This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft File: tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json) Hash identifier: Dgx0QO6//BMqAyrlH5dss0GLZ9qQpbx4N5+i83kfXps= Subject key identifier: 21:1E:E2:C8:78:13:F8:40:3D:CC:8F:11:21:EE:0F:7C:99:64:BC:C9 Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b Certificate serial: 019B3532C7C3D38778433EF54129C6953772 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft Manifest number: 1395 Signing time: Fri 19 Dec 2025 06:01:18 +0000 Manifest this update: Fri 19 Dec 2025 06:01:18 +0000 Manifest next update: Sat 20 Dec 2025 06:01:18 +0000 Files and hashes: 1: iONsIN03z4IKNXYg6US72IxJBcU.roa (hash: X7Mx72vOONyXDgxRP6UfNMJzZuu3rnCgwN1U1ZoR2/s=) 2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: hqpygKxIJ1+3zzgLqBRHp0LIUTdEHCZ9X48WZD1Srlo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:c7:c3:d3:87:78:43:3e:f5:41:29:c6:95:37:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b60aac104376b79dd6829091947b779c989af68b Validity Not Before: Dec 19 06:01:18 2025 GMT Not After : Dec 20 06:01:18 2025 GMT Subject: CN=211ee2c87813f8403dcc8f1121ee0f7c9964bcc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b0:d9:55:15:6c:68:48:70:51:5e:a9:45:57: 67:08:fa:9b:ea:b2:f5:62:75:85:77:7c:89:f2:6a: ce:9c:be:4d:64:3b:2d:7a:5f:8d:4b:10:42:20:e6: 8e:29:89:95:e1:01:fe:43:5a:d4:26:ca:a8:4d:7e: 2b:8e:ca:ec:e0:44:12:0f:18:e9:d4:36:12:a3:50: b4:94:29:01:de:ef:ce:e5:1a:14:ae:3c:ea:9c:52: f3:15:d3:ca:1d:94:f6:fa:5c:d2:02:94:e0:98:eb: ca:d1:c7:f8:41:8b:ab:ad:ea:97:2d:1f:54:26:97: d4:9f:85:37:9d:ad:c6:5a:5d:85:1f:3f:1f:45:98: 60:d7:e9:4f:a6:7f:d8:84:77:e0:e4:b5:0b:af:7a: 3e:23:5c:6f:f8:08:03:b8:fa:5a:fc:ea:04:f0:7d: 2c:32:c5:dd:a1:b7:02:85:07:09:e9:d0:b9:a6:af: 40:55:2a:3e:05:bc:c0:b7:02:f7:21:18:fa:67:2a: 2f:61:1e:ee:5e:8e:e2:19:1b:35:d9:06:0c:68:7f: d5:10:3f:d2:27:4c:d7:59:56:e6:e0:af:12:64:7f: 8e:41:d1:52:2f:bd:ee:0f:bc:c1:94:e1:dc:0c:64: 22:3e:22:ea:7f:da:ce:7e:8f:55:df:98:eb:3c:2f: dc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1E:E2:C8:78:13:F8:40:3D:CC:8F:11:21:EE:0F:7C:99:64:BC:C9 X509v3 Authority Key Identifier: keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:ea:d1:d7:78:a3:5d:03:5a:bc:6d:8f:6e:c4:0f:0f:eb:8c: 55:a9:f4:20:7b:03:93:02:90:5d:1b:9c:5d:cd:13:88:0d:e5: 99:4c:ca:20:e7:6d:31:ac:7d:e2:59:08:6f:72:e7:2a:a9:1e: 8f:8a:46:7c:3e:ae:5f:5c:34:13:4d:3d:5e:f0:91:77:eb:bf: fe:ea:02:c1:29:aa:7f:72:45:dc:83:28:87:7c:dc:09:49:7f: f9:14:46:0e:68:0a:7e:cc:ab:b1:85:54:15:0c:0a:a3:74:09: 6c:91:7b:a7:db:48:ac:19:df:54:c1:24:07:f4:14:54:da:e0: b5:b7:05:da:6d:09:01:fb:8f:2e:fe:e3:1f:13:61:9d:f6:e6: 7d:4f:1c:c6:77:2f:b7:f6:25:61:24:c9:d6:f1:4a:f5:d7:26: 57:38:96:84:c0:b2:8d:6d:75:ae:dc:2f:e2:cc:63:62:1c:0e: 77:e4:8a:26:75:24:5c:13:69:9b:d7:5f:19:3b:6d:7b:7c:52: 2f:01:1b:41:8b:ec:80:44:2e:c4:54:c5:20:c4:e3:58:98:01: af:4c:a5:57:4a:b1:e8:17:c0:72:c5:ec:42:f5:e2:95:bf:b9: 38:36:72:38:92:6f:2f:1c:ad:9f:2a:5e:e3:8a:32:5a:89:fb: 99:71:13:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MsfD04d4Qz71QSnGlTdyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MGFhYzEwNDM3NmI3OWRkNjgyOTA5MTk0N2I3NzljOTg5 YWY2OGIwHhcNMjUxMjE5MDYwMTE4WhcNMjUxMjIwMDYwMTE4WjAzMTEwLwYDVQQD EygyMTFlZTJjODc4MTNmODQwM2RjYzhmMTEyMWVlMGY3Yzk5NjRiY2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLDZVRVsaEhwUV6pRVdnCPqb6rL1 YnWFd3yJ8mrOnL5NZDstel+NSxBCIOaOKYmV4QH+Q1rUJsqoTX4rjsrs4EQSDxjp 1DYSo1C0lCkB3u/O5RoUrjzqnFLzFdPKHZT2+lzSApTgmOvK0cf4QYurreqXLR9U JpfUn4U3na3GWl2FHz8fRZhg1+lPpn/YhHfg5LULr3o+I1xv+AgDuPpa/OoE8H0s MsXdobcChQcJ6dC5pq9AVSo+BbzAtwL3IRj6ZyovYR7uXo7iGRs12QYMaH/VED/S J0zXWVbm4K8SZH+OQdFSL73uD7zBlOHcDGQiPiLqf9rOfo9V35jrPC/c+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEe4sh4E/hAPcyPESHuD3yZZLzJMB8GA1UdIwQY MBaAFLYKrBBDdred1oKQkZR7d5yYmvaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWJiOWEtOWEwNy00ODY3LTk3MGIt MmIxZGE2MjRmN2JjLzEvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9lYWJiOWEtOWEwNy00ODY3LTk3MGItMmIxZGE2MjRmN2Jj LzEvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOrR13ij XQNavG2PbsQPD+uMVan0IHsDkwKQXRucXc0TiA3lmUzKIOdtMax94lkIb3LnKqke j4pGfD6uX1w0E009XvCRd+u//uoCwSmqf3JF3IMoh3zcCUl/+RRGDmgKfsyrsYVU FQwKo3QJbJF7p9tIrBnfVMEkB/QUVNrgtbcF2m0JAfuPLv7jHxNhnfbmfU8cxncv t/YlYSTJ1vFK9dcmVziWhMCyjW11rtwv4sxjYhwOd+SKJnUkXBNpm9dfGTtte3xS LwEbQYvsgEQuxFTFIMTjWJgBr0ylV0qx6BfAcsXsQvXilb+5ODZyOJJvLxytnype 44oyWon7mXET9Q== -----END CERTIFICATE-----Generated at Fri Dec 19 16:13:39 2025 by rpki-client