This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json) Hash identifier: lW0kym11FOhip2aZxeS/G5iXImt7UoYKCFyIalMEavU= Subject key identifier: BA:A4:B2:FF:3C:07:19:49:20:D5:44:59:8A:42:5C:67:45:55:1A:2E Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53 Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53 Certificate serial: 019B3DC82D246B97915B9FC8815FFE4CA027 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft Manifest number: 14F0 Signing time: Sat 20 Dec 2025 22:01:27 +0000 Manifest this update: Sat 20 Dec 2025 22:01:27 +0000 Manifest next update: Sun 21 Dec 2025 22:01:27 +0000 Files and hashes: 1: bqp6f9GjY5TF5wTxOeK8Ji-YrkE.roa (hash: b7SVmPCcwJQed2khWFQ0sTeZykPXeoqQG4LQy2NRwCA=) 2: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: u5wTNIgmy59tJJn3t9Mkap8d7OvvEjCdgcEuTiIZ8TM=) 3: xktUIB6GDLW-h2_LFZTy4dam33Y.roa (hash: BgrfS/HN5mPWhSmcXKgkikTloXU/AxYtLSZ8SaD1EM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:2d:24:6b:97:91:5b:9f:c8:81:5f:fe:4c:a0:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53 Validity Not Before: Dec 20 22:01:27 2025 GMT Not After : Dec 21 22:01:27 2025 GMT Subject: CN=baa4b2ff3c07194920d544598a425c6745551a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:17:e0:69:34:a7:39:96:22:eb:b6:8b:2a:bb: f2:8b:d3:f1:9e:07:9e:7f:6a:3a:9b:8d:0e:59:8a: 63:d3:45:47:d4:4b:e9:35:87:bd:c5:28:01:b9:04: 87:c5:56:5c:89:9a:3d:b4:79:6e:95:1f:19:1c:0c: 9d:6a:7b:65:15:7e:b1:d0:a1:f7:27:53:33:1f:f9: ab:55:0e:4a:ed:4e:57:a2:5f:e7:1a:ad:79:ee:de: 75:61:3f:27:44:2b:e6:88:ed:76:7e:51:af:cf:45: b2:f3:a7:f7:75:92:a3:fa:ad:26:d2:51:53:ad:f9: 9a:33:f6:b5:83:d3:1f:6c:c1:ef:16:d3:e3:c2:05: 29:a4:05:9a:8a:05:8b:19:48:4a:b9:e4:1b:f9:46: ec:37:b9:7b:78:5f:ef:dd:44:34:22:3f:e0:3d:a9: cf:e5:6f:1c:0e:4a:de:fe:78:3c:da:86:7b:58:a5: 33:e9:e9:3d:c6:71:13:da:ae:54:e6:3e:f1:8d:35: f5:7d:61:5a:aa:d5:5d:0d:ba:d2:d2:67:80:1d:11: 04:d4:51:4b:c3:ba:de:25:8b:b9:e2:ad:f8:76:da: 3f:11:90:4b:a4:e0:c7:ba:99:e2:8c:d5:3d:9e:5c: 7b:0f:d6:5e:19:4e:55:68:59:2a:f2:d6:33:b4:94: c3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A4:B2:FF:3C:07:19:49:20:D5:44:59:8A:42:5C:67:45:55:1A:2E X509v3 Authority Key Identifier: keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:c8:41:cb:36:f8:e0:84:9a:f7:4b:5a:38:d4:67:cd:ea:1e: 08:7c:c9:d3:04:74:a9:71:1f:d0:77:1e:81:18:36:dd:ba:82: 68:99:e9:41:01:cb:78:be:24:4e:a7:55:4f:44:33:d6:7c:cb: 67:b5:93:c1:53:d0:f2:10:1f:c9:b1:c1:fc:ab:32:d7:7b:9a: 2c:1b:d2:12:12:2e:5d:44:8c:93:d5:ee:63:5c:ae:71:12:6f: 4c:70:35:e6:53:9a:77:ae:18:77:b7:cd:a3:c7:70:54:1d:c0: 9e:6c:63:2b:65:61:84:f5:00:b9:38:ee:98:1d:31:0c:aa:41: de:ef:68:51:56:b8:f7:86:0a:fe:ed:ea:30:e2:db:80:b0:d3: 4c:0e:72:91:7f:34:8f:91:39:5b:82:9a:67:df:7e:04:6d:c9: 7d:8a:f9:48:9e:8a:e1:60:e8:ea:d3:b4:df:b3:19:3c:0a:ec: 46:81:4b:a6:4e:92:cd:0f:61:8c:95:6a:96:a7:52:25:47:70: e2:26:f9:03:46:dc:f5:91:70:fd:aa:fb:00:0c:c3:bb:69:bd: 47:66:67:17:94:82:e5:54:55:64:1f:0b:50:e0:5e:9b:c1:28: 9c:94:c4:de:e5:df:a3:30:19:f3:a8:19:61:11:52:db:19:a0: c9:5a:a7:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yC0ka5eRW5/IgV/+TKAnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZjExNTQyNGMxODFjNjc5NjZjY2MyNDY3ZWRlNjlkMDYw Y2NmNTMwHhcNMjUxMjIwMjIwMTI3WhcNMjUxMjIxMjIwMTI3WjAzMTEwLwYDVQQD EyhiYWE0YjJmZjNjMDcxOTQ5MjBkNTQ0NTk4YTQyNWM2NzQ1NTUxYTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBfgaTSnOZYi67aLKrvyi9Pxngee f2o6m40OWYpj00VH1EvpNYe9xSgBuQSHxVZciZo9tHlulR8ZHAydantlFX6x0KH3 J1MzH/mrVQ5K7U5Xol/nGq157t51YT8nRCvmiO12flGvz0Wy86f3dZKj+q0m0lFT rfmaM/a1g9MfbMHvFtPjwgUppAWaigWLGUhKueQb+UbsN7l7eF/v3UQ0Ij/gPanP 5W8cDkre/ng82oZ7WKUz6ek9xnET2q5U5j7xjTX1fWFaqtVdDbrS0meAHREE1FFL w7reJYu54q34dto/EZBLpODHupnijNU9nlx7D9ZeGU5VaFkq8tYztJTDSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqksv88BxlJINVEWYpCXGdFVRouMB8GA1UdIwQY MBaAFLTxFUJMGBxnlmzMJGft5p0GDM9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBFVlFrd1lIR2VXYk13a1otM21uUVlNejFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84NjkyMTQtMTZkNC00NWUwLWI4N2Ut MzJlOTMyZDZmZDBlLzEvdFBFVlFrd1lIR2VXYk13a1otM21uUVlNejFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS84NjkyMTQtMTZkNC00NWUwLWI4N2UtMzJlOTMyZDZmZDBl LzEvdFBFVlFrd1lIR2VXYk13a1otM21uUVlNejFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMhByzb4 4ISa90taONRnzeoeCHzJ0wR0qXEf0HcegRg23bqCaJnpQQHLeL4kTqdVT0Qz1nzL Z7WTwVPQ8hAfybHB/Ksy13uaLBvSEhIuXUSMk9XuY1yucRJvTHA15lOad64Yd7fN o8dwVB3AnmxjK2VhhPUAuTjumB0xDKpB3u9oUVa494YK/u3qMOLbgLDTTA5ykX80 j5E5W4KaZ99+BG3JfYr5SJ6K4WDo6tO037MZPArsRoFLpk6SzQ9hjJVqlqdSJUdw 4ib5A0bc9ZFw/ar7AAzDu2m9R2ZnF5SC5VRVZB8LUOBem8EonJTE3uXfozAZ86gZ YRFS2xmgyVqniA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:24:56 2025 by rpki-client