This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft File: tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft (raw, json) Hash identifier: UDUupv8hlZFCEvUymO0rrovzfWReY3q3QTi26lYiaJs= Subject key identifier: 8E:A9:EE:7A:55:B7:1E:C6:EB:02:B0:4C:B5:3B:7B:03:F8:6D:3E:90 Authority key identifier: B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A Certificate issuer: /CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a Certificate serial: 019B4B4CEFE563AA87C59CFA0A3FCED37BFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft Manifest number: 178D Signing time: Tue 23 Dec 2025 13:01:31 +0000 Manifest this update: Tue 23 Dec 2025 13:01:31 +0000 Manifest next update: Wed 24 Dec 2025 13:01:31 +0000 Files and hashes: 1: R61HPMD68kIaSjuhapTR2hk_o_k.roa (hash: eWM7uVRHKJ0h/TzbbEISOsoLOvqx2gFtMEnPl7A/Y18=) 2: tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl (hash: NniEAwu4BuxnYHJCtrgwDkcAW3BdBPGYflhmkF9naeo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:ef:e5:63:aa:87:c5:9c:fa:0a:3f:ce:d3:7b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a Validity Not Before: Dec 23 13:01:31 2025 GMT Not After : Dec 24 13:01:31 2025 GMT Subject: CN=8ea9ee7a55b71ec6eb02b04cb53b7b03f86d3e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6e:6f:23:df:46:bf:77:6c:ad:a5:58:22:e9: 42:5d:13:ad:c5:a8:0a:28:b7:ef:b5:b8:63:60:3d: 88:63:a6:be:3a:c6:a2:c4:6c:4c:57:76:45:4a:ef: 03:4e:59:8c:fa:89:d8:54:7d:b2:07:32:10:41:29: 40:01:5c:ef:f5:79:84:58:f3:69:6f:54:6d:07:a7: 08:7d:7d:2e:84:2f:c5:58:75:13:f5:9b:ab:6f:31: 68:a0:74:d2:aa:8e:0e:ce:8e:28:d7:19:92:d7:11: 13:ef:28:11:82:67:24:7c:95:19:ce:dd:fa:a2:93: fc:64:01:4d:32:4f:a9:72:63:c6:aa:99:f0:6d:70: 92:8a:3a:67:11:96:76:5f:f0:23:a2:9e:79:2d:f4: 09:58:f8:90:b5:71:d8:69:6c:19:7c:75:c1:39:30: 82:4c:a2:89:5e:2a:98:82:f1:c0:d9:97:85:cf:0d: 3e:ad:91:2d:83:f4:72:3e:5f:2f:6f:56:25:e3:64: 79:95:b8:88:f3:23:ce:c1:14:2e:6f:d6:36:3e:96: af:e9:6c:6f:2a:19:24:06:d6:e9:53:f2:8f:a7:b1: bc:2b:46:af:48:97:af:aa:3d:6b:64:b9:b9:58:10: 87:08:f9:f1:e0:7f:e5:8b:1c:d8:58:fb:35:98:51: 16:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A9:EE:7A:55:B7:1E:C6:EB:02:B0:4C:B5:3B:7B:03:F8:6D:3E:90 X509v3 Authority Key Identifier: keyid:B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f1:8d:41:31:cb:5c:46:c3:d7:77:b6:81:bd:e0:89:5e:a1: 12:b6:2e:23:86:d6:ae:2e:e7:bb:f0:04:63:f8:ec:2f:46:7e: 38:eb:23:af:9c:c9:12:54:d6:73:08:91:31:fe:6e:15:84:81: 9f:0d:90:e2:de:01:12:3c:05:ea:84:f8:4c:04:6d:99:3e:dc: fd:d0:74:43:b8:c9:a8:de:1a:8b:09:1c:79:5a:b4:01:32:41: 4c:ac:79:42:d1:da:10:b8:de:72:5d:c6:aa:03:93:a3:8e:0d: 9d:24:fd:b5:54:f2:15:34:ca:17:ea:c8:12:51:c0:b4:67:62: e5:0a:d6:fb:4c:07:8c:fd:09:d4:19:98:d6:68:f9:eb:ea:26: 44:f7:3a:07:34:0a:d5:4a:c8:1f:82:a4:23:89:1a:84:b5:78: 70:cc:a8:d6:12:ef:22:a5:63:c0:bd:b7:f9:78:f3:60:71:1d: a8:96:b3:52:e6:96:35:e9:32:04:82:99:8a:17:13:71:33:11: 32:eb:b0:be:2a:d6:62:bc:1e:5a:0c:e1:5e:b7:53:6c:7a:f0: 86:37:86:72:5c:7e:0c:86:7a:f5:50:8c:35:30:73:ce:ff:67: c9:d6:0e:79:6a:f7:c4:c9:89:f4:64:04:13:3d:ad:52:3e:23: bd:1a:cf:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTO/lY6qHxZz6Cj/O03v8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MDIzYzhjNTE4ZmE0MjlmZmNhMjU5NzdiNmE4Zjg0M2Y4 ZjBjNGEwHhcNMjUxMjIzMTMwMTMxWhcNMjUxMjI0MTMwMTMxWjAzMTEwLwYDVQQD Eyg4ZWE5ZWU3YTU1YjcxZWM2ZWIwMmIwNGNiNTNiN2IwM2Y4NmQzZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG5vI99Gv3dsraVYIulCXROtxagK KLfvtbhjYD2IY6a+OsaixGxMV3ZFSu8DTlmM+onYVH2yBzIQQSlAAVzv9XmEWPNp b1RtB6cIfX0uhC/FWHUT9ZurbzFooHTSqo4Ozo4o1xmS1xET7ygRgmckfJUZzt36 opP8ZAFNMk+pcmPGqpnwbXCSijpnEZZ2X/Ajop55LfQJWPiQtXHYaWwZfHXBOTCC TKKJXiqYgvHA2ZeFzw0+rZEtg/RyPl8vb1Yl42R5lbiI8yPOwRQub9Y2Ppav6Wxv KhkkBtbpU/KPp7G8K0avSJevqj1rZLm5WBCHCPnx4H/lixzYWPs1mFEWLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6p7npVtx7G6wKwTLU7ewP4bT6QMB8GA1UdIwQY MBaAFLQCPIxRj6Qp/8oll3tqj4Q/jwxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEFJOGpGR1BwQ25feWlXWGUycVBoRC1QREVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81MmY1YWQtODUwZC00YTdlLTk5NDYt M2I3NDVkZDhlMjFlLzEvdEFJOGpGR1BwQ25feWlXWGUycVBoRC1QREVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81MmY1YWQtODUwZC00YTdlLTk5NDYtM2I3NDVkZDhlMjFl LzEvdEFJOGpGR1BwQ25feWlXWGUycVBoRC1QREVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfGNQTHL XEbD13e2gb3giV6hErYuI4bWri7nu/AEY/jsL0Z+OOsjr5zJElTWcwiRMf5uFYSB nw2Q4t4BEjwF6oT4TARtmT7c/dB0Q7jJqN4aiwkceVq0ATJBTKx5QtHaELjecl3G qgOTo44NnST9tVTyFTTKF+rIElHAtGdi5QrW+0wHjP0J1BmY1mj56+omRPc6BzQK 1UrIH4KkI4kahLV4cMyo1hLvIqVjwL23+XjzYHEdqJazUuaWNekyBIKZihcTcTMR MuuwvirWYrweWgzhXrdTbHrwhjeGclx+DIZ69VCMNTBzzv9nydYOeWr3xMmJ9GQE Ez2tUj4jvRrPRg== -----END CERTIFICATE-----Generated at Tue Dec 23 15:25:07 2025 by rpki-client