This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft File: tXikYahZ3cmGwIqI6VEtXD0iEOY.mft (raw, json) Hash identifier: TXf9I6UE59447lwavMeW+fGBo4XgIfvikgzsizEiHPc= Subject key identifier: 55:9E:D6:9A:66:D5:E4:E5:73:69:8F:B4:0C:5D:46:79:94:4A:AC:66 Authority key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6 Certificate issuer: /CN=b578a461a859ddc986c08a88e9512d5c3d2210e6 Certificate serial: 019B0F37A2FA1C714E0AFA5A970A5C22BF07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft Manifest number: 1452 Signing time: Thu 11 Dec 2025 21:01:02 +0000 Manifest this update: Thu 11 Dec 2025 21:01:02 +0000 Manifest next update: Fri 12 Dec 2025 21:01:02 +0000 Files and hashes: 1: NOGA0CjkDnET03-2XNCrDJ4eMKk.roa (hash: pcupg8qezDQzVSVv6X2qJzowxTMngs8AYSobXls8P4A=) 2: O9usaKrUgEAZmgEEboI2zMwhay8.roa (hash: TeoCN9eeGOBAvs1/Si2jJZev4TVjpqPjDdBSDl3hCpg=) 3: tXikYahZ3cmGwIqI6VEtXD0iEOY.crl (hash: EH6/rQ4Qnn+z60ALgWC2ZxnOtqRXFTPVFm5SEVFuDxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:a2:fa:1c:71:4e:0a:fa:5a:97:0a:5c:22:bf:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6 Validity Not Before: Dec 11 21:01:02 2025 GMT Not After : Dec 12 21:01:02 2025 GMT Subject: CN=559ed69a66d5e4e573698fb40c5d4679944aac66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:55:c3:78:81:82:ea:ed:75:17:7a:fc:29:c5: 8d:37:f8:67:5c:b6:9d:56:b6:cb:97:4a:1a:58:06: cc:0f:63:38:1b:5b:16:e0:9d:33:8a:08:81:8c:5f: 15:21:6a:1f:77:be:dc:40:ef:59:ac:80:ea:63:22: bd:7c:5b:28:fc:96:9d:17:5f:e1:b1:cd:64:8a:c0: 7d:41:b6:fa:e2:bf:c9:a8:66:75:22:32:3a:d8:4e: c5:9a:64:e9:5b:46:37:37:fc:12:c4:89:5f:35:d4: 6d:ef:de:f3:89:9e:3f:42:79:72:8c:56:ad:7e:3b: ca:19:29:1f:5d:4e:38:9a:4d:a9:91:e4:8f:e9:94: 43:48:90:03:96:b9:d9:6e:6f:52:cd:37:57:2a:be: c8:fa:7e:15:a3:e6:31:19:26:c9:9a:42:8f:17:80: df:08:9d:ec:3e:02:18:55:29:2d:a6:8d:43:a9:fb: 8b:17:be:26:8f:df:b4:b1:63:8b:f6:10:2a:39:c8: 51:69:63:2e:74:29:4b:27:8b:07:d4:44:7a:6f:2f: 17:51:a0:06:25:66:91:ee:d3:f4:eb:8e:b2:96:ff: f4:ef:b3:96:1a:80:38:f6:77:8d:90:28:c7:82:34: 66:1c:d7:3c:e7:18:e9:4d:a1:d9:84:71:5e:a8:e9: 41:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9E:D6:9A:66:D5:E4:E5:73:69:8F:B4:0C:5D:46:79:94:4A:AC:66 X509v3 Authority Key Identifier: keyid:B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:98:3f:0a:9e:8c:d7:56:eb:67:8e:31:2a:51:42:cd:95:4e: 8a:c4:2f:50:dc:6a:ec:b7:55:b6:c7:88:87:b4:93:d9:40:fb: ec:98:2c:9f:09:91:55:3b:a2:79:1d:2d:1a:00:9b:87:b3:e7: 3a:39:13:a8:af:88:82:20:c3:94:86:7b:53:42:8d:5a:27:a3: 56:31:48:68:b6:5e:20:d1:49:e5:0a:32:50:8c:73:6b:86:3b: 2c:59:b5:b2:95:8e:14:4a:b1:aa:c1:d8:b0:3f:e0:3c:a8:af: 53:b9:96:20:45:c3:29:2c:ec:b5:24:47:6f:9b:1f:ad:10:0f: 3e:bd:a2:a7:ca:e1:2c:66:54:cb:0d:a3:7a:e9:11:74:f6:f6: ae:e9:18:2d:8c:0c:39:78:e2:5d:9c:6e:8c:92:a4:64:bb:0b: 12:91:10:40:2a:ba:58:bf:2e:90:27:2c:1e:88:17:49:4f:10: 32:e1:de:f1:62:19:0a:da:a2:72:2a:47:50:bd:64:70:5d:b8: 5c:17:41:e5:e7:8c:70:1f:8f:f0:f4:d9:0b:9e:2a:f0:6d:21: 96:bd:56:ff:e1:0a:43:4e:e2:14:37:16:35:68:60:9a:c7:13: 1e:73:11:e7:ad:19:18:e4:22:13:e0:75:dd:a9:76:fa:c5:a8: a9:fa:ec:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN6L6HHFOCvpalwpcIr8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NzhhNDYxYTg1OWRkYzk4NmMwOGE4OGU5NTEyZDVjM2Qy MjEwZTYwHhcNMjUxMjExMjEwMTAyWhcNMjUxMjEyMjEwMTAyWjAzMTEwLwYDVQQD Eyg1NTllZDY5YTY2ZDVlNGU1NzM2OThmYjQwYzVkNDY3OTk0NGFhYzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplXDeIGC6u11F3r8KcWNN/hnXLad VrbLl0oaWAbMD2M4G1sW4J0zigiBjF8VIWofd77cQO9ZrIDqYyK9fFso/JadF1/h sc1kisB9Qbb64r/JqGZ1IjI62E7FmmTpW0Y3N/wSxIlfNdRt797ziZ4/QnlyjFat fjvKGSkfXU44mk2pkeSP6ZRDSJADlrnZbm9SzTdXKr7I+n4Vo+YxGSbJmkKPF4Df CJ3sPgIYVSktpo1DqfuLF74mj9+0sWOL9hAqOchRaWMudClLJ4sH1ER6by8XUaAG JWaR7tP0646ylv/077OWGoA49neNkCjHgjRmHNc85xjpTaHZhHFeqOlBCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWe1ppm1eTlc2mPtAxdRnmUSqxmMB8GA1UdIwQY MBaAFLV4pGGoWd3JhsCKiOlRLVw9IhDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wY2VlMzQtNWFjYy00MmQ1LWE1YmYt ZmMxYzBjY2JjMGI3LzEvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8wY2VlMzQtNWFjYy00MmQ1LWE1YmYtZmMxYzBjY2JjMGI3 LzEvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpg/Cp6M 11brZ44xKlFCzZVOisQvUNxq7LdVtseIh7ST2UD77JgsnwmRVTuieR0tGgCbh7Pn OjkTqK+IgiDDlIZ7U0KNWiejVjFIaLZeINFJ5QoyUIxza4Y7LFm1spWOFEqxqsHY sD/gPKivU7mWIEXDKSzstSRHb5sfrRAPPr2ip8rhLGZUyw2jeukRdPb2rukYLYwM OXjiXZxujJKkZLsLEpEQQCq6WL8ukCcsHogXSU8QMuHe8WIZCtqicipHUL1kcF24 XBdB5eeMcB+P8PTZC54q8G0hlr1W/+EKQ07iFDcWNWhgmscTHnMR560ZGOQiE+B1 3al2+sWoqfrs+g== -----END CERTIFICATE-----Generated at Fri Dec 12 02:05:10 2025 by rpki-client