This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft File: tXikYahZ3cmGwIqI6VEtXD0iEOY.mft (raw, json) Hash identifier: ceIC1gZNcLfJBVuPhkY/jp32mR8NehTFC6OvA1oipVo= Subject key identifier: 26:32:4A:05:D9:9D:30:70:B3:BF:68:01:EE:C2:C8:C4:1E:6A:F6:9F Authority key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6 Certificate issuer: /CN=b578a461a859ddc986c08a88e9512d5c3d2210e6 Certificate serial: 019B4738D365F4024FE75A7D5F085BFD0C5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft Manifest number: 146F Signing time: Mon 22 Dec 2025 18:01:04 +0000 Manifest this update: Mon 22 Dec 2025 18:01:04 +0000 Manifest next update: Tue 23 Dec 2025 18:01:04 +0000 Files and hashes: 1: NOGA0CjkDnET03-2XNCrDJ4eMKk.roa (hash: pcupg8qezDQzVSVv6X2qJzowxTMngs8AYSobXls8P4A=) 2: O9usaKrUgEAZmgEEboI2zMwhay8.roa (hash: TeoCN9eeGOBAvs1/Si2jJZev4TVjpqPjDdBSDl3hCpg=) 3: tXikYahZ3cmGwIqI6VEtXD0iEOY.crl (hash: bsxl656mSuUMm7ItqaFWlyzkPNPOY0WIE1Eej5uE6Ds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:38:d3:65:f4:02:4f:e7:5a:7d:5f:08:5b:fd:0c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6 Validity Not Before: Dec 22 18:01:04 2025 GMT Not After : Dec 23 18:01:04 2025 GMT Subject: CN=26324a05d99d3070b3bf6801eec2c8c41e6af69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6e:67:73:e1:5c:f9:96:9b:a1:a1:89:01:13: 35:b7:ce:f0:e4:64:cb:d1:1d:95:dc:44:84:3b:17: b1:3b:4a:ac:4d:b7:a6:70:83:af:45:89:fd:f1:98: de:9f:50:3d:28:e1:83:0f:e7:0c:d1:39:55:41:de: 28:69:ce:b0:ea:25:36:57:e5:a5:fc:25:a7:90:fb: fb:a4:6b:df:6f:60:aa:32:ac:a1:5c:e5:c1:20:52: 44:8d:5f:5e:96:52:b8:75:9b:85:51:8a:31:cf:18: 04:c1:7a:6d:61:52:de:d9:b6:69:28:3c:7b:b6:38: 8c:68:84:8a:26:c8:d3:a5:b5:b4:2a:0f:ac:35:08: 42:3a:16:c4:9e:06:b5:ee:75:bf:de:df:45:d1:03: b3:87:98:43:a6:a0:ff:f6:95:eb:1f:9d:f2:bb:18: 02:fd:db:9a:40:51:80:ef:d9:ef:9a:08:df:0f:c0: a3:63:89:51:06:f8:ed:1a:c7:24:44:d4:23:4e:03: cc:24:e9:8c:82:8a:25:c7:d3:e1:ad:e5:37:e4:2d: 5e:c3:32:4e:61:07:d5:5c:4c:cd:8e:b3:63:84:36: 84:92:61:af:2d:15:0a:82:c2:4c:d5:30:14:0c:81: 71:0b:8c:9b:53:51:90:6f:cd:fb:c5:10:c8:3d:b6: fb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:32:4A:05:D9:9D:30:70:B3:BF:68:01:EE:C2:C8:C4:1E:6A:F6:9F X509v3 Authority Key Identifier: keyid:B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:f2:30:54:c2:0f:5c:1d:2b:50:a1:13:33:8b:ca:5c:3a:6e: ad:e1:bb:42:88:c5:1b:3d:38:a7:48:c3:54:50:54:23:07:c9: f5:b3:0b:74:22:c7:a2:1a:7c:47:0c:36:10:fe:ca:2a:6f:17: d5:39:fd:17:22:1d:c1:e6:cd:9a:e6:38:e5:4d:45:06:8e:0d: 50:8a:ec:2e:04:e2:26:2c:d0:10:0c:17:0c:b0:aa:9c:f1:a9: 66:cc:43:b6:d6:a0:7a:24:38:7c:5f:86:76:b7:a7:84:17:fb: e5:2c:2c:ad:56:f0:4c:b8:fa:61:62:b2:9c:50:05:f8:e9:b6: f4:fa:b5:1e:e2:9d:bd:c8:cf:c3:27:83:7d:96:0a:33:31:19: 6f:fe:0e:d0:37:7c:b4:93:99:fd:bd:fc:91:9a:0a:1b:24:d6: ef:f9:bd:7e:bf:dd:a6:75:21:31:ab:d1:c6:75:08:15:6d:be: 5b:53:f3:d9:f7:22:dd:dd:62:5f:20:fa:a3:4a:c4:35:cb:e3: 3b:ff:29:e2:28:ab:97:22:dd:83:48:aa:39:ec:52:7d:22:3d: 70:37:7c:fb:58:5c:74:95:8f:7f:9f:a2:11:f9:6d:58:c1:93: 70:04:aa:c9:cd:f9:58:36:e2:89:7d:ae:15:de:3b:42:f0:a1: 91:5d:2b:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHONNl9AJP51p9Xwhb/QxbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NzhhNDYxYTg1OWRkYzk4NmMwOGE4OGU5NTEyZDVjM2Qy MjEwZTYwHhcNMjUxMjIyMTgwMTA0WhcNMjUxMjIzMTgwMTA0WjAzMTEwLwYDVQQD EygyNjMyNGEwNWQ5OWQzMDcwYjNiZjY4MDFlZWMyYzhjNDFlNmFmNjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG5nc+Fc+ZaboaGJARM1t87w5GTL 0R2V3ESEOxexO0qsTbemcIOvRYn98Zjen1A9KOGDD+cM0TlVQd4oac6w6iU2V+Wl /CWnkPv7pGvfb2CqMqyhXOXBIFJEjV9ellK4dZuFUYoxzxgEwXptYVLe2bZpKDx7 tjiMaISKJsjTpbW0Kg+sNQhCOhbEnga17nW/3t9F0QOzh5hDpqD/9pXrH53yuxgC /duaQFGA79nvmgjfD8CjY4lRBvjtGsckRNQjTgPMJOmMgoolx9PhreU35C1ewzJO YQfVXEzNjrNjhDaEkmGvLRUKgsJM1TAUDIFxC4ybU1GQb837xRDIPbb7/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYySgXZnTBws79oAe7CyMQeavafMB8GA1UdIwQY MBaAFLV4pGGoWd3JhsCKiOlRLVw9IhDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wY2VlMzQtNWFjYy00MmQ1LWE1YmYt ZmMxYzBjY2JjMGI3LzEvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8wY2VlMzQtNWFjYy00MmQ1LWE1YmYtZmMxYzBjY2JjMGI3 LzEvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/IwVMIP XB0rUKETM4vKXDpureG7QojFGz04p0jDVFBUIwfJ9bMLdCLHohp8Rww2EP7KKm8X 1Tn9FyIdwebNmuY45U1FBo4NUIrsLgTiJizQEAwXDLCqnPGpZsxDttageiQ4fF+G drenhBf75SwsrVbwTLj6YWKynFAF+Om29Pq1HuKdvcjPwyeDfZYKMzEZb/4O0Dd8 tJOZ/b38kZoKGyTW7/m9fr/dpnUhMavRxnUIFW2+W1Pz2fci3d1iXyD6o0rENcvj O/8p4iirlyLdg0iqOexSfSI9cDd8+1hcdJWPf5+iEfltWMGTcASqyc35WDbiiX2u Fd47QvChkV0rmw== -----END CERTIFICATE-----Generated at Mon Dec 22 20:44:38 2025 by rpki-client