This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft File: tqiXx5jwGbJHexqc47I7tddhZsM.mft (raw, json) Hash identifier: gNNPU8YYkebvmq/yILpqIZX53m9NUwp7Hv69A5KyNgU= Subject key identifier: 56:7E:55:6F:C7:9F:F0:29:BB:69:AE:E3:E3:C6:16:03:FF:49:17:78 Authority key identifier: B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3 Certificate issuer: /CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3 Certificate serial: 019B4324A880964B113DB4B72D8F56588AB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft Manifest number: 152C Signing time: Sun 21 Dec 2025 23:00:34 +0000 Manifest this update: Sun 21 Dec 2025 23:00:34 +0000 Manifest next update: Mon 22 Dec 2025 23:00:34 +0000 Files and hashes: 1: f9JCdqsJLWfadd987fFlDNk7mdM.roa (hash: 5CurkeU+eAkjrTT560cBjUlbg7hvGNi0G0d/Uo5/6r0=) 2: tqiXx5jwGbJHexqc47I7tddhZsM.crl (hash: Jaec25KPdoQBBeIvd3oojWhh3kEyGqebzsK93wmMs2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:a8:80:96:4b:11:3d:b4:b7:2d:8f:56:58:8a:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3 Validity Not Before: Dec 21 23:00:34 2025 GMT Not After : Dec 22 23:00:34 2025 GMT Subject: CN=567e556fc79ff029bb69aee3e3c61603ff491778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:aa:3d:7a:09:2c:5f:12:20:2f:6a:31:bc:20: ae:ab:f6:41:dc:88:6f:5c:a8:39:01:64:5a:2d:06: 5b:d9:86:63:db:2e:c0:e0:05:f7:4b:61:7b:b6:13: 0c:8f:22:52:80:d1:96:1c:9c:ff:17:38:df:a9:0a: d9:69:0a:f5:de:5b:0e:b7:48:6c:f4:21:8d:2f:53: 3d:65:8a:03:bb:e2:fc:d3:7d:2f:51:7a:fe:54:12: 45:b1:cf:a5:64:05:52:60:bd:73:18:d8:3f:1a:3d: 60:18:5b:23:4b:20:28:66:0e:52:2b:4d:03:6f:8e: eb:74:c8:81:f3:67:7b:c7:ce:d6:91:8c:3e:d1:6d: 70:5d:90:73:15:95:15:bd:58:7b:63:ef:a4:59:22: 57:23:da:50:7c:ff:62:98:b5:a3:e8:e2:6b:5b:14: cd:90:3c:58:50:b7:2e:33:a3:f9:62:3f:e5:19:7e: 5c:70:ed:71:04:b2:18:e2:3f:88:b6:f7:6c:c9:17: 9b:94:b5:6e:10:b2:a8:50:39:63:a6:59:bc:b8:3b: 84:5d:ee:e7:32:99:b3:04:d8:73:1d:14:f8:74:a8: a3:ae:76:1d:94:39:a8:75:2a:55:1a:23:b2:43:6c: e4:9e:07:3f:e1:90:52:54:72:46:4e:a2:e6:5a:fe: b8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7E:55:6F:C7:9F:F0:29:BB:69:AE:E3:E3:C6:16:03:FF:49:17:78 X509v3 Authority Key Identifier: keyid:B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:cc:72:2e:77:68:b4:0c:bb:a2:1e:ab:7e:ca:72:3d:55:54: f3:c3:b5:95:1e:0b:c3:e4:9e:db:ab:6f:0d:66:ef:42:4f:d4: 91:96:dc:ef:f6:2a:fb:80:3d:9f:1b:58:d1:e4:ce:93:a5:c4: 6c:35:44:f6:f5:be:bb:c7:92:5e:07:8c:0b:2c:40:0b:f1:34: 12:6b:15:66:2a:70:9e:23:9e:f6:79:c8:2d:2a:c3:38:cf:85: a9:fa:80:49:e9:7e:35:98:e4:43:9c:6d:dc:65:a4:c0:1d:5f: 01:d7:42:0e:b6:2a:4d:b5:d1:a5:b1:5c:fe:2c:61:00:35:a7: 37:a4:99:93:f7:79:8c:0c:4a:7b:b1:ee:fc:49:2c:9d:e2:87: ce:06:97:79:38:69:54:f3:93:f2:22:ec:1d:87:84:2d:de:17: 3b:5d:5e:46:70:d5:1e:30:29:6c:57:93:87:c1:c2:c2:11:ff: d9:4b:dd:d0:2a:5d:0b:ea:35:3e:61:b3:7b:53:c5:37:22:e7: f7:63:1e:fe:8b:1c:cb:20:25:7d:97:f8:e6:d6:ce:df:fb:41: 32:e7:1d:33:10:10:c8:7c:3d:a1:7e:f8:df:ee:47:10:f4:ae: 81:92:82:bd:f5:4c:63:64:7d:ee:3e:90:60:54:fd:17:bc:fa: 77:3f:b9:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJKiAlksRPbS3LY9WWIqxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YTg5N2M3OThmMDE5YjI0NzdiMWE5Y2UzYjIzYmI1ZDc2 MTY2YzMwHhcNMjUxMjIxMjMwMDM0WhcNMjUxMjIyMjMwMDM0WjAzMTEwLwYDVQQD Eyg1NjdlNTU2ZmM3OWZmMDI5YmI2OWFlZTNlM2M2MTYwM2ZmNDkxNzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxao9egksXxIgL2oxvCCuq/ZB3Ihv XKg5AWRaLQZb2YZj2y7A4AX3S2F7thMMjyJSgNGWHJz/FzjfqQrZaQr13lsOt0hs 9CGNL1M9ZYoDu+L8030vUXr+VBJFsc+lZAVSYL1zGNg/Gj1gGFsjSyAoZg5SK00D b47rdMiB82d7x87WkYw+0W1wXZBzFZUVvVh7Y++kWSJXI9pQfP9imLWj6OJrWxTN kDxYULcuM6P5Yj/lGX5ccO1xBLIY4j+ItvdsyReblLVuELKoUDljplm8uDuEXe7n MpmzBNhzHRT4dKijrnYdlDmodSpVGiOyQ2zkngc/4ZBSVHJGTqLmWv64AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZ+VW/Hn/Apu2mu4+PGFgP/SRd4MB8GA1UdIwQY MBaAFLaol8eY8BmyR3sanOOyO7XXYWbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHFpWHg1andHYkpIZXhxYzQ3STd0ZGRoWnNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTdkZDctN2Y3Yy00OTRkLWI4ODYt NTJmODUwY2E1NWM2LzEvdHFpWHg1andHYkpIZXhxYzQ3STd0ZGRoWnNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTdkZDctN2Y3Yy00OTRkLWI4ODYtNTJmODUwY2E1NWM2 LzEvdHFpWHg1andHYkpIZXhxYzQ3STd0ZGRoWnNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8xyLndo tAy7oh6rfspyPVVU88O1lR4Lw+Se26tvDWbvQk/UkZbc7/Yq+4A9nxtY0eTOk6XE bDVE9vW+u8eSXgeMCyxAC/E0EmsVZipwniOe9nnILSrDOM+FqfqASel+NZjkQ5xt 3GWkwB1fAddCDrYqTbXRpbFc/ixhADWnN6SZk/d5jAxKe7Hu/EksneKHzgaXeThp VPOT8iLsHYeELd4XO11eRnDVHjApbFeTh8HCwhH/2Uvd0CpdC+o1PmGze1PFNyLn 92Me/oscyyAlfZf45tbO3/tBMucdMxAQyHw9oX743+5HEPSugZKCvfVMY2R97j6Q YFT9F7z6dz+5Wg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:18:08 2025 by rpki-client