This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft File: TBikTVSkel6pfe39Xtg3nX7qAtA.mft (raw, json) Hash identifier: raocGGKNyWZ4LhUzED3GrVsqLQFL5kA2B1kMcFZkoYU= Subject key identifier: 0D:52:BA:59:1E:C4:6D:8C:98:3A:39:2F:44:BE:5D:07:C9:89:60:81 Authority key identifier: 4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0 Certificate issuer: /CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0 Certificate serial: 019B42B6FFC57E3171652A3E5E50FB28C337 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft Manifest number: 10C7 Signing time: Sun 21 Dec 2025 21:00:47 +0000 Manifest this update: Sun 21 Dec 2025 21:00:47 +0000 Manifest next update: Mon 22 Dec 2025 21:00:47 +0000 Files and hashes: 1: A9doBQYRzqnAsYM8_xOXyY9_aSQ.roa (hash: LqION540Zg0mnXlhYgbOPsJtgA4nsXptBIy0jMQ2+yc=) 2: TBikTVSkel6pfe39Xtg3nX7qAtA.crl (hash: XPkfHW08bxvBWP90VPILjc0uoWlac3yp8LLRFY94nvw=) 3: h0ikqrJ3SuzqEepqLjnvsNWJNVQ.roa (hash: RvDiiQJF7vKX50IA4ffr+9+bGA5/Q5Ynq2tViwpnB40=) 4: n1aoovYMZxSs0WefrRJiB3jdudI.roa (hash: q2PjweCwbyJvPPBstb2/ErFFOd9PN++7msnJLhK1PxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b6:ff:c5:7e:31:71:65:2a:3e:5e:50:fb:28:c3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0 Validity Not Before: Dec 21 21:00:47 2025 GMT Not After : Dec 22 21:00:47 2025 GMT Subject: CN=0d52ba591ec46d8c983a392f44be5d07c9896081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:34:fe:32:0a:b8:ff:48:52:f4:98:0d:ca:3a: 9e:87:f5:8b:e8:d5:50:1c:67:e1:c7:32:cc:8f:59: 35:77:11:ab:be:9e:a6:d4:28:90:50:84:db:d6:e4: 10:b7:3a:5a:2e:1e:70:d0:22:77:30:f2:b6:c0:25: 2f:17:18:64:f2:80:ce:60:62:09:51:e0:a7:f6:4f: ef:30:a7:df:0a:f3:d9:02:af:89:ac:d1:65:48:33: 7e:f5:6f:52:e0:da:35:2a:45:cc:83:06:9a:a3:c2: e1:07:33:5d:de:db:ea:21:c1:32:24:a9:00:74:ba: 1c:f7:dd:65:6b:f3:d5:67:de:41:9c:de:b8:72:3b: 07:40:aa:01:9f:59:9a:6a:27:39:e2:e9:69:f2:7f: 86:bb:cf:8f:5d:e8:03:db:bf:f7:6c:78:4d:ef:5b: 2c:98:eb:30:2f:26:e9:22:07:a4:d6:75:88:7d:37: be:a9:71:af:ae:39:b6:1f:b5:ee:db:01:61:f4:44: 70:61:50:96:a5:17:7d:c0:bd:7a:04:d1:f3:3a:2f: e6:42:ac:8f:4a:58:f2:50:bf:86:c4:cd:e2:e4:b7: 63:ec:2b:69:c6:fb:83:e7:d4:7d:cc:f1:d4:00:db: 91:f4:99:cb:c8:59:59:a6:4f:01:08:d0:a9:e7:3d: c1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:52:BA:59:1E:C4:6D:8C:98:3A:39:2F:44:BE:5D:07:C9:89:60:81 X509v3 Authority Key Identifier: keyid:4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:0c:e9:0f:c1:8f:14:31:4b:16:d6:ef:5f:48:d7:03:2b:32: fd:7a:68:9d:88:08:6c:a2:28:7c:3d:87:38:fb:42:88:25:62: c6:5d:b8:46:9b:45:0e:26:b1:2a:3b:78:55:1f:e1:cc:18:9b: 55:dd:54:93:78:f6:6a:10:ca:05:c0:df:d8:24:94:aa:6e:57: 5c:5f:e0:76:ba:bd:08:23:cf:24:22:c5:2a:0f:46:fc:d8:b9: 5a:24:a7:97:b8:b8:a3:5f:0b:83:87:54:1a:2d:af:74:92:61: 2d:00:2f:42:12:f8:c5:0b:10:02:4d:76:57:04:49:38:a0:c6: 67:4d:bc:81:cc:65:93:41:f5:91:a6:6e:21:c7:63:93:79:50: a7:1c:2b:46:ae:4a:ff:03:ed:e1:c2:4f:d9:f0:0e:db:4f:93: e7:0a:4a:31:60:ca:86:de:c6:3d:67:57:86:55:05:fb:59:f1: a5:c8:88:ce:93:1a:73:ab:5a:82:ca:3a:e9:ab:f0:90:cd:1d: 2b:c2:3f:87:a4:51:8a:b0:9d:73:7e:b3:1c:69:d7:5d:fe:af: 72:c0:47:17:aa:97:94:2e:8f:8c:da:f3:7d:7d:ce:5d:5e:e4: 3a:6e:0f:5a:6e:5c:4b:4f:18:0e:47:2f:67:ba:a4:0c:fb:d5: 90:0c:50:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtv/FfjFxZSo+XlD7KMM3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMThhNDRkNTRhNDdhNWVhOTdkZWRmZDVlZDgzNzlkN2Vl YTAyZDAwHhcNMjUxMjIxMjEwMDQ3WhcNMjUxMjIyMjEwMDQ3WjAzMTEwLwYDVQQD EygwZDUyYmE1OTFlYzQ2ZDhjOTgzYTM5MmY0NGJlNWQwN2M5ODk2MDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DT+Mgq4/0hS9JgNyjqeh/WL6NVQ HGfhxzLMj1k1dxGrvp6m1CiQUITb1uQQtzpaLh5w0CJ3MPK2wCUvFxhk8oDOYGIJ UeCn9k/vMKffCvPZAq+JrNFlSDN+9W9S4No1KkXMgwaao8LhBzNd3tvqIcEyJKkA dLoc991la/PVZ95BnN64cjsHQKoBn1maaic54ulp8n+Gu8+PXegD27/3bHhN71ss mOswLybpIgek1nWIfTe+qXGvrjm2H7Xu2wFh9ERwYVCWpRd9wL16BNHzOi/mQqyP SljyUL+GxM3i5Ldj7CtpxvuD59R9zPHUANuR9JnLyFlZpk8BCNCp5z3BMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1SulkexG2MmDo5L0S+XQfJiWCBMB8GA1UdIwQY MBaAFEwYpE1UpHpeqX3t/V7YN51+6gLQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEJpa1RWU2tlbDZwZmUzOVh0ZzNuWDdxQXRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hYmU2YzAtZTc5ZC00Y2RkLTkyYWQt ZjIxMzYzMDcxNTkxLzEvVEJpa1RWU2tlbDZwZmUzOVh0ZzNuWDdxQXRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9hYmU2YzAtZTc5ZC00Y2RkLTkyYWQtZjIxMzYzMDcxNTkx LzEvVEJpa1RWU2tlbDZwZmUzOVh0ZzNuWDdxQXRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQzpD8GP FDFLFtbvX0jXAysy/XponYgIbKIofD2HOPtCiCVixl24RptFDiaxKjt4VR/hzBib Vd1Uk3j2ahDKBcDf2CSUqm5XXF/gdrq9CCPPJCLFKg9G/Ni5WiSnl7i4o18Lg4dU Gi2vdJJhLQAvQhL4xQsQAk12VwRJOKDGZ028gcxlk0H1kaZuIcdjk3lQpxwrRq5K /wPt4cJP2fAO20+T5wpKMWDKht7GPWdXhlUF+1nxpciIzpMac6tagso66avwkM0d K8I/h6RRirCdc36zHGnXXf6vcsBHF6qXlC6PjNrzfX3OXV7kOm4PWm5cS08YDkcv Z7qkDPvVkAxQ1A== -----END CERTIFICATE-----Generated at Mon Dec 22 02:21:20 2025 by rpki-client