This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft File: tp0ot9AoyruWhKgOFLqvFcpv0vY.mft (raw, json) Hash identifier: eFMohcHmQ/ZslPpX9+cNVg+uDW1VifiOyS677lGARpk= Subject key identifier: F7:49:34:88:CD:CA:DA:7E:E8:23:3F:D1:33:7B:1B:5B:0B:98:4F:56 Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6 Certificate issuer: /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6 Certificate serial: 019B41A4CDA048D145C2337B3F7C0D1886AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 16:01:18 +0000 Manifest this update: Sun 21 Dec 2025 16:01:18 +0000 Manifest next update: Mon 22 Dec 2025 16:01:18 +0000 Files and hashes: 1: BWKFYtuMXyE_lLT4h0W6XfTBenI.roa (hash: fLpCOLgiuzK6uz2EqJr6SiyMyUYxX5Pc6xAMSALFqDM=) 2: tp0ot9AoyruWhKgOFLqvFcpv0vY.crl (hash: kC6YvoO39/W1mCR9JYTGcHg22vg7U75sXup00B30w98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:cd:a0:48:d1:45:c2:33:7b:3f:7c:0d:18:86:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6 Validity Not Before: Dec 21 16:01:18 2025 GMT Not After : Dec 22 16:01:18 2025 GMT Subject: CN=f7493488cdcada7ee8233fd1337b1b5b0b984f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:53:98:14:6b:8f:f2:ba:e8:63:27:25:30:eb: 39:0d:98:6e:7d:f0:f8:dd:d9:d0:14:a9:42:0f:30: c4:35:2c:da:e8:82:83:df:9f:9f:db:35:5d:b7:db: cc:a9:05:45:1d:f3:95:77:1c:9d:9b:29:f0:59:6b: 8f:f3:bc:69:8b:4e:dd:1e:25:91:25:e0:a3:9c:a6: be:69:11:5b:20:8e:88:f0:d3:69:a3:d2:c4:f3:7d: d4:ed:6c:0b:30:68:f5:f1:84:fe:bc:94:73:e7:28: c9:b9:c4:f7:73:ec:5c:ff:e1:17:44:d1:49:ca:ca: b5:e1:7d:6d:59:57:64:23:de:5f:c9:1d:c7:46:78: b5:36:60:02:7f:52:d8:62:65:f7:f3:35:e9:e7:01: 04:9a:4d:56:39:52:57:66:bf:90:d3:f8:d5:3e:57: 3b:00:51:5d:44:2f:3e:56:dd:05:ec:08:78:e9:53: 0f:93:4a:22:90:8a:33:16:bf:9f:6b:3b:37:ff:9f: 9a:b9:98:94:a6:be:d4:90:9d:d3:84:f3:61:5e:9e: 7d:00:02:fe:b1:ac:5f:b9:21:52:4f:d0:f3:15:1f: 11:74:fc:e8:6a:7f:ab:73:e5:68:e2:a4:56:32:59: 08:37:0f:97:41:6b:6b:a4:08:92:0b:b9:8a:9d:4c: 65:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:49:34:88:CD:CA:DA:7E:E8:23:3F:D1:33:7B:1B:5B:0B:98:4F:56 X509v3 Authority Key Identifier: keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:83:e4:97:75:42:5a:b5:0b:e8:ca:e4:41:72:7b:f9:23:d2: 7b:fb:8c:8d:16:ca:f6:00:6f:c4:41:a4:ff:20:15:eb:43:fd: 8e:16:78:ab:2a:03:4c:3d:92:77:1c:4b:43:62:a3:9e:5a:ed: 93:b1:40:79:1b:0b:7b:23:bf:31:b0:33:67:10:7f:97:68:79: dd:a4:d6:82:e9:7a:e8:7b:a3:7e:f3:b5:ba:f6:ca:6c:b1:82: 6a:ba:31:dd:11:ac:b8:19:4a:87:61:dc:5f:2e:87:25:b0:da: 54:0c:44:61:12:50:98:1a:d8:4f:6d:a7:ca:9e:d1:0e:f9:25: b9:95:f9:ec:8a:5c:55:58:33:4d:ec:34:54:aa:ad:1f:9a:8b: 77:8c:71:85:db:46:35:72:2d:cd:92:c5:1c:35:d9:cc:1b:36: d0:19:78:52:14:a0:8e:c0:37:67:88:30:bd:65:3d:5c:67:af: 65:ea:22:e9:ed:a6:bc:d1:b4:29:0c:f4:05:e1:b8:3b:b6:88: af:1f:34:91:4c:ce:00:e1:29:27:23:e8:5c:87:ba:93:1c:e2: 26:a5:59:14:71:0d:99:9b:cf:fc:a2:b7:78:50:2d:13:b8:d1: cf:4d:45:7e:12:c9:b6:28:a4:78:32:62:fa:98:a4:73:2c:23: a1:ff:39:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpM2gSNFFwjN7P3wNGIavMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OWQyOGI3ZDAyOGNhYmI5Njg0YTgwZTE0YmFhZjE1Y2E2 ZmQyZjYwHhcNMjUxMjIxMTYwMTE4WhcNMjUxMjIyMTYwMTE4WjAzMTEwLwYDVQQD EyhmNzQ5MzQ4OGNkY2FkYTdlZTgyMzNmZDEzMzdiMWI1YjBiOTg0ZjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVOYFGuP8rroYyclMOs5DZhuffD4 3dnQFKlCDzDENSza6IKD35+f2zVdt9vMqQVFHfOVdxydmynwWWuP87xpi07dHiWR JeCjnKa+aRFbII6I8NNpo9LE833U7WwLMGj18YT+vJRz5yjJucT3c+xc/+EXRNFJ ysq14X1tWVdkI95fyR3HRni1NmACf1LYYmX38zXp5wEEmk1WOVJXZr+Q0/jVPlc7 AFFdRC8+Vt0F7Ah46VMPk0oikIozFr+fazs3/5+auZiUpr7UkJ3ThPNhXp59AAL+ saxfuSFST9DzFR8RdPzoan+rc+Vo4qRWMlkINw+XQWtrpAiSC7mKnUxlIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdJNIjNytp+6CM/0TN7G1sLmE9WMB8GA1UdIwQY MBaAFLadKLfQKMq7loSoDhS6rxXKb9L2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHAwb3Q5QW95cnVXaEtnT0ZMcXZGY3B2MHZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iMjJjMWUtY2E0Yy00ODFlLTkxYTIt NWM5MzIzOWU1ZTJlLzEvdHAwb3Q5QW95cnVXaEtnT0ZMcXZGY3B2MHZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9iMjJjMWUtY2E0Yy00ODFlLTkxYTItNWM5MzIzOWU1ZTJl LzEvdHAwb3Q5QW95cnVXaEtnT0ZMcXZGY3B2MHZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYPkl3VC WrUL6MrkQXJ7+SPSe/uMjRbK9gBvxEGk/yAV60P9jhZ4qyoDTD2SdxxLQ2Kjnlrt k7FAeRsLeyO/MbAzZxB/l2h53aTWgul66HujfvO1uvbKbLGCarox3RGsuBlKh2Hc Xy6HJbDaVAxEYRJQmBrYT22nyp7RDvkluZX57IpcVVgzTew0VKqtH5qLd4xxhdtG NXItzZLFHDXZzBs20Bl4UhSgjsA3Z4gwvWU9XGevZeoi6e2mvNG0KQz0BeG4O7aI rx80kUzOAOEpJyPoXIe6kxziJqVZFHENmZvP/KK3eFAtE7jRz01FfhLJtiikeDJi +pikcywjof852w== -----END CERTIFICATE-----Generated at Sun Dec 21 23:42:13 2025 by rpki-client