This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json) Hash identifier: EHnjM2W/o7WuuWZxIHHPye9YviftuZhSfgb+5ztcQIY= Subject key identifier: B0:1C:77:F6:1A:09:33:7E:B7:3E:8B:A6:C2:44:7B:F8:34:22:94:E0 Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c Certificate serial: 019B35A0B3E63C4BA3A262D3FE29AF4F7A03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 08:01:22 +0000 Manifest this update: Fri 19 Dec 2025 08:01:22 +0000 Manifest next update: Sat 20 Dec 2025 08:01:22 +0000 Files and hashes: 1: 1lSa1sl-dNBGB6RIspgIufADhjs.roa (hash: ZUkq8NELozqtJDfHgnQK7IOC8L6Hnu5OT9um+2WKleM=) 2: TB1SNMK17klLvRw1OV09EGXDsjg.roa (hash: 3s2Ua7bRSNfwEdFtiO4U1p/wzm3QtvPjfYSSDJ4385k=) 3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: eHG84rVc2yyApELfRStqkfmwIQTrHKnVolhZaksGxNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:b3:e6:3c:4b:a3:a2:62:d3:fe:29:af:4f:7a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c Validity Not Before: Dec 19 08:01:22 2025 GMT Not After : Dec 20 08:01:22 2025 GMT Subject: CN=b01c77f61a09337eb73e8ba6c2447bf8342294e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:b4:b0:18:37:fd:53:65:1a:1e:39:07:cc: 92:19:c8:4f:f6:93:fd:cc:a5:91:36:cc:a5:8d:98: cb:da:d9:d3:a8:85:40:0f:b5:b9:49:e5:35:aa:14: 14:8e:0b:48:cf:af:c4:6d:5c:92:1a:b4:53:ec:34: d8:d9:0c:af:fd:d8:f2:f0:26:a4:86:1f:7d:5c:6b: b4:be:f1:10:f3:64:97:94:85:15:08:ce:e3:e2:77: dd:9a:a0:66:3b:9b:44:31:96:7f:5f:48:76:60:05: 52:58:92:22:13:07:dd:ed:59:35:29:ef:42:96:5d: 02:6b:2c:71:31:26:bd:50:8d:f6:0a:fe:b3:85:78: 60:d0:4b:33:84:28:bc:cf:3f:49:71:ba:e5:93:a0: b2:4f:e5:4b:01:00:ba:52:1d:f2:5a:5d:52:b3:c6: 6f:9e:fe:87:65:83:65:e8:5e:5e:f2:52:56:ec:b8: 76:ad:46:d2:c4:0a:eb:ec:3f:63:ce:52:34:7d:be: c4:0a:10:78:98:56:d9:86:1e:e5:2f:2d:b9:87:17: 55:b6:b3:3e:b0:7c:c9:28:3a:b3:ec:25:bc:00:97: 60:f5:48:ed:f3:45:dd:1a:2a:65:89:51:44:7e:83: 3a:8e:8a:a1:5e:a7:1f:b6:b2:13:5f:0b:18:e3:13: df:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1C:77:F6:1A:09:33:7E:B7:3E:8B:A6:C2:44:7B:F8:34:22:94:E0 X509v3 Authority Key Identifier: keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:6a:3c:bd:d1:b2:8e:ae:4c:00:c3:88:55:ca:e2:cd:7a:ea: 8e:44:70:45:84:9b:30:14:04:30:07:ce:29:b0:39:90:e9:70: 86:71:c7:08:6f:84:0c:f4:c4:14:46:fe:91:0e:4b:1c:8e:62: 5d:c0:6b:9f:0b:7a:91:14:a5:99:fc:b6:b9:1f:cf:a2:0d:50: e8:0e:64:56:7d:b9:e3:1d:dc:4c:e7:9e:57:4f:d6:4e:7e:04: 85:b5:a8:89:18:8c:b4:ce:6b:10:a4:01:5b:46:25:5a:23:25: 15:bf:7b:56:1c:1f:ee:f0:76:01:eb:80:16:44:ea:1b:5b:d4: be:4e:4b:dd:39:a4:fe:37:22:4b:e2:64:81:73:77:47:55:3f: 44:de:79:3b:cc:d1:7f:48:84:1e:aa:87:68:c6:dd:a1:92:89: d5:83:a4:df:07:28:61:cb:4b:60:68:63:58:7f:68:d8:5b:de: 82:af:7f:85:46:77:82:fe:66:90:04:17:73:ed:b8:ff:7a:1b: 22:46:31:7e:11:63:6a:5d:de:0d:ec:93:b3:8a:08:ee:3d:cb: e3:64:42:44:9f:b4:3a:c4:4a:b5:48:0f:e7:4f:5a:3e:4f:bb: 8f:52:84:9e:1c:03:c5:14:8a:1d:4e:3f:5d:a4:d5:08:81:dd: 64:da:ae:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oLPmPEujomLT/imvT3oDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1OTkwOWVkMTcxYjM4YzFmZGM0MzYyMjI5ZTc4ZDY5ODUx ZGUxMWMwHhcNMjUxMjE5MDgwMTIyWhcNMjUxMjIwMDgwMTIyWjAzMTEwLwYDVQQD EyhiMDFjNzdmNjFhMDkzMzdlYjczZThiYTZjMjQ0N2JmODM0MjI5NGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva+0sBg3/VNlGh45B8ySGchP9pP9 zKWRNsyljZjL2tnTqIVAD7W5SeU1qhQUjgtIz6/EbVySGrRT7DTY2Qyv/djy8Cak hh99XGu0vvEQ82SXlIUVCM7j4nfdmqBmO5tEMZZ/X0h2YAVSWJIiEwfd7Vk1Ke9C ll0CayxxMSa9UI32Cv6zhXhg0EszhCi8zz9Jcbrlk6CyT+VLAQC6Uh3yWl1Ss8Zv nv6HZYNl6F5e8lJW7Lh2rUbSxArr7D9jzlI0fb7EChB4mFbZhh7lLy25hxdVtrM+ sHzJKDqz7CW8AJdg9Ujt80XdGipliVFEfoM6joqhXqcftrITXwsY4xPfIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAcd/YaCTN+tz6LpsJEe/g0IpTgMB8GA1UdIwQY MBaAFLWZCe0XGzjB/cQ2IinnjWmFHeEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2Et ZmRlMDczNTg4ZjBmLzEvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2EtZmRlMDczNTg4ZjBm LzEvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2o8vdGy jq5MAMOIVcrizXrqjkRwRYSbMBQEMAfOKbA5kOlwhnHHCG+EDPTEFEb+kQ5LHI5i XcBrnwt6kRSlmfy2uR/Pog1Q6A5kVn254x3cTOeeV0/WTn4EhbWoiRiMtM5rEKQB W0YlWiMlFb97Vhwf7vB2AeuAFkTqG1vUvk5L3Tmk/jciS+JkgXN3R1U/RN55O8zR f0iEHqqHaMbdoZKJ1YOk3wcoYctLYGhjWH9o2Fvegq9/hUZ3gv5mkAQXc+24/3ob IkYxfhFjal3eDeyTs4oI7j3L42RCRJ+0OsRKtUgP509aPk+7j1KEnhwDxRSKHU4/ XaTVCIHdZNqung== -----END CERTIFICATE-----Generated at Fri Dec 19 14:54:26 2025 by rpki-client