This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json) Hash identifier: K60pmbPHRwlCui/HY37fwGpAFTf24jdSoWZfR0VvuhM= Subject key identifier: A2:11:B7:16:24:24:C4:E1:CB:B8:B3:6A:0E:57:2E:D0:5A:2A:D9:38 Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89 Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189 Certificate serial: 019B3F11458C3283F0C6FA007DDC8701899F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 04:00:55 +0000 Manifest this update: Sun 21 Dec 2025 04:00:55 +0000 Manifest next update: Mon 22 Dec 2025 04:00:55 +0000 Files and hashes: 1: WmxX7pBfpD5c2m2kHOUO4M_bBgA.roa (hash: q0DpW8XtR4IxHRwLJz0IGFkpb8cJ4HYo8d4HsEmNl8o=) 2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: zXkZAUtxJbvmKaLM0T7TKpn2P8r7W3tLzxY6f9kRV6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:45:8c:32:83:f0:c6:fa:00:7d:dc:87:01:89:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189 Validity Not Before: Dec 21 04:00:55 2025 GMT Not After : Dec 22 04:00:55 2025 GMT Subject: CN=a211b7162424c4e1cbb8b36a0e572ed05a2ad938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b4:33:3a:78:11:26:0d:b7:e1:13:0e:b3:2c: ec:b7:14:26:d8:ab:40:b1:ff:de:7a:3d:22:a7:e3: ce:e0:96:41:c9:4f:67:ac:77:62:98:40:30:cd:69: 3a:92:a7:d7:14:e2:35:df:b2:45:6f:89:9c:1e:e9: 3c:00:28:ad:98:02:dc:27:7e:8a:bb:f7:1f:85:16: dc:09:97:34:9b:f1:fe:6a:63:e4:0b:3b:f8:a3:53: 63:c9:48:62:58:c2:27:c2:a3:0f:5f:5a:b8:58:75: cc:75:03:e5:9c:06:51:b1:e8:55:f0:56:fe:f5:a7: 53:5f:f6:ee:25:6e:a9:34:53:27:27:0b:57:6d:46: eb:be:3a:0e:a7:ee:d3:a9:99:43:c4:e3:f2:0f:e6: e4:75:e3:5e:21:44:7f:2f:fc:df:5d:cd:c7:d3:34: f3:5e:7f:2c:13:58:5e:3c:ec:3b:1a:67:ee:78:43: 7e:f2:fe:4b:5a:72:1d:5a:24:c0:c3:51:03:bb:28: c1:d9:a2:99:fe:5a:56:2b:f2:3e:95:9d:42:fb:4b: 02:cf:df:e3:8d:b0:fa:35:06:24:24:7f:01:b8:76: 24:b2:2e:0b:86:14:00:7b:54:f6:7b:7c:f6:b7:e8: ea:d0:72:9f:4c:8d:f9:c1:4b:78:e3:90:9e:5b:16: 8a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:11:B7:16:24:24:C4:E1:CB:B8:B3:6A:0E:57:2E:D0:5A:2A:D9:38 X509v3 Authority Key Identifier: keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:b0:24:7a:f2:38:91:98:90:30:5b:d2:ae:a8:2d:54:c3:88: eb:2c:32:c3:1d:3f:7d:71:18:6d:de:59:62:80:fe:90:3c:c7: 28:a2:99:fd:b8:ce:3a:41:39:bd:6f:1a:17:a9:ab:16:31:a0: 19:65:37:fd:76:66:6e:64:e5:a8:bb:93:9f:1c:7c:7b:13:01: 71:ea:ff:75:d8:6b:9d:ed:4d:d2:e4:e0:dc:2f:bf:7c:e3:7c: 21:3d:73:10:00:9a:84:17:9c:7c:a6:34:60:35:f1:0e:bf:0e: 0b:11:c9:9e:3a:c4:8e:28:79:34:ab:a0:d8:cd:f3:6d:63:0b: 40:98:c5:1f:b5:cd:99:40:3e:54:b5:72:e0:59:f6:f4:03:a8: 52:b6:36:8a:fe:97:93:26:4d:a2:44:ec:11:69:6a:ee:72:59: 4f:79:67:71:9d:b5:58:5a:e2:36:e7:24:ee:3d:83:63:83:62: ac:ad:a7:fb:9e:d1:7d:32:7b:f2:45:ed:06:0e:1c:79:00:53: 7b:36:c9:c9:68:ec:2b:94:cd:31:f7:49:66:ba:a2:5e:07:2a: c1:28:94:ec:38:8e:de:c2:2a:bf:2f:f8:79:02:a7:ed:b6:e4: 8a:15:a4:57:83:93:26:81:66:8d:e8:b9:37:d4:91:cb:6d:0e: bf:99:19:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EUWMMoPwxvoAfdyHAYmfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTg4MmY3MTcxYWY2ZGNkY2NjOWNkNzlmOThkZWM2NzU3 ZmUxODkwHhcNMjUxMjIxMDQwMDU1WhcNMjUxMjIyMDQwMDU1WjAzMTEwLwYDVQQD EyhhMjExYjcxNjI0MjRjNGUxY2JiOGIzNmEwZTU3MmVkMDVhMmFkOTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLQzOngRJg234RMOsyzstxQm2KtA sf/eej0ip+PO4JZByU9nrHdimEAwzWk6kqfXFOI137JFb4mcHuk8ACitmALcJ36K u/cfhRbcCZc0m/H+amPkCzv4o1NjyUhiWMInwqMPX1q4WHXMdQPlnAZRsehV8Fb+ 9adTX/buJW6pNFMnJwtXbUbrvjoOp+7TqZlDxOPyD+bkdeNeIUR/L/zfXc3H0zTz Xn8sE1hePOw7GmfueEN+8v5LWnIdWiTAw1EDuyjB2aKZ/lpWK/I+lZ1C+0sCz9/j jbD6NQYkJH8BuHYksi4LhhQAe1T2e3z2t+jq0HKfTI35wUt445CeWxaKJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIRtxYkJMThy7izag5XLtBaKtk4MB8GA1UdIwQY MBaAFLTogvcXGvbc3Myc15+Y3sZ1f+GJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAt ZmVmZThlMzQwMDZjLzEvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAtZmVmZThlMzQwMDZj LzEvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7AkevI4 kZiQMFvSrqgtVMOI6ywywx0/fXEYbd5ZYoD+kDzHKKKZ/bjOOkE5vW8aF6mrFjGg GWU3/XZmbmTlqLuTnxx8exMBcer/ddhrne1N0uTg3C+/fON8IT1zEACahBecfKY0 YDXxDr8OCxHJnjrEjih5NKug2M3zbWMLQJjFH7XNmUA+VLVy4Fn29AOoUrY2iv6X kyZNokTsEWlq7nJZT3lncZ21WFriNuck7j2DY4NirK2n+57RfTJ78kXtBg4ceQBT ezbJyWjsK5TNMfdJZrqiXgcqwSiU7DiO3sIqvy/4eQKn7bbkihWkV4OTJoFmjei5 N9SRy20Ov5kZrQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:22:14 2025 by rpki-client