This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft File: tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json) Hash identifier: f9MHJ9fL//yjHnBhH52rzUzLZdYnqglal0c22ik19vE= Subject key identifier: 6E:E0:75:57:F4:4B:EC:92:56:C7:15:37:B0:CC:10:B1:C7:B1:B5:6A Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27 Certificate issuer: /CN=b45064c1ac8690e2c77a959a502546e98bcd3727 Certificate serial: 019B5D53CDF21830CD80A6D80C6315D2CCB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft Manifest number: 0E19 Signing time: Sat 27 Dec 2025 01:02:11 +0000 Manifest this update: Sat 27 Dec 2025 01:02:11 +0000 Manifest next update: Sun 28 Dec 2025 01:02:11 +0000 Files and hashes: 1: _INaZ6DycFqZuVm42lkSOfz9oRs.roa (hash: N1fFaEC6dFW7nNDOY6nEbXrF6dJ7s2tSPU9xB9zA38k=) 2: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: bh87WVJuXksWzD/dr/OWmEgu4+okXE8DEX3AwLKzgtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 01:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:cd:f2:18:30:cd:80:a6:d8:0c:63:15:d2:cc:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727 Validity Not Before: Dec 27 01:02:11 2025 GMT Not After : Dec 28 01:02:11 2025 GMT Subject: CN=6ee07557f44bec9256c71537b0cc10b1c7b1b56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:71:8b:a8:e3:00:3f:c3:21:0b:13:2f:3c:c5: f9:bb:d2:a4:bc:f9:b1:d5:df:97:ae:34:cc:f0:b9: 8f:9a:75:2f:f0:70:70:1e:d4:f2:24:3c:3e:2e:4d: 19:98:14:8c:7d:2b:40:79:ce:fb:3d:f6:a2:d3:34: 72:23:ad:dc:ae:c3:7d:42:39:5d:e5:b7:c0:e6:83: ee:d7:49:9e:ce:f0:78:73:c8:6b:66:0a:eb:d8:e2: de:19:70:90:f8:89:d8:cd:2b:b1:6c:c4:1b:2a:a8: 16:33:c9:46:85:90:5e:48:4b:fb:48:9e:8d:99:fb: b8:e6:d2:03:be:69:e8:7a:4f:a0:a5:fd:23:85:49: c7:47:06:0b:29:0d:1b:6c:f8:93:bc:ac:57:75:e2: cd:fb:5a:6b:27:6f:0e:f1:e4:39:e4:01:1b:2e:82: 0c:40:77:ba:1e:34:b4:c0:1e:a9:c2:b8:a3:b3:07: 48:18:47:8b:c1:9d:09:64:64:d8:9c:d4:cd:ed:bd: 63:cd:6a:ca:6d:ae:25:dd:bb:db:2a:5c:38:42:0f: b6:0a:7a:a8:63:57:c4:32:e9:9d:c7:8d:da:8d:ca: 04:ec:b5:b8:8e:79:e0:9e:2f:72:2c:97:af:24:29: 90:82:73:2e:11:c0:4d:d1:42:ee:e7:85:66:e7:4b: 1d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E0:75:57:F4:4B:EC:92:56:C7:15:37:B0:CC:10:B1:C7:B1:B5:6A X509v3 Authority Key Identifier: keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:65:8e:a3:7e:bc:52:57:c7:9d:8d:95:3a:41:73:32:bb:b6: de:f3:74:48:9f:43:55:38:3f:7b:61:ba:22:18:c5:18:b2:8d: 38:d1:79:79:29:1f:ff:09:71:ae:4e:fc:f1:13:34:fa:65:1e: cf:4a:19:e2:15:c4:fc:c6:c0:0b:8c:1a:33:c0:4f:1b:16:96: 59:b4:87:9e:28:77:ce:e1:43:94:3c:ba:90:63:bf:10:fe:8d: be:1a:e0:20:80:ab:ff:15:12:53:92:69:1a:fd:17:3f:1d:87: f3:2a:57:bd:6a:65:7a:25:a8:e3:52:2d:98:d3:05:fd:d2:61: 6b:8d:71:af:24:4a:81:cf:03:0d:df:05:f4:1b:0b:c5:5c:ef: 25:22:8c:a1:09:50:e5:e8:66:e8:77:57:ea:59:65:41:0e:b4: 41:2c:ad:3b:a2:20:d2:9f:ab:d2:e8:99:25:e6:9c:38:d9:e3: 87:2f:25:fa:b6:a7:75:59:b1:25:6b:2c:5f:30:f2:48:c5:29: c8:37:5d:fc:e7:27:83:3d:9d:fe:86:42:d6:35:58:bf:d2:69: b9:3c:1a:33:21:22:32:57:be:f7:cb:dc:67:6e:69:40:bd:a4: 98:89:bf:91:52:34:24:1f:c5:b3:32:8e:c8:ef:c0:46:f0:63: 78:68:04:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU83yGDDNgKbYDGMV0sy3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTA2NGMxYWM4NjkwZTJjNzdhOTU5YTUwMjU0NmU5OGJj ZDM3MjcwHhcNMjUxMjI3MDEwMjExWhcNMjUxMjI4MDEwMjExWjAzMTEwLwYDVQQD Eyg2ZWUwNzU1N2Y0NGJlYzkyNTZjNzE1MzdiMGNjMTBiMWM3YjFiNTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3GLqOMAP8MhCxMvPMX5u9KkvPmx 1d+XrjTM8LmPmnUv8HBwHtTyJDw+Lk0ZmBSMfStAec77Pfai0zRyI63crsN9Qjld 5bfA5oPu10mezvB4c8hrZgrr2OLeGXCQ+InYzSuxbMQbKqgWM8lGhZBeSEv7SJ6N mfu45tIDvmnoek+gpf0jhUnHRwYLKQ0bbPiTvKxXdeLN+1prJ28O8eQ55AEbLoIM QHe6HjS0wB6pwrijswdIGEeLwZ0JZGTYnNTN7b1jzWrKba4l3bvbKlw4Qg+2Cnqo Y1fEMumdx43ajcoE7LW4jnngni9yLJevJCmQgnMuEcBN0ULu54Vm50sdUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7gdVf0S+ySVscVN7DMELHHsbVqMB8GA1UdIwQY MBaAFLRQZMGshpDix3qVmlAlRumLzTcnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZCa3dheUdrT0xIZXBXYVVDVkc2WXZOTnljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8zNTkxNzktNGFjMi00MzFjLTk1MzEt MGI3YTMzZGQ1YjU2LzEvdEZCa3dheUdrT0xIZXBXYVVDVkc2WXZOTnljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8zNTkxNzktNGFjMi00MzFjLTk1MzEtMGI3YTMzZGQ1YjU2 LzEvdEZCa3dheUdrT0xIZXBXYVVDVkc2WXZOTnljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGWOo368 UlfHnY2VOkFzMru23vN0SJ9DVTg/e2G6IhjFGLKNONF5eSkf/wlxrk788RM0+mUe z0oZ4hXE/MbAC4waM8BPGxaWWbSHnih3zuFDlDy6kGO/EP6NvhrgIICr/xUSU5Jp Gv0XPx2H8ypXvWpleiWo41ItmNMF/dJha41xryRKgc8DDd8F9BsLxVzvJSKMoQlQ 5ehm6HdX6lllQQ60QSytO6Ig0p+r0uiZJeacONnjhy8l+randVmxJWssXzDySMUp yDdd/Ocngz2d/oZC1jVYv9JpuTwaMyEiMle+98vcZ25pQL2kmIm/kVI0JB/FszKO yO/ARvBjeGgEVA== -----END CERTIFICATE-----Generated at Sat Dec 27 10:05:59 2025 by rpki-client