This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft File: tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json) Hash identifier: wCM3LcFmrwCz/TAPYE9AU96qZqO3mYVfgeVmD4T9068= Subject key identifier: 80:F9:FA:C4:33:E2:B3:65:5D:3C:D2:2A:61:13:2B:80:6D:18:EC:B8 Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9 Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9 Certificate serial: 019B3D907D13A48736FE22C78EA0A552F1C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 21:00:37 +0000 Manifest this update: Sat 20 Dec 2025 21:00:37 +0000 Manifest next update: Sun 21 Dec 2025 21:00:37 +0000 Files and hashes: 1: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: eNx0TNSJUFa+euHJforQzYJWSWlODngMsjnm2c8Islg=) 2: u16TB_X_VEL7--qGdSVXn8Zs3wY.roa (hash: m8sRTErDjjsLnDtgYn9w7y6plArnvxsTKmxxZwh54Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:7d:13:a4:87:36:fe:22:c7:8e:a0:a5:52:f1:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9 Validity Not Before: Dec 20 21:00:37 2025 GMT Not After : Dec 21 21:00:37 2025 GMT Subject: CN=80f9fac433e2b3655d3cd22a61132b806d18ecb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ed:0b:7f:7e:59:16:d2:d0:b1:18:6e:14:f1: 27:a4:e4:ea:a3:a5:8f:9e:8c:ef:4e:9d:72:04:f9: c5:d0:58:08:ea:9d:65:c5:1e:c0:8b:06:93:05:49: f7:cd:98:98:27:cc:ce:4d:dc:ec:93:dd:df:27:85: f0:2b:01:d8:50:71:3f:a2:fa:ab:d1:68:06:ed:b4: 2e:4d:2c:65:bc:56:b4:ef:0b:14:0b:15:27:e0:63: 32:f3:c2:5c:2f:4f:84:b3:04:b5:50:cc:29:f7:6f: d0:c8:bb:31:fa:cd:af:51:85:3f:e8:4f:4c:20:1a: fb:59:4f:05:7f:9c:ce:0c:8e:14:c1:bd:2e:a1:94: 6a:82:e0:5d:3a:88:5d:ff:51:45:84:83:d2:d1:02: 62:b6:98:af:5f:87:c0:be:d7:34:ef:c1:b7:88:2f: 90:d4:1e:16:84:f4:23:d5:06:ab:0d:af:64:6d:91: 6f:5d:0b:fd:13:08:66:6c:fb:41:a0:8e:1d:36:33: 66:e1:fb:91:21:71:62:7d:5a:34:75:44:ce:0e:f7: 99:11:e6:f0:52:0c:2e:d6:06:4d:c1:ac:bb:ee:2c: 2a:a4:36:34:0c:8b:4d:95:a1:60:3d:82:4c:cc:26: 1b:2f:aa:ae:1c:f6:f6:26:5f:83:06:b9:36:73:32: 0c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F9:FA:C4:33:E2:B3:65:5D:3C:D2:2A:61:13:2B:80:6D:18:EC:B8 X509v3 Authority Key Identifier: keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:74:c2:ec:dd:a6:a9:9a:27:80:d3:c1:e9:4a:53:ef:e3:e7: 79:21:dc:c2:e7:db:fb:4a:77:9c:df:98:38:22:59:17:c5:5b: 60:c4:e3:11:5c:d3:4a:3d:c9:fc:8c:44:7c:50:83:48:4d:e7: 7b:71:f8:06:df:f1:ba:e8:77:d4:91:68:b1:b1:fa:9d:4e:ae: df:ad:e4:87:08:57:8f:22:6f:1b:3b:95:8d:ab:63:d2:38:44: 83:05:08:cf:12:aa:83:5d:fb:f6:f3:90:ae:b2:9b:bf:50:b4: 1d:7f:72:7c:61:b0:70:a5:fe:f3:65:eb:11:89:11:99:9d:8b: 62:e0:e6:89:7b:30:49:e2:9a:24:24:04:7d:42:33:4e:6f:b4: f1:1c:c7:99:64:ce:cc:c9:f4:27:31:e7:58:59:be:18:0b:f4: b2:c0:f1:61:f5:e0:0a:33:23:fe:0e:a7:f8:57:b0:37:40:50: 81:25:de:1d:d8:68:1a:3a:61:ae:71:98:6f:f4:30:74:35:ed: d7:61:43:f9:f2:1f:81:bf:f9:03:48:4c:b7:2a:77:97:df:c5: e0:1d:85:54:9b:0f:6a:0c:f4:4b:31:48:59:0e:67:d0:29:ed: 35:f9:05:35:8e:94:a4:54:13:88:28:6a:b9:74:4b:8e:26:d7: 25:12:2b:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kH0TpIc2/iLHjqClUvHEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YWUyODhhOWRkYjBlZjUwYTI5NGIzY2FlOTYzZTE0N2M5 YzdkYzkwHhcNMjUxMjIwMjEwMDM3WhcNMjUxMjIxMjEwMDM3WjAzMTEwLwYDVQQD Eyg4MGY5ZmFjNDMzZTJiMzY1NWQzY2QyMmE2MTEzMmI4MDZkMThlY2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu0Lf35ZFtLQsRhuFPEnpOTqo6WP nozvTp1yBPnF0FgI6p1lxR7AiwaTBUn3zZiYJ8zOTdzsk93fJ4XwKwHYUHE/ovqr 0WgG7bQuTSxlvFa07wsUCxUn4GMy88JcL0+EswS1UMwp92/QyLsx+s2vUYU/6E9M IBr7WU8Ff5zODI4Uwb0uoZRqguBdOohd/1FFhIPS0QJitpivX4fAvtc078G3iC+Q 1B4WhPQj1QarDa9kbZFvXQv9EwhmbPtBoI4dNjNm4fuRIXFifVo0dUTODveZEebw Ugwu1gZNway77iwqpDY0DItNlaFgPYJMzCYbL6quHPb2Jl+DBrk2czIMPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFID5+sQz4rNlXTzSKmETK4BtGOy4MB8GA1UdIwQY MBaAFLSuKIqd2w71CilLPK6WPhR8nH3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEs0b2lwM2JEdlVLS1VzOHJwWS1GSHljZmNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80NTdmMmQtMDEzNy00ZDYxLTg1MDAt MzAwNDI2Y2UzMmUyLzEvdEs0b2lwM2JEdlVLS1VzOHJwWS1GSHljZmNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80NTdmMmQtMDEzNy00ZDYxLTg1MDAtMzAwNDI2Y2UzMmUy LzEvdEs0b2lwM2JEdlVLS1VzOHJwWS1GSHljZmNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0HTC7N2m qZongNPB6UpT7+PneSHcwufb+0p3nN+YOCJZF8VbYMTjEVzTSj3J/IxEfFCDSE3n e3H4Bt/xuuh31JFosbH6nU6u363khwhXjyJvGzuVjatj0jhEgwUIzxKqg1379vOQ rrKbv1C0HX9yfGGwcKX+82XrEYkRmZ2LYuDmiXswSeKaJCQEfUIzTm+08RzHmWTO zMn0JzHnWFm+GAv0ssDxYfXgCjMj/g6n+FewN0BQgSXeHdhoGjphrnGYb/QwdDXt 12FD+fIfgb/5A0hMtyp3l9/F4B2FVJsPagz0SzFIWQ5n0CntNfkFNY6UpFQTiChq uXRLjibXJRIroQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:37:04 2025 by rpki-client