This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft File: tF5iJw0g-UZ6avx4lj28-4D79So.mft (raw, json) Hash identifier: uipKIwaSLllz3BtROBLAQgvjUwcuQhzd/7keKACkHLk= Subject key identifier: 48:C3:D9:F6:33:E6:4D:84:19:55:6A:F5:1C:BF:CC:B6:E9:C9:63:C3 Authority key identifier: B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A Certificate issuer: /CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a Certificate serial: 019B34C436F7B8B9F689E48D52B8FD816CDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft Manifest number: 0F03 Signing time: Fri 19 Dec 2025 04:00:32 +0000 Manifest this update: Fri 19 Dec 2025 04:00:32 +0000 Manifest next update: Sat 20 Dec 2025 04:00:32 +0000 Files and hashes: 1: tF5iJw0g-UZ6avx4lj28-4D79So.crl (hash: ZeDCjErLrHMmd1ylwQZKcmuQ307doh+0sz1vnAv/DtU=) 2: uvCFX9itk7RPxPZl6lvvghFjg1E.roa (hash: P3N8o135VPbcqFaS3kCnXkMSVi3GCBY96T9QuQyMyig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:36:f7:b8:b9:f6:89:e4:8d:52:b8:fd:81:6c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a Validity Not Before: Dec 19 04:00:32 2025 GMT Not After : Dec 20 04:00:32 2025 GMT Subject: CN=48c3d9f633e64d8419556af51cbfccb6e9c963c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7f:a8:56:03:a8:9b:66:8b:67:a3:b7:3f:01: 14:80:02:48:be:07:15:6b:5f:c1:8d:91:e0:dc:59: d2:81:ba:cb:13:db:0f:66:1a:9b:25:53:6f:7d:08: 33:82:9b:cc:27:4d:8f:6a:22:64:b9:e1:4a:b0:8e: 12:3b:58:26:29:11:50:30:32:2b:87:b1:2a:9b:d0: 7a:2f:6f:f1:83:85:7a:ef:3d:0d:ed:5b:3f:1d:9f: 7e:1a:6d:7b:f2:da:4b:17:0c:b1:79:b2:2b:43:41: 86:6c:30:e2:0a:9e:42:5c:51:18:98:e7:5e:8e:08: 2c:59:6a:41:87:6a:09:c3:21:05:78:1d:48:c4:eb: b9:31:35:0d:68:9e:6d:67:9e:7c:fc:2d:d3:b7:bb: cf:35:6b:4b:50:76:00:85:d0:66:f6:f2:14:76:42: 35:36:4a:dd:da:e3:d5:61:05:7b:57:c4:f5:6b:0e: 0a:79:a9:0b:71:6b:c2:d4:b3:1f:30:ef:22:27:b1: c3:b8:ea:b4:0b:d0:ca:29:d8:54:d7:14:b0:f0:52: e5:81:9f:df:a7:6d:9f:1e:14:c3:39:86:5c:99:f5: 15:4a:ab:73:ed:9b:0c:53:ee:01:8b:39:9e:c8:7d: 19:38:11:f0:18:3c:75:2d:9a:5b:1e:54:de:1e:ee: d7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C3:D9:F6:33:E6:4D:84:19:55:6A:F5:1C:BF:CC:B6:E9:C9:63:C3 X509v3 Authority Key Identifier: keyid:B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:ff:6c:04:f9:98:f9:6e:f9:f4:3c:72:65:11:8f:57:26:a8: 03:c4:02:6d:21:ef:fc:45:64:30:fa:b0:ef:20:ab:27:c4:17: 4c:e3:87:64:94:68:34:cb:ce:0b:3c:23:27:14:a2:45:9a:4b: e1:ce:90:33:5d:0e:ed:27:0f:e3:a8:cd:7b:e3:bc:17:a0:db: 04:f8:f5:98:af:df:d9:2a:ed:f0:f0:c2:69:36:8c:bf:de:b7: 54:b7:d5:b4:b0:8e:46:55:e8:51:a9:1a:9f:89:a1:9c:a9:6b: 20:5a:3d:05:ae:af:3c:33:12:10:8b:5d:60:b7:7d:ce:d2:03: 5f:28:df:4d:3a:52:61:f6:d4:e2:8f:58:99:58:2c:30:77:2e: e7:4f:5c:04:fb:13:59:1c:a6:cd:c3:1c:32:ed:35:c0:57:87: 29:ef:e0:7d:2c:75:40:fc:ce:82:3c:a3:16:c9:51:40:39:8f: ee:c2:54:f4:04:f8:7c:c0:0b:92:af:2d:16:ba:f9:ce:9b:0e: 0f:f2:0f:51:d5:41:79:e0:0c:ae:6b:cf:59:93:17:87:03:54: 6c:e5:07:03:56:93:fb:1a:d0:34:e2:5d:2f:78:9f:a3:89:15: 29:eb:0c:57:6f:e5:49:cb:5f:e2:41:96:54:ab:05:71:e3:e8: 93:fa:66:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xDb3uLn2ieSNUrj9gWzaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NWU2MjI3MGQyMGY5NDY3YTZhZmM3ODk2M2RiY2ZiODBm YmY1MmEwHhcNMjUxMjE5MDQwMDMyWhcNMjUxMjIwMDQwMDMyWjAzMTEwLwYDVQQD Eyg0OGMzZDlmNjMzZTY0ZDg0MTk1NTZhZjUxY2JmY2NiNmU5Yzk2M2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3+oVgOom2aLZ6O3PwEUgAJIvgcV a1/BjZHg3FnSgbrLE9sPZhqbJVNvfQgzgpvMJ02PaiJkueFKsI4SO1gmKRFQMDIr h7Eqm9B6L2/xg4V67z0N7Vs/HZ9+Gm178tpLFwyxebIrQ0GGbDDiCp5CXFEYmOde jggsWWpBh2oJwyEFeB1IxOu5MTUNaJ5tZ558/C3Tt7vPNWtLUHYAhdBm9vIUdkI1 Nkrd2uPVYQV7V8T1aw4KeakLcWvC1LMfMO8iJ7HDuOq0C9DKKdhU1xSw8FLlgZ/f p22fHhTDOYZcmfUVSqtz7ZsMU+4BizmeyH0ZOBHwGDx1LZpbHlTeHu7XKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjD2fYz5k2EGVVq9Ry/zLbpyWPDMB8GA1UdIwQY MBaAFLReYicNIPlGemr8eJY9vPuA+/UqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEY1aUp3MGctVVo2YXZ4NGxqMjgtNEQ3OVNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9lY2I0NWUtMmRiNi00YjU0LWJjOTEt MDU5NjI5NmYxMmRlLzEvdEY1aUp3MGctVVo2YXZ4NGxqMjgtNEQ3OVNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9lY2I0NWUtMmRiNi00YjU0LWJjOTEtMDU5NjI5NmYxMmRl LzEvdEY1aUp3MGctVVo2YXZ4NGxqMjgtNEQ3OVNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuf9sBPmY +W759DxyZRGPVyaoA8QCbSHv/EVkMPqw7yCrJ8QXTOOHZJRoNMvOCzwjJxSiRZpL 4c6QM10O7ScP46jNe+O8F6DbBPj1mK/f2Srt8PDCaTaMv963VLfVtLCORlXoUaka n4mhnKlrIFo9Ba6vPDMSEItdYLd9ztIDXyjfTTpSYfbU4o9YmVgsMHcu509cBPsT WRymzcMcMu01wFeHKe/gfSx1QPzOgjyjFslRQDmP7sJU9AT4fMALkq8tFrr5zpsO D/IPUdVBeeAMrmvPWZMXhwNUbOUHA1aT+xrQNOJdL3ifo4kVKesMV2/lSctf4kGW VKsFcePok/pm9A== -----END CERTIFICATE-----Generated at Fri Dec 19 06:44:58 2025 by rpki-client