This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft File: tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft (raw, json) Hash identifier: LBbH+jg615+k2AyfmVimFJfs+7eHUXqwWlJ3UVdc1/s= Subject key identifier: 39:72:C7:BB:5D:5F:08:18:D9:BA:BA:7F:16:10:E8:66:78:F9:1C:69 Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC Certificate issuer: /CN=b55800300fa4017f970c95d767d812fd10d0dcbc Certificate serial: 019B3F118EF0296C2EE7330016C6CBBF861D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 04:01:13 +0000 Manifest this update: Sun 21 Dec 2025 04:01:13 +0000 Manifest next update: Mon 22 Dec 2025 04:01:13 +0000 Files and hashes: 1: 3YFzPEGiHndZmZ_eV1KbJ4S1riY.roa (hash: FCQDUK+ghfu3EK3q9DQ8TjIhvTkAHxB9mFLDZLBtP9Y=) 2: EVaA3-ZHoYM7bQogMMCCiWaw1m8.roa (hash: 9xvzOhDXLyNzuEt6+Op6hCq6aivVhFaE/WM/TJiIqaQ=) 3: doNLz_Gg1EkAtDNeyKv_LFw0Ko4.roa (hash: c5Br4+KluzNH8KBaWzOXwE8I5n348N/E3/7Xw+/XMWg=) 4: jp2EKc78qzNJwAA6CKUCtN1_xPs.roa (hash: N30Shs4kxpb93kdcL0yQH4lpcXuNQixmuCGD2o86d10=) 5: mQ8EWcQUR62mYiKooxZwctCHayg.roa (hash: SLS2UcLvk1MQ2//HQMy6W/8v0351+i+VZptNP4xMFuI=) 6: tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl (hash: VdmiVZb8vNv9Cg2lBJrLBgZK/yP0wFuPcdLmagBZcxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:8e:f0:29:6c:2e:e7:33:00:16:c6:cb:bf:86:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc Validity Not Before: Dec 21 04:01:13 2025 GMT Not After : Dec 22 04:01:13 2025 GMT Subject: CN=3972c7bb5d5f0818d9baba7f1610e86678f91c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:41:44:2a:6d:4c:95:50:94:c6:29:c7:f1:56: 10:2d:f7:30:24:9a:01:22:f2:05:5f:28:65:82:3e: 81:f6:82:13:f0:dc:5a:1c:70:76:c0:77:28:d4:8d: 30:4a:b3:8c:fd:68:8a:a2:c7:b2:cd:92:d4:d4:6f: 19:9b:d9:9c:9e:b3:71:ae:55:8b:fc:ae:37:6b:b6: 40:86:24:be:fd:ae:5c:c6:41:99:0e:82:29:eb:61: 8f:76:f4:7f:d6:ca:04:75:c8:79:45:b9:1b:6d:4c: 8e:45:04:8c:43:5a:a7:8c:97:51:1a:67:f6:fb:fd: 49:89:0c:b9:2e:f4:84:1f:29:37:9d:71:e3:6d:45: 3e:33:e1:5c:d1:bc:a2:83:12:e7:a4:70:0f:82:b1: 3c:54:66:21:cd:50:ad:fe:fa:ca:a2:a1:86:80:9b: 5d:34:29:aa:2f:75:f5:3a:de:db:8d:a0:f2:71:6d: 38:b3:41:6f:35:7f:40:9f:25:bf:b8:07:35:a0:95: 36:78:80:fb:fd:3a:e9:e7:43:ae:b3:c8:c8:1f:c0: 45:77:b3:9f:bb:41:76:dd:b4:c8:4d:fc:4c:c1:8a: b3:5b:b5:f6:e9:95:49:2c:63:fd:16:7e:b1:bc:48: be:ba:f4:c2:5e:f5:7a:fd:7a:9f:bb:58:4f:cf:c6: 0a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:72:C7:BB:5D:5F:08:18:D9:BA:BA:7F:16:10:E8:66:78:F9:1C:69 X509v3 Authority Key Identifier: keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:38:5f:20:f3:33:bf:e6:06:22:cb:f7:cd:bc:64:7b:65:21: 83:37:ca:81:6c:a5:4b:97:bb:8f:09:1d:89:b1:b2:82:6b:61: 70:ea:96:bb:d9:c6:af:67:a9:51:9f:89:c8:e9:7d:80:47:ee: 81:f6:52:67:cc:06:c4:0a:e8:7c:82:49:a8:a9:9c:12:ce:11: ef:34:eb:ed:38:3a:a3:ca:bf:a4:65:8c:f9:04:8f:3d:00:58: 65:0d:4a:a3:f7:9d:06:33:d3:e0:9b:7c:cd:17:88:8e:88:8b: 2e:bd:a0:b6:75:46:75:6d:3d:2e:58:ba:0d:c0:45:3c:f6:18: 18:6c:f0:0d:b6:88:ea:c3:8d:05:ab:30:e6:b6:7c:48:63:b5: 07:5c:78:7a:a3:3d:ee:86:83:4d:39:a7:fe:b0:cf:e4:6b:15: c5:38:05:80:4f:d6:25:55:65:df:e5:52:ec:c8:b0:8f:22:89: 16:b1:ca:f2:4b:90:d8:45:71:92:b0:63:cd:ac:db:18:36:a0: f9:7d:85:b8:7f:56:86:e5:41:5a:52:46:31:36:2e:c5:5b:70: c4:18:2a:36:29:48:3f:c5:9d:28:aa:71:1c:03:4d:97:d7:f6: f1:f9:84:ac:8b:e5:76:fe:48:d8:03:d2:9e:e1:ee:03:1f:dc: b6:6b:11:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EY7wKWwu5zMAFsbLv4YdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTgwMDMwMGZhNDAxN2Y5NzBjOTVkNzY3ZDgxMmZkMTBk MGRjYmMwHhcNMjUxMjIxMDQwMTEzWhcNMjUxMjIyMDQwMTEzWjAzMTEwLwYDVQQD EygzOTcyYzdiYjVkNWYwODE4ZDliYWJhN2YxNjEwZTg2Njc4ZjkxYzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUFEKm1MlVCUxinH8VYQLfcwJJoB IvIFXyhlgj6B9oIT8NxaHHB2wHco1I0wSrOM/WiKoseyzZLU1G8Zm9mcnrNxrlWL /K43a7ZAhiS+/a5cxkGZDoIp62GPdvR/1soEdch5RbkbbUyORQSMQ1qnjJdRGmf2 +/1JiQy5LvSEHyk3nXHjbUU+M+Fc0byigxLnpHAPgrE8VGYhzVCt/vrKoqGGgJtd NCmqL3X1Ot7bjaDycW04s0FvNX9AnyW/uAc1oJU2eID7/Trp50Ous8jIH8BFd7Of u0F23bTITfxMwYqzW7X26ZVJLGP9Fn6xvEi+uvTCXvV6/Xqfu1hPz8YKwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlyx7tdXwgY2bq6fxYQ6GZ4+RxpMB8GA1UdIwQY MBaAFLVYADAPpAF/lwyV12fYEv0Q0Ny8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84YTg0ODctOTMxYS00MmZiLWI2NjQt YzUyZGY0YWE1MjFkLzEvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC84YTg0ODctOTMxYS00MmZiLWI2NjQtYzUyZGY0YWE1MjFk LzEvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDhfIPMz v+YGIsv3zbxke2UhgzfKgWylS5e7jwkdibGygmthcOqWu9nGr2epUZ+JyOl9gEfu gfZSZ8wGxArofIJJqKmcEs4R7zTr7Tg6o8q/pGWM+QSPPQBYZQ1Ko/edBjPT4Jt8 zReIjoiLLr2gtnVGdW09Lli6DcBFPPYYGGzwDbaI6sONBasw5rZ8SGO1B1x4eqM9 7oaDTTmn/rDP5GsVxTgFgE/WJVVl3+VS7MiwjyKJFrHK8kuQ2EVxkrBjzazbGDag +X2FuH9WhuVBWlJGMTYuxVtwxBgqNilIP8WdKKpxHANNl9f28fmErIvldv5I2APS nuHuAx/ctmsR/g== -----END CERTIFICATE-----Generated at Sun Dec 21 13:38:15 2025 by rpki-client