This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft File: tE-FORdNAL-ov95JBD9IXDpYdSU.mft (raw, json) Hash identifier: SAUUfVefisK0cn3qAhA5wozjREwd3t7WuFKAPV91abM= Subject key identifier: 30:74:53:3D:02:D2:7A:34:F1:CB:5C:F8:08:F1:8A:8F:6C:83:A1:CD Authority key identifier: B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25 Certificate issuer: /CN=b44f8539174d00bfa8bfde49043f485c3a587525 Certificate serial: 019B4439347DA81E9AA1CCBF6EBC7E172670 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft Manifest number: 178A Signing time: Mon 22 Dec 2025 04:02:38 +0000 Manifest this update: Mon 22 Dec 2025 04:02:38 +0000 Manifest next update: Tue 23 Dec 2025 04:02:38 +0000 Files and hashes: 1: tE-FORdNAL-ov95JBD9IXDpYdSU.crl (hash: gR8vvVCu4rOne25Hcnl3scd/X1Qf/LM8ARi8vQb/nyE=) 2: xUV-1OBQ9tZ_Xv0-wwfyT7s6w0s.roa (hash: kyqwYkE6bzY0EYwjT0bnHVarYHy1IZctjgwIpdkE7zI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:39:34:7d:a8:1e:9a:a1:cc:bf:6e:bc:7e:17:26:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b44f8539174d00bfa8bfde49043f485c3a587525 Validity Not Before: Dec 22 04:02:38 2025 GMT Not After : Dec 23 04:02:38 2025 GMT Subject: CN=3074533d02d27a34f1cb5cf808f18a8f6c83a1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:78:9f:ab:00:1b:92:f3:40:e8:a5:6c:1a:c0: 52:3a:ed:e2:78:66:f1:dd:0a:b6:ed:fe:66:e4:ac: c2:43:06:dd:1d:8b:65:bf:0d:a1:43:ae:7b:69:7c: bb:ad:6e:9e:dd:ac:99:2c:2b:0c:69:02:f9:31:e4: b6:07:bc:3a:7a:f9:60:bd:58:c4:9d:c7:3b:7d:36: 34:62:59:18:9c:83:66:6e:48:81:a7:ac:8c:80:e2: 7e:a2:5b:6b:ad:12:4a:99:d1:ef:08:ac:43:c2:f8: 7a:e4:67:82:eb:b2:02:41:a8:07:db:8d:c5:6d:82: 1b:bf:12:dd:08:1f:07:1f:5b:5c:a2:9a:81:fc:2e: 84:37:83:b3:e0:03:b0:d9:90:9c:43:d9:31:32:8f: 8b:27:33:54:fa:26:46:d5:60:5f:65:b5:20:d7:c8: ec:54:58:3c:ab:a2:92:b5:c9:28:c8:06:7f:53:7c: a1:7e:a4:21:57:f4:d0:de:0b:01:22:15:10:94:e0: 0f:df:51:dd:58:f3:03:0d:b2:db:a5:39:9f:e3:c8: 9c:78:cd:d2:63:8a:08:45:f3:0c:95:30:4a:d8:cc: 94:d6:ac:d8:01:b1:a1:1c:d6:4e:47:e7:66:b0:a6: a6:7f:24:8b:8c:78:99:ad:d5:90:8a:ec:cc:b7:d8: 9e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:74:53:3D:02:D2:7A:34:F1:CB:5C:F8:08:F1:8A:8F:6C:83:A1:CD X509v3 Authority Key Identifier: keyid:B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:e0:af:ef:45:0a:24:70:82:47:5d:51:17:16:e4:83:33:a7: 7a:aa:aa:68:54:16:4a:c4:08:2e:a6:18:e2:6f:ef:88:75:99: 04:b8:b1:b2:14:00:7e:27:4a:b5:3d:23:57:5e:df:ce:bc:3f: 28:a1:a8:84:df:ca:33:8a:87:b3:f0:c9:c9:a3:d8:ac:d0:e4: dc:33:58:81:45:72:e3:1d:1a:4b:74:d9:18:1e:3f:ca:3a:88: 21:91:83:22:71:b5:45:25:fc:87:f5:26:70:78:34:b6:aa:fc: 88:b2:54:dd:07:dd:52:ad:94:fe:4b:fa:10:c2:39:5c:71:77: 87:5c:db:d1:5a:17:7f:93:bc:86:aa:e6:3a:d8:cb:fb:61:02: 82:b8:f9:ce:b0:90:47:d4:74:c3:a4:03:fc:8d:1d:85:ff:92: 7a:16:50:ed:0a:63:8e:6c:ec:1e:05:ec:3c:4b:57:d8:35:ee: bf:9e:cf:c8:91:2c:39:6e:f1:ba:b1:ac:24:21:43:54:f0:ce: 1a:b9:e4:9d:35:55:bc:e3:e8:88:c3:6f:02:0e:14:1e:90:9c: f0:c8:83:d1:0d:54:11:b5:1d:77:c9:fa:1b:23:b2:26:45:b8: 9b:5d:a2:9a:24:db:24:ea:66:ff:f9:5c:68:10:d2:90:b1:7a: 85:b9:a2:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOTR9qB6aocy/brx+FyZwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NGY4NTM5MTc0ZDAwYmZhOGJmZGU0OTA0M2Y0ODVjM2E1 ODc1MjUwHhcNMjUxMjIyMDQwMjM4WhcNMjUxMjIzMDQwMjM4WjAzMTEwLwYDVQQD EygzMDc0NTMzZDAyZDI3YTM0ZjFjYjVjZjgwOGYxOGE4ZjZjODNhMWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXifqwAbkvNA6KVsGsBSOu3ieGbx 3Qq27f5m5KzCQwbdHYtlvw2hQ657aXy7rW6e3ayZLCsMaQL5MeS2B7w6evlgvVjE ncc7fTY0YlkYnINmbkiBp6yMgOJ+oltrrRJKmdHvCKxDwvh65GeC67ICQagH243F bYIbvxLdCB8HH1tcopqB/C6EN4Oz4AOw2ZCcQ9kxMo+LJzNU+iZG1WBfZbUg18js VFg8q6KStckoyAZ/U3yhfqQhV/TQ3gsBIhUQlOAP31HdWPMDDbLbpTmf48iceM3S Y4oIRfMMlTBK2MyU1qzYAbGhHNZOR+dmsKamfySLjHiZrdWQiuzMt9ie8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDB0Uz0C0no08ctc+Ajxio9sg6HNMB8GA1UdIwQY MBaAFLRPhTkXTQC/qL/eSQQ/SFw6WHUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEUtRk9SZE5BTC1vdjk1SkJEOUlYRHBZZFNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mNzU1OTYtNzc5MC00MzJjLTg4Y2Qt MzMzZTUzY2ZhMDIxLzEvdEUtRk9SZE5BTC1vdjk1SkJEOUlYRHBZZFNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mNzU1OTYtNzc5MC00MzJjLTg4Y2QtMzMzZTUzY2ZhMDIx LzEvdEUtRk9SZE5BTC1vdjk1SkJEOUlYRHBZZFNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOCv70UK JHCCR11RFxbkgzOneqqqaFQWSsQILqYY4m/viHWZBLixshQAfidKtT0jV17fzrw/ KKGohN/KM4qHs/DJyaPYrNDk3DNYgUVy4x0aS3TZGB4/yjqIIZGDInG1RSX8h/Um cHg0tqr8iLJU3QfdUq2U/kv6EMI5XHF3h1zb0VoXf5O8hqrmOtjL+2ECgrj5zrCQ R9R0w6QD/I0dhf+SehZQ7QpjjmzsHgXsPEtX2DXuv57PyJEsOW7xurGsJCFDVPDO GrnknTVVvOPoiMNvAg4UHpCc8MiD0Q1UEbUdd8n6GyOyJkW4m12imiTbJOpm//lc aBDSkLF6hbmirQ== -----END CERTIFICATE-----Generated at Mon Dec 22 08:01:37 2025 by rpki-client