This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft File: tDqirb6dQEE3M58g_VhiPIo58TA.mft (raw, json) Hash identifier: 9R5nJXsnS/d6YfOs32HkFNUtcRxCL9euKLe5AFdij9M= Subject key identifier: E7:3B:C4:F6:9E:B9:07:B1:33:E5:B4:B4:D6:AF:FD:38:EC:82:26:CC Authority key identifier: B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30 Certificate issuer: /CN=b43aa2adbe9d404137339f20fd58623c8a39f130 Certificate serial: 019B326837883BA3B01C43B35251A077434F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft Manifest number: 072F Signing time: Thu 18 Dec 2025 17:00:49 +0000 Manifest this update: Thu 18 Dec 2025 17:00:49 +0000 Manifest next update: Fri 19 Dec 2025 17:00:49 +0000 Files and hashes: 1: DR42yKGsjL2cx3Lp0nYZ2-J6QjI.roa (hash: SNpq+XJB/gPAUUzDmYBdIDihlauDEu/Coqako/V/GUw=) 2: tDqirb6dQEE3M58g_VhiPIo58TA.crl (hash: sGgQaRPJ5Eqhp7YmcOjXcQ+TO3VYNqGNCeVQJgbribg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:37:88:3b:a3:b0:1c:43:b3:52:51:a0:77:43:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43aa2adbe9d404137339f20fd58623c8a39f130 Validity Not Before: Dec 18 17:00:49 2025 GMT Not After : Dec 19 17:00:49 2025 GMT Subject: CN=e73bc4f69eb907b133e5b4b4d6affd38ec8226cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2c:5e:f5:b1:9e:76:b7:36:d4:68:58:a3:f4: c4:0a:4f:34:b3:77:d5:98:07:5d:96:e4:f5:11:7d: cd:34:a4:92:4d:5f:94:46:f0:8c:c7:f9:2c:1d:a5: 2c:ea:c3:7f:e1:ce:13:22:a8:cb:c1:6f:95:e3:d7: 3b:75:3d:82:e8:01:c2:47:d0:8b:69:be:ca:52:79: 27:a0:0c:07:6e:b7:40:a9:15:d6:8b:42:1a:9e:bc: 3e:a2:b6:51:41:ba:5c:f5:87:50:38:15:71:98:52: 9c:da:00:3a:94:c1:14:64:56:80:0f:63:02:c8:94: 6f:4d:3b:c5:b4:01:f9:61:79:c5:e2:56:82:c3:2c: 66:53:20:80:cf:c4:dc:3f:c0:7d:c4:b8:c3:aa:33: f7:0f:77:93:b7:e5:96:60:ba:6a:b8:d9:15:c7:5a: a3:aa:47:1d:72:2a:c1:47:28:f4:0b:19:37:98:d5: 63:b0:bf:1d:1c:2a:ea:d3:f3:12:5f:32:f0:54:c8: 63:43:38:bc:27:73:9b:66:22:f9:37:b5:5f:88:2d: 9c:16:ef:31:fd:cc:eb:3b:70:0d:a9:4b:72:5f:69: 04:63:8b:dc:12:d4:50:e7:d1:69:f5:64:e2:cf:12: 72:2c:8e:49:54:ae:11:34:8f:af:fe:38:d8:b3:2b: 61:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3B:C4:F6:9E:B9:07:B1:33:E5:B4:B4:D6:AF:FD:38:EC:82:26:CC X509v3 Authority Key Identifier: keyid:B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:86:ba:dc:a1:12:f2:e1:d5:b6:46:a9:84:53:a3:6b:10:bc: 3c:68:cf:4b:6b:16:df:f6:d1:ac:1b:2f:a5:66:f5:6a:d4:02: 67:e5:d4:11:d1:bf:2a:2a:02:68:69:f3:63:01:49:54:75:b6: a9:d3:a6:d4:4c:87:6f:32:99:92:74:a0:08:0c:1a:96:0f:b2: a7:66:5e:61:16:b2:5c:ae:8a:58:49:57:10:80:7e:90:8b:21: 9c:b5:6e:28:8b:ec:7b:45:9a:d0:c2:a8:97:57:a2:88:27:b2: df:a5:b5:2a:19:69:2f:80:7e:7a:88:0a:4c:e2:22:f3:d0:11: 5b:fd:90:90:53:e1:84:51:87:89:5b:c6:c9:c9:cb:32:36:f6: 93:31:2f:40:3e:d1:ba:ce:98:c0:82:88:ce:09:1c:78:f0:7b: ea:f6:4d:0f:02:83:1e:87:c0:fc:38:91:ef:38:7d:a7:23:5c: 5c:1a:05:6a:99:78:2e:5b:d6:1b:c1:ce:e2:1b:0a:57:ba:92: b4:e9:83:4c:63:c8:ed:51:e8:0d:ff:b1:51:88:81:f0:b7:bd: 01:34:b1:9f:1e:fe:4a:bc:31:69:cc:0e:51:1a:d2:28:da:75: b5:bc:c7:ce:b1:06:32:bf:79:d7:bd:83:a8:f7:37:5e:a0:32: 20:0b:ec:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaDeIO6OwHEOzUlGgd0NPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0M2FhMmFkYmU5ZDQwNDEzNzMzOWYyMGZkNTg2MjNjOGEz OWYxMzAwHhcNMjUxMjE4MTcwMDQ5WhcNMjUxMjE5MTcwMDQ5WjAzMTEwLwYDVQQD EyhlNzNiYzRmNjllYjkwN2IxMzNlNWI0YjRkNmFmZmQzOGVjODIyNmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCxe9bGedrc21GhYo/TECk80s3fV mAddluT1EX3NNKSSTV+URvCMx/ksHaUs6sN/4c4TIqjLwW+V49c7dT2C6AHCR9CL ab7KUnknoAwHbrdAqRXWi0Ianrw+orZRQbpc9YdQOBVxmFKc2gA6lMEUZFaAD2MC yJRvTTvFtAH5YXnF4laCwyxmUyCAz8TcP8B9xLjDqjP3D3eTt+WWYLpquNkVx1qj qkcdcirBRyj0Cxk3mNVjsL8dHCrq0/MSXzLwVMhjQzi8J3ObZiL5N7VfiC2cFu8x /czrO3ANqUtyX2kEY4vcEtRQ59Fp9WTizxJyLI5JVK4RNI+v/jjYsythIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOc7xPaeuQexM+W0tNav/TjsgibMMB8GA1UdIwQY MBaAFLQ6oq2+nUBBNzOfIP1YYjyKOfEwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNjJmNDAtNDhjNy00M2M2LTlkODMt MTU0OGFjMTM1NmJlLzEvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8yNjJmNDAtNDhjNy00M2M2LTlkODMtMTU0OGFjMTM1NmJl LzEvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYa63KES 8uHVtkaphFOjaxC8PGjPS2sW3/bRrBsvpWb1atQCZ+XUEdG/KioCaGnzYwFJVHW2 qdOm1EyHbzKZknSgCAwalg+yp2ZeYRayXK6KWElXEIB+kIshnLVuKIvse0Wa0MKo l1eiiCey36W1KhlpL4B+eogKTOIi89ARW/2QkFPhhFGHiVvGycnLMjb2kzEvQD7R us6YwIKIzgkcePB76vZNDwKDHofA/DiR7zh9pyNcXBoFapl4LlvWG8HO4hsKV7qS tOmDTGPI7VHoDf+xUYiB8Le9ATSxnx7+SrwxacwOURrSKNp1tbzHzrEGMr95172D qPc3XqAyIAvsKw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:14:45 2025 by rpki-client