This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft File: tVNDqiHHSjn81Rg_T99V3EZ56D0.mft (raw, json) Hash identifier: +1ScUCw7TK1GQl+LptcJsusg45aZ5qC8Vp75RVoUGFc= Subject key identifier: 0B:C5:17:66:6F:3B:39:54:CF:EE:DE:CD:90:FE:04:0F:B8:A0:EA:CB Authority key identifier: B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D Certificate issuer: /CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d Certificate serial: 019B4E4DA5D4185D38D19228D60E086B6A75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft Manifest number: 02C9 Signing time: Wed 24 Dec 2025 03:01:10 +0000 Manifest this update: Wed 24 Dec 2025 03:01:10 +0000 Manifest next update: Thu 25 Dec 2025 03:01:10 +0000 Files and hashes: 1: RXmLcd13ajoTVlcEirVukYVayjY.roa (hash: VMYnLhwMDYwO9ah7mzCKDLgq1vs8pRSHkOzi/+9nkdg=) 2: tVNDqiHHSjn81Rg_T99V3EZ56D0.crl (hash: /YCgBGTBsC8hNvYOS1scmjLjRpKU6PTpg2UO/iWy8D8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:a5:d4:18:5d:38:d1:92:28:d6:0e:08:6b:6a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d Validity Not Before: Dec 24 03:01:10 2025 GMT Not After : Dec 25 03:01:10 2025 GMT Subject: CN=0bc517666f3b3954cfeedecd90fe040fb8a0eacb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:82:ef:7b:eb:5d:5c:ac:24:86:4a:80:6a:53: 61:8a:20:04:36:d7:9d:8b:05:05:8c:0e:29:90:0a: 9d:16:7e:40:6d:8c:2c:ee:30:ca:1d:41:61:12:3b: 2d:cf:ab:5f:08:80:a5:cc:02:ea:16:3b:a5:39:de: ac:e2:f5:2b:77:4a:0d:2a:8d:4d:94:25:39:c7:34: bb:30:4c:0d:f8:0f:65:60:3e:ef:b9:0c:9b:1a:55: eb:11:53:13:04:2e:4b:4a:d8:d8:cc:c2:43:59:c7: a4:86:6b:5e:e7:a5:b2:20:af:56:ee:76:59:fa:77: 90:6b:7d:27:d7:11:01:68:41:69:78:45:b7:da:4e: db:03:af:90:ac:31:67:85:f4:e0:a4:fd:4b:90:f1: 1b:30:a7:3c:9b:e1:b0:81:53:d7:1e:47:68:31:5d: 26:90:5a:cd:96:6a:e3:54:55:94:f6:92:ed:99:72: 67:ff:b8:32:f6:f1:e5:c5:34:78:b8:3e:82:df:a0: d6:14:af:24:0d:23:c1:ac:e3:27:f0:e6:8b:c6:7f: ad:f0:d0:5e:36:35:98:7b:88:4d:33:9b:c6:86:84: 8b:85:5f:f3:c7:99:00:27:eb:7a:4b:32:ac:16:88: ec:1e:0b:49:65:95:93:18:8a:7c:d3:56:3a:df:e6: 3f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C5:17:66:6F:3B:39:54:CF:EE:DE:CD:90:FE:04:0F:B8:A0:EA:CB X509v3 Authority Key Identifier: keyid:B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:c7:03:11:a6:57:25:8a:66:18:a8:74:12:5b:79:6e:cc:51: 4a:38:5c:93:ec:f0:9b:5a:b6:ae:16:d7:aa:de:24:48:57:d4: 46:86:a3:11:2e:70:4b:d6:22:1b:9b:fa:c1:db:3c:92:5d:59: b6:f5:1f:40:83:b2:30:c8:43:b0:7b:d6:e5:45:fb:62:2d:e6: a9:39:25:ac:ff:00:24:47:b1:d8:41:b4:39:8f:6b:3b:1c:e5: f0:f4:7a:15:fd:23:06:a8:3f:e3:03:c3:96:82:8f:6e:1e:c7: 11:4f:80:30:14:2d:fd:8a:35:e1:8e:e1:23:e0:58:ae:a4:ab: 35:c6:ea:5f:da:34:4f:e9:ea:d7:cc:2b:96:a9:4a:72:cc:40: b1:e3:7d:08:27:43:71:5e:e3:95:3f:43:0f:de:a6:25:f6:e1: 8b:68:29:03:69:ed:1e:1c:83:09:7f:77:e9:c2:eb:eb:ee:13: 01:bb:24:34:e3:21:0f:2a:f3:45:27:df:cf:66:06:43:41:63: 35:ca:f8:9e:88:f0:a3:6c:9b:33:d0:28:ae:20:b3:21:94:e2: 11:66:98:e0:60:4d:2e:40:d6:5d:f3:74:ac:6d:e2:df:6b:76: 53:ec:15:11:e7:12:90:82:d1:b5:8d:88:c0:b9:dd:9f:35:1f: 63:9b:19:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTaXUGF040ZIo1g4Ia2p1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTM0M2FhMjFjNzRhMzlmY2Q1MTgzZjRmZGY1NWRjNDY3 OWU4M2QwHhcNMjUxMjI0MDMwMTEwWhcNMjUxMjI1MDMwMTEwWjAzMTEwLwYDVQQD EygwYmM1MTc2NjZmM2IzOTU0Y2ZlZWRlY2Q5MGZlMDQwZmI4YTBlYWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYLve+tdXKwkhkqAalNhiiAENted iwUFjA4pkAqdFn5AbYws7jDKHUFhEjstz6tfCIClzALqFjulOd6s4vUrd0oNKo1N lCU5xzS7MEwN+A9lYD7vuQybGlXrEVMTBC5LStjYzMJDWcekhmte56WyIK9W7nZZ +neQa30n1xEBaEFpeEW32k7bA6+QrDFnhfTgpP1LkPEbMKc8m+GwgVPXHkdoMV0m kFrNlmrjVFWU9pLtmXJn/7gy9vHlxTR4uD6C36DWFK8kDSPBrOMn8OaLxn+t8NBe NjWYe4hNM5vGhoSLhV/zx5kAJ+t6SzKsFojsHgtJZZWTGIp801Y63+Y/TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvFF2ZvOzlUz+7ezZD+BA+4oOrLMB8GA1UdIwQY MBaAFLVTQ6ohx0o5/NUYP0/fVdxGeeg9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZORHFpSEhTam44MVJnX1Q5OVYzRVo1NkQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jNDljMDgtOTJhYi00Y2IxLTgwOWIt NGVjN2I1ZWZhZTM3LzEvdFZORHFpSEhTam44MVJnX1Q5OVYzRVo1NkQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jNDljMDgtOTJhYi00Y2IxLTgwOWItNGVjN2I1ZWZhZTM3 LzEvdFZORHFpSEhTam44MVJnX1Q5OVYzRVo1NkQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMcDEaZX JYpmGKh0Elt5bsxRSjhck+zwm1q2rhbXqt4kSFfURoajES5wS9YiG5v6wds8kl1Z tvUfQIOyMMhDsHvW5UX7Yi3mqTklrP8AJEex2EG0OY9rOxzl8PR6Ff0jBqg/4wPD loKPbh7HEU+AMBQt/Yo14Y7hI+BYrqSrNcbqX9o0T+nq18wrlqlKcsxAseN9CCdD cV7jlT9DD96mJfbhi2gpA2ntHhyDCX936cLr6+4TAbskNOMhDyrzRSffz2YGQ0Fj Ncr4nojwo2ybM9AoriCzIZTiEWaY4GBNLkDWXfN0rG3i32t2U+wVEecSkILRtY2I wLndnzUfY5sZ3w== -----END CERTIFICATE-----Generated at Wed Dec 24 11:42:28 2025 by rpki-client