This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft File: tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json) Hash identifier: HVtuUZKJrvYun2twTDSVfKpw4kbVPZEpyU4rsusAXP4= Subject key identifier: 7A:21:B6:8B:EF:AC:C3:90:C2:FE:60:E2:AA:7C:89:8E:B2:F7:5A:73 Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Certificate serial: 019B2475F5F139ECDBEB6BD9C7AEF1DF7A10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft Manifest number: 0F73 Signing time: Tue 16 Dec 2025 00:01:08 +0000 Manifest this update: Tue 16 Dec 2025 00:01:08 +0000 Manifest next update: Wed 17 Dec 2025 00:01:08 +0000 Files and hashes: 1: 52GXxgdg7vWygkQsHwnq_P3gjJA.roa (hash: i/4OVKKicHKNXCwirS/rOH1bcQmeEUg5ZtGhz1sY85I=) 2: 69jsCPkwXK1lmTxeQTyCID9PpjA.roa (hash: h/Q47E5oO3l5JxeekNZr7l4rqZH5SyA0969VUEHNB8w=) 3: 9MVV1yAh59mTgEP_W258bMa49_o.roa (hash: iCN3glju44EdxjBrGRw+NZhFmqg56yUA7pS6/PNweyY=) 4: AjV2rlIwTElr058YXLjGHHrdXf0.roa (hash: LTFD7RWDdMyUwIhuINghYkedTIuVGScYQK467Diulf0=) 5: Dgr2wvOQnRz5hgawqSG0QB7Wpf8.roa (hash: qz1bNfdEE/9TcJfQDqdc+8FtR45UoCnUkyfUGSABkmQ=) 6: ObtlGayrPGhbC0NJB3cANhdfN9g.roa (hash: IXODRFBoDBQAcQ/y7+mqgK85yVkykmHrcIsLk/+rl+k=) 7: UdUz-kT-b500-FTrkpKhOG9_Lzg.roa (hash: 0R7mO9NcYxR+lIBqqxDSdOzb7Oi6PF6Gf+MJjbPBZOg=) 8: VifVBKjqmDhUgid5BLElJTuQJo4.roa (hash: WI5+mxqhucetVt6cCUvKQ5QuoJnG/kLcpHeXlC1Yb5Y=) 9: lKCL8VeF7spgo1KPqTl3MnMrJFU.roa (hash: G5kvKqbW+q0BKre+iGyFYRJgxgTgTCaLSiQqwrZLbuM=) 10: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: Z+umTuWkZvcWdrSrRohU5ITxjyKNPugLR7KUSUpAvu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:75:f5:f1:39:ec:db:eb:6b:d9:c7:ae:f1:df:7a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Validity Not Before: Dec 16 00:01:08 2025 GMT Not After : Dec 17 00:01:08 2025 GMT Subject: CN=7a21b68befacc390c2fe60e2aa7c898eb2f75a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6d:b1:09:97:b8:c9:30:66:00:57:d9:9c:74: d8:68:0d:18:fc:40:c3:0e:9b:77:21:ab:54:59:fc: e0:39:94:be:61:9b:20:57:ee:72:6c:0a:5c:39:47: ff:7f:bf:71:d4:2f:7f:3e:46:95:7d:55:6c:7d:ce: 31:0f:73:bd:7b:a1:85:f9:ea:70:cd:b3:ff:af:50: b1:b9:dc:c5:d1:65:7c:2e:41:2d:5e:eb:ae:4e:6a: d6:40:84:d4:57:13:dc:86:e5:d1:83:af:71:54:08: 6d:5e:70:05:ed:d4:99:ce:ed:52:4e:e7:9e:bb:dc: ba:60:b3:2e:05:60:15:77:3c:c8:95:4b:18:3d:81: 64:cc:b0:04:16:f9:e0:e3:79:6f:70:be:55:0f:57: 19:50:7c:ce:62:ba:ef:9e:12:9f:ac:55:e1:9c:ad: b3:1c:d9:c4:72:eb:13:af:25:c7:79:94:b3:8f:9f: ce:44:00:e2:d4:0d:62:bb:61:99:ac:d9:b7:a4:f4: dd:b6:f9:f1:9c:c3:80:95:55:10:b3:7e:f1:62:6b: b3:05:ca:e3:c3:36:57:8c:1b:c1:75:b0:03:95:b4: 1c:f5:bd:4e:46:09:7c:70:7a:15:a7:f8:0f:4f:88: 3f:ce:29:f7:e0:ba:e1:a4:50:2b:66:b0:e2:d8:b7: 30:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:21:B6:8B:EF:AC:C3:90:C2:FE:60:E2:AA:7C:89:8E:B2:F7:5A:73 X509v3 Authority Key Identifier: keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:9b:28:23:bd:5f:4f:7b:9f:1b:c1:ae:77:68:65:5b:c9:13: 50:0f:3a:36:17:e3:98:e5:f1:48:8b:17:e3:eb:0e:84:c6:a2: 25:16:a6:94:24:d3:2d:b3:a6:fd:33:a5:69:51:ac:89:00:36: 5c:d8:48:fd:11:cb:4e:07:d5:95:0e:be:e0:03:35:a5:7e:fc: 68:67:4d:e4:fc:25:46:cf:0f:5a:b3:ab:97:fa:82:33:e4:fd: 1e:91:90:7a:32:56:ca:b6:fd:45:35:7e:01:b7:19:ff:b9:81: 75:63:c6:fb:82:e0:47:7e:93:2b:8d:a5:0d:b4:d4:31:7e:6d: 77:65:bd:91:73:98:bd:29:19:a9:0f:64:7b:aa:4a:e6:07:a2: 4e:8d:8c:1f:cd:a9:c0:b6:7c:18:af:de:c6:e4:60:c5:4a:1d: 82:68:8c:82:d5:af:04:9f:5e:ed:07:a6:39:1a:cd:87:03:d0: 52:85:81:dc:5c:9c:fa:63:d8:3b:c0:57:39:39:00:4a:fb:01: 34:34:8c:b6:7a:1a:fa:ea:48:78:cc:90:01:ff:e5:e5:eb:61: 66:c0:e5:ea:a7:f6:61:da:4b:88:80:47:a2:35:a0:62:02:fd: 27:83:e9:51:f4:4e:03:13:90:02:d6:bd:c5:f2:97:14:d8:bc: 76:16:d7:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdfXxOezb62vZx67x33oQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3 MzVkN2QwHhcNMjUxMjE2MDAwMTA4WhcNMjUxMjE3MDAwMTA4WjAzMTEwLwYDVQQD Eyg3YTIxYjY4YmVmYWNjMzkwYzJmZTYwZTJhYTdjODk4ZWIyZjc1YTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv22xCZe4yTBmAFfZnHTYaA0Y/EDD Dpt3IatUWfzgOZS+YZsgV+5ybApcOUf/f79x1C9/PkaVfVVsfc4xD3O9e6GF+epw zbP/r1CxudzF0WV8LkEtXuuuTmrWQITUVxPchuXRg69xVAhtXnAF7dSZzu1STuee u9y6YLMuBWAVdzzIlUsYPYFkzLAEFvng43lvcL5VD1cZUHzOYrrvnhKfrFXhnK2z HNnEcusTryXHeZSzj5/ORADi1A1iu2GZrNm3pPTdtvnxnMOAlVUQs37xYmuzBcrj wzZXjBvBdbADlbQc9b1ORgl8cHoVp/gPT4g/zin34LrhpFArZrDi2LcwEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHohtovvrMOQwv5g4qp8iY6y91pzMB8GA1UdIwQY MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt YzdkMTk5MzBkNjZkLzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZsoI71f T3ufG8Gud2hlW8kTUA86NhfjmOXxSIsX4+sOhMaiJRamlCTTLbOm/TOlaVGsiQA2 XNhI/RHLTgfVlQ6+4AM1pX78aGdN5PwlRs8PWrOrl/qCM+T9HpGQejJWyrb9RTV+ AbcZ/7mBdWPG+4LgR36TK42lDbTUMX5td2W9kXOYvSkZqQ9ke6pK5geiTo2MH82p wLZ8GK/exuRgxUodgmiMgtWvBJ9e7QemORrNhwPQUoWB3Fyc+mPYO8BXOTkASvsB NDSMtnoa+upIeMyQAf/l5ethZsDl6qf2YdpLiIBHojWgYgL9J4PpUfROAxOQAta9 xfKXFNi8dhbX4A== -----END CERTIFICATE-----Generated at Tue Dec 16 06:25:05 2025 by rpki-client