This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft File: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft (raw, json) Hash identifier: nRSBVX4YsFblcR1JeR/tuMRUpmB/ckoFQt7dkncI92U= Subject key identifier: 07:A7:2A:23:DC:75:6C:B1:DF:A6:8C:30:C4:3A:C5:31:4B:71:F6:C1 Authority key identifier: 4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44 Certificate issuer: /CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44 Certificate serial: 019B48F0681FA45953B1A840067E8C4302A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft Manifest number: 1721 Signing time: Tue 23 Dec 2025 02:01:13 +0000 Manifest this update: Tue 23 Dec 2025 02:01:13 +0000 Manifest next update: Wed 24 Dec 2025 02:01:13 +0000 Files and hashes: 1: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl (hash: BLyDiU9sT+aycV0RM+xwUHB5QmD0cDmReYZap/7h0nY=) 2: pXY7p3AnqDJfjALLmtVHw8U2GfM.roa (hash: ZUNXce9TBnEjmUfFa15l+WlhliqRz/AO8NwAB4Sid60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:68:1f:a4:59:53:b1:a8:40:06:7e:8c:43:02:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44 Validity Not Before: Dec 23 02:01:13 2025 GMT Not After : Dec 24 02:01:13 2025 GMT Subject: CN=07a72a23dc756cb1dfa68c30c43ac5314b71f6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:23:b6:00:5e:49:d7:1d:65:5e:e4:57:8f:10: 3f:14:6d:98:53:3f:7a:76:69:25:77:88:73:d8:39: 7e:cf:e6:6f:19:2f:3d:36:33:05:0b:05:bb:63:e6: 89:38:2c:e3:ed:65:5a:ab:2c:80:34:51:e3:6d:79: 5b:97:db:7d:f2:d6:b5:d7:55:e4:65:19:6d:c5:be: 1b:5a:ec:f9:f9:0d:85:6b:1c:7c:17:ac:1e:ef:0b: da:ee:fe:3f:1a:2b:74:d8:67:c8:80:59:1d:11:d6: 3d:8e:fd:28:05:1e:f8:7e:52:b9:d4:ab:10:0a:2c: 74:6d:a4:28:59:a2:6a:ff:70:3d:ab:d5:3d:f8:ac: 02:50:97:56:51:02:f2:4b:3c:3b:da:89:76:62:ea: 70:f2:34:6d:75:ec:60:4c:9a:5c:65:fe:49:ea:28: f7:8b:b6:a5:9f:3c:68:2c:73:16:c5:cd:54:d2:9c: fc:b7:f8:53:1e:30:38:36:01:83:b2:0e:87:f2:71: 38:49:18:83:ad:7a:b5:d7:2b:bb:74:6e:f8:76:64: 23:14:34:f5:b2:5b:54:ae:ec:83:9f:2b:1c:1b:b3: 58:e8:0e:92:d3:e2:d3:1b:74:19:2b:20:c2:e1:2f: 85:db:43:22:c0:6f:3a:76:7d:86:2a:98:b7:9b:81: 8f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A7:2A:23:DC:75:6C:B1:DF:A6:8C:30:C4:3A:C5:31:4B:71:F6:C1 X509v3 Authority Key Identifier: keyid:4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:31:4d:29:f6:85:05:f7:0c:2d:bf:d8:14:55:e7:e6:3a:2e: c4:ec:57:8e:f6:ea:95:b8:5f:e3:08:a2:9f:4b:4b:2b:8c:0e: 58:37:13:82:c7:e6:73:ed:13:0b:48:5f:18:72:76:a1:ca:ff: 07:59:89:c8:50:26:e2:04:b8:58:6f:d6:24:9d:d4:64:33:1f: d0:63:dd:48:e4:23:5f:03:91:a8:97:db:bd:a7:94:96:12:73: 9e:d3:15:65:07:ab:55:f9:7f:40:81:b5:fd:bd:12:c3:7e:96: 1c:3c:68:39:8f:0a:7d:dc:3e:40:ee:c0:58:d4:5b:b2:9d:55: fb:72:bd:58:10:2d:ce:ea:d7:91:95:0e:52:c7:35:de:02:83: 8e:2f:f7:48:f0:cf:11:82:85:d2:e3:fa:18:4f:2b:a3:85:43: 1f:95:79:fc:7d:ee:32:63:e1:f8:a9:11:69:09:df:48:39:1b: c5:85:bc:65:1d:b5:e0:ad:c1:5d:6b:37:40:e8:ac:ff:be:7f: 55:bb:58:55:1e:7a:8c:60:fd:c3:d5:69:80:d7:52:09:0b:5a: cf:75:47:cc:60:a2:ea:74:ab:81:2b:d7:de:c1:98:eb:28:9f: 36:ef:ba:c3:88:68:db:a7:35:01:6e:7c:9a:6b:bd:ce:fc:53: a1:9c:a7:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8GgfpFlTsahABn6MQwKlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYWVmYzQ5ZTZjZDY3ZTI1OTk2YTJjMGZjNTdiODBjYzIz ZGJhNDQwHhcNMjUxMjIzMDIwMTEzWhcNMjUxMjI0MDIwMTEzWjAzMTEwLwYDVQQD EygwN2E3MmEyM2RjNzU2Y2IxZGZhNjhjMzBjNDNhYzUzMTRiNzFmNmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyO2AF5J1x1lXuRXjxA/FG2YUz96 dmkld4hz2Dl+z+ZvGS89NjMFCwW7Y+aJOCzj7WVaqyyANFHjbXlbl9t98ta111Xk ZRltxb4bWuz5+Q2Faxx8F6we7wva7v4/Git02GfIgFkdEdY9jv0oBR74flK51KsQ Cix0baQoWaJq/3A9q9U9+KwCUJdWUQLySzw72ol2Yupw8jRtdexgTJpcZf5J6ij3 i7alnzxoLHMWxc1U0pz8t/hTHjA4NgGDsg6H8nE4SRiDrXq11yu7dG74dmQjFDT1 sltUruyDnyscG7NY6A6S0+LTG3QZKyDC4S+F20MiwG86dn2GKpi3m4GPzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAenKiPcdWyx36aMMMQ6xTFLcfbBMB8GA1UdIwQY MBaAFE6u/EnmzWfiWZaiwPxXuAzCPbpEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHE3OFNlYk5aLUpabHFMQV9GZTRETUk5dWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85ZjU4ZjItNzkxOS00YmZjLThmNzMt ZTcwNzNjZmUxMzRmLzEvVHE3OFNlYk5aLUpabHFMQV9GZTRETUk5dWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85ZjU4ZjItNzkxOS00YmZjLThmNzMtZTcwNzNjZmUxMzRm LzEvVHE3OFNlYk5aLUpabHFMQV9GZTRETUk5dWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDFNKfaF BfcMLb/YFFXn5jouxOxXjvbqlbhf4wiin0tLK4wOWDcTgsfmc+0TC0hfGHJ2ocr/ B1mJyFAm4gS4WG/WJJ3UZDMf0GPdSOQjXwORqJfbvaeUlhJzntMVZQerVfl/QIG1 /b0Sw36WHDxoOY8Kfdw+QO7AWNRbsp1V+3K9WBAtzurXkZUOUsc13gKDji/3SPDP EYKF0uP6GE8ro4VDH5V5/H3uMmPh+KkRaQnfSDkbxYW8ZR214K3BXWs3QOis/75/ VbtYVR56jGD9w9VpgNdSCQtaz3VHzGCi6nSrgSvX3sGY6yifNu+6w4ho26c1AW58 mmu9zvxToZyneg== -----END CERTIFICATE-----Generated at Tue Dec 23 08:22:57 2025 by rpki-client