This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft File: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json) Hash identifier: QEYIwIyWyYFmib5oJ5qACf/6ScoDPen/W6Q2zADpArU= Subject key identifier: 20:E9:42:E1:28:56:39:7D:3A:B2:D5:E6:26:01:26:CF:15:9F:B7:31 Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14 Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714 Certificate serial: 019B3F4832C63248109673FCAD037DA0E8D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft Manifest number: 17EB Signing time: Sun 21 Dec 2025 05:00:54 +0000 Manifest this update: Sun 21 Dec 2025 05:00:54 +0000 Manifest next update: Mon 22 Dec 2025 05:00:54 +0000 Files and hashes: 1: 1-n-9hD734eUWTfI1sQzb2mm0u70.roa (hash: prY6VkL1Otme9e/iQnbu0E7x7kgOdTIuBs01J6UM6iw=) 2: 77nHJ74F1fFAwUbmMeRLrxeDdWA.roa (hash: 2Mtt2AaUFR4ZOfRNdKyuPT3cj2EQ+qy46BQe2ut00YY=) 3: G7v3pCkQ6hmfhpbVxzOwUWwmzDY.roa (hash: nVHjBCeWZEPbhgav/+qfuSQLmW0a+8zRMZx9D7jY6PU=) 4: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: Pt/yZjwaDr6ybjj21WQe+loh4sM7T4hLggUh4Y/Sbps=) 5: ZLnsYJrehSHy13eQaMRY1Tbep5I.roa (hash: beMY8QS7fWlkYI5VTaRGjskfF3hsi1HR7CrNo9yaWBM=) 6: cY9_Dlz5lxSZl56slvt7pRRUso4.roa (hash: V26Gi5RGzqYA8g0Nj2o/GFMtFXqXNXHqb2lL9UWNWzo=) 7: jUW3uJuzvpMts6ZS_PpOE0-vHy4.roa (hash: QVsKQjI9Ob132etLfwnFEQDpraGA87DL9fvaD59Kiac=) 8: s2kaxqyHVyCTqaRomO4ohfBebsc.roa (hash: vuPF+RwNPBvTGLZXAOB0JJk86Umi+Vc+1JKtKmoQbqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:32:c6:32:48:10:96:73:fc:ad:03:7d:a0:e8:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714 Validity Not Before: Dec 21 05:00:54 2025 GMT Not After : Dec 22 05:00:54 2025 GMT Subject: CN=20e942e12856397d3ab2d5e6260126cf159fb731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f5:c9:99:e3:8b:2e:d7:01:0c:fa:61:73:54: a6:6b:c3:21:1b:ef:b4:9d:04:f7:98:43:9d:02:93: 02:e1:d0:86:94:ab:2a:41:2f:95:43:0c:de:ff:a5: 85:a0:89:cd:c2:bd:0d:3c:79:31:c2:0c:5a:ef:1b: ee:c0:ff:85:e1:40:d4:6d:f6:c0:d3:52:1b:73:8c: 8b:e8:b8:76:50:e8:33:dd:04:a2:5c:ae:94:12:70: d1:f4:f8:18:70:91:58:6f:f7:48:c2:4f:8e:f2:a2: ea:33:35:0c:1d:7e:e0:aa:bb:ee:81:89:04:77:bc: a7:d9:7e:a5:c4:9c:74:59:9a:87:dc:c3:66:77:15: e3:ae:46:fc:76:a8:32:ca:3a:02:49:70:9b:5c:da: 27:63:53:54:9d:bd:1a:1b:d9:0e:24:85:30:c9:e1: 1a:78:d6:0b:32:97:34:69:73:0b:3e:79:2e:bd:c3: 75:94:d5:ce:e4:64:9d:c6:7d:5e:cd:10:24:95:06: 1f:82:19:66:98:6a:7a:f5:c2:8d:09:c1:f1:3f:b6: d3:43:dc:b8:11:2d:c3:47:14:31:cb:57:3d:03:b2: 00:91:b0:19:60:ac:47:df:fa:65:de:82:4d:28:f7: fa:26:0d:74:b4:c3:fe:ab:4d:2f:25:dd:29:c4:45: 99:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E9:42:E1:28:56:39:7D:3A:B2:D5:E6:26:01:26:CF:15:9F:B7:31 X509v3 Authority Key Identifier: keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:bb:d9:7a:38:9e:9f:b0:11:2c:b5:de:78:e5:19:e6:a8:31: fd:6b:e1:f8:63:67:37:73:c0:61:39:ff:b6:18:47:ca:44:f8: ac:e9:53:54:d8:1a:56:ea:33:0a:b5:1f:28:02:75:23:c1:ab: 27:b2:ee:9e:8d:a4:69:51:68:e0:a3:6f:ba:7a:24:3d:d0:69: 5d:6f:8a:21:98:70:56:93:55:09:6c:8c:8a:e7:94:f1:97:ca: 57:cd:ad:c7:99:bc:b0:64:fc:12:7a:0c:31:39:f7:a3:24:90: 8a:e2:2f:41:d2:28:82:1d:05:84:77:65:b6:52:a1:25:7e:88: 3f:03:f9:3b:1d:23:62:fb:26:0c:3f:38:27:11:0b:1b:7a:89: 35:e1:1d:7f:8e:f1:43:bf:22:e0:8d:38:bb:80:d6:5f:9b:fb: 00:57:1d:ab:5c:ab:82:36:8c:cc:31:c2:4c:9f:b1:8f:f0:d4: ab:5f:39:b1:38:80:4c:66:e3:39:f8:43:55:be:cf:80:de:8c: ca:a0:70:9e:0d:0a:fe:1b:b4:92:9c:d7:60:cf:5f:8f:2f:c4: 03:ac:77:bf:d3:d9:39:ca:47:9c:5e:87:d0:0d:83:9a:cc:56: 3d:7d:0a:5d:ac:5e:d6:d5:19:4e:2d:e7:11:37:f6:af:00:19: cc:70:16:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SDLGMkgQlnP8rQN9oOjSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlY2Y1MzAwN2M3OWNjNWUyZjJkNzM1NmJhOTEyMWE3OGMw Yzc3MTQwHhcNMjUxMjIxMDUwMDU0WhcNMjUxMjIyMDUwMDU0WjAzMTEwLwYDVQQD EygyMGU5NDJlMTI4NTYzOTdkM2FiMmQ1ZTYyNjAxMjZjZjE1OWZiNzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/XJmeOLLtcBDPphc1Sma8MhG++0 nQT3mEOdApMC4dCGlKsqQS+VQwze/6WFoInNwr0NPHkxwgxa7xvuwP+F4UDUbfbA 01Ibc4yL6Lh2UOgz3QSiXK6UEnDR9PgYcJFYb/dIwk+O8qLqMzUMHX7gqrvugYkE d7yn2X6lxJx0WZqH3MNmdxXjrkb8dqgyyjoCSXCbXNonY1NUnb0aG9kOJIUwyeEa eNYLMpc0aXMLPnkuvcN1lNXO5GSdxn1ezRAklQYfghlmmGp69cKNCcHxP7bTQ9y4 ES3DRxQxy1c9A7IAkbAZYKxH3/pl3oJNKPf6Jg10tMP+q00vJd0pxEWZNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDpQuEoVjl9OrLV5iYBJs8Vn7cxMB8GA1UdIwQY MBaAFE7PUwB8ecxeLy1zVrqRIaeMDHcUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEt Y2I4YjNhMDk0MjA5LzEvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEtY2I4YjNhMDk0MjA5 LzEvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbvZejie n7ARLLXeeOUZ5qgx/Wvh+GNnN3PAYTn/thhHykT4rOlTVNgaVuozCrUfKAJ1I8Gr J7Luno2kaVFo4KNvunokPdBpXW+KIZhwVpNVCWyMiueU8ZfKV82tx5m8sGT8EnoM MTn3oySQiuIvQdIogh0FhHdltlKhJX6IPwP5Ox0jYvsmDD84JxELG3qJNeEdf47x Q78i4I04u4DWX5v7AFcdq1yrgjaMzDHCTJ+xj/DUq185sTiATGbjOfhDVb7PgN6M yqBwng0K/hu0kpzXYM9fjy/EA6x3v9PZOcpHnF6H0A2DmsxWPX0KXaxe1tUZTi3n ETf2rwAZzHAWvA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:45:03 2025 by rpki-client