This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft File: Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft (raw, json) Hash identifier: dc67uXFNDKnkVst/VGNW+UQ73GZ6cH7jQy6AigooniY= Subject key identifier: BF:6A:A8:C5:99:74:5E:F1:DF:85:90:F3:E9:7C:C5:82:D7:1A:D1:7E Authority key identifier: 4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71 Certificate issuer: /CN=4eae6f524eed0f73c849b0643827b80e37c46c71 Certificate serial: 019B52611E0CF2D2353E1CBC195828A7C099 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 22:00:54 +0000 Manifest this update: Wed 24 Dec 2025 22:00:54 +0000 Manifest next update: Thu 25 Dec 2025 22:00:54 +0000 Files and hashes: 1: Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl (hash: OFTXzDwasp08PWl95gR70QU1/Vs5DM9QK79YdOcCJJw=) 2: ZPx2mzUkeOD00cVnYPqjI9aytDo.roa (hash: 9BSbx2wnbDuYyWn09oP3MayodoEwoQbrU6xTUmUCOR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:1e:0c:f2:d2:35:3e:1c:bc:19:58:28:a7:c0:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eae6f524eed0f73c849b0643827b80e37c46c71 Validity Not Before: Dec 24 22:00:54 2025 GMT Not After : Dec 25 22:00:54 2025 GMT Subject: CN=bf6aa8c599745ef1df8590f3e97cc582d71ad17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6d:04:87:21:3e:60:27:6d:fc:a2:b8:86:e0: 72:79:c0:ea:3a:3d:73:a8:f8:b5:20:5a:81:c7:e0: 09:e1:00:df:18:17:12:62:8c:8c:77:f0:e4:7f:f0: 18:58:fc:d6:04:bc:d1:8f:b4:af:01:09:53:8f:3c: 46:c1:d9:a0:82:eb:81:64:3b:07:58:2f:9c:37:81: ad:f7:a4:1c:3a:3b:ed:6e:52:f1:51:d9:a9:36:12: 1a:0b:1e:ff:0e:db:e9:35:14:4b:b1:e7:b2:bd:bf: fe:66:cf:0f:98:53:f7:cc:62:20:e6:8d:47:48:9e: 9f:2d:64:ce:8a:06:a6:e5:53:c2:8c:9b:e3:06:37: 32:a7:6f:86:b4:5e:e2:29:a9:50:21:d2:2f:c2:7a: 85:63:2a:52:8a:09:0d:a0:a8:6a:4a:bf:3f:f3:07: c4:bf:38:8c:09:cb:c8:77:3a:19:20:d3:b5:c5:90: c0:8b:e1:a2:c9:36:b8:84:75:9b:45:57:5e:43:5d: c1:ee:f1:79:3a:dd:9d:8e:7c:56:d4:54:e0:48:90: f0:a3:e2:be:b1:a0:1d:c0:f9:87:62:ae:b5:4c:84: a7:64:f9:a0:cf:d5:18:d0:40:b8:1a:58:01:a4:8c: bb:08:a4:7e:83:39:07:cc:d8:e1:da:fb:f3:1f:20: 34:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6A:A8:C5:99:74:5E:F1:DF:85:90:F3:E9:7C:C5:82:D7:1A:D1:7E X509v3 Authority Key Identifier: keyid:4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:71:bd:1f:f7:01:9c:54:76:b8:f5:96:00:26:d2:69:7f:e9: 8a:bb:83:4d:eb:33:d8:c7:4c:b2:07:4a:6c:71:f1:e0:16:72: c7:24:6c:99:e2:26:52:26:ae:45:ad:fe:55:01:de:65:07:c4: 23:dc:cb:3a:b4:bb:d0:99:19:62:a3:15:52:4c:2a:00:16:d4: cd:d4:48:e0:f0:c3:84:78:79:1a:be:eb:60:6d:02:81:e6:a2: ae:e0:6b:e6:17:b1:6d:0b:e9:61:15:f7:54:c8:fc:dc:c2:2f: 82:b3:75:a4:49:44:06:f5:39:c3:a2:ea:bd:6a:a8:5d:f7:84: c8:21:bd:c0:34:69:ec:32:ac:63:7c:9d:e0:f9:71:a5:a4:17: 52:d2:ba:e8:f0:42:1c:7b:b6:be:28:5e:50:26:87:3d:21:59: 06:23:27:78:60:b8:d8:1c:a3:83:35:ca:fd:bb:ef:62:88:48: d1:d4:7c:54:fa:50:02:25:c4:93:19:b5:61:5a:e9:fe:67:59: 43:35:58:55:e3:91:b5:f0:08:b1:58:26:a2:52:90:24:d7:40: eb:41:78:7e:48:66:46:29:97:9c:76:58:d6:90:27:81:4e:12: 38:c7:db:ec:c1:b9:a4:9d:6b:3a:c9:10:4d:1f:8e:3d:77:64: 5a:5d:16:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYR4M8tI1Phy8GVgop8CZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYWU2ZjUyNGVlZDBmNzNjODQ5YjA2NDM4MjdiODBlMzdj NDZjNzEwHhcNMjUxMjI0MjIwMDU0WhcNMjUxMjI1MjIwMDU0WjAzMTEwLwYDVQQD EyhiZjZhYThjNTk5NzQ1ZWYxZGY4NTkwZjNlOTdjYzU4MmQ3MWFkMTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW0EhyE+YCdt/KK4huByecDqOj1z qPi1IFqBx+AJ4QDfGBcSYoyMd/Dkf/AYWPzWBLzRj7SvAQlTjzxGwdmgguuBZDsH WC+cN4Gt96QcOjvtblLxUdmpNhIaCx7/DtvpNRRLseeyvb/+Zs8PmFP3zGIg5o1H SJ6fLWTOigam5VPCjJvjBjcyp2+GtF7iKalQIdIvwnqFYypSigkNoKhqSr8/8wfE vziMCcvIdzoZINO1xZDAi+GiyTa4hHWbRVdeQ13B7vF5Ot2djnxW1FTgSJDwo+K+ saAdwPmHYq61TISnZPmgz9UY0EC4GlgBpIy7CKR+gzkHzNjh2vvzHyA09QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9qqMWZdF7x34WQ8+l8xYLXGtF+MB8GA1UdIwQY MBaAFE6ub1JO7Q9zyEmwZDgnuA43xGxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHE1dlVrN3REM1BJU2JCa09DZTREamZFYkhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lZDM4NGUtOTk0OS00Y2MwLThhMzct M2JiMmNkODBhMmM5LzEvVHE1dlVrN3REM1BJU2JCa09DZTREamZFYkhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lZDM4NGUtOTk0OS00Y2MwLThhMzctM2JiMmNkODBhMmM5 LzEvVHE1dlVrN3REM1BJU2JCa09DZTREamZFYkhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXG9H/cB nFR2uPWWACbSaX/piruDTesz2MdMsgdKbHHx4BZyxyRsmeImUiauRa3+VQHeZQfE I9zLOrS70JkZYqMVUkwqABbUzdRI4PDDhHh5Gr7rYG0CgeairuBr5hexbQvpYRX3 VMj83MIvgrN1pElEBvU5w6LqvWqoXfeEyCG9wDRp7DKsY3yd4PlxpaQXUtK66PBC HHu2viheUCaHPSFZBiMneGC42ByjgzXK/bvvYohI0dR8VPpQAiXEkxm1YVrp/mdZ QzVYVeORtfAIsVgmolKQJNdA60F4fkhmRimXnHZY1pAngU4SOMfb7MG5pJ1rOskQ TR+OPXdkWl0WZA== -----END CERTIFICATE-----Generated at Thu Dec 25 01:21:19 2025 by rpki-client