This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json) Hash identifier: ItTYDdLrKzC2Gn1lR2JjDi7uhqvjL+OaaOlawo37lfA= Subject key identifier: 20:79:8B:D0:07:38:07:26:4F:62:3B:0D:21:C1:03:FD:1F:E5:EB:D7 Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c Certificate serial: 019B44381E30DD75D49DB63E9320D38290FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 04:01:26 +0000 Manifest this update: Mon 22 Dec 2025 04:01:26 +0000 Manifest next update: Tue 23 Dec 2025 04:01:26 +0000 Files and hashes: 1: 0WgKhjREJrZPp5eivCc5Ledwy08.roa (hash: g1cMz695Vu5b1v4C7JspTc1yMqOrx6XRuND1g3o80ZU=) 2: c4XFDsuP3oiOPuoN5dW6Mp7swps.roa (hash: RShjOJ6yyL7rh4X46zYbqRc79tC1/dWZp0uZXHk88jM=) 3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: 4NksrtFsZjUaDGxI7PvECEQx1WtM7qG5Rw6NdvSRMhE=) 4: x8qy1V86ggKXIYJ47lPp7-bEQ08.roa (hash: Tid2ObTc99hFnnGIy0KhVlQV4ZEsaX9AQcsvz/R/sw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:1e:30:dd:75:d4:9d:b6:3e:93:20:d3:82:90:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c Validity Not Before: Dec 22 04:01:26 2025 GMT Not After : Dec 23 04:01:26 2025 GMT Subject: CN=20798bd0073807264f623b0d21c103fd1fe5ebd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f7:bc:6a:f3:15:b2:65:06:f8:70:85:43:ae: 76:f7:5b:91:d3:53:96:25:79:1b:4f:68:2b:a0:01: 86:84:70:94:11:e0:96:93:75:84:22:0b:80:b9:ec: d1:f9:cb:6b:7c:f7:c2:d9:e7:e7:37:51:f5:eb:f3: e6:13:98:68:d4:46:68:d6:b4:1b:3d:40:97:45:3f: fc:5a:2d:53:c4:01:e0:6c:24:c5:7e:9c:6e:af:02: fd:ee:9c:14:08:e5:ae:06:5a:7f:c4:f9:08:a8:fe: 64:bc:01:8c:45:87:0a:a7:a8:ac:9f:c7:6d:52:35: e3:f3:17:58:41:8f:48:0d:92:ef:38:ee:c1:0b:7a: fd:1a:13:7d:b7:44:d5:0d:e1:69:6d:3b:f3:2f:cb: f4:b6:83:5e:bd:5d:65:07:d9:93:52:3e:a0:e1:3a: e7:8d:39:91:19:0c:65:81:ff:c6:e0:f9:fd:55:67: 39:1b:54:d5:91:0b:47:1b:95:4c:28:c4:4e:aa:95: 2b:76:7f:52:8c:83:3d:3f:4e:71:b0:11:0a:88:0c: fa:58:fb:fa:45:a2:06:a1:4e:07:9d:65:35:be:39: 95:06:84:be:52:69:6f:4e:6b:bd:b9:a0:57:54:35: f1:82:22:27:73:fc:82:08:04:a5:99:20:9f:60:c6: 94:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:79:8B:D0:07:38:07:26:4F:62:3B:0D:21:C1:03:FD:1F:E5:EB:D7 X509v3 Authority Key Identifier: keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:2c:03:63:ce:d0:d5:63:6b:bd:ba:d3:a8:0a:fe:d4:b8:8a: 8e:a9:3c:7a:28:e9:9a:4c:1a:e0:df:8c:74:7e:6e:04:0f:fc: b8:4f:f6:b2:64:43:60:c0:78:67:45:d9:24:42:b6:54:a6:62: 5b:72:cb:d4:6c:55:e1:6f:5a:51:b0:dc:44:7d:6b:3e:db:f0: df:d3:c9:2c:83:41:53:b3:29:45:ca:cb:38:dc:83:72:72:11: a6:89:7a:0a:40:df:ee:9c:ec:a4:f7:5c:e8:04:a5:62:32:b4: 4b:e0:74:db:d5:7e:28:fe:0c:db:4d:d7:6e:17:e1:f0:fa:13: 62:4a:59:cf:8b:3f:4f:f2:3c:b1:22:0f:5c:5f:cb:a3:16:6a: 73:a4:cf:e3:cc:9f:bf:89:8f:b9:fa:b3:b2:44:8d:41:3d:a0: a9:75:1f:9b:22:05:87:d7:71:39:b3:ea:45:7c:84:4e:97:99: be:5a:18:52:59:3d:1c:26:e0:87:df:f1:d2:40:2a:c5:e9:9f: 27:a9:44:ea:35:0c:1a:20:8e:ae:7d:6f:92:94:a0:14:c7:ac: d3:a9:97:0b:08:3e:69:00:9a:b4:a2:f9:ba:e6:ac:f5:3b:af: a7:5e:be:9d:61:6c:aa:eb:1e:db:1a:06:29:64:52:3e:d0:78: 4e:74:2e:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOB4w3XXUnbY+kyDTgpD7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZWM2YzBhNWViZWM1ODE3ZDkxYjkxZTc5YTZiYzYxMzJl YjlkMmMwHhcNMjUxMjIyMDQwMTI2WhcNMjUxMjIzMDQwMTI2WjAzMTEwLwYDVQQD EygyMDc5OGJkMDA3MzgwNzI2NGY2MjNiMGQyMWMxMDNmZDFmZTVlYmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/e8avMVsmUG+HCFQ65291uR01OW JXkbT2groAGGhHCUEeCWk3WEIguAuezR+ctrfPfC2efnN1H16/PmE5ho1EZo1rQb PUCXRT/8Wi1TxAHgbCTFfpxurwL97pwUCOWuBlp/xPkIqP5kvAGMRYcKp6isn8dt UjXj8xdYQY9IDZLvOO7BC3r9GhN9t0TVDeFpbTvzL8v0toNevV1lB9mTUj6g4Trn jTmRGQxlgf/G4Pn9VWc5G1TVkQtHG5VMKMROqpUrdn9SjIM9P05xsBEKiAz6WPv6 RaIGoU4HnWU1vjmVBoS+UmlvTmu9uaBXVDXxgiInc/yCCASlmSCfYMaUZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCB5i9AHOAcmT2I7DSHBA/0f5evXMB8GA1UdIwQY MBaAFLTsbApevsWBfZG5HnmmvGEy650sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWIt MTNmYjdhNTEzMGNhLzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWItMTNmYjdhNTEzMGNh LzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCwDY87Q 1WNrvbrTqAr+1LiKjqk8eijpmkwa4N+MdH5uBA/8uE/2smRDYMB4Z0XZJEK2VKZi W3LL1GxV4W9aUbDcRH1rPtvw39PJLINBU7MpRcrLONyDcnIRpol6CkDf7pzspPdc 6ASlYjK0S+B029V+KP4M203Xbhfh8PoTYkpZz4s/T/I8sSIPXF/LoxZqc6TP48yf v4mPufqzskSNQT2gqXUfmyIFh9dxObPqRXyETpeZvloYUlk9HCbgh9/x0kAqxemf J6lE6jUMGiCOrn1vkpSgFMes06mXCwg+aQCatKL5uuas9Tuvp16+nWFsquse2xoG KWRSPtB4TnQuVQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:56:25 2025 by rpki-client