This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft File: tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft (raw, json) Hash identifier: XWWX9DH047IZRffPoKIzVun3c5SkgGLwC1FGLOU6NlA= Subject key identifier: 2A:95:58:A7:62:91:F8:58:D5:9C:7D:D3:0B:BD:F2:E5:E8:DD:4C:16 Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73 Certificate issuer: /CN=b443b3486de7826fd6b0e2aec026597b6207b373 Certificate serial: 019B20D043EA9AB64567CA94A0DC4EA2586E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft Manifest number: 07DD Signing time: Mon 15 Dec 2025 07:01:18 +0000 Manifest this update: Mon 15 Dec 2025 07:01:18 +0000 Manifest next update: Tue 16 Dec 2025 07:01:18 +0000 Files and hashes: 1: tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl (hash: m6/JP5nJuKCCl2TYCduMOb1LgK9pK1FDzs6V2HkyorM=) 2: wT4e9Ao8jFQGwyLrCGIT4nZjT4c.roa (hash: pBWXcPqjDxvwQjU9omFEQSPm1JUMryg0VPK+ErbtywE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:d0:43:ea:9a:b6:45:67:ca:94:a0:dc:4e:a2:58:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373 Validity Not Before: Dec 15 07:01:18 2025 GMT Not After : Dec 16 07:01:18 2025 GMT Subject: CN=2a9558a76291f858d59c7dd30bbdf2e5e8dd4c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0a:af:18:e2:df:98:fd:5e:21:3f:3f:9b:34: 9c:c2:f5:3b:7f:b9:7f:79:40:1f:4a:82:7d:9d:57: 1a:83:8d:04:fd:14:74:65:3f:ec:9c:98:0d:dd:6e: dc:f1:ea:f0:a6:5c:6a:e7:98:cc:40:82:fb:09:77: 39:81:fb:91:3e:a4:e7:e3:b3:70:a4:75:49:70:f4: 05:f5:78:5e:b5:a1:82:9d:ff:54:3f:e2:10:8a:74: 89:3c:3f:05:8c:e1:63:3b:b2:c6:d5:f6:d4:63:b3: df:71:79:6b:27:40:06:ad:d8:7a:30:71:b3:d4:e8: 59:41:ab:4f:60:16:a9:11:5c:e1:ec:11:6e:81:c3: 01:98:f1:7c:21:46:db:c7:aa:38:ec:66:54:39:64: 35:aa:50:4a:36:17:fc:e9:1b:5e:81:bb:fa:3f:6a: da:6f:c2:ee:16:a0:fc:39:5f:57:ea:60:8f:9b:cc: 20:64:74:ca:34:09:21:2a:91:6b:43:23:87:02:ca: 08:3c:f7:4a:b6:f8:30:d6:7e:e6:34:7f:99:38:75: 8c:45:cc:92:69:4e:69:98:bd:f4:48:9f:58:51:f9: 16:3f:ea:72:ef:ad:4e:d4:ef:88:c1:0b:40:b6:3e: 4d:65:05:e1:c1:f9:ff:4c:25:09:db:da:f3:21:a8: c2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:95:58:A7:62:91:F8:58:D5:9C:7D:D3:0B:BD:F2:E5:E8:DD:4C:16 X509v3 Authority Key Identifier: keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:b8:b2:7f:17:84:b1:ac:f5:f9:92:5e:78:f5:95:da:28:07: ac:b0:f2:be:8a:12:a2:a9:7b:0a:b2:a0:5e:32:28:fc:e8:04: 82:ff:00:d9:0b:b8:63:ae:19:02:eb:c7:f3:cd:2e:25:ed:5a: 2e:bd:4e:d6:b5:4a:7d:9f:96:34:7d:5a:03:3e:f2:eb:de:60: 56:0a:66:a0:0e:8d:e6:d2:e2:69:6d:46:98:81:b9:52:66:c3: 08:c7:bf:7d:5e:03:fa:34:b4:f9:08:53:5d:59:ac:57:f1:f2: 10:17:7f:15:e8:35:10:5d:8b:59:78:38:5f:1f:eb:fb:19:85: bd:e6:1a:3a:8c:0f:26:b1:13:60:52:c4:1a:bd:86:e3:65:53: a1:e1:33:ca:36:b6:29:9d:4f:bd:7c:6e:37:ae:9d:74:dd:8d: 1c:3b:63:cf:60:de:6c:ad:08:6f:0c:8b:1f:3f:12:26:8b:db: 66:82:b8:a2:bd:9a:b5:60:7a:8c:4f:a0:d8:b8:c6:df:c3:23: 27:29:1a:c7:b4:e1:e8:1e:e7:bc:47:66:8f:4e:91:6b:2e:1b: a4:5e:dd:51:36:9b:d2:43:e1:6e:ea:78:64:2a:03:6d:c4:d8: 5d:de:a1:29:6d:93:cf:5e:bc:75:c2:5d:22:45:a2:e6:e0:1e: 71:b2:00:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsg0EPqmrZFZ8qUoNxOolhuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NDNiMzQ4NmRlNzgyNmZkNmIwZTJhZWMwMjY1OTdiNjIw N2IzNzMwHhcNMjUxMjE1MDcwMTE4WhcNMjUxMjE2MDcwMTE4WjAzMTEwLwYDVQQD EygyYTk1NThhNzYyOTFmODU4ZDU5YzdkZDMwYmJkZjJlNWU4ZGQ0YzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAqvGOLfmP1eIT8/mzScwvU7f7l/ eUAfSoJ9nVcag40E/RR0ZT/snJgN3W7c8erwplxq55jMQIL7CXc5gfuRPqTn47Nw pHVJcPQF9XhetaGCnf9UP+IQinSJPD8FjOFjO7LG1fbUY7PfcXlrJ0AGrdh6MHGz 1OhZQatPYBapEVzh7BFugcMBmPF8IUbbx6o47GZUOWQ1qlBKNhf86Rtegbv6P2ra b8LuFqD8OV9X6mCPm8wgZHTKNAkhKpFrQyOHAsoIPPdKtvgw1n7mNH+ZOHWMRcyS aU5pmL30SJ9YUfkWP+py761O1O+IwQtAtj5NZQXhwfn/TCUJ29rzIajCYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqVWKdikfhY1Zx90wu98uXo3UwWMB8GA1UdIwQY MBaAFLRDs0ht54Jv1rDirsAmWXtiB7NzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83NDI3MWMtNjlhNy00YTg2LTk2NmQt MmExNDUxZTdlM2MxLzEvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83NDI3MWMtNjlhNy00YTg2LTk2NmQtMmExNDUxZTdlM2Mx LzEvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7iyfxeE saz1+ZJeePWV2igHrLDyvooSoql7CrKgXjIo/OgEgv8A2Qu4Y64ZAuvH880uJe1a Lr1O1rVKfZ+WNH1aAz7y695gVgpmoA6N5tLiaW1GmIG5UmbDCMe/fV4D+jS0+QhT XVmsV/HyEBd/Feg1EF2LWXg4Xx/r+xmFveYaOowPJrETYFLEGr2G42VToeEzyja2 KZ1PvXxuN66ddN2NHDtjz2DebK0IbwyLHz8SJovbZoK4or2atWB6jE+g2LjG38Mj Jykax7Th6B7nvEdmj06Ray4bpF7dUTab0kPhbup4ZCoDbcTYXd6hKW2Tz168dcJd IkWi5uAecbIAbg== -----END CERTIFICATE-----Generated at Mon Dec 15 13:21:08 2025 by rpki-client