This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft File: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft (raw, json) Hash identifier: yS/GCZKOSjUP8+MiB4y7/C6LhsEZRcSRKXQZcYigsX0= Subject key identifier: E2:47:51:AD:1E:BA:C5:F4:24:37:33:AD:A9:C7:C9:22:F8:C7:E2:92 Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04 Certificate issuer: /CN=b522787599f1798e245f993f8cb8182f99cfd104 Certificate serial: 019B4E169F6DC091C124CA5D11CEA96B03E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft Manifest number: 0F0E Signing time: Wed 24 Dec 2025 02:01:03 +0000 Manifest this update: Wed 24 Dec 2025 02:01:03 +0000 Manifest next update: Thu 25 Dec 2025 02:01:03 +0000 Files and hashes: 1: 2o-thtsUmdvMYHtv9qjNUTl4ar8.roa (hash: lFf88qPAFyfJ0i5OxU8GOvf0pF7V0Wi7poD5MDkBh2U=) 2: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl (hash: 0ZxXMAjcZ4NLB04I/V6S4zy36SjCpSf0l0kQ/fMi99E=) 3: xzr06xbQWPKGyePi4W8ezv0xyXU.roa (hash: r6Ttugun2Irp6PGhhAikFJmsuU2fRdTtE284A/50Ue4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:9f:6d:c0:91:c1:24:ca:5d:11:ce:a9:6b:03:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104 Validity Not Before: Dec 24 02:01:03 2025 GMT Not After : Dec 25 02:01:03 2025 GMT Subject: CN=e24751ad1ebac5f4243733ada9c7c922f8c7e292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8e:eb:2a:be:7a:2f:8e:ce:fc:87:30:69:79: 03:3a:81:90:9e:11:50:06:58:fe:2f:aa:36:9b:a1: eb:dd:33:e2:2d:66:7e:ad:8d:0b:b1:6e:2e:1f:16: ae:d0:7d:b7:6d:7c:22:8e:49:58:df:3f:08:70:ae: d5:0d:95:d2:86:dc:8c:4b:7a:58:ea:05:11:b5:e6: 82:30:e0:aa:44:85:6f:c9:ba:2e:2f:5a:2a:d8:85: 61:01:f8:6b:b1:46:c3:85:19:a2:83:46:13:6c:f1: ef:fb:e7:9f:0f:b9:da:76:cb:d1:eb:4f:8f:0f:a1: c0:c4:ab:40:25:52:cf:f2:5b:ba:5d:27:12:6f:5e: ed:c0:bd:3a:89:ae:8e:99:22:ca:e7:75:5a:e8:c3: c1:56:a5:4f:75:31:a8:b4:29:e8:eb:5d:25:44:6c: 1b:f1:59:34:19:3b:05:88:12:c1:4b:f1:f4:25:16: 4c:5a:0f:76:b7:39:07:9b:4b:4b:8c:ce:8b:cd:40: 2d:a1:d6:33:58:80:a4:87:eb:57:f1:d4:16:02:0e: 12:db:69:cd:45:81:51:d0:e5:5e:89:4b:64:19:65: 30:79:f4:97:de:19:f9:21:85:eb:e6:a1:c4:28:76: 32:a4:62:0e:b5:ba:39:e8:f5:25:18:23:8a:63:e7: cc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:47:51:AD:1E:BA:C5:F4:24:37:33:AD:A9:C7:C9:22:F8:C7:E2:92 X509v3 Authority Key Identifier: keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:cb:c9:d3:0d:fc:7a:13:f8:72:d3:50:f3:05:d9:58:92:d1: 14:2f:30:23:27:b0:8c:c0:19:ce:48:c7:68:c9:6d:4a:4e:90: 26:2c:3e:97:0b:22:95:e3:76:24:45:da:ea:22:90:e8:ba:a4: c2:ec:f6:5f:f0:0a:64:58:63:32:22:81:48:4b:5f:1c:9e:46: dc:18:ac:12:4b:d7:2a:2e:d8:5c:02:ce:a0:d8:3c:fc:e2:ef: f2:f4:62:0d:db:54:dd:a8:7d:69:e6:8c:cf:9c:2b:f3:7a:9d: 17:9d:f0:3f:d5:77:a5:c8:ce:7b:ec:cd:3a:e1:2d:d5:b9:42: cb:55:07:45:df:cb:3e:66:fc:6f:83:d0:bc:00:a4:a5:05:71: 9d:63:63:6f:1f:0d:ab:61:d7:fb:2c:dd:63:3f:9e:9a:59:37: 8b:34:30:e4:29:e5:7d:5f:59:99:7d:e1:a8:cb:d5:fa:80:1f: 78:52:88:36:84:80:29:aa:c0:22:16:54:25:23:19:da:ac:7e: 12:6a:a9:67:0e:a6:53:04:28:a1:5d:e7:6c:a8:f9:52:ee:42: 35:83:9d:10:37:0d:f6:51:6e:06:07:28:cc:b4:87:0b:b2:15: 54:1a:f6:1d:e9:54:c8:24:6e:58:db:e3:f6:fa:25:b2:b8:bc: c9:56:90:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFp9twJHBJMpdEc6pawPhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MjI3ODc1OTlmMTc5OGUyNDVmOTkzZjhjYjgxODJmOTlj ZmQxMDQwHhcNMjUxMjI0MDIwMTAzWhcNMjUxMjI1MDIwMTAzWjAzMTEwLwYDVQQD EyhlMjQ3NTFhZDFlYmFjNWY0MjQzNzMzYWRhOWM3YzkyMmY4YzdlMjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv47rKr56L47O/IcwaXkDOoGQnhFQ Blj+L6o2m6Hr3TPiLWZ+rY0LsW4uHxau0H23bXwijklY3z8IcK7VDZXShtyMS3pY 6gURteaCMOCqRIVvybouL1oq2IVhAfhrsUbDhRmig0YTbPHv++efD7nadsvR60+P D6HAxKtAJVLP8lu6XScSb17twL06ia6OmSLK53Va6MPBVqVPdTGotCno610lRGwb 8Vk0GTsFiBLBS/H0JRZMWg92tzkHm0tLjM6LzUAtodYzWICkh+tX8dQWAg4S22nN RYFR0OVeiUtkGWUwefSX3hn5IYXr5qHEKHYypGIOtbo56PUlGCOKY+fMnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJHUa0eusX0JDczranHySL4x+KSMB8GA1UdIwQY MBaAFLUieHWZ8XmOJF+ZP4y4GC+Zz9EEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFNKNGRabnhlWTRrWDVrX2pMZ1lMNW5QMFFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85YTRjY2UtZmQxMi00NzA3LWJlOTUt MGEyNDZhYjA1OTQ2LzEvdFNKNGRabnhlWTRrWDVrX2pMZ1lMNW5QMFFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85YTRjY2UtZmQxMi00NzA3LWJlOTUtMGEyNDZhYjA1OTQ2 LzEvdFNKNGRabnhlWTRrWDVrX2pMZ1lMNW5QMFFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnsvJ0w38 ehP4ctNQ8wXZWJLRFC8wIyewjMAZzkjHaMltSk6QJiw+lwsileN2JEXa6iKQ6Lqk wuz2X/AKZFhjMiKBSEtfHJ5G3BisEkvXKi7YXALOoNg8/OLv8vRiDdtU3ah9aeaM z5wr83qdF53wP9V3pcjOe+zNOuEt1blCy1UHRd/LPmb8b4PQvACkpQVxnWNjbx8N q2HX+yzdYz+emlk3izQw5CnlfV9ZmX3hqMvV+oAfeFKINoSAKarAIhZUJSMZ2qx+ EmqpZw6mUwQooV3nbKj5Uu5CNYOdEDcN9lFuBgcozLSHC7IVVBr2HelUyCRuWNvj 9volsri8yVaQhg== -----END CERTIFICATE-----Generated at Wed Dec 24 11:31:22 2025 by rpki-client