This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json) Hash identifier: yadijKmHeu47bDGCpv8gjxumU+AMsWykBEiSq0+LjJU= Subject key identifier: C8:57:9C:9F:8E:88:C1:FB:EE:DC:2D:D5:A1:DB:AE:24:B9:7A:82:31 Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0 Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0 Certificate serial: 019B58D18EB9393033DA8006E17F5017976C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft Manifest number: 1207 Signing time: Fri 26 Dec 2025 04:01:27 +0000 Manifest this update: Fri 26 Dec 2025 04:01:27 +0000 Manifest next update: Sat 27 Dec 2025 04:01:27 +0000 Files and hashes: 1: 7oTB9A6lOtEjQEsvoA-hCkKE_kU.roa (hash: CgqHCnrNWT0vsnk0wl9rl++PdFLv2TYzmWCCrA7fBCY=) 2: MfO1xzaCGvzf-Tdk8sWipKC3t-8.roa (hash: TSPXY1leU0O4gZ6iWESlm1g1sCeRvbsOHxtBl16fH1g=) 3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: SY3HhxlrzbNnUObiJPwk6uB8cv1ke4+oUhVju2IUa9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:8e:b9:39:30:33:da:80:06:e1:7f:50:17:97:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0 Validity Not Before: Dec 26 04:01:27 2025 GMT Not After : Dec 27 04:01:27 2025 GMT Subject: CN=c8579c9f8e88c1fbeedc2dd5a1dbae24b97a8231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:67:ed:8e:c9:d8:4a:fd:ae:90:13:5b:e3: 00:c7:04:85:24:e9:21:be:a2:0d:64:56:7f:c9:b6: ea:b3:13:17:8e:29:36:ba:be:24:d9:7e:7c:10:c2: 65:63:f2:46:2a:bf:d6:36:0b:e6:8b:6c:e7:52:1e: 76:80:6f:d1:99:a4:a8:a9:ef:88:9f:54:98:2f:9b: 5a:73:ea:18:2a:b5:b8:30:11:02:99:9d:49:bc:7f: c3:42:3f:e1:c4:75:c2:79:07:a4:8f:f0:cb:fb:d5: 83:1b:74:5a:cb:89:1f:f7:9c:38:ac:7b:47:88:8b: 69:bc:cb:bb:bf:ab:06:53:10:88:dd:a3:9e:53:9f: 7c:ff:57:68:97:a1:bf:2f:84:71:84:0e:ba:93:94: a1:59:29:e0:44:fa:da:a5:d1:ce:cb:94:0a:61:af: 40:c1:00:88:8f:49:18:cf:20:d6:18:19:60:b2:52: d1:d0:de:21:33:14:51:7e:a7:99:4e:c9:a3:48:75: 36:fb:53:60:2d:0d:8b:95:cf:53:23:22:b5:a0:e6: bd:1e:c0:f2:d3:ac:d1:f9:86:6e:a4:6c:c5:8c:6d: 20:df:9e:5e:27:49:b9:5e:e0:97:7b:8d:51:8d:4c: 58:53:1c:9f:16:1a:85:3c:32:80:fb:9d:57:42:3c: 1d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:57:9C:9F:8E:88:C1:FB:EE:DC:2D:D5:A1:DB:AE:24:B9:7A:82:31 X509v3 Authority Key Identifier: keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a1:b6:64:1f:88:8f:a0:0e:19:f9:3f:c3:39:55:83:fd:a7: 04:58:8c:87:82:6a:35:f3:90:2c:84:87:f8:a7:21:af:b0:2c: 84:e8:98:fc:f7:07:7c:fa:6e:1f:00:57:ee:6d:7e:b4:b9:6f: 5e:8e:ca:45:cf:02:87:c3:b5:74:70:41:fa:ea:9e:ec:97:52: f6:61:09:1e:6c:32:bf:72:cd:70:75:a7:94:84:78:84:1c:62: 4d:36:e7:5d:1b:35:26:59:59:85:ec:28:fb:69:7b:7b:42:a5: 57:8d:5a:5f:50:1d:97:47:24:14:79:e7:37:90:9b:95:26:7e: 71:3b:81:f1:3a:1c:50:0e:f9:9c:fb:bf:b1:2e:fa:e6:50:1d: 1a:d1:59:6a:5d:f7:67:95:38:25:73:71:69:5b:97:db:74:d0: df:18:15:2a:4f:b5:99:f8:9f:23:a7:ad:cf:62:13:8d:fd:c6: 4b:c0:de:5c:71:c8:45:d2:74:9b:2f:86:ff:97:74:43:0d:f3: 16:7a:ef:ae:bf:35:4b:3f:ac:93:5d:a0:10:de:df:fe:1a:eb: f3:f7:c5:f9:92:0f:43:24:2c:9f:8a:0a:f5:d6:41:05:17:1b: 87:d9:f0:f4:8a:76:6c:27:9e:06:1d:12:c3:8d:36:37:79:8f: f2:97:16:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0Y65OTAz2oAG4X9QF5dsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MjBhMjA0ZjRlMDljYzgzYTYyNThkN2FhNDRmN2QyZjBm YTQ0YTAwHhcNMjUxMjI2MDQwMTI3WhcNMjUxMjI3MDQwMTI3WjAzMTEwLwYDVQQD EyhjODU3OWM5ZjhlODhjMWZiZWVkYzJkZDVhMWRiYWUyNGI5N2E4MjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMNn7Y7J2Er9rpATW+MAxwSFJOkh vqINZFZ/ybbqsxMXjik2ur4k2X58EMJlY/JGKr/WNgvmi2znUh52gG/RmaSoqe+I n1SYL5tac+oYKrW4MBECmZ1JvH/DQj/hxHXCeQekj/DL+9WDG3Ray4kf95w4rHtH iItpvMu7v6sGUxCI3aOeU598/1dol6G/L4RxhA66k5ShWSngRPrapdHOy5QKYa9A wQCIj0kYzyDWGBlgslLR0N4hMxRRfqeZTsmjSHU2+1NgLQ2Llc9TIyK1oOa9HsDy 06zR+YZupGzFjG0g355eJ0m5XuCXe41RjUxYUxyfFhqFPDKA+51XQjwd2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhXnJ+OiMH77twt1aHbriS5eoIxMB8GA1UdIwQY MBaAFLUgogT04JzIOmJY16pE99Lw+kSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAt YjhiMWU0YjRlY2I5LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAtYjhiMWU0YjRlY2I5 LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6G2ZB+I j6AOGfk/wzlVg/2nBFiMh4JqNfOQLISH+Kchr7AshOiY/PcHfPpuHwBX7m1+tLlv Xo7KRc8Ch8O1dHBB+uqe7JdS9mEJHmwyv3LNcHWnlIR4hBxiTTbnXRs1JllZhewo +2l7e0KlV41aX1Adl0ckFHnnN5CblSZ+cTuB8TocUA75nPu/sS765lAdGtFZal33 Z5U4JXNxaVuX23TQ3xgVKk+1mfifI6etz2ITjf3GS8DeXHHIRdJ0my+G/5d0Qw3z Fnrvrr81Sz+sk12gEN7f/hrr8/fF+ZIPQyQsn4oK9dZBBRcbh9nw9Ip2bCeeBh0S w402N3mP8pcWDg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:56 2025 by rpki-client