This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft File: tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json) Hash identifier: 42QdmWjKuCJxWcP7sK5MzvyvVafsdjENOhrqQjx05CM= Subject key identifier: 21:00:AE:FA:E3:13:8E:77:3E:5B:27:B2:64:E3:3B:76:E6:14:72:33 Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45 Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145 Certificate serial: 019B3BD9428CD216F78A04A2B3FA62E7B8A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 13:00:52 +0000 Manifest this update: Sat 20 Dec 2025 13:00:52 +0000 Manifest next update: Sun 21 Dec 2025 13:00:52 +0000 Files and hashes: 1: BDcEAKntpIejrVcoW-jQtFYDt4A.roa (hash: 9rJ6V8MVwpwUlBMeKLrrT4d005j4mZf3dlxw+gQ0CuE=) 2: n9wbgcYA2gFozQl-awLgvubO0Jw.roa (hash: I7/eXt/2fdY6ma/4TQO3Dibom5bD15oMz/+pqihDXpI=) 3: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: KcNQs08OWCoTvs2wbF7XaCq/mrO8EWNPI20n2SvXntM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:42:8c:d2:16:f7:8a:04:a2:b3:fa:62:e7:b8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145 Validity Not Before: Dec 20 13:00:52 2025 GMT Not After : Dec 21 13:00:52 2025 GMT Subject: CN=2100aefae3138e773e5b27b264e33b76e6147233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:58:3f:f1:1f:28:28:34:31:08:0f:0d:0c:a4: c7:34:0a:e5:a7:76:7e:21:27:f3:01:12:94:b4:bb: ab:b4:98:0d:a3:a9:44:9e:ae:a6:20:ef:fe:83:e9: ff:a7:16:c3:81:0f:b9:18:2d:51:14:ca:cf:01:68: a8:7d:df:09:5a:79:5e:72:5d:c1:3e:78:fd:26:49: 70:1c:58:3c:69:e2:72:ce:ca:26:1d:d2:33:a9:de: 9f:e3:33:74:7c:54:ba:81:e4:dc:59:b1:f2:27:9b: 92:68:c9:1f:1b:67:7b:00:02:74:b2:24:ad:3c:79: 99:8b:89:67:19:33:b1:c8:10:c5:23:94:79:98:a5: 59:ad:39:73:bd:1d:14:8e:9f:7f:3d:94:25:74:c0: ef:46:09:d1:c7:d3:7a:bb:ba:6a:70:bc:d4:9c:09: c1:45:b2:1f:76:d3:c3:e6:d9:d2:09:46:48:f3:48: b9:b4:43:c7:d2:a7:f3:37:43:4e:cf:4d:37:66:53: 6e:89:f1:4c:09:44:61:43:93:f5:82:c1:e6:a6:18: 1c:d6:ee:e3:ca:0f:1c:f0:2b:9c:8c:76:c3:14:a8: a6:a3:ce:5a:c5:bb:c5:35:2a:6f:ca:08:ae:7a:10: 77:80:90:3a:8c:e0:ec:18:1a:cc:6f:1f:2e:e7:cc: 34:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:00:AE:FA:E3:13:8E:77:3E:5B:27:B2:64:E3:3B:76:E6:14:72:33 X509v3 Authority Key Identifier: keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:7d:ff:e1:9e:6d:bb:b6:0f:91:0d:0d:53:78:19:13:34:f7: 15:b7:00:be:62:6a:44:75:56:e3:ed:17:1b:3c:90:d5:eb:ab: 66:7c:49:68:ad:fd:f1:09:2c:3b:e6:93:6e:10:f8:d5:fb:6e: 5a:a3:1e:5a:2c:fe:69:8b:49:9e:ba:2d:9c:2c:d2:7d:71:b1: 90:88:63:10:db:05:d5:e2:c3:c1:b9:a6:ac:80:6a:03:8e:80: 2e:39:68:88:3b:8c:39:95:65:3a:1d:35:f3:1b:84:cd:d4:1b: e7:36:d7:48:b4:3d:ae:56:e2:1b:f6:f1:b7:7c:be:65:6d:8a: 3b:0a:02:2c:1c:1f:5d:41:ef:40:87:9b:f6:69:a8:e3:d8:0e: 47:71:f4:c0:d2:fe:df:41:4a:a8:e8:de:30:39:89:a3:cb:57: 6c:45:c2:9e:c3:4b:ba:36:13:fd:56:99:4c:ee:26:45:f3:4c: 55:da:ca:49:9e:5d:ba:e3:4e:93:2e:20:b3:3a:c7:32:cb:49: 3b:e4:0d:dd:3f:f1:51:21:ad:fc:22:09:c6:19:2c:4f:0d:70: 21:a6:8c:16:26:7d:71:86:46:db:4b:0d:11:79:44:b9:8e:aa: b7:b7:cc:b7:7b:62:8f:b9:f3:cf:3b:c8:76:d0:e2:50:42:cd: 23:ea:5c:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72UKM0hb3igSis/pi57inMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YTE2NTRkYWU5NmM1MzI1NzhjZTFkZjFlYmI4MjIxZGJi NjgxNDUwHhcNMjUxMjIwMTMwMDUyWhcNMjUxMjIxMTMwMDUyWjAzMTEwLwYDVQQD EygyMTAwYWVmYWUzMTM4ZTc3M2U1YjI3YjI2NGUzM2I3NmU2MTQ3MjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVg/8R8oKDQxCA8NDKTHNArlp3Z+ ISfzARKUtLurtJgNo6lEnq6mIO/+g+n/pxbDgQ+5GC1RFMrPAWiofd8JWnlecl3B Pnj9JklwHFg8aeJyzsomHdIzqd6f4zN0fFS6geTcWbHyJ5uSaMkfG2d7AAJ0siSt PHmZi4lnGTOxyBDFI5R5mKVZrTlzvR0Ujp9/PZQldMDvRgnRx9N6u7pqcLzUnAnB RbIfdtPD5tnSCUZI80i5tEPH0qfzN0NOz003ZlNuifFMCURhQ5P1gsHmphgc1u7j yg8c8CucjHbDFKimo85axbvFNSpvygiuehB3gJA6jODsGBrMbx8u58w0aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEArvrjE453PlsnsmTjO3bmFHIzMB8GA1UdIwQY MBaAFLahZU2ulsUyV4zh3x67giHbtoFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHFGbFRhNld4VEpYak9IZkhydUNJZHUyZ1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iMDExZDMtYmRiYS00NWNkLWE4YWMt ZTBiZTg5YzRmMTY5LzEvdHFGbFRhNld4VEpYak9IZkhydUNJZHUyZ1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9iMDExZDMtYmRiYS00NWNkLWE4YWMtZTBiZTg5YzRmMTY5 LzEvdHFGbFRhNld4VEpYak9IZkhydUNJZHUyZ1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoH3/4Z5t u7YPkQ0NU3gZEzT3FbcAvmJqRHVW4+0XGzyQ1eurZnxJaK398QksO+aTbhD41ftu WqMeWiz+aYtJnrotnCzSfXGxkIhjENsF1eLDwbmmrIBqA46ALjloiDuMOZVlOh01 8xuEzdQb5zbXSLQ9rlbiG/bxt3y+ZW2KOwoCLBwfXUHvQIeb9mmo49gOR3H0wNL+ 30FKqOjeMDmJo8tXbEXCnsNLujYT/VaZTO4mRfNMVdrKSZ5duuNOky4gszrHMstJ O+QN3T/xUSGt/CIJxhksTw1wIaaMFiZ9cYZG20sNEXlEuY6qt7fMt3tij7nzzzvI dtDiUELNI+pcbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:05:08 2025 by rpki-client