This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft File: tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json) Hash identifier: yFU/XiNsUxgEsBPMON/bgjNEvd3IIdw0x37pNkHYlKY= Subject key identifier: 1F:41:69:3A:6F:D8:04:FA:71:20:7B:60:43:B5:79:E9:A9:6F:C9:1F Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48 Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448 Certificate serial: 019B59762347F6C55A4466E11D0D20E482AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft Manifest number: 05BC Signing time: Fri 26 Dec 2025 07:01:12 +0000 Manifest this update: Fri 26 Dec 2025 07:01:12 +0000 Manifest next update: Sat 27 Dec 2025 07:01:12 +0000 Files and hashes: 1: hrqEKTykKr09BUd_K3mCMU0oC6Q.roa (hash: pufSFJ+QVHIcFkxQwEPRtygVlxFuvFk+kfnkYeAvjWg=) 2: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: 3yswa2Vumf9kkeHshLc0Jl1YuwTXyo+CvABxTd5O8O4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:23:47:f6:c5:5a:44:66:e1:1d:0d:20:e4:82:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448 Validity Not Before: Dec 26 07:01:12 2025 GMT Not After : Dec 27 07:01:12 2025 GMT Subject: CN=1f41693a6fd804fa71207b6043b579e9a96fc91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:2d:f2:4e:43:96:be:4b:89:48:3a:64:1c: f2:58:71:d5:c3:81:d1:47:ea:68:1b:c3:96:35:c9: 55:92:18:c2:88:ba:f7:ee:59:a1:e6:78:84:20:de: 6e:cd:6d:51:ca:0a:4c:c7:0f:d1:94:be:36:15:db: 31:1a:3f:3e:f2:15:52:6b:45:ca:03:20:83:32:0d: 27:bc:5d:63:bc:d3:b8:ed:2a:1d:aa:0c:d5:f2:06: 2a:e5:61:0d:b7:0b:d9:16:19:38:df:d9:b0:75:22: 6d:ad:e7:88:b0:11:99:eb:a5:2d:ab:71:dd:54:6a: 3f:9e:59:9e:c1:d5:e3:db:9a:ef:1e:d8:2b:e0:d9: 88:8e:3b:4d:9f:02:4b:ed:5f:55:84:8f:fa:ff:dc: 85:ea:e6:07:09:9a:87:15:5f:c9:08:95:00:c4:7b: aa:d6:07:cc:07:ec:ef:56:f9:a7:d1:0f:ed:26:17: 65:fa:af:40:de:5f:21:db:cf:84:93:9a:6b:0b:7d: 2e:25:ab:b0:61:80:09:f9:b2:e4:13:57:af:1c:e7: 99:58:a7:27:8c:e5:aa:16:ab:a4:b8:83:8f:23:fb: dc:e9:b1:82:62:cb:bc:46:1f:41:87:8f:03:4a:61: 85:b1:97:32:2a:74:39:e0:4a:4f:63:60:d7:3e:6e: 17:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:41:69:3A:6F:D8:04:FA:71:20:7B:60:43:B5:79:E9:A9:6F:C9:1F X509v3 Authority Key Identifier: keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:de:a9:f4:8e:c9:36:b2:fe:54:92:5e:ac:a7:8d:35:6b:57: d1:93:1f:fb:0c:84:8f:f0:0a:a2:c7:93:2b:40:24:46:34:68: cd:e5:65:af:2e:a1:6e:4e:ba:43:dd:ce:6b:47:5b:08:10:45: 78:c2:3e:bc:05:f1:35:df:75:e5:68:a0:23:b9:50:d0:97:ed: ec:85:5f:c3:7e:d1:26:fd:d5:fa:6d:86:91:7d:89:b4:34:7c: 63:af:e6:d8:60:de:59:14:af:b2:8f:fc:40:93:48:54:b0:f6: ac:60:98:18:a6:01:31:a5:e5:8c:5f:9a:0a:9b:4b:6a:3d:48: 4e:db:fd:48:b0:92:a3:e6:f5:e7:10:17:65:bc:58:fe:99:cb: 3d:cb:bf:51:bf:eb:70:60:2f:ab:ad:71:61:bb:79:17:c2:b4: da:79:41:3f:c0:c8:a9:66:74:33:5c:2d:c2:aa:8d:ec:45:5d: d9:41:1d:cd:b0:21:28:c5:60:e2:b8:e2:f1:3f:86:20:09:bf: d5:ed:cd:59:a8:d2:ad:8d:2a:a7:75:36:94:13:ee:d1:51:f3: cb:c3:84:0c:7c:77:35:6a:c5:54:ae:87:22:8b:ea:0f:3f:bb: bf:f3:ec:37:cb:aa:01:c3:4c:31:1a:dc:4f:33:70:84:ca:63: 13:92:ee:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdiNH9sVaRGbhHQ0g5IKtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YzQxZTU5ODM0ZGE2MTJkODNjYTI0MTk0ZjAyY2E2ZDc2 MDI0NDgwHhcNMjUxMjI2MDcwMTEyWhcNMjUxMjI3MDcwMTEyWjAzMTEwLwYDVQQD EygxZjQxNjkzYTZmZDgwNGZhNzEyMDdiNjA0M2I1NzllOWE5NmZjOTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCst8k5Dlr5LiUg6ZBzyWHHVw4HR R+poG8OWNclVkhjCiLr37lmh5niEIN5uzW1RygpMxw/RlL42FdsxGj8+8hVSa0XK AyCDMg0nvF1jvNO47SodqgzV8gYq5WENtwvZFhk439mwdSJtreeIsBGZ66Utq3Hd VGo/nlmewdXj25rvHtgr4NmIjjtNnwJL7V9VhI/6/9yF6uYHCZqHFV/JCJUAxHuq 1gfMB+zvVvmn0Q/tJhdl+q9A3l8h28+Ek5prC30uJauwYYAJ+bLkE1evHOeZWKcn jOWqFqukuIOPI/vc6bGCYsu8Rh9Bh48DSmGFsZcyKnQ54EpPY2DXPm4XrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9BaTpv2AT6cSB7YEO1eempb8kfMB8GA1UdIwQY MBaAFLTEHlmDTaYS2DyiQZTwLKbXYCRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hM2JhY2EtNDM3ZC00NjA3LTljMWEt NTU3YTRjMzFlMDJlLzEvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hM2JhY2EtNDM3ZC00NjA3LTljMWEtNTU3YTRjMzFlMDJl LzEvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALN6p9I7J NrL+VJJerKeNNWtX0ZMf+wyEj/AKoseTK0AkRjRozeVlry6hbk66Q93Oa0dbCBBF eMI+vAXxNd915WigI7lQ0Jft7IVfw37RJv3V+m2GkX2JtDR8Y6/m2GDeWRSvso/8 QJNIVLD2rGCYGKYBMaXljF+aCptLaj1ITtv9SLCSo+b15xAXZbxY/pnLPcu/Ub/r cGAvq61xYbt5F8K02nlBP8DIqWZ0M1wtwqqN7EVd2UEdzbAhKMVg4rji8T+GIAm/ 1e3NWajSrY0qp3U2lBPu0VHzy8OEDHx3NWrFVK6HIovqDz+7v/PsN8uqAcNMMRrc TzNwhMpjE5LuUg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:53 2025 by rpki-client