This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft File: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft (raw, json) Hash identifier: /P8YpvnjP74KfEZ/4VqX/z5g+zwrUgnC0r9lgCTWtT0= Subject key identifier: 63:32:65:ED:80:38:EC:8F:E2:2F:E4:7A:44:9A:E3:F0:5A:8E:92:44 Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04 Certificate issuer: /CN=b522787599f1798e245f993f8cb8182f99cfd104 Certificate serial: 019B55D00999E69B8FE0C48970F9F931CE54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft Manifest number: 0F12 Signing time: Thu 25 Dec 2025 14:00:55 +0000 Manifest this update: Thu 25 Dec 2025 14:00:55 +0000 Manifest next update: Fri 26 Dec 2025 14:00:55 +0000 Files and hashes: 1: 2o-thtsUmdvMYHtv9qjNUTl4ar8.roa (hash: lFf88qPAFyfJ0i5OxU8GOvf0pF7V0Wi7poD5MDkBh2U=) 2: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl (hash: EbyPeHkAwRLDTnyQHCzk3B0+Au47BLnzQXkD7/3e+XQ=) 3: xzr06xbQWPKGyePi4W8ezv0xyXU.roa (hash: r6Ttugun2Irp6PGhhAikFJmsuU2fRdTtE284A/50Ue4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:d0:09:99:e6:9b:8f:e0:c4:89:70:f9:f9:31:ce:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104 Validity Not Before: Dec 25 14:00:55 2025 GMT Not After : Dec 26 14:00:55 2025 GMT Subject: CN=633265ed8038ec8fe22fe47a449ae3f05a8e9244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bf:de:71:55:9f:d6:6a:0e:44:fb:12:dc:fe: 9a:12:51:36:3c:0e:7c:de:7a:bc:45:86:f0:db:46: 81:03:b7:4d:65:39:de:11:44:70:e1:36:7a:e3:d2: 9b:f7:15:24:c8:3c:c1:bb:7e:11:24:df:7a:0d:3d: cd:06:13:21:ae:a1:29:71:c3:54:99:18:c3:7e:f1: 42:ad:26:83:c1:83:81:7f:75:c4:4c:1c:8e:7f:ad: 75:60:de:d4:98:4a:99:d7:74:ce:e0:da:63:ac:22: 2e:ae:54:f4:e4:b5:89:83:9b:75:eb:4f:c9:f7:28: 52:12:db:5e:0d:82:32:1e:38:07:74:2e:4b:82:b1: 6a:a8:49:fb:1f:f1:dc:cd:4c:4b:e7:fc:ba:18:1f: 63:ca:bb:9d:2a:e0:75:a1:87:56:ac:8e:41:b7:aa: f9:9c:65:a6:18:16:bb:15:de:49:b0:d8:8b:8f:ff: 2c:79:d2:0e:3d:27:cb:c7:fb:fa:5f:78:56:38:7d: 7b:6e:6e:62:01:10:3a:d3:cc:1a:4b:39:2d:9d:e9: 5c:f5:87:4c:d7:71:68:0f:33:85:a2:69:25:5e:07: 2f:87:f0:06:82:a6:34:89:50:e0:28:f3:ef:b0:c1: f0:e6:43:9f:d6:88:f0:69:99:d8:8d:10:a6:01:1e: 7d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:32:65:ED:80:38:EC:8F:E2:2F:E4:7A:44:9A:E3:F0:5A:8E:92:44 X509v3 Authority Key Identifier: keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:04:40:66:ec:77:04:1f:5a:e3:9f:e9:c0:47:41:77:1b:24: b9:0a:09:c8:3b:f7:11:88:98:a2:cd:96:a0:d2:9e:c4:7a:16: cd:b7:a8:b1:33:ce:48:a0:9b:c0:dc:74:06:f0:e9:70:bf:1a: 3c:ec:80:d9:5d:b3:17:de:9f:61:67:30:cb:13:86:c5:1f:fb: c6:11:3b:62:88:57:aa:0a:71:73:29:b4:7c:79:68:89:28:99: 5a:d7:89:ef:93:cd:bc:24:dc:e9:12:28:1f:03:07:cf:e3:14: 97:60:76:f3:7f:62:a0:dc:99:15:15:12:73:9f:e4:c0:10:16: 97:f1:95:c6:95:f6:e6:0a:66:f3:8a:3f:47:ee:6a:e7:3e:a7: 69:38:83:a1:9d:f0:ab:07:4f:6a:04:79:45:02:32:ec:ec:8c: b1:7d:32:46:fa:d4:98:8e:d7:fd:5a:55:2a:08:e8:08:3e:36: 66:f9:cd:f2:3b:9a:21:5a:fa:ad:ff:83:70:fe:c8:af:4c:6a: 7d:11:55:14:fb:b7:b5:1c:55:77:ff:19:a7:aa:b0:ba:a0:22: 9c:83:f3:51:9b:fe:96:55:b7:32:00:df:b6:04:53:bc:d4:be: 88:92:e6:72:3b:e3:9e:6d:72:72:f2:13:dc:9a:f3:3b:a1:d7: 03:2e:dd:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtV0AmZ5puP4MSJcPn5Mc5UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MjI3ODc1OTlmMTc5OGUyNDVmOTkzZjhjYjgxODJmOTlj ZmQxMDQwHhcNMjUxMjI1MTQwMDU1WhcNMjUxMjI2MTQwMDU1WjAzMTEwLwYDVQQD Eyg2MzMyNjVlZDgwMzhlYzhmZTIyZmU0N2E0NDlhZTNmMDVhOGU5MjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7/ecVWf1moORPsS3P6aElE2PA58 3nq8RYbw20aBA7dNZTneEURw4TZ649Kb9xUkyDzBu34RJN96DT3NBhMhrqEpccNU mRjDfvFCrSaDwYOBf3XETByOf611YN7UmEqZ13TO4NpjrCIurlT05LWJg5t160/J 9yhSEtteDYIyHjgHdC5LgrFqqEn7H/HczUxL5/y6GB9jyrudKuB1oYdWrI5Bt6r5 nGWmGBa7Fd5JsNiLj/8sedIOPSfLx/v6X3hWOH17bm5iARA608waSzktnelc9YdM 13FoDzOFomklXgcvh/AGgqY0iVDgKPPvsMHw5kOf1ojwaZnYjRCmAR59lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMyZe2AOOyP4i/kekSa4/BajpJEMB8GA1UdIwQY MBaAFLUieHWZ8XmOJF+ZP4y4GC+Zz9EEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFNKNGRabnhlWTRrWDVrX2pMZ1lMNW5QMFFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85YTRjY2UtZmQxMi00NzA3LWJlOTUt MGEyNDZhYjA1OTQ2LzEvdFNKNGRabnhlWTRrWDVrX2pMZ1lMNW5QMFFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85YTRjY2UtZmQxMi00NzA3LWJlOTUtMGEyNDZhYjA1OTQ2 LzEvdFNKNGRabnhlWTRrWDVrX2pMZ1lMNW5QMFFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARARAZux3 BB9a45/pwEdBdxskuQoJyDv3EYiYos2WoNKexHoWzbeosTPOSKCbwNx0BvDpcL8a POyA2V2zF96fYWcwyxOGxR/7xhE7YohXqgpxcym0fHloiSiZWteJ75PNvCTc6RIo HwMHz+MUl2B2839ioNyZFRUSc5/kwBAWl/GVxpX25gpm84o/R+5q5z6naTiDoZ3w qwdPagR5RQIy7OyMsX0yRvrUmI7X/VpVKgjoCD42ZvnN8juaIVr6rf+DcP7Ir0xq fRFVFPu3tRxVd/8Zp6qwuqAinIPzUZv+llW3MgDftgRTvNS+iJLmcjvjnm1ycvIT 3JrzO6HXAy7dFg== -----END CERTIFICATE-----Generated at Thu Dec 25 22:15:46 2025 by rpki-client