This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft File: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft (raw, json) Hash identifier: hXccbDjd0kKh1HREu6/RJE1REDUSdRTl61ECI99G6Uk= Subject key identifier: 87:FF:4D:77:E0:68:C4:B4:8B:7F:23:24:74:32:76:1C:D2:16:D6:69 Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d Certificate serial: 019B0FDC1E3D7E4CC3C37B2A11EACCAC9469 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft Manifest number: 1774 Signing time: Fri 12 Dec 2025 00:00:42 +0000 Manifest this update: Fri 12 Dec 2025 00:00:42 +0000 Manifest next update: Sat 13 Dec 2025 00:00:42 +0000 Files and hashes: 1: AuQnPlvYaXKRlM4K_qYnSQH8XhU.roa (hash: qvJ/L4CGhxXYThfrwcSRz9uge4t0blzZ120bzRELDv8=) 2: F7DtnHMe2aPaEVwgJdRXETJ3B3E.roa (hash: MXWzMDDGEU1JVdMLECcVtcWDfSvCJBYg9H2NNF7s8es=) 3: NT96ZXytZXeLYG8nYXbccb_AzMM.roa (hash: jF7i9U0X2AT56VYqylel02ci97XBnH5+7EoAI42ntOM=) 4: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl (hash: V6ZWyK2su7TrM2BruW359BsEmX39azi40vdbABzdXJE=) 5: dZ8FONS7KKnXtPOWC1aUQDIHQr4.roa (hash: eYi/BgNAuN/BBQLuz4zrndBhjJKwJ84q4OAoqSVG8XI=) 6: kw0uZTx7n5NT55NNgp7YJmoV9Go.roa (hash: 8XlRvDMZFDhRr5qjjN+VGMeejBbNLMwpbYD6/C4LFwY=) 7: mLDvK3-bwZrItlCvgdik3bR3f2M.roa (hash: YyM0oKefpsy5Jzp3sMVhcN2qGFNdHn75iID1HMnlHcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:dc:1e:3d:7e:4c:c3:c3:7b:2a:11:ea:cc:ac:94:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d Validity Not Before: Dec 12 00:00:42 2025 GMT Not After : Dec 13 00:00:42 2025 GMT Subject: CN=87ff4d77e068c4b48b7f23247432761cd216d669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:39:73:96:67:7b:e2:74:71:8b:db:dc:90:ba: dd:b7:a1:73:3d:eb:47:8c:ea:64:49:aa:56:96:6e: 31:5e:e4:aa:a3:74:7f:59:8e:73:ba:31:24:b2:cb: 8f:b9:60:52:e2:ee:f7:60:9a:75:66:5c:08:9a:17: be:4c:24:d5:20:a6:a6:52:27:a3:e6:9a:47:0d:4e: 72:1f:d1:2a:2b:be:90:23:88:e1:5e:e6:a8:48:56: 27:87:ff:ea:2a:5f:d0:13:48:b5:10:55:2d:5b:38: 9b:28:8c:1d:02:bf:bf:34:4e:94:83:50:a4:6d:b8: 93:f7:35:4b:2a:a6:3e:1e:96:a0:b8:5d:e3:62:a9: d0:6f:c1:29:58:f9:60:ae:f0:dc:84:27:82:ca:a7: af:3d:3b:5f:97:6f:1c:55:28:9c:c8:56:48:d2:de: 71:a5:88:cd:2c:4c:45:32:48:b6:b0:14:1e:d5:4b: 94:41:d7:5d:bc:0a:4c:b9:91:d7:1c:38:da:1b:b8: bc:47:ea:40:95:04:39:23:2d:14:e4:4e:bd:9f:64: 4d:70:97:d7:0f:43:55:76:dd:2b:3e:65:ca:5b:d8: 61:81:97:56:e1:c3:a4:f7:78:2b:ff:01:a6:10:70: 26:79:62:d0:f6:65:af:26:1b:0f:02:a7:e2:eb:0b: f7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FF:4D:77:E0:68:C4:B4:8B:7F:23:24:74:32:76:1C:D2:16:D6:69 X509v3 Authority Key Identifier: keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:85:bf:b9:94:ef:cb:53:77:5d:bf:d9:0b:0c:12:e5:20:f8: 30:ee:b7:95:60:dd:af:05:2e:02:2e:aa:d9:72:ef:aa:2d:b5: ef:fa:d7:5d:5e:d2:b0:b7:46:e1:73:73:e7:1b:8a:77:d3:dd: 13:5d:99:e0:37:fb:ff:f1:56:a6:f7:83:ef:fc:42:67:e2:b8: 3e:a9:08:0c:29:22:2c:b8:2d:98:29:ed:1a:fb:47:83:19:14: e0:a0:83:b9:fb:51:f0:03:ee:d9:e0:18:e4:e1:c1:8c:39:c8: bd:66:3b:d3:5b:f3:88:44:7c:f1:29:6f:0e:29:09:96:7b:c8: e4:a2:7f:60:d5:0c:8b:aa:7a:b4:ec:86:9f:86:b6:f8:9c:a8: ed:2f:71:44:80:71:b8:81:44:44:6c:22:4c:2c:53:74:1d:e7: 83:40:5a:5f:00:a0:d6:85:da:7f:f1:45:38:0e:f7:9a:e4:61: 79:d7:15:29:26:b7:7d:ca:68:f1:1e:dc:44:71:60:f7:e7:f3: 12:bf:8b:f7:ef:14:fd:ad:18:c9:c2:71:3a:5f:13:53:5b:0d: 61:a2:72:b6:0d:45:5c:82:85:d8:14:5a:80:92:58:fb:e5:cb: d8:67:eb:5c:f2:a6:8d:59:73:00:20:67:4e:d8:b4:3f:5d:f8: b1:18:18:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsP3B49fkzDw3sqEerMrJRpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlY2ExMDVjZTRhZjZjMjFjZDQyOWU5OTJkMDZlYTdkMDZk OGE1NmQwHhcNMjUxMjEyMDAwMDQyWhcNMjUxMjEzMDAwMDQyWjAzMTEwLwYDVQQD Eyg4N2ZmNGQ3N2UwNjhjNGI0OGI3ZjIzMjQ3NDMyNzYxY2QyMTZkNjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjlzlmd74nRxi9vckLrdt6FzPetH jOpkSapWlm4xXuSqo3R/WY5zujEkssuPuWBS4u73YJp1ZlwImhe+TCTVIKamUiej 5ppHDU5yH9EqK76QI4jhXuaoSFYnh//qKl/QE0i1EFUtWzibKIwdAr+/NE6Ug1Ck bbiT9zVLKqY+HpaguF3jYqnQb8EpWPlgrvDchCeCyqevPTtfl28cVSicyFZI0t5x pYjNLExFMki2sBQe1UuUQdddvApMuZHXHDjaG7i8R+pAlQQ5Iy0U5E69n2RNcJfX D0NVdt0rPmXKW9hhgZdW4cOk93gr/wGmEHAmeWLQ9mWvJhsPAqfi6wv3RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIf/TXfgaMS0i38jJHQydhzSFtZpMB8GA1UdIwQY MBaAFE7KEFzkr2whzUKemS0G6n0G2KVtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgt NDZlZTBjZDdmY2JhLzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgtNDZlZTBjZDdmY2Jh LzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsoW/uZTv y1N3Xb/ZCwwS5SD4MO63lWDdrwUuAi6q2XLvqi217/rXXV7SsLdG4XNz5xuKd9Pd E12Z4Df7//FWpveD7/xCZ+K4PqkIDCkiLLgtmCntGvtHgxkU4KCDuftR8APu2eAY 5OHBjDnIvWY701vziER88SlvDikJlnvI5KJ/YNUMi6p6tOyGn4a2+Jyo7S9xRIBx uIFERGwiTCxTdB3ng0BaXwCg1oXaf/FFOA73muRhedcVKSa3fcpo8R7cRHFg9+fz Er+L9+8U/a0YycJxOl8TU1sNYaJytg1FXIKF2BRagJJY++XL2GfrXPKmjVlzACBn Tti0P134sRgY8g== -----END CERTIFICATE-----Generated at Fri Dec 12 09:08:53 2025 by rpki-client