This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json) Hash identifier: ENPrBoqZUI9MwKLKzHhM8PvQ7J+hJIRh7gfsderi504= Subject key identifier: A3:64:BD:16:A9:FF:2D:DF:BD:50:BC:40:19:9E:B8:6B:48:F9:DB:2F Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95 Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95 Certificate serial: 019B194DA52C7BFBB4E3AAB8C35134C0906E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft Manifest number: 1711 Signing time: Sat 13 Dec 2025 20:01:17 +0000 Manifest this update: Sat 13 Dec 2025 20:01:17 +0000 Manifest next update: Sun 14 Dec 2025 20:01:17 +0000 Files and hashes: 1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: 780uuYvclEjU4jkvDCcBWwmQZrD3EDywdpaS0MuH6lI=) 2: Zo-iXOH7eoz1wcNDU4gFPp4lbTo.roa (hash: lEXdntgkazPfcD7Ym6WQrguJ42W+/3phyup2XOjaUaA=) 3: w0BgVrxvQVnjW2X3qjBQ3ko9xOc.roa (hash: Ucfa4JRcD7zc33DVXeSZa1Nus1iwZHoQ8xtQZD2xfUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:a5:2c:7b:fb:b4:e3:aa:b8:c3:51:34:c0:90:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95 Validity Not Before: Dec 13 20:01:17 2025 GMT Not After : Dec 14 20:01:17 2025 GMT Subject: CN=a364bd16a9ff2ddfbd50bc40199eb86b48f9db2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c9:7c:c7:c5:a3:63:52:cc:c4:ce:c3:df:69: 61:f5:85:bb:fa:71:a2:da:16:88:ed:cd:e2:b3:22: f9:0f:74:2a:56:b5:91:9b:b6:59:63:17:e1:c8:6b: bb:b4:a6:fb:4f:86:d7:fc:7d:67:31:b3:6e:72:74: 15:ae:20:68:18:f1:10:00:22:94:db:c8:ab:73:89: 04:a7:ae:7c:50:0e:8c:76:62:8a:a3:48:a3:9b:94: e6:47:b1:66:25:2c:fa:93:00:f2:3c:aa:96:ca:d5: 59:07:c3:26:8f:ae:84:48:1a:a1:42:c6:7e:eb:3c: 23:83:74:05:30:4b:2d:54:54:a1:b2:1c:6b:96:91: 96:13:f4:ba:bf:f7:78:12:4b:68:f9:a8:53:e7:2d: 76:a3:1c:ff:32:cd:35:6d:10:9a:f0:89:63:a1:93: 78:fa:c6:70:cc:17:20:84:f4:d1:7a:ca:f1:d1:25: b5:a4:24:35:72:1a:3a:8e:9b:7b:33:59:07:89:4d: 36:e7:e1:bb:94:4d:8b:70:76:f2:1f:31:72:b6:72: 3e:16:86:ad:5a:22:9f:24:3f:ba:a0:10:cb:d1:75: 70:20:13:9d:c1:82:2c:07:42:bc:0d:65:5c:98:94: 0a:42:e8:8f:e9:26:03:a3:20:9c:a9:5a:e7:54:a4: 10:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:64:BD:16:A9:FF:2D:DF:BD:50:BC:40:19:9E:B8:6B:48:F9:DB:2F X509v3 Authority Key Identifier: keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:d8:f4:fb:ea:69:d2:1b:b5:e0:e3:29:a3:5b:de:22:5a:c5: 93:3b:30:c7:4b:5c:aa:1d:74:f5:c7:bb:ac:87:49:e0:11:3c: 0e:5a:a4:af:a9:32:51:d7:88:44:57:40:ab:33:a0:4f:a0:88: d0:50:6d:e8:47:15:77:0e:7a:8f:44:cd:6f:10:e3:e4:b3:c7: 1c:66:a4:97:76:73:93:c1:dd:7b:6c:c8:ed:fc:dc:3e:b3:b0: 1f:d1:2e:1c:94:49:a3:76:f9:b5:29:3d:c3:ea:59:c5:42:39: 19:c8:f9:3c:eb:4c:9e:40:f8:bd:e2:e8:1d:81:41:9c:65:66: cf:5c:bb:ee:62:ec:d8:dc:1c:6f:fb:7a:96:d3:ea:d2:f2:e1: c1:78:3a:71:79:29:af:c5:cf:ee:0d:11:2c:b5:17:5d:5f:46: ca:dc:e5:51:0d:cd:e7:4e:bd:21:0c:f5:dc:b2:90:a5:b7:71: ea:2a:8e:40:08:ca:3f:f8:9c:c7:b9:47:71:e9:87:9c:92:25: a2:0c:cf:29:a9:1a:0a:0b:bd:94:a6:85:e5:a5:c6:f8:50:a7: b0:68:90:5b:f5:ff:64:a3:08:bb:78:a4:7c:32:4b:08:54:8c: b0:8d:b2:19:5a:e9:18:f8:47:90:19:5a:02:11:75:42:80:a2: 9c:4c:08:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTaUse/u046q4w1E0wJBuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYzNhMDYyY2I5NmQ5YTNmMjFhOGIyZGE4NDhmODFjNmY3 M2JmOTUwHhcNMjUxMjEzMjAwMTE3WhcNMjUxMjE0MjAwMTE3WjAzMTEwLwYDVQQD EyhhMzY0YmQxNmE5ZmYyZGRmYmQ1MGJjNDAxOTllYjg2YjQ4ZjlkYjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cl8x8WjY1LMxM7D32lh9YW7+nGi 2haI7c3isyL5D3QqVrWRm7ZZYxfhyGu7tKb7T4bX/H1nMbNucnQVriBoGPEQACKU 28irc4kEp658UA6MdmKKo0ijm5TmR7FmJSz6kwDyPKqWytVZB8Mmj66ESBqhQsZ+ 6zwjg3QFMEstVFShshxrlpGWE/S6v/d4Ekto+ahT5y12oxz/Ms01bRCa8IljoZN4 +sZwzBcghPTResrx0SW1pCQ1cho6jpt7M1kHiU025+G7lE2LcHbyHzFytnI+Foat WiKfJD+6oBDL0XVwIBOdwYIsB0K8DWVcmJQKQuiP6SYDoyCcqVrnVKQQ9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNkvRap/y3fvVC8QBmeuGtI+dsvMB8GA1UdIwQY MBaAFE7DoGLLltmj8hqLLahI+Bxvc7+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWIt ZjU2N2MzZTlmNWZmLzEvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWItZjU2N2MzZTlmNWZm LzEvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNj0++pp 0hu14OMpo1veIlrFkzswx0tcqh109ce7rIdJ4BE8Dlqkr6kyUdeIRFdAqzOgT6CI 0FBt6EcVdw56j0TNbxDj5LPHHGakl3Zzk8Hde2zI7fzcPrOwH9EuHJRJo3b5tSk9 w+pZxUI5Gcj5POtMnkD4veLoHYFBnGVmz1y77mLs2Nwcb/t6ltPq0vLhwXg6cXkp r8XP7g0RLLUXXV9GytzlUQ3N5069IQz13LKQpbdx6iqOQAjKP/icx7lHcemHnJIl ogzPKakaCgu9lKaF5aXG+FCnsGiQW/X/ZKMIu3ikfDJLCFSMsI2yGVrpGPhHkBla AhF1QoCinEwI0g== -----END CERTIFICATE-----Generated at Sun Dec 14 00:01:10 2025 by rpki-client