This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft File: _tf4F9fm3tVu3txESIzUHAUqDcU.mft (raw, json) Hash identifier: 6726Re/KIdliylNRYK48CqczTbDD005vUvFfCuuTNoc= Subject key identifier: 57:0F:23:50:58:CB:70:8A:6D:46:6A:0E:46:4A:B2:EC:C1:93:5A:B3 Authority key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5 Certificate issuer: /CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5 Certificate serial: 019B443745A0375959597020EB7C17037538 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft Manifest number: 171C Signing time: Mon 22 Dec 2025 04:00:31 +0000 Manifest this update: Mon 22 Dec 2025 04:00:31 +0000 Manifest next update: Tue 23 Dec 2025 04:00:31 +0000 Files and hashes: 1: _tf4F9fm3tVu3txESIzUHAUqDcU.crl (hash: nPOLvxE4MPhFNih0zInTvzaRaXrvGQHCVN4MxmkJISg=) 2: jlmeoUxgI0KhFHV99BItMxAYMbc.roa (hash: NI9SzLu0aApCsGkR0hpBvVimZxaK1yHkWwQafkG2nq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:45:a0:37:59:59:59:70:20:eb:7c:17:03:75:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5 Validity Not Before: Dec 22 04:00:31 2025 GMT Not After : Dec 23 04:00:31 2025 GMT Subject: CN=570f235058cb708a6d466a0e464ab2ecc1935ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:61:22:f6:ed:c9:48:3b:df:73:4c:b4:25:f3: 4f:1c:6b:44:47:c7:2f:6a:ac:b1:b2:9c:2b:31:3f: 42:3c:c3:75:ea:79:c1:6a:63:73:e4:cc:2e:72:24: 6b:f3:e8:49:98:d7:eb:c9:47:f5:2c:35:cc:48:a7: 86:81:96:e1:5a:61:3e:7d:44:b4:2d:75:3a:5d:30: cc:37:ef:70:99:f6:9f:d9:8e:3c:1a:03:76:28:c3: 1a:8d:fe:a3:49:63:c9:f8:5e:16:50:a4:45:2f:ee: 09:79:b3:cf:3d:5c:6e:6c:b2:e4:46:a3:ae:44:1a: 09:d6:39:09:9a:41:ad:cb:d3:f9:48:d6:a2:f7:a5: 5a:1e:21:3e:d2:7b:1d:f3:30:99:2e:4c:18:a0:76: f5:7e:57:31:9a:fe:87:fc:43:c4:69:88:a4:54:82: 42:ea:a2:93:e3:4e:fe:5f:c8:80:ad:bf:e8:0e:cb: 7e:d0:eb:62:6b:be:43:9f:24:ce:09:ea:08:01:a8: f7:d8:0b:08:6e:9c:c4:52:c1:93:14:d5:7c:0e:7c: af:e6:6a:58:e3:a1:98:b4:c0:d9:57:42:93:0e:6a: ba:e9:67:a8:56:cb:86:2f:d3:7e:75:dc:06:f3:1c: 7b:75:21:0c:f7:76:03:70:c8:a5:4b:42:d4:4b:9c: 0f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0F:23:50:58:CB:70:8A:6D:46:6A:0E:46:4A:B2:EC:C1:93:5A:B3 X509v3 Authority Key Identifier: keyid:FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8a:f4:26:a0:57:f1:ef:88:d1:f9:6a:a2:0e:a7:74:0a:ef: 81:d4:84:52:94:5b:a0:56:b6:31:ab:08:b0:7a:a8:24:dd:26: f0:50:e6:19:1d:24:69:4f:bf:05:d1:b4:15:50:c1:78:07:c9: 98:dc:e2:ee:17:1a:67:9e:ca:6d:02:02:47:78:d9:13:c7:53: ba:84:89:00:83:82:7d:dd:b0:84:84:37:0d:1c:21:d0:de:d7: ed:87:5d:05:3f:96:4b:91:57:96:62:23:f0:84:0d:54:4d:d0: a4:94:18:f7:21:65:f4:88:0a:57:08:17:95:27:98:bf:c1:39: ba:2b:69:76:f6:32:73:5d:b9:87:29:b7:64:e9:73:f6:6f:dd: a1:17:3e:7c:68:f5:b7:a4:34:08:01:0c:f5:ff:b8:24:4f:3b: 60:13:1e:7a:ea:c0:6e:bd:3b:b3:21:f9:e0:ca:a2:71:6b:82: 7d:c2:4e:c9:20:df:fb:4c:58:6d:d8:31:0e:c9:a5:51:9d:ae: c4:d0:a8:85:4c:88:a0:57:b0:1f:cc:fa:eb:53:c9:6f:f6:35: 6d:34:7a:ca:fb:8d:72:b7:c8:9f:9e:e2:a5:40:2b:ce:07:1d: 76:83:35:8a:b9:36:3c:b5:7b:6d:dd:49:5b:78:f6:fe:86:00: 64:80:63:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN0WgN1lZWXAg63wXA3U4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZDdmODE3ZDdlNmRlZDU2ZWRlZGM0NDQ4OGNkNDFjMDUy YTBkYzUwHhcNMjUxMjIyMDQwMDMxWhcNMjUxMjIzMDQwMDMxWjAzMTEwLwYDVQQD Eyg1NzBmMjM1MDU4Y2I3MDhhNmQ0NjZhMGU0NjRhYjJlY2MxOTM1YWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWEi9u3JSDvfc0y0JfNPHGtER8cv aqyxspwrMT9CPMN16nnBamNz5MwuciRr8+hJmNfryUf1LDXMSKeGgZbhWmE+fUS0 LXU6XTDMN+9wmfaf2Y48GgN2KMMajf6jSWPJ+F4WUKRFL+4JebPPPVxubLLkRqOu RBoJ1jkJmkGty9P5SNai96VaHiE+0nsd8zCZLkwYoHb1flcxmv6H/EPEaYikVIJC 6qKT407+X8iArb/oDst+0Otia75DnyTOCeoIAaj32AsIbpzEUsGTFNV8Dnyv5mpY 46GYtMDZV0KTDmq66WeoVsuGL9N+ddwG8xx7dSEM93YDcMilS0LUS5wP3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcPI1BYy3CKbUZqDkZKsuzBk1qzMB8GA1UdIwQY MBaAFP7X+BfX5t7Vbt7cREiM1BwFKg3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3RmNEY5Zm0zdFZ1M3R4RVNJelVIQVVxRGNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80ZjA1NTEtNjkyMi00NWJmLTk3ZDMt N2NmOWE1ZmI2YTljLzEvX3RmNEY5Zm0zdFZ1M3R4RVNJelVIQVVxRGNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80ZjA1NTEtNjkyMi00NWJmLTk3ZDMtN2NmOWE1ZmI2YTlj LzEvX3RmNEY5Zm0zdFZ1M3R4RVNJelVIQVVxRGNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADor0JqBX 8e+I0flqog6ndArvgdSEUpRboFa2MasIsHqoJN0m8FDmGR0kaU+/BdG0FVDBeAfJ mNzi7hcaZ57KbQICR3jZE8dTuoSJAIOCfd2whIQ3DRwh0N7X7YddBT+WS5FXlmIj 8IQNVE3QpJQY9yFl9IgKVwgXlSeYv8E5uitpdvYyc125hym3ZOlz9m/doRc+fGj1 t6Q0CAEM9f+4JE87YBMeeurAbr07syH54MqicWuCfcJOySDf+0xYbdgxDsmlUZ2u xNCohUyIoFewH8z661PJb/Y1bTR6yvuNcrfIn57ipUArzgcddoM1irk2PLV7bd1J W3j2/oYAZIBjWA== -----END CERTIFICATE-----Generated at Mon Dec 22 12:58:10 2025 by rpki-client