This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json) Hash identifier: QWDRAB/39XakuvumnAASluF/9VqZzW6thxzVytsoAOM= Subject key identifier: E4:6B:DC:C8:46:62:4A:D0:E6:0B:13:B5:09:90:F0:7C:39:7C:0F:D4 Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54 Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54 Certificate serial: 019B5A5193330AD28F95A209A39DB62A6084 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft Manifest number: 06E1 Signing time: Fri 26 Dec 2025 11:00:54 +0000 Manifest this update: Fri 26 Dec 2025 11:00:54 +0000 Manifest next update: Sat 27 Dec 2025 11:00:54 +0000 Files and hashes: 1: JboF5duYkSjIw0cFCDow2D7hhYA.roa (hash: 5ee85IvEdLLZLBu0IK/0DK9QgLyt71g8oPTMmxnM7ss=) 2: bPHOfPhRt9UxNoPYUZyx6NkEcPE.roa (hash: l5CD77LRDYrviJN2I+kUm6dy7C8YOi2kiqH568j84ZE=) 3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: RNOaSYDwI1+I8TVw55s/QLeZmB6OECnpMxch9HVCQpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:93:33:0a:d2:8f:95:a2:09:a3:9d:b6:2a:60:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54 Validity Not Before: Dec 26 11:00:54 2025 GMT Not After : Dec 27 11:00:54 2025 GMT Subject: CN=e46bdcc846624ad0e60b13b50990f07c397c0fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:aa:42:67:1c:fb:de:2b:fc:15:4d:3b:89: 37:e5:16:6a:5f:28:f2:7a:3e:3e:e3:90:6b:73:36: 41:43:a3:80:33:ea:03:43:82:ba:62:09:7c:8c:c0: 90:62:01:ba:16:04:1f:e0:ce:df:f2:8a:00:b0:06: 25:38:e9:55:9b:af:98:f0:6f:fc:82:aa:97:f1:44: b5:04:1a:ee:56:46:4e:af:0b:0f:ad:a7:16:2d:13: 85:4b:1f:9a:4c:1f:9b:b1:c8:73:79:4f:06:32:65: 72:ee:c4:00:72:22:7c:11:7e:57:82:1c:d4:1c:03: 61:6b:67:9d:c5:b0:5a:35:95:3d:d0:bc:cc:11:fa: 3f:48:8b:62:3a:30:e5:93:8a:02:a7:4c:2d:c7:77: b4:b7:bf:e3:45:dc:9a:3c:c3:b9:d0:70:10:7a:8a: 93:74:9e:b8:98:36:d7:cb:cb:eb:97:02:69:4c:5d: 9a:ea:ca:19:fc:a2:e3:eb:61:60:2c:d2:3d:ed:50: c4:a9:cd:13:69:b7:03:37:68:06:64:f9:6a:a1:2b: c4:39:ad:c5:17:00:07:ee:4a:ed:1f:4e:39:a0:85: 6c:30:28:b3:89:07:60:63:f3:19:48:72:ea:ce:4f: 54:61:04:b3:1c:48:6f:90:54:b1:e9:1a:8a:73:53: 74:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6B:DC:C8:46:62:4A:D0:E6:0B:13:B5:09:90:F0:7C:39:7C:0F:D4 X509v3 Authority Key Identifier: keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:98:11:7e:32:c2:f2:84:3f:e7:a5:b8:86:1f:1b:d8:a4:83: 75:68:12:e5:dc:c3:ac:66:1b:e3:fa:70:2d:b0:52:49:ac:2d: db:b2:b1:e1:ed:40:b0:fd:fc:2b:44:a8:58:9d:30:98:9d:81: 97:2f:0d:6a:ba:10:2b:28:89:14:4d:82:ca:ab:25:85:63:a8: db:ac:e9:3d:db:a8:73:02:e9:32:4c:f2:2f:e4:f7:c1:f0:15: eb:5e:bd:e3:b3:10:5c:da:46:0d:3d:9d:f2:fa:22:e4:8c:f1: af:4f:01:db:7d:ab:3c:02:2a:e1:46:7e:07:57:21:94:8e:ca: a4:74:32:77:e2:64:cf:65:e2:c7:76:45:3a:e0:c6:24:da:bb: f9:88:cb:ba:34:06:4a:bb:6f:47:e1:f6:6b:cc:98:4c:4a:b2: c3:ed:89:4d:a2:19:57:e6:c6:04:bb:fc:72:a7:dc:ad:16:ae: ee:05:a7:02:c4:0b:dc:0a:d7:16:3b:6e:90:38:8e:a3:b6:1b: b8:d8:1c:32:30:7d:1c:68:35:18:82:09:a1:d8:ba:7a:d3:82: f1:c0:78:0a:04:45:47:89:9f:cf:a8:56:69:17:d2:6b:3f:0e: d4:5a:72:4c:a7:5f:b4:9f:f8:a3:0b:63:b1:17:b1:19:a9:bb: 50:60:6e:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUZMzCtKPlaIJo522KmCEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YzgxNGZmY2E1MzEwODYyYTIyMjRmMGFmZDkwY2FhOTZh YzBiNTQwHhcNMjUxMjI2MTEwMDU0WhcNMjUxMjI3MTEwMDU0WjAzMTEwLwYDVQQD EyhlNDZiZGNjODQ2NjI0YWQwZTYwYjEzYjUwOTkwZjA3YzM5N2MwZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyiqQmcc+94r/BVNO4k35RZqXyjy ej4+45BrczZBQ6OAM+oDQ4K6Ygl8jMCQYgG6FgQf4M7f8ooAsAYlOOlVm6+Y8G/8 gqqX8US1BBruVkZOrwsPracWLROFSx+aTB+bschzeU8GMmVy7sQAciJ8EX5XghzU HANha2edxbBaNZU90LzMEfo/SItiOjDlk4oCp0wtx3e0t7/jRdyaPMO50HAQeoqT dJ64mDbXy8vrlwJpTF2a6soZ/KLj62FgLNI97VDEqc0TabcDN2gGZPlqoSvEOa3F FwAH7krtH045oIVsMCiziQdgY/MZSHLqzk9UYQSzHEhvkFSx6RqKc1N02wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORr3MhGYkrQ5gsTtQmQ8Hw5fA/UMB8GA1UdIwQY MBaAFLTIFP/KUxCGKiIk8K/ZDKqWrAtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xYWFlNDUtZjZiZS00MDFjLWIzZDAt ZjQ2N2IyZjQyYWY2LzEvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8xYWFlNDUtZjZiZS00MDFjLWIzZDAtZjQ2N2IyZjQyYWY2 LzEvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs5gRfjLC 8oQ/56W4hh8b2KSDdWgS5dzDrGYb4/pwLbBSSawt27Kx4e1AsP38K0SoWJ0wmJ2B ly8NaroQKyiJFE2CyqslhWOo26zpPduocwLpMkzyL+T3wfAV616947MQXNpGDT2d 8voi5Izxr08B232rPAIq4UZ+B1chlI7KpHQyd+Jkz2Xix3ZFOuDGJNq7+YjLujQG SrtvR+H2a8yYTEqyw+2JTaIZV+bGBLv8cqfcrRau7gWnAsQL3ArXFjtukDiOo7Yb uNgcMjB9HGg1GIIJodi6etOC8cB4CgRFR4mfz6hWaRfSaz8O1FpyTKdftJ/4owtj sRexGam7UGBuJQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:04:48 2025 by rpki-client