This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft File: tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft (raw, json) Hash identifier: l3iWsEcrLTjm7XGoA6fkzQqTm1/scBvCKqR1IEEy2DY= Subject key identifier: 26:31:BC:12:04:A0:46:2E:28:9B:5E:2A:B7:C7:2F:BC:FA:12:E6:61 Authority key identifier: B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54 Certificate issuer: /CN=b5745bb8ef0088cb519a4095d651719ef51ee354 Certificate serial: 019B25F6205F26C0F7D30F9ADCC542A81627 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft Manifest number: 1091 Signing time: Tue 16 Dec 2025 07:00:45 +0000 Manifest this update: Tue 16 Dec 2025 07:00:45 +0000 Manifest next update: Wed 17 Dec 2025 07:00:45 +0000 Files and hashes: 1: n153dY1GpJ4_UwUqUY3HaTEGP7I.roa (hash: Xk7KXK61rmwLqoIHj+t2jV4riZg2jXu+cWnVquz+ZXA=) 2: tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl (hash: eWD9Mlm2fgW5ND2RHoV8zu7wTgKKAIrxmVvMv4NpTA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 07:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:20:5f:26:c0:f7:d3:0f:9a:dc:c5:42:a8:16:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5745bb8ef0088cb519a4095d651719ef51ee354 Validity Not Before: Dec 16 07:00:45 2025 GMT Not After : Dec 17 07:00:45 2025 GMT Subject: CN=2631bc1204a0462e289b5e2ab7c72fbcfa12e661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ad:c9:12:a8:f6:63:9d:64:30:3a:66:17:91: 98:c7:f9:7c:23:08:9a:dd:3d:e9:e5:1d:12:6c:3c: f1:d5:30:f9:e5:6d:4e:2e:4d:d6:9a:99:56:6c:9d: 20:a2:11:cc:ae:95:f8:37:a7:30:66:df:df:03:d4: 85:68:44:eb:41:93:51:52:6e:fc:3f:25:90:20:41: 41:3e:e7:0b:ab:d2:04:9d:80:df:06:bc:ca:2c:dc: 7d:40:17:62:71:1e:f5:3d:b0:9f:b4:47:a3:55:09: b1:ce:a1:23:d7:25:eb:c1:fc:1b:97:67:64:a4:94: 4c:f8:c9:86:a3:a1:e9:64:ec:80:1c:41:af:cc:65: 56:86:bc:bb:bb:44:9c:00:cc:c1:03:ea:b0:0e:cc: 86:f0:97:64:45:e8:ae:e2:b6:8a:ed:92:1a:8e:46: 81:37:13:85:2f:4b:14:08:6a:17:a7:4c:54:3a:84: 3f:0f:84:2f:6c:11:2e:f2:96:6a:66:1c:fe:cd:55: e5:cd:56:47:d3:65:27:a7:3a:0f:4c:22:83:c9:e3: ce:90:63:e7:df:bd:40:d1:0c:eb:36:78:9b:3d:d3: ed:d2:d1:a6:d6:82:0d:f8:61:ff:dd:9f:12:4a:fc: 2f:00:e2:e3:33:84:9d:9b:d1:07:14:8b:d0:4a:4a: 29:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:31:BC:12:04:A0:46:2E:28:9B:5E:2A:B7:C7:2F:BC:FA:12:E6:61 X509v3 Authority Key Identifier: keyid:B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:d3:2e:53:74:02:6c:e1:ee:8c:fc:be:26:55:a6:03:eb:8e: bb:1e:79:b2:fb:66:d0:e8:c9:bf:5a:b5:71:5d:cb:0b:0e:86: 8f:1c:c5:8f:9a:48:4f:cc:2a:0d:9e:36:80:0e:bd:67:1c:86: 72:70:ef:e3:62:12:94:f1:85:d5:a3:a5:a5:e2:5f:1f:2f:bd: 87:49:3a:2b:17:ec:c5:a6:6b:25:3a:15:b9:77:7d:7e:fa:58: 02:8a:92:66:05:a6:29:0d:b9:71:03:69:4d:35:44:99:8e:6f: 18:82:f8:ce:30:3b:2f:cc:27:73:fa:a4:4c:0b:f5:30:ae:96: 17:c5:cf:a4:4e:a0:28:e0:cb:5f:a5:fb:a2:ef:a4:e2:cc:be: e3:78:dd:46:32:5f:94:85:50:7e:a7:7b:c4:35:2a:3a:55:1e: d0:fc:5f:4b:0d:73:9e:07:0f:1e:01:f2:ed:52:0a:fc:ba:da: 5f:f4:0e:d9:a4:8a:f2:e0:da:2f:1f:bd:6c:bd:ad:66:6f:d8: f8:27:4f:d0:dc:24:6f:55:d9:28:10:b4:22:e1:69:54:fa:ee: ce:16:ce:0e:80:69:8f:f7:d5:6a:32:8a:7e:bb:43:cc:60:67: 26:09:6e:fc:5b:5c:7c:3c:99:28:08:60:59:a4:59:5b:59:5b: b3:0b:1b:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9iBfJsD30w+a3MVCqBYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NzQ1YmI4ZWYwMDg4Y2I1MTlhNDA5NWQ2NTE3MTllZjUx ZWUzNTQwHhcNMjUxMjE2MDcwMDQ1WhcNMjUxMjE3MDcwMDQ1WjAzMTEwLwYDVQQD EygyNjMxYmMxMjA0YTA0NjJlMjg5YjVlMmFiN2M3MmZiY2ZhMTJlNjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8q3JEqj2Y51kMDpmF5GYx/l8Iwia 3T3p5R0SbDzx1TD55W1OLk3WmplWbJ0gohHMrpX4N6cwZt/fA9SFaETrQZNRUm78 PyWQIEFBPucLq9IEnYDfBrzKLNx9QBdicR71PbCftEejVQmxzqEj1yXrwfwbl2dk pJRM+MmGo6HpZOyAHEGvzGVWhry7u0ScAMzBA+qwDsyG8JdkReiu4raK7ZIajkaB NxOFL0sUCGoXp0xUOoQ/D4QvbBEu8pZqZhz+zVXlzVZH02UnpzoPTCKDyePOkGPn 371A0QzrNnibPdPt0tGm1oIN+GH/3Z8SSvwvAOLjM4Sdm9EHFIvQSkopgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYxvBIEoEYuKJteKrfHL7z6EuZhMB8GA1UdIwQY MBaAFLV0W7jvAIjLUZpAldZRcZ71HuNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFhSYnVPOEFpTXRSbWtDVjFsRnhudlVlNDFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8xNWFmZTUtNDJiMy00Y2U2LTlkOWQt ODdjMzM2OGNiM2ZhLzEvdFhSYnVPOEFpTXRSbWtDVjFsRnhudlVlNDFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8xNWFmZTUtNDJiMy00Y2U2LTlkOWQtODdjMzM2OGNiM2Zh LzEvdFhSYnVPOEFpTXRSbWtDVjFsRnhudlVlNDFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdMuU3QC bOHujPy+JlWmA+uOux55svtm0OjJv1q1cV3LCw6GjxzFj5pIT8wqDZ42gA69ZxyG cnDv42ISlPGF1aOlpeJfHy+9h0k6KxfsxaZrJToVuXd9fvpYAoqSZgWmKQ25cQNp TTVEmY5vGIL4zjA7L8wnc/qkTAv1MK6WF8XPpE6gKODLX6X7ou+k4sy+43jdRjJf lIVQfqd7xDUqOlUe0PxfSw1zngcPHgHy7VIK/LraX/QO2aSK8uDaLx+9bL2tZm/Y +CdP0Nwkb1XZKBC0IuFpVPruzhbODoBpj/fVajKKfrtDzGBnJglu/FtcfDyZKAhg WaRZW1lbswsbkg== -----END CERTIFICATE-----Generated at Tue Dec 16 11:29:37 2025 by rpki-client