lhD+mnRXcDoH5YaWmnGz+IakEyqm QQ7puQ/l/37Rjf9WRVMlIy4W9sQIqAoTxgNyXv9m7LdrqsLyrXxlshEIgdMv6ZcO 1AR9sKPK+E5FCNDn0chd/wpNBqYqbY+GMI23ZsPRt0R7ILerT3/T1iMdcNPPPU/B PyEN2R023l2n6mZegwGmCPK97q1+WXLlY3oGT0ehuxcE3n6xY82xxy+6gTYNf73a x6DDYSRmsyqp/w== -----END CERTIFICATE-----Generated at Sat Dec 20 21:33:00 2025 by rpki-client