This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft File: tTcRWWHGq_W4er5KIAU-SsobbsI.mft (raw, json) Hash identifier: n1nJ0XWYeJPVB15tLqp8/4NiLQU7kOXTR/zkY3/rDe0= Subject key identifier: 87:92:3A:65:35:1A:03:49:08:37:A7:A7:BF:79:FA:90:8F:61:D8:F4 Authority key identifier: B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2 Certificate issuer: /CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2 Certificate serial: 019B40FF9E4B92F78036752C431EDEC0DC71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 13:00:52 +0000 Manifest this update: Sun 21 Dec 2025 13:00:52 +0000 Manifest next update: Mon 22 Dec 2025 13:00:52 +0000 Files and hashes: 1: tTcRWWHGq_W4er5KIAU-SsobbsI.crl (hash: bOp1Q1sByyEE6ClK6vlCd4CoTsfqDSERA+9jrOcj5fs=) 2: yv-lKnLJ7FH3ebM94G5o9mRIoI0.roa (hash: NaXQYxgPfjl+IpTUFv/7Iibu/QutlXyZxHu9Cx6Aoy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:9e:4b:92:f7:80:36:75:2c:43:1e:de:c0:dc:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2 Validity Not Before: Dec 21 13:00:52 2025 GMT Not After : Dec 22 13:00:52 2025 GMT Subject: CN=87923a65351a03490837a7a7bf79fa908f61d8f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:db:53:ad:72:c1:51:55:ad:cf:2a:b8:6a:54: 0f:d4:aa:af:49:e3:47:76:b0:fa:ee:b6:33:8f:6c: f6:4c:c2:40:2a:96:59:e4:74:71:cd:83:66:d1:96: 1d:ee:fe:b4:96:e7:76:0b:3a:1e:0e:a8:49:e2:7d: 60:6c:72:2a:8d:49:81:d0:63:35:c6:f0:a8:c4:02: 3e:f7:a1:64:a6:1e:16:34:dc:72:36:c9:d9:11:50: 5a:f9:5b:96:4c:e4:b4:47:18:f9:26:c6:cf:3a:99: a0:20:58:20:8c:a9:61:1c:9a:c1:e1:f8:b9:9d:9b: 98:c2:9e:4c:bf:8f:f4:cb:f3:c7:96:b1:89:86:f1: c3:ed:09:62:f5:ef:e5:fd:e0:a7:a9:10:76:16:dd: 36:66:bd:3a:09:05:8e:1f:77:20:a5:3b:fd:5e:f5: 17:53:d4:17:95:ff:7a:74:59:8d:58:42:4d:61:79: 23:09:02:cc:57:c5:7a:60:52:d8:ff:40:ac:51:4e: 85:03:02:57:87:9f:46:0e:59:01:fc:37:67:a6:26: 52:e4:45:57:57:25:10:ee:ce:98:b4:4c:1f:17:c3: a3:ad:a0:d8:db:51:ee:21:ca:fb:0f:18:17:e7:3f: 01:55:f0:b8:f1:92:e6:43:0a:53:e0:9d:70:00:3e: 53:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:92:3A:65:35:1A:03:49:08:37:A7:A7:BF:79:FA:90:8F:61:D8:F4 X509v3 Authority Key Identifier: keyid:B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:ad:f7:64:2d:4f:de:44:57:b1:c7:20:59:c8:27:20:2a:f4: e4:c2:a6:56:32:bb:ee:7b:e6:c1:88:da:d1:75:1c:c1:f0:9f: c0:c9:5c:b5:8f:05:17:e6:55:cc:49:ed:69:55:93:8f:f6:ad: 49:3f:2d:9e:87:7c:8e:bc:7c:04:08:a8:f0:4c:ce:14:2d:10: b4:f1:32:2b:97:bf:e5:97:0a:de:eb:ec:39:76:4c:5d:24:0b: 72:6b:a4:85:cb:da:b0:79:a9:11:04:0d:d8:70:48:49:82:04: 09:0a:d6:98:70:87:23:9c:75:8d:c9:b8:95:92:77:35:e6:7d: e8:d0:c9:b6:b0:aa:56:47:7c:db:4a:ea:26:93:e0:8b:2e:2f: 6c:00:e4:5f:1e:5c:92:9f:a1:d7:29:b5:b3:c7:3c:11:ba:49: b0:7f:2b:6d:33:08:98:a6:1a:3e:bb:a3:56:6f:72:09:9c:f1: 29:ef:ca:2d:e8:32:43:37:19:02:21:a4:d9:20:bf:e3:97:3e: cd:1d:51:c0:f3:10:60:90:f3:2f:4b:ba:5b:e2:7e:18:6f:ab: 0a:86:6a:e3:80:d0:68:fd:30:32:62:1f:da:f9:34:f3:4b:53: 82:a2:e0:c7:23:82:e8:f2:0e:92:53:22:5b:34:a1:e2:b9:c0: 5c:95:dd:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/55LkveANnUsQx7ewNxxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MzcxMTU5NjFjNmFiZjViODdhYmU0YTIwMDUzZTRhY2Ex YjZlYzIwHhcNMjUxMjIxMTMwMDUyWhcNMjUxMjIyMTMwMDUyWjAzMTEwLwYDVQQD Eyg4NzkyM2E2NTM1MWEwMzQ5MDgzN2E3YTdiZjc5ZmE5MDhmNjFkOGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdtTrXLBUVWtzyq4alQP1KqvSeNH drD67rYzj2z2TMJAKpZZ5HRxzYNm0ZYd7v60lud2CzoeDqhJ4n1gbHIqjUmB0GM1 xvCoxAI+96Fkph4WNNxyNsnZEVBa+VuWTOS0Rxj5JsbPOpmgIFggjKlhHJrB4fi5 nZuYwp5Mv4/0y/PHlrGJhvHD7Qli9e/l/eCnqRB2Ft02Zr06CQWOH3cgpTv9XvUX U9QXlf96dFmNWEJNYXkjCQLMV8V6YFLY/0CsUU6FAwJXh59GDlkB/DdnpiZS5EVX VyUQ7s6YtEwfF8OjraDY21HuIcr7DxgX5z8BVfC48ZLmQwpT4J1wAD5TOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeSOmU1GgNJCDenp795+pCPYdj0MB8GA1UdIwQY MBaAFLU3EVlhxqv1uHq+SiAFPkrKG27CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFRjUldXSEdxX1c0ZXI1S0lBVS1Tc29iYnNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8yNmNjNmEtNmYxNy00MGE5LWI5ODct NmZjNzE3MTc1ZTU4LzEvdFRjUldXSEdxX1c0ZXI1S0lBVS1Tc29iYnNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8yNmNjNmEtNmYxNy00MGE5LWI5ODctNmZjNzE3MTc1ZTU4 LzEvdFRjUldXSEdxX1c0ZXI1S0lBVS1Tc29iYnNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtK33ZC1P 3kRXsccgWcgnICr05MKmVjK77nvmwYja0XUcwfCfwMlctY8FF+ZVzEntaVWTj/at ST8tnod8jrx8BAio8EzOFC0QtPEyK5e/5ZcK3uvsOXZMXSQLcmukhcvasHmpEQQN 2HBISYIECQrWmHCHI5x1jcm4lZJ3NeZ96NDJtrCqVkd820rqJpPgiy4vbADkXx5c kp+h1ym1s8c8EbpJsH8rbTMImKYaPrujVm9yCZzxKe/KLegyQzcZAiGk2SC/45c+ zR1RwPMQYJDzL0u6W+J+GG+rCoZq44DQaP0wMmIf2vk080tTgqLgxyOC6PIOklMi WzSh4rnAXJXdHg== -----END CERTIFICATE-----Generated at Sun Dec 21 18:58:33 2025 by rpki-client