This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft File: tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft (raw, json) Hash identifier: pGnFXZgj2+YIV/jJ50YSSOKTbEnrZGtDATEHswOzVMg= Subject key identifier: 85:9E:A8:21:6A:83:F6:5A:63:E9:C0:4E:13:57:14:3D:43:80:9F:AD Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC Certificate issuer: /CN=b55800300fa4017f970c95d767d812fd10d0dcbc Certificate serial: 019B42EEB4532F5CB485CF015746D8E9CF45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 22:01:38 +0000 Manifest this update: Sun 21 Dec 2025 22:01:38 +0000 Manifest next update: Mon 22 Dec 2025 22:01:38 +0000 Files and hashes: 1: 3YFzPEGiHndZmZ_eV1KbJ4S1riY.roa (hash: FCQDUK+ghfu3EK3q9DQ8TjIhvTkAHxB9mFLDZLBtP9Y=) 2: EVaA3-ZHoYM7bQogMMCCiWaw1m8.roa (hash: 9xvzOhDXLyNzuEt6+Op6hCq6aivVhFaE/WM/TJiIqaQ=) 3: doNLz_Gg1EkAtDNeyKv_LFw0Ko4.roa (hash: c5Br4+KluzNH8KBaWzOXwE8I5n348N/E3/7Xw+/XMWg=) 4: jp2EKc78qzNJwAA6CKUCtN1_xPs.roa (hash: N30Shs4kxpb93kdcL0yQH4lpcXuNQixmuCGD2o86d10=) 5: mQ8EWcQUR62mYiKooxZwctCHayg.roa (hash: SLS2UcLvk1MQ2//HQMy6W/8v0351+i+VZptNP4xMFuI=) 6: tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl (hash: a9kZk3yPCP0RX0BHuIrEfhYCap3P7MWFxkeeC5S3xtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:b4:53:2f:5c:b4:85:cf:01:57:46:d8:e9:cf:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc Validity Not Before: Dec 21 22:01:38 2025 GMT Not After : Dec 22 22:01:38 2025 GMT Subject: CN=859ea8216a83f65a63e9c04e1357143d43809fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:27:0e:e8:fd:e1:9a:49:55:ca:e5:11:1d:b4: d3:f7:97:72:4e:44:de:48:09:fd:4b:51:7b:6c:90: 0f:b1:f4:54:37:99:b5:44:33:06:2e:89:5e:b3:4b: 7b:53:15:e8:80:ec:3e:89:8c:0b:3c:ac:a0:8a:ae: df:3f:84:f6:7e:ed:80:75:36:3f:e4:2a:3a:29:65: f9:67:51:9c:eb:3d:2b:7c:28:f4:88:c0:ae:9c:ac: 7a:7e:9c:61:e3:6c:1b:bd:7f:86:e0:e2:d4:50:3b: 94:20:92:62:58:68:03:29:92:e7:49:41:d5:73:82: 23:19:07:cc:c1:07:38:4d:53:da:6b:90:e7:ee:42: 95:22:69:08:a2:0f:27:b5:78:c6:c7:f3:ef:96:a4: 7e:6f:51:fd:0d:b0:27:5f:47:73:9f:0c:17:a3:43: 6d:ac:71:7e:ab:00:3b:b8:52:b9:de:a8:66:74:b5: db:5a:14:01:64:0e:8b:da:c1:8f:50:83:6e:6f:cd: b9:83:83:14:45:9f:0e:59:23:d6:dc:c4:d7:81:85: 3c:3d:a0:d0:10:a4:eb:8a:04:e2:19:86:86:6d:61: 1c:4a:cb:55:fe:29:bb:32:d9:21:01:f2:e0:3a:0f: 07:47:5f:f1:7f:35:47:74:ad:6e:16:47:cf:3f:25: 69:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9E:A8:21:6A:83:F6:5A:63:E9:C0:4E:13:57:14:3D:43:80:9F:AD X509v3 Authority Key Identifier: keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d8:74:82:2d:01:9a:9a:25:45:a0:0b:c8:0d:76:b8:66:57: 02:e2:77:fe:36:34:cb:ac:36:50:6a:a1:e9:98:63:77:2e:22: 7f:05:09:d0:68:0e:0e:b7:a0:45:15:d4:85:7e:76:79:00:72: 0c:d5:c2:27:0a:de:c8:b8:b5:cb:71:77:79:34:89:49:f3:bd: 35:8f:34:cf:b2:2d:ec:15:51:4b:22:6f:73:42:95:7c:53:3a: 80:ed:45:03:1a:67:89:74:b6:1b:88:5e:90:37:78:84:bd:cd: 06:8c:36:0f:55:71:0b:d6:67:51:59:4a:21:3e:51:77:ef:6c: 40:95:11:28:c7:2c:cc:8c:8e:49:7c:42:24:ca:b2:e0:af:79: 99:86:5f:6e:54:3e:a7:cc:61:5b:f5:78:6a:1b:44:b3:06:ae: 20:1e:b3:ef:1a:31:00:68:fa:5d:cb:fd:30:b7:21:49:b1:6a: 58:3b:11:3a:17:8f:96:64:a0:31:35:30:37:52:28:3f:17:25: cc:20:6a:1d:68:7d:4d:3a:03:2e:f9:f7:4a:d8:5c:0d:05:2a: 82:6c:ad:5b:be:9e:93:1d:36:8a:a8:d2:ba:bc:b4:cf:3b:81: fb:41:4d:48:27:1c:ab:d4:65:ae:09:39:90:24:66:a7:68:e8: 04:7b:3c:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7rRTL1y0hc8BV0bY6c9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTgwMDMwMGZhNDAxN2Y5NzBjOTVkNzY3ZDgxMmZkMTBk MGRjYmMwHhcNMjUxMjIxMjIwMTM4WhcNMjUxMjIyMjIwMTM4WjAzMTEwLwYDVQQD Eyg4NTllYTgyMTZhODNmNjVhNjNlOWMwNGUxMzU3MTQzZDQzODA5ZmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCcO6P3hmklVyuURHbTT95dyTkTe SAn9S1F7bJAPsfRUN5m1RDMGLoles0t7UxXogOw+iYwLPKygiq7fP4T2fu2AdTY/ 5Co6KWX5Z1Gc6z0rfCj0iMCunKx6fpxh42wbvX+G4OLUUDuUIJJiWGgDKZLnSUHV c4IjGQfMwQc4TVPaa5Dn7kKVImkIog8ntXjGx/PvlqR+b1H9DbAnX0dznwwXo0Nt rHF+qwA7uFK53qhmdLXbWhQBZA6L2sGPUINub825g4MURZ8OWSPW3MTXgYU8PaDQ EKTrigTiGYaGbWEcSstV/im7MtkhAfLgOg8HR1/xfzVHdK1uFkfPPyVpNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWeqCFqg/ZaY+nAThNXFD1DgJ+tMB8GA1UdIwQY MBaAFLVYADAPpAF/lwyV12fYEv0Q0Ny8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84YTg0ODctOTMxYS00MmZiLWI2NjQt YzUyZGY0YWE1MjFkLzEvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC84YTg0ODctOTMxYS00MmZiLWI2NjQtYzUyZGY0YWE1MjFk LzEvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAith0gi0B mpolRaALyA12uGZXAuJ3/jY0y6w2UGqh6Zhjdy4ifwUJ0GgODregRRXUhX52eQBy DNXCJwreyLi1y3F3eTSJSfO9NY80z7It7BVRSyJvc0KVfFM6gO1FAxpniXS2G4he kDd4hL3NBow2D1VxC9ZnUVlKIT5Rd+9sQJURKMcszIyOSXxCJMqy4K95mYZfblQ+ p8xhW/V4ahtEswauIB6z7xoxAGj6Xcv9MLchSbFqWDsROhePlmSgMTUwN1IoPxcl zCBqHWh9TToDLvn3SthcDQUqgmytW76ekx02iqjSury0zzuB+0FNSCccq9Rlrgk5 kCRmp2joBHs81w== -----END CERTIFICATE-----Generated at Mon Dec 22 07:51:45 2025 by rpki-client