This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json) Hash identifier: 7bjaXnFimPp7l1tKfBdC83lgN0mPoLt/sD13IzVC5aA= Subject key identifier: D7:85:C1:9A:3F:3C:69:B0:29:E6:6C:9B:32:06:90:6E:93:B8:AD:98 Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53 Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53 Certificate serial: 019B4D3B1B6A1116BCA627C5716BA3C10A0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft Manifest number: 14F8 Signing time: Tue 23 Dec 2025 22:01:17 +0000 Manifest this update: Tue 23 Dec 2025 22:01:17 +0000 Manifest next update: Wed 24 Dec 2025 22:01:17 +0000 Files and hashes: 1: bqp6f9GjY5TF5wTxOeK8Ji-YrkE.roa (hash: b7SVmPCcwJQed2khWFQ0sTeZykPXeoqQG4LQy2NRwCA=) 2: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: etFVsXahIpZQi9mYWkUpXtdvS8uKarBXwrCktpQhkZs=) 3: xktUIB6GDLW-h2_LFZTy4dam33Y.roa (hash: BgrfS/HN5mPWhSmcXKgkikTloXU/AxYtLSZ8SaD1EM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:3b:1b:6a:11:16:bc:a6:27:c5:71:6b:a3:c1:0a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53 Validity Not Before: Dec 23 22:01:17 2025 GMT Not After : Dec 24 22:01:17 2025 GMT Subject: CN=d785c19a3f3c69b029e66c9b3206906e93b8ad98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9e:80:bc:1e:82:1a:c7:29:66:a1:8c:b8:0a: b6:3b:c1:6f:40:11:d5:77:42:93:79:be:79:02:9e: f0:90:5e:86:2e:65:65:1f:3c:3a:a1:48:79:42:2f: 9d:cd:2d:4d:64:ef:48:96:ff:80:ed:47:f0:68:f6: c8:fd:6c:bc:fe:13:99:11:f4:bf:40:57:99:ab:82: 83:3b:53:5b:b2:79:d2:6c:b2:0e:45:92:72:56:95: a8:c1:d4:fe:81:90:86:54:47:5d:35:91:38:35:1e: 03:a6:10:9e:07:4a:e1:c0:d7:59:e5:33:44:0b:a7: 4e:a2:23:c1:9c:47:91:5e:1b:c6:2a:92:f2:5a:b8: ef:b0:2b:72:d8:13:a2:4c:8b:90:76:6f:0a:12:e5: b2:e9:2e:5a:bf:76:e7:71:b6:20:b9:6c:00:2d:86: ec:63:be:e2:97:51:20:d9:3a:ab:76:13:8f:07:02: f9:d0:9d:6a:db:62:42:53:21:12:b3:76:93:d6:a1: 15:06:e1:57:e8:a5:47:c0:b2:92:3e:2c:33:c6:4f: 1d:a0:48:2d:a6:f2:1e:0f:86:43:e4:62:63:d6:71: be:56:e9:f7:85:97:ff:08:a5:fa:32:73:97:c7:64: f9:fa:1b:66:d3:f0:96:d8:ef:d5:28:4b:35:24:a3: c8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:85:C1:9A:3F:3C:69:B0:29:E6:6C:9B:32:06:90:6E:93:B8:AD:98 X509v3 Authority Key Identifier: keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a0:0f:53:20:d1:ea:39:0c:2b:de:77:51:70:36:e7:4b:43: 66:09:7d:fc:89:8e:e5:49:dd:ae:f9:9c:3b:d0:7d:ae:ff:49: cf:87:ad:71:90:08:90:90:b6:0f:6c:7a:28:a6:75:ea:44:ff: be:49:10:8d:82:f9:1d:0c:dc:ff:be:23:1f:e9:a4:f2:95:09: 0e:86:ca:77:d8:e3:8f:5e:cc:fb:aa:fc:3f:0c:24:f1:a8:54: f8:cd:d4:54:35:cd:24:26:3b:66:18:44:52:19:3e:9b:d8:fa: bc:3e:4f:4a:74:5a:9a:c8:53:8b:8a:69:d5:54:28:1c:60:67: de:2f:ee:4f:23:bc:12:b4:2a:5b:86:12:01:c5:78:fd:8f:0b: 6f:da:26:9f:07:4e:d9:2b:bd:0b:66:c0:ce:04:e9:c9:c6:73: 13:dd:51:35:ff:12:33:5e:90:2d:79:15:5a:5d:ed:af:95:f6: ad:6c:95:58:03:8e:29:fa:9d:b8:23:95:0f:c2:d4:e1:7a:21: ed:f9:02:36:a2:ea:95:1a:38:d4:fa:74:1f:0f:9d:44:98:86: 27:ea:13:68:6c:ab:7e:bb:25:a1:34:60:90:8f:46:72:b3:82: ca:95:6d:1d:6b:41:dc:20:82:8b:c6:c6:69:f9:d1:60:47:58: f4:03:ec:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNOxtqERa8pifFcWujwQoLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZjExNTQyNGMxODFjNjc5NjZjY2MyNDY3ZWRlNjlkMDYw Y2NmNTMwHhcNMjUxMjIzMjIwMTE3WhcNMjUxMjI0MjIwMTE3WjAzMTEwLwYDVQQD EyhkNzg1YzE5YTNmM2M2OWIwMjllNjZjOWIzMjA2OTA2ZTkzYjhhZDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Z6AvB6CGscpZqGMuAq2O8FvQBHV d0KTeb55Ap7wkF6GLmVlHzw6oUh5Qi+dzS1NZO9Ilv+A7UfwaPbI/Wy8/hOZEfS/ QFeZq4KDO1NbsnnSbLIORZJyVpWowdT+gZCGVEddNZE4NR4DphCeB0rhwNdZ5TNE C6dOoiPBnEeRXhvGKpLyWrjvsCty2BOiTIuQdm8KEuWy6S5av3bncbYguWwALYbs Y77il1Eg2TqrdhOPBwL50J1q22JCUyESs3aT1qEVBuFX6KVHwLKSPiwzxk8doEgt pvIeD4ZD5GJj1nG+Vun3hZf/CKX6MnOXx2T5+htm0/CW2O/VKEs1JKPIXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeFwZo/PGmwKeZsmzIGkG6TuK2YMB8GA1UdIwQY MBaAFLTxFUJMGBxnlmzMJGft5p0GDM9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBFVlFrd1lIR2VXYk13a1otM21uUVlNejFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84NjkyMTQtMTZkNC00NWUwLWI4N2Ut MzJlOTMyZDZmZDBlLzEvdFBFVlFrd1lIR2VXYk13a1otM21uUVlNejFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS84NjkyMTQtMTZkNC00NWUwLWI4N2UtMzJlOTMyZDZmZDBl LzEvdFBFVlFrd1lIR2VXYk13a1otM21uUVlNejFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqAPUyDR 6jkMK953UXA250tDZgl9/ImO5UndrvmcO9B9rv9Jz4etcZAIkJC2D2x6KKZ16kT/ vkkQjYL5HQzc/74jH+mk8pUJDobKd9jjj17M+6r8Pwwk8ahU+M3UVDXNJCY7ZhhE Uhk+m9j6vD5PSnRamshTi4pp1VQoHGBn3i/uTyO8ErQqW4YSAcV4/Y8Lb9omnwdO 2Su9C2bAzgTpycZzE91RNf8SM16QLXkVWl3tr5X2rWyVWAOOKfqduCOVD8LU4Xoh 7fkCNqLqlRo41Pp0Hw+dRJiGJ+oTaGyrfrsloTRgkI9GcrOCypVtHWtB3CCCi8bG afnRYEdY9APsQw== -----END CERTIFICATE-----Generated at Wed Dec 24 03:00:25 2025 by rpki-client