This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft File: tl47dPyTSwkhk63tfsoB2h7xhq0.mft (raw, json) Hash identifier: 6FQA0NalXTjdRquoYdcHGW8uL7HTQ9J8ZkU3AT6jg7k= Subject key identifier: 16:87:9E:19:39:F8:3E:F3:78:25:9B:1E:10:CC:4C:93:F3:FD:C8:B8 Authority key identifier: B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD Certificate issuer: /CN=b65e3b74fc934b092193aded7eca01da1ef186ad Certificate serial: 019B3BA234B377617345C02AF139A1FDC5F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 12:00:44 +0000 Manifest this update: Sat 20 Dec 2025 12:00:44 +0000 Manifest next update: Sun 21 Dec 2025 12:00:44 +0000 Files and hashes: 1: e_jdHZ9UPX8fMzUgAyqh1YUrr0g.roa (hash: z1xUWbdUskV5wcwENPFUis/izRGF4jR036hFKOsflNU=) 2: tl47dPyTSwkhk63tfsoB2h7xhq0.crl (hash: V4iI33QIMihombYdryf3+dZOAODPd1jhZc2NWae3vg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:34:b3:77:61:73:45:c0:2a:f1:39:a1:fd:c5:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b65e3b74fc934b092193aded7eca01da1ef186ad Validity Not Before: Dec 20 12:00:44 2025 GMT Not After : Dec 21 12:00:44 2025 GMT Subject: CN=16879e1939f83ef378259b1e10cc4c93f3fdc8b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b0:bb:33:20:ef:25:f1:be:ce:c3:dd:62:32: 59:75:e6:09:13:0a:33:69:01:0c:03:4e:66:9e:7e: 4a:ed:b1:1d:70:2c:20:64:71:4b:3a:1e:c8:ad:1d: 70:5d:f6:df:48:97:85:1d:1a:1f:b7:ec:d7:ed:4d: 3f:63:b4:64:85:89:d5:c9:74:1f:0d:22:0e:02:72: 3a:67:71:8c:1e:b0:7b:9e:f8:47:60:a3:93:b2:be: 7e:55:b8:20:ee:d0:51:74:e6:21:0f:6e:a2:07:d0: ef:94:55:33:d6:b1:90:4c:4c:a5:e8:9b:6f:e0:34: f7:04:6e:55:3c:10:86:e9:86:86:95:b1:39:d2:ba: 78:11:76:ac:2a:47:ec:15:ff:2c:6c:4a:ab:66:a6: 69:46:d5:dd:14:50:4a:91:28:d8:6c:af:ec:77:80: 8d:95:9f:da:5c:4c:db:50:43:ee:03:7b:98:e6:f4: 6d:b3:8b:7e:a3:62:76:28:1b:59:35:41:27:49:04: e1:10:b2:4e:fe:21:8e:4f:11:cd:0e:0b:b9:34:3a: 93:ca:35:c2:1b:d8:b0:e3:45:28:2b:45:e3:e1:f3: 91:fd:b3:54:30:4f:f1:82:5d:94:53:db:38:c2:0d: b6:9e:17:a4:c4:b0:02:a9:f0:f1:c7:75:57:88:73: a6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:87:9E:19:39:F8:3E:F3:78:25:9B:1E:10:CC:4C:93:F3:FD:C8:B8 X509v3 Authority Key Identifier: keyid:B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:76:90:d0:0b:35:a4:c3:d1:9c:fb:30:4a:d1:be:6a:d1:a3: 07:22:ad:13:41:aa:69:95:21:88:e6:93:7f:3b:a7:0e:95:05: 6b:78:28:05:fe:2a:c3:9d:3e:10:f3:62:6b:43:51:b3:65:0b: b6:52:eb:a4:a3:7a:92:02:08:66:af:a1:91:ce:35:19:f1:33: c7:55:38:e9:82:38:ca:a9:e7:6a:28:af:5f:fd:1d:f8:5e:54: 02:ab:f5:6e:92:75:0c:b9:67:c2:64:cb:dc:7a:11:5f:ac:86: fd:6a:95:d9:aa:87:bd:92:6a:31:51:7f:eb:47:12:ce:b4:a1: d3:05:f3:24:1f:4d:93:fe:e2:9a:ad:4a:0d:db:48:a2:0b:7f: 81:65:d3:e0:d3:1b:45:1c:80:99:e9:38:c6:e5:37:98:7c:d9: 21:44:29:1e:8e:2c:67:bb:31:65:55:cb:43:df:30:2d:8e:be: fe:e7:fd:e5:1f:e6:88:1d:dc:4d:62:a7:b6:f1:b5:96:28:e6: ac:64:e1:1f:f9:6d:d3:e0:bb:45:99:5e:cc:1b:ab:9b:87:9b: b0:d2:f1:94:fb:9c:94:f0:6f:a6:2e:df:b5:ca:20:c1:e8:18: 03:72:a1:f7:32:31:ed:25:e8:1b:b0:95:df:b4:a4:05:2f:f4: 3e:c1:3d:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ojSzd2FzRcAq8Tmh/cX0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NWUzYjc0ZmM5MzRiMDkyMTkzYWRlZDdlY2EwMWRhMWVm MTg2YWQwHhcNMjUxMjIwMTIwMDQ0WhcNMjUxMjIxMTIwMDQ0WjAzMTEwLwYDVQQD EygxNjg3OWUxOTM5ZjgzZWYzNzgyNTliMWUxMGNjNGM5M2YzZmRjOGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrC7MyDvJfG+zsPdYjJZdeYJEwoz aQEMA05mnn5K7bEdcCwgZHFLOh7IrR1wXfbfSJeFHRoft+zX7U0/Y7RkhYnVyXQf DSIOAnI6Z3GMHrB7nvhHYKOTsr5+Vbgg7tBRdOYhD26iB9DvlFUz1rGQTEyl6Jtv 4DT3BG5VPBCG6YaGlbE50rp4EXasKkfsFf8sbEqrZqZpRtXdFFBKkSjYbK/sd4CN lZ/aXEzbUEPuA3uY5vRts4t+o2J2KBtZNUEnSQThELJO/iGOTxHNDgu5NDqTyjXC G9iw40UoK0Xj4fOR/bNUME/xgl2UU9s4wg22nhekxLACqfDxx3VXiHOmDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaHnhk5+D7zeCWbHhDMTJPz/ci4MB8GA1UdIwQY MBaAFLZeO3T8k0sJIZOt7X7KAdoe8YatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGw0N2RQeVRTd2toazYzdGZzb0IyaDd4aHEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9mNTlmOGUtZjU0NC00ZmJlLTk1YzMt Y2ZmMDBlNGNkMmJlLzEvdGw0N2RQeVRTd2toazYzdGZzb0IyaDd4aHEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9mNTlmOGUtZjU0NC00ZmJlLTk1YzMtY2ZmMDBlNGNkMmJl LzEvdGw0N2RQeVRTd2toazYzdGZzb0IyaDd4aHEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnaQ0As1 pMPRnPswStG+atGjByKtE0GqaZUhiOaTfzunDpUFa3goBf4qw50+EPNia0NRs2UL tlLrpKN6kgIIZq+hkc41GfEzx1U46YI4yqnnaiivX/0d+F5UAqv1bpJ1DLlnwmTL 3HoRX6yG/WqV2aqHvZJqMVF/60cSzrSh0wXzJB9Nk/7imq1KDdtIogt/gWXT4NMb RRyAmek4xuU3mHzZIUQpHo4sZ7sxZVXLQ98wLY6+/uf95R/miB3cTWKntvG1lijm rGThH/lt0+C7RZlezBurm4ebsNLxlPuclPBvpi7ftcogwegYA3Kh9zIx7SXoG7CV 37SkBS/0PsE9dg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:06:40 2025 by rpki-client