This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft File: tDtWqlNz6PXng0dnQkDv98KCctw.mft (raw, json) Hash identifier: e3ZQ/VzWJKKb2IWvaaLvEK6jU3GuO1NBQIz+piGahqE= Subject key identifier: 9B:45:3B:1E:9C:63:68:D7:73:7E:C4:D6:3E:3E:00:6B:E2:EF:A1:46 Authority key identifier: B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC Certificate issuer: /CN=b43b56aa5373e8f5e78347674240eff7c28272dc Certificate serial: 019B5976767667B69FAC8070D597D56D289D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft Manifest number: 10CF Signing time: Fri 26 Dec 2025 07:01:34 +0000 Manifest this update: Fri 26 Dec 2025 07:01:34 +0000 Manifest next update: Sat 27 Dec 2025 07:01:34 +0000 Files and hashes: 1: tDtWqlNz6PXng0dnQkDv98KCctw.crl (hash: IeC9Lqd0BwfkHgJMEcrRUwJHoiqpUDVcJuDg3dEUjpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:76:76:67:b6:9f:ac:80:70:d5:97:d5:6d:28:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43b56aa5373e8f5e78347674240eff7c28272dc Validity Not Before: Dec 26 07:01:34 2025 GMT Not After : Dec 27 07:01:34 2025 GMT Subject: CN=9b453b1e9c6368d7737ec4d63e3e006be2efa146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6c:72:69:c3:c2:23:43:53:69:ea:19:00:bc: 75:bf:32:38:6c:50:64:83:23:80:21:2f:5e:8e:10: e2:cb:94:da:2b:82:6b:4f:1b:3e:ba:15:56:f7:cc: af:b2:c1:69:54:8a:d2:55:a5:f3:5c:73:e6:b2:56: f4:70:d7:d5:97:d0:88:f1:82:88:ed:66:93:95:04: 4b:96:18:b7:99:bd:e3:72:f8:84:fa:d3:6e:0a:ef: e0:67:cd:c2:67:62:52:60:97:cf:ce:ab:51:4f:a4: 86:3b:9b:cb:e4:50:13:27:9c:47:b5:8b:c2:88:33: 42:f0:a3:19:94:e6:9e:76:78:45:d2:43:2e:96:73: 94:92:16:c3:40:45:4d:2d:a0:c5:c5:1f:98:0f:da: 97:d0:71:a2:12:17:7f:f8:16:12:01:9a:07:ef:2b: bb:c7:8a:49:14:88:15:f5:ed:e0:ab:0c:8c:b2:a6: 4f:ae:57:a7:c8:73:69:9d:92:cc:c7:a6:89:51:20: 60:ce:03:89:d4:bd:4b:78:91:f7:15:29:95:a4:39: 52:3b:90:9c:53:54:19:57:91:df:e3:72:ab:e3:28: db:87:fd:b5:14:3d:ba:f4:6a:49:35:46:89:ee:26: 6a:4d:f4:7e:13:2a:45:37:38:b7:b5:89:e4:d4:c5: 35:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:45:3B:1E:9C:63:68:D7:73:7E:C4:D6:3E:3E:00:6B:E2:EF:A1:46 X509v3 Authority Key Identifier: keyid:B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:5e:0b:c3:5a:95:c0:95:fc:4c:70:bf:5c:d2:21:0d:4b:63: 75:58:c0:7b:27:b3:e6:07:5d:18:b1:c0:15:83:87:79:85:77: 49:f7:6d:15:91:6b:27:7c:2c:a6:30:b1:a0:6e:8f:58:ee:f3: 19:ca:5d:23:d9:28:16:a2:88:d6:17:83:e8:11:3f:b7:61:5e: 29:e1:76:63:31:ac:1f:55:93:a9:f6:7d:0b:8d:6a:a4:f3:8d: c0:ea:6f:0f:5b:b0:04:c0:61:15:33:20:dd:3b:87:52:b3:13: 4e:aa:1b:5a:f3:eb:a4:4d:62:a4:d4:5a:4d:42:48:6f:ef:96: 0a:20:70:88:80:6c:ec:75:b9:c0:b2:4e:21:cb:bf:20:5c:85: c1:3b:cc:57:1b:a5:60:6f:e1:9a:18:8e:bd:7c:ab:8c:40:46: 48:0d:bc:bb:98:dc:d4:4f:c9:b3:1d:eb:9d:f7:a5:ad:62:9e: d8:c1:0b:ae:3a:7d:56:21:cb:0d:f5:3f:e5:6b:5c:24:1f:20: af:31:f3:f9:c0:e6:8b:c8:9e:d4:51:c7:90:84:15:19:1a:9d: 46:cb:f1:f6:b8:de:db:6c:ee:d2:08:4e:a1:0d:90:87:f0:7d: 9f:b2:1d:4c:0f:5f:3a:a2:26:19:f5:9b:59:2c:23:9f:60:12: c3:83:00:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdnZ2Z7afrIBw1ZfVbSidMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0M2I1NmFhNTM3M2U4ZjVlNzgzNDc2NzQyNDBlZmY3YzI4 MjcyZGMwHhcNMjUxMjI2MDcwMTM0WhcNMjUxMjI3MDcwMTM0WjAzMTEwLwYDVQQD Eyg5YjQ1M2IxZTljNjM2OGQ3NzM3ZWM0ZDYzZTNlMDA2YmUyZWZhMTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WxyacPCI0NTaeoZALx1vzI4bFBk gyOAIS9ejhDiy5TaK4JrTxs+uhVW98yvssFpVIrSVaXzXHPmslb0cNfVl9CI8YKI 7WaTlQRLlhi3mb3jcviE+tNuCu/gZ83CZ2JSYJfPzqtRT6SGO5vL5FATJ5xHtYvC iDNC8KMZlOaednhF0kMulnOUkhbDQEVNLaDFxR+YD9qX0HGiEhd/+BYSAZoH7yu7 x4pJFIgV9e3gqwyMsqZPrlenyHNpnZLMx6aJUSBgzgOJ1L1LeJH3FSmVpDlSO5Cc U1QZV5Hf43Kr4yjbh/21FD269GpJNUaJ7iZqTfR+EypFNzi3tYnk1MU1EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtFOx6cY2jXc37E1j4+AGvi76FGMB8GA1UdIwQY MBaAFLQ7VqpTc+j154NHZ0JA7/fCgnLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdER0V3FsTno2UFhuZzBkblFrRHY5OEtDY3R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNGFlZGYtY2FiNS00MTk5LWEyMDct NWNmNjc0OGQ4Nzg0LzEvdER0V3FsTno2UFhuZzBkblFrRHY5OEtDY3R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9hNGFlZGYtY2FiNS00MTk5LWEyMDctNWNmNjc0OGQ4Nzg0 LzEvdER0V3FsTno2UFhuZzBkblFrRHY5OEtDY3R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfl4Lw1qV wJX8THC/XNIhDUtjdVjAeyez5gddGLHAFYOHeYV3SfdtFZFrJ3wspjCxoG6PWO7z GcpdI9koFqKI1heD6BE/t2FeKeF2YzGsH1WTqfZ9C41qpPONwOpvD1uwBMBhFTMg 3TuHUrMTTqobWvPrpE1ipNRaTUJIb++WCiBwiIBs7HW5wLJOIcu/IFyFwTvMVxul YG/hmhiOvXyrjEBGSA28u5jc1E/Jsx3rnfelrWKe2MELrjp9ViHLDfU/5WtcJB8g rzHz+cDmi8ie1FHHkIQVGRqdRsvx9rje22zu0ghOoQ2Qh/B9n7IdTA9fOqImGfWb WSwjn2ASw4MAPw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:56:19 2025 by rpki-client