This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft File: tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json) Hash identifier: kqmgwmxvg++Nk8PTHuaRJdeID/E8e1z1FsA4MTL0LYM= Subject key identifier: 39:A5:34:66:E5:48:61:58:B4:36:AF:A7:24:F4:9A:82:12:54:CD:65 Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6 Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6 Certificate serial: 019B2852B0701D47B302F7C62488253911CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft Manifest number: 1783 Signing time: Tue 16 Dec 2025 18:01:06 +0000 Manifest this update: Tue 16 Dec 2025 18:01:06 +0000 Manifest next update: Wed 17 Dec 2025 18:01:06 +0000 Files and hashes: 1: H94mgXcbmEPiObELGoT_irqbFZA.roa (hash: zafi3kAgrBwpb+xZqeS8u0za5f6rLKTWup2Rk4ukWyE=) 2: cpfSzQsU6bXhLoYlLCepUpPhGUA.roa (hash: I8cvRLDssMsd0UHP/4nXy9rkIVrQ1W/PN2dEJTBJ8Vc=) 3: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: GvQPMN8WM0kRiXeCE/34OdnJH+pvoFHariVWRy+upEw=) 4: v0ygM5ko9tgsiV9gTnymwBnpZD8.roa (hash: Qr8YJSCtuGUwCDefoz4H2ImMBPjSdowCdy9x6G8wdbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:b0:70:1d:47:b3:02:f7:c6:24:88:25:39:11:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6 Validity Not Before: Dec 16 18:01:06 2025 GMT Not After : Dec 17 18:01:06 2025 GMT Subject: CN=39a53466e5486158b436afa724f49a821254cd65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:62:96:ae:90:01:9b:5e:5c:50:a9:87:58:25: bf:ac:60:98:42:d4:14:87:cc:84:39:b9:cd:93:ff: 36:f5:35:b7:fb:bc:cb:30:59:e6:43:22:fe:04:28: cd:f5:5e:c7:39:a6:dc:a9:55:a3:3f:d3:9d:59:83: 8a:60:f8:0c:1f:9d:d5:5e:1a:1c:38:9b:e0:ae:6a: 2d:88:dc:3b:d9:d3:91:1f:bd:9a:aa:9f:98:8a:1e: e9:63:5a:a9:59:88:70:81:f9:12:35:11:86:ec:e8: b5:5c:6c:58:fb:f3:ac:b8:7c:cf:1f:c9:9f:20:55: 7e:64:e6:f6:0d:a4:8b:6e:2c:6c:83:09:26:99:d7: cf:16:85:2d:bf:6f:61:be:93:46:61:a1:2c:13:1e: c2:da:01:de:de:10:fe:00:52:36:27:7b:39:e2:a9: 50:e6:bc:88:83:a0:7f:96:e5:4c:b6:fe:51:6c:0e: 45:d3:0e:9a:5b:98:c5:0d:e0:fb:83:d2:be:64:f1: c8:84:bf:1b:52:55:a1:be:17:45:43:93:0d:6d:2e: 76:12:e6:4c:8e:e2:a3:95:eb:34:52:22:37:a6:ed: 13:e7:ca:a7:e3:ed:3f:75:cb:da:1f:4f:25:4a:8d: 5b:9f:b1:02:bb:25:7c:74:65:42:c1:91:61:e5:9c: ea:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A5:34:66:E5:48:61:58:B4:36:AF:A7:24:F4:9A:82:12:54:CD:65 X509v3 Authority Key Identifier: keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:37:6c:86:df:f3:26:06:e0:9c:00:5c:bb:a8:67:81:0e:86: 35:c5:d3:53:84:f1:31:22:85:da:1c:c8:df:a2:36:b7:ce:03: 0b:84:5a:a1:b5:f2:80:4a:d2:f7:0d:d4:5e:6c:88:2a:e6:1c: ad:4c:fb:ae:35:a8:93:ca:df:28:cd:9c:8d:4a:64:21:17:ac: 1b:80:60:7e:f3:cc:43:27:aa:ea:7e:6e:6e:1a:2d:ee:53:1d: d3:d7:85:9c:94:4f:9f:2e:d6:4d:c2:85:27:a2:1a:1b:11:f2: 1a:c2:29:3b:be:8a:e9:83:85:e4:3b:41:59:c0:97:96:8f:39: da:b0:a9:ce:e6:a7:99:78:a6:6a:7a:c4:b3:14:b3:44:b9:f8: db:0f:26:84:65:76:de:69:f3:8e:ce:2b:b9:13:d2:2a:24:38: 41:e1:99:b7:56:d5:dd:44:66:c8:49:0c:05:63:0d:f6:2e:ef: a1:f7:0c:59:cc:63:4e:7b:de:da:31:ab:36:3c:f1:73:7d:d9: 63:81:de:50:7c:86:80:c5:9d:e6:ee:9c:bd:8c:75:80:ff:0c: 21:f9:21:09:1c:6b:c6:d7:57:33:7d:2e:3f:bb:93:e0:90:46: 18:db:fa:16:11:42:71:f0:a1:3a:04:36:a1:66:93:5a:dd:8d: dc:b0:aa:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUrBwHUezAvfGJIglORHPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MzAwNTYxOTY4OGVmYmFmZmQwNmUxMDhhNDNiZGYyMDY0 M2UwZDYwHhcNMjUxMjE2MTgwMTA2WhcNMjUxMjE3MTgwMTA2WjAzMTEwLwYDVQQD EygzOWE1MzQ2NmU1NDg2MTU4YjQzNmFmYTcyNGY0OWE4MjEyNTRjZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGKWrpABm15cUKmHWCW/rGCYQtQU h8yEObnNk/829TW3+7zLMFnmQyL+BCjN9V7HOabcqVWjP9OdWYOKYPgMH53VXhoc OJvgrmotiNw72dORH72aqp+Yih7pY1qpWYhwgfkSNRGG7Oi1XGxY+/OsuHzPH8mf IFV+ZOb2DaSLbixsgwkmmdfPFoUtv29hvpNGYaEsEx7C2gHe3hD+AFI2J3s54qlQ 5ryIg6B/luVMtv5RbA5F0w6aW5jFDeD7g9K+ZPHIhL8bUlWhvhdFQ5MNbS52EuZM juKjles0UiI3pu0T58qn4+0/dcvaH08lSo1bn7ECuyV8dGVCwZFh5ZzqfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmlNGblSGFYtDavpyT0moISVM1lMB8GA1UdIwQY MBaAFLUwBWGWiO+6/9BuEIpDvfIGQ+DWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFRBRllaYUk3N3JfMEc0UWlrTzk4Z1pENE5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy85OTVmYmQtOTFmYi00M2JiLThmMjYt Y2Q0YmQ0NDI3NWM1LzEvdFRBRllaYUk3N3JfMEc0UWlrTzk4Z1pENE5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy85OTVmYmQtOTFmYi00M2JiLThmMjYtY2Q0YmQ0NDI3NWM1 LzEvdFRBRllaYUk3N3JfMEc0UWlrTzk4Z1pENE5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjdsht/z JgbgnABcu6hngQ6GNcXTU4TxMSKF2hzI36I2t84DC4RaobXygErS9w3UXmyIKuYc rUz7rjWok8rfKM2cjUpkIResG4BgfvPMQyeq6n5ubhot7lMd09eFnJRPny7WTcKF J6IaGxHyGsIpO76K6YOF5DtBWcCXlo852rCpzuanmXimanrEsxSzRLn42w8mhGV2 3mnzjs4ruRPSKiQ4QeGZt1bV3URmyEkMBWMN9i7vofcMWcxjTnve2jGrNjzxc33Z Y4HeUHyGgMWd5u6cvYx1gP8MIfkhCRxrxtdXM30uP7uT4JBGGNv6FhFCcfChOgQ2 oWaTWt2N3LCqKg== -----END CERTIFICATE-----Generated at Tue Dec 16 21:33:10 2025 by rpki-client