This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft File: tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json) Hash identifier: qdzV0Fc1qClns6B9gMWnI9iDRdXKss26+jPpwGkrE+g= Subject key identifier: C8:AA:40:C7:2A:45:B5:B7:27:8F:FA:E6:65:AE:72:29:CA:CE:4C:83 Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Certificate serial: 019B1CBC39A37A24EF9BAD248D5D1EB6232B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft Manifest number: 0F6F Signing time: Sun 14 Dec 2025 12:00:56 +0000 Manifest this update: Sun 14 Dec 2025 12:00:56 +0000 Manifest next update: Mon 15 Dec 2025 12:00:56 +0000 Files and hashes: 1: 52GXxgdg7vWygkQsHwnq_P3gjJA.roa (hash: i/4OVKKicHKNXCwirS/rOH1bcQmeEUg5ZtGhz1sY85I=) 2: 69jsCPkwXK1lmTxeQTyCID9PpjA.roa (hash: h/Q47E5oO3l5JxeekNZr7l4rqZH5SyA0969VUEHNB8w=) 3: 9MVV1yAh59mTgEP_W258bMa49_o.roa (hash: iCN3glju44EdxjBrGRw+NZhFmqg56yUA7pS6/PNweyY=) 4: AjV2rlIwTElr058YXLjGHHrdXf0.roa (hash: LTFD7RWDdMyUwIhuINghYkedTIuVGScYQK467Diulf0=) 5: Dgr2wvOQnRz5hgawqSG0QB7Wpf8.roa (hash: qz1bNfdEE/9TcJfQDqdc+8FtR45UoCnUkyfUGSABkmQ=) 6: ObtlGayrPGhbC0NJB3cANhdfN9g.roa (hash: IXODRFBoDBQAcQ/y7+mqgK85yVkykmHrcIsLk/+rl+k=) 7: UdUz-kT-b500-FTrkpKhOG9_Lzg.roa (hash: 0R7mO9NcYxR+lIBqqxDSdOzb7Oi6PF6Gf+MJjbPBZOg=) 8: VifVBKjqmDhUgid5BLElJTuQJo4.roa (hash: WI5+mxqhucetVt6cCUvKQ5QuoJnG/kLcpHeXlC1Yb5Y=) 9: lKCL8VeF7spgo1KPqTl3MnMrJFU.roa (hash: G5kvKqbW+q0BKre+iGyFYRJgxgTgTCaLSiQqwrZLbuM=) 10: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: 0PoMx1eyCt4b2LjtO6K1PM2AnVh+/eD+xF6rztOMAfk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bc:39:a3:7a:24:ef:9b:ad:24:8d:5d:1e:b6:23:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Validity Not Before: Dec 14 12:00:56 2025 GMT Not After : Dec 15 12:00:56 2025 GMT Subject: CN=c8aa40c72a45b5b7278ffae665ae7229cace4c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0d:6f:d0:8c:0a:e5:9b:92:5f:ed:75:cf:6a: 88:5c:98:77:c8:02:46:90:9a:03:46:16:d2:d5:4d: b8:c2:70:1e:5a:4f:01:89:94:97:a9:bc:8e:a0:a4: f9:86:11:ef:f4:6e:d8:0e:79:d4:18:ac:7d:27:35: 4f:1a:ee:3f:67:54:ed:75:68:1f:7e:74:a1:4d:aa: 3c:7f:29:f8:70:8f:1d:13:15:ca:94:d6:c0:36:24: e1:03:eb:64:ef:a1:f6:8d:96:c5:fd:d5:3a:fa:40: 8e:ed:3a:d1:f6:2b:a8:3f:53:18:e0:3c:cc:b2:40: 4a:8c:ae:f8:c2:7d:d5:1e:bb:24:16:6a:9a:ea:72: bf:85:17:c2:cb:59:89:de:a1:2f:cb:35:80:04:aa: 40:dd:a9:33:e6:18:01:d9:70:c4:24:7f:64:b6:45: 06:bf:57:3e:07:2e:0a:ae:5e:98:05:8b:55:4d:ec: 39:a0:d4:b6:40:cb:7f:6b:a4:0f:00:e5:af:fb:b4: 0a:9c:92:87:18:cd:46:69:63:8a:a7:41:85:34:26: dc:53:73:31:0c:c6:9f:af:30:c4:41:50:54:6c:0a: c5:e7:2d:bb:c1:8a:e0:7a:ab:ef:50:22:bd:b3:2e: b0:85:cb:63:8d:f6:f9:c1:86:58:24:7d:59:f9:3f: 72:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AA:40:C7:2A:45:B5:B7:27:8F:FA:E6:65:AE:72:29:CA:CE:4C:83 X509v3 Authority Key Identifier: keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:16:0d:a9:e8:62:5c:a2:57:f3:67:6f:8b:89:1b:be:c6:b9: ef:d4:aa:58:92:3a:f1:bd:06:52:c3:9a:3d:09:68:17:4c:85: 6d:58:6c:f7:24:5f:f9:7d:8e:ad:06:2a:9f:c3:da:f8:2c:6d: 73:a9:99:f7:95:44:86:99:8b:03:a5:1d:05:1f:07:f4:36:f0: 2c:76:33:56:98:fa:60:69:e4:16:d0:51:7b:20:ca:12:83:ed: 61:a8:5b:bd:39:f8:10:ec:a9:18:18:74:7d:d9:8c:5d:c2:d5: 58:fa:6f:e8:81:e7:ed:36:ff:4f:5f:cf:4b:42:b1:cc:a4:93: 74:b6:ab:e7:83:cc:f1:54:a4:50:33:b7:68:3f:1c:95:5d:92: 25:ea:7d:9b:ca:74:70:6f:44:ca:64:22:9f:af:8b:bc:df:fd: 58:c3:2e:bc:8e:de:cf:8c:66:35:6a:87:86:42:9b:55:be:4a: eb:de:30:59:b2:99:c3:ba:5e:23:c2:4c:ec:a1:d4:a7:b6:2c: 0e:4d:a8:ee:5f:85:74:86:82:d2:50:1e:cb:1f:27:a4:86:ff: 58:a6:06:82:b7:4b:36:6a:c9:d3:95:6b:5a:cd:8e:bf:a3:bd: 50:14:58:88:19:05:3d:75:e0:e7:15:ed:6c:1f:6b:8c:33:c6: 4a:fa:a3:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscvDmjeiTvm60kjV0etiMrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3 MzVkN2QwHhcNMjUxMjE0MTIwMDU2WhcNMjUxMjE1MTIwMDU2WjAzMTEwLwYDVQQD EyhjOGFhNDBjNzJhNDViNWI3Mjc4ZmZhZTY2NWFlNzIyOWNhY2U0YzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ1v0IwK5ZuSX+11z2qIXJh3yAJG kJoDRhbS1U24wnAeWk8BiZSXqbyOoKT5hhHv9G7YDnnUGKx9JzVPGu4/Z1TtdWgf fnShTao8fyn4cI8dExXKlNbANiThA+tk76H2jZbF/dU6+kCO7TrR9iuoP1MY4DzM skBKjK74wn3VHrskFmqa6nK/hRfCy1mJ3qEvyzWABKpA3akz5hgB2XDEJH9ktkUG v1c+By4Krl6YBYtVTew5oNS2QMt/a6QPAOWv+7QKnJKHGM1GaWOKp0GFNCbcU3Mx DMafrzDEQVBUbArF5y27wYrgeqvvUCK9sy6whctjjfb5wYZYJH1Z+T9yUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMiqQMcqRbW3J4/65mWucinKzkyDMB8GA1UdIwQY MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt YzdkMTk5MzBkNjZkLzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChYNqehi XKJX82dvi4kbvsa579SqWJI68b0GUsOaPQloF0yFbVhs9yRf+X2OrQYqn8Pa+Cxt c6mZ95VEhpmLA6UdBR8H9DbwLHYzVpj6YGnkFtBReyDKEoPtYahbvTn4EOypGBh0 fdmMXcLVWPpv6IHn7Tb/T1/PS0KxzKSTdLar54PM8VSkUDO3aD8clV2SJep9m8p0 cG9EymQin6+LvN/9WMMuvI7ez4xmNWqHhkKbVb5K694wWbKZw7peI8JM7KHUp7Ys Dk2o7l+FdIaC0lAeyx8npIb/WKYGgrdLNmrJ05VrWs2Ov6O9UBRYiBkFPXXg5xXt bB9rjDPGSvqjCQ== -----END CERTIFICATE-----Generated at Sun Dec 14 19:31:50 2025 by rpki-client