This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft File: tVG7qYKf51krGwLo1xyP18ziGrE.mft (raw, json) Hash identifier: 4WA2UAtXuZp7OBUGf5C+k19v/PkCVbHuolu5weKHA20= Subject key identifier: 12:95:15:37:60:16:2E:44:38:4D:A5:E2:13:B4:B0:5F:A9:86:D4:D7 Authority key identifier: B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1 Certificate issuer: /CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1 Certificate serial: 019B22F551CC805DB0854F48D8C2FF1D230C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft Manifest number: 0160 Signing time: Mon 15 Dec 2025 17:01:01 +0000 Manifest this update: Mon 15 Dec 2025 17:01:01 +0000 Manifest next update: Tue 16 Dec 2025 17:01:01 +0000 Files and hashes: 1: aMimPGKaT2G8XuuZ7-2O1Nh1hh8.roa (hash: k/8LZ3MzLnclzjgMcW5jgVcEL+c+Ow+osyP79ShIXpk=) 2: tVG7qYKf51krGwLo1xyP18ziGrE.crl (hash: yzb9ajOJBMNpBl8EQ2d5QZHkHHyIRzsPRRjT5JpN8Ao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f5:51:cc:80:5d:b0:85:4f:48:d8:c2:ff:1d:23:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1 Validity Not Before: Dec 15 17:01:01 2025 GMT Not After : Dec 16 17:01:01 2025 GMT Subject: CN=1295153760162e44384da5e213b4b05fa986d4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:38:11:53:1f:9a:3a:d1:96:25:e1:30:21:22: c8:15:f7:59:af:f9:0d:c0:e9:39:ec:39:b6:d5:12: 30:62:a3:8f:a4:7f:d6:51:19:54:01:3a:77:f3:e9: d1:e9:d3:b7:5f:c9:8f:93:5c:fc:9c:ae:ee:f9:1f: cf:3b:a3:46:8c:03:85:31:1a:bd:ea:7d:b0:ee:78: cc:46:82:ad:8a:b0:e3:46:63:46:16:b2:33:68:87: e5:16:f7:8a:8c:84:38:f7:36:ac:d5:7f:0b:56:40: a4:36:3d:2b:69:3d:19:73:86:ad:0c:de:4c:77:80: 58:7e:47:fd:3e:31:e2:ed:47:08:25:86:46:6a:02: ab:46:b8:e4:23:10:ee:a6:46:78:34:4e:79:c0:08: 52:32:62:9b:af:76:95:02:86:f3:d2:9b:e6:52:a2: 87:e6:a0:7a:71:0f:71:d1:e1:eb:45:e2:5a:74:1d: 8f:0a:2d:30:05:a4:84:64:7c:e7:56:6c:ed:0d:03: 7d:93:66:2b:ff:28:f6:fd:6e:8d:f6:ac:83:84:ed: 27:70:ed:55:ae:7d:74:f4:18:08:b1:ea:06:8d:22: 66:e0:4f:bb:ca:f2:75:a3:46:8a:66:99:b1:6d:80: b9:b5:5a:e8:c5:f8:dd:67:46:51:69:e6:0d:58:c0: 54:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:95:15:37:60:16:2E:44:38:4D:A5:E2:13:B4:B0:5F:A9:86:D4:D7 X509v3 Authority Key Identifier: keyid:B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:29:e5:c0:7e:89:6d:73:f1:b4:f6:ef:25:6f:0e:08:9b:56: cc:9d:cf:f7:c8:c3:af:12:2f:27:94:b1:85:44:c4:14:8c:5e: 4c:1c:1e:87:91:22:bc:2e:ac:07:56:67:ea:ac:3b:f3:c9:d6: 3b:76:ef:82:71:21:b7:b9:41:cf:9d:d6:f6:14:10:74:5d:2d: e8:ce:2d:8d:99:d8:43:7d:4d:42:c4:00:af:4b:cc:38:71:ca: 8b:26:ce:62:2e:3a:09:a5:ea:09:5e:70:e3:d9:0f:c6:19:d8: 04:d3:a9:d7:6e:3b:c9:b6:d6:c4:fb:d6:ee:50:50:c9:a8:e3: 56:42:c7:87:5c:c0:09:5f:16:f5:0c:38:54:b8:6d:62:80:86: e0:5a:08:86:6b:44:be:84:31:c9:0e:22:c9:7b:f5:60:79:fa: 2c:98:18:21:79:b5:de:dc:3b:e0:0e:a1:91:1d:40:22:63:52: f3:e0:86:44:8b:c9:45:de:8c:90:82:fb:9d:97:47:12:fa:75: 5d:6e:9d:56:98:24:a7:28:2d:a1:01:65:61:81:75:02:94:1f: 05:b5:27:e5:9b:01:4e:34:5f:a9:aa:6d:d8:cc:b4:80:69:9e: 77:99:f7:cd:26:68:f0:db:64:40:87:0e:9e:d9:f0:49:b7:15: f2:1a:79:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9VHMgF2whU9I2ML/HSMMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTFiYmE5ODI5ZmU3NTkyYjFiMDJlOGQ3MWM4ZmQ3Y2Nl MjFhYjEwHhcNMjUxMjE1MTcwMTAxWhcNMjUxMjE2MTcwMTAxWjAzMTEwLwYDVQQD EygxMjk1MTUzNzYwMTYyZTQ0Mzg0ZGE1ZTIxM2I0YjA1ZmE5ODZkNGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDgRUx+aOtGWJeEwISLIFfdZr/kN wOk57Dm21RIwYqOPpH/WURlUATp38+nR6dO3X8mPk1z8nK7u+R/PO6NGjAOFMRq9 6n2w7njMRoKtirDjRmNGFrIzaIflFveKjIQ49zas1X8LVkCkNj0raT0Zc4atDN5M d4BYfkf9PjHi7UcIJYZGagKrRrjkIxDupkZ4NE55wAhSMmKbr3aVAobz0pvmUqKH 5qB6cQ9x0eHrReJadB2PCi0wBaSEZHznVmztDQN9k2Yr/yj2/W6N9qyDhO0ncO1V rn109BgIseoGjSJm4E+7yvJ1o0aKZpmxbYC5tVroxfjdZ0ZRaeYNWMBUyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKVFTdgFi5EOE2l4hO0sF+phtTXMB8GA1UdIwQY MBaAFLVRu6mCn+dZKxsC6Nccj9fM4hqxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZHN3FZS2Y1MWtyR3dMbzF4eVAxOHppR3JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iNWQ5NTUtYzdmOC00NjNmLTgxNWEt NGViOTkyMjg2MGNkLzEvdFZHN3FZS2Y1MWtyR3dMbzF4eVAxOHppR3JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9iNWQ5NTUtYzdmOC00NjNmLTgxNWEtNGViOTkyMjg2MGNk LzEvdFZHN3FZS2Y1MWtyR3dMbzF4eVAxOHppR3JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbinlwH6J bXPxtPbvJW8OCJtWzJ3P98jDrxIvJ5SxhUTEFIxeTBweh5EivC6sB1Zn6qw788nW O3bvgnEht7lBz53W9hQQdF0t6M4tjZnYQ31NQsQAr0vMOHHKiybOYi46CaXqCV5w 49kPxhnYBNOp1247ybbWxPvW7lBQyajjVkLHh1zACV8W9Qw4VLhtYoCG4FoIhmtE voQxyQ4iyXv1YHn6LJgYIXm13tw74A6hkR1AImNS8+CGRIvJRd6MkIL7nZdHEvp1 XW6dVpgkpygtoQFlYYF1ApQfBbUn5ZsBTjRfqapt2My0gGmed5n3zSZo8NtkQIcO ntnwSbcV8hp5Fg== -----END CERTIFICATE-----Generated at Tue Dec 16 01:11:58 2025 by rpki-client