This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft File: thpyv6TKq8uk7ASEE3pRb580Q0Y.mft (raw, json) Hash identifier: RqyW+xpHvr5K1EVVLPBHjIY/2a6zye6KVJr8BtUwR20= Subject key identifier: 5C:AA:46:E1:6D:CA:40:A4:3A:24:56:6E:1E:11:90:F1:E1:F8:3E:82 Authority key identifier: B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46 Certificate issuer: /CN=b61a72bfa4caabcba4ec0484137a516f9f344346 Certificate serial: 019B3B34C3214C6B329305AD3B3330206EC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 10:01:12 +0000 Manifest this update: Sat 20 Dec 2025 10:01:12 +0000 Manifest next update: Sun 21 Dec 2025 10:01:12 +0000 Files and hashes: 1: _PvMfBQqU6jjldV1ydf8UKmzB00.roa (hash: 24OxToSBrVSS6AXxMxL0W6j/CNzWhFy38ZdtMKAbWe4=) 2: thpyv6TKq8uk7ASEE3pRb580Q0Y.crl (hash: zAzPHVIY9FuhF3x4vGYIt5QL79UP2WzkOHT9nAFqnEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:c3:21:4c:6b:32:93:05:ad:3b:33:30:20:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b61a72bfa4caabcba4ec0484137a516f9f344346 Validity Not Before: Dec 20 10:01:12 2025 GMT Not After : Dec 21 10:01:12 2025 GMT Subject: CN=5caa46e16dca40a43a24566e1e1190f1e1f83e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:b9:cc:56:18:22:62:f2:1a:23:28:b2:73: 1c:10:83:32:be:ad:78:f0:03:f9:e8:da:cf:c8:b8: d3:fd:ef:ef:b8:e6:42:34:9c:7d:67:e1:3a:c3:8f: cc:fa:73:a4:39:0a:c3:30:6d:2b:a8:2e:76:1c:e0: 17:07:6e:f4:4a:44:94:9b:98:3e:b4:b3:36:66:20: d4:08:83:da:e0:7c:6c:08:86:73:34:2e:e2:61:75: ef:90:59:b5:ba:1b:4c:ca:38:67:27:6b:89:ba:af: 48:c9:71:f5:54:69:6a:d2:bb:fe:f9:10:2b:a2:2e: bf:80:ba:5d:a8:64:95:13:15:03:81:aa:e9:be:cb: 3c:53:a9:e6:2a:e6:35:0f:1c:22:4d:d8:10:ed:cd: 48:7d:ff:58:99:af:ff:b9:d1:26:bf:c8:bb:0a:38: 6b:66:6f:bd:5c:2f:8c:b9:d1:01:03:e7:88:37:06: 61:2b:3d:a0:ec:81:0c:94:b7:80:66:ba:a1:2c:2f: 51:9f:1f:d5:5a:12:a9:c6:c6:66:c8:80:92:99:1b: 37:cc:2a:5a:8a:aa:30:93:20:fa:5a:fe:52:89:82: 28:a5:90:d1:ef:53:fb:46:de:5a:cc:7f:71:be:d8: 49:51:75:e7:e1:f8:2e:d0:f9:30:6d:9a:e4:f2:ed: 38:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AA:46:E1:6D:CA:40:A4:3A:24:56:6E:1E:11:90:F1:E1:F8:3E:82 X509v3 Authority Key Identifier: keyid:B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:00:cd:2f:12:ba:cb:34:5a:59:5c:0a:8f:dc:7a:d6:fd:35: c0:f5:3b:fc:68:ff:ad:a0:ee:9e:a5:f3:c4:a1:d9:1e:48:eb: 53:47:c0:8e:10:d7:de:df:90:94:fd:08:c8:dc:a3:35:76:50: 8a:61:de:e3:39:a7:9c:99:f6:0d:f3:59:15:d5:53:7b:97:2f: 96:86:03:3c:98:e2:1d:7e:93:91:30:ca:74:12:97:7e:97:81: 92:d2:65:e8:93:51:c6:8d:b1:36:5e:c2:5e:cb:9f:a1:ed:2a: c1:b9:35:4d:65:cd:4f:4c:33:a8:e8:1d:71:05:07:eb:f9:4f: a4:db:e9:29:ae:b8:28:ea:93:4b:5f:42:5f:31:25:16:b2:5a: 71:ce:06:8b:e7:6b:a4:ec:38:1e:92:e3:87:94:2c:e5:e1:29: 06:22:d5:f3:dc:6a:2f:44:86:b3:32:c0:7b:58:b0:08:28:8f: ba:27:d9:f4:6f:47:e9:b8:1d:81:3e:63:3b:ca:d8:ca:c6:2e: 36:61:f8:42:14:a5:31:e6:72:f5:69:b1:cf:84:76:3b:b2:b7: 35:20:59:36:5d:2c:1b:e0:f0:ca:84:15:e7:78:17:b3:b9:17: 4c:67:61:8c:89:78:96:0f:52:91:ca:d8:28:67:20:65:26:43: 44:75:06:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NMMhTGsykwWtOzMwIG7AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MWE3MmJmYTRjYWFiY2JhNGVjMDQ4NDEzN2E1MTZmOWYz NDQzNDYwHhcNMjUxMjIwMTAwMTEyWhcNMjUxMjIxMTAwMTEyWjAzMTEwLwYDVQQD Eyg1Y2FhNDZlMTZkY2E0MGE0M2EyNDU2NmUxZTExOTBmMWUxZjgzZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjW5zFYYImLyGiMosnMcEIMyvq14 8AP56NrPyLjT/e/vuOZCNJx9Z+E6w4/M+nOkOQrDMG0rqC52HOAXB270SkSUm5g+ tLM2ZiDUCIPa4HxsCIZzNC7iYXXvkFm1uhtMyjhnJ2uJuq9IyXH1VGlq0rv++RAr oi6/gLpdqGSVExUDgarpvss8U6nmKuY1DxwiTdgQ7c1Iff9Yma//udEmv8i7Cjhr Zm+9XC+MudEBA+eINwZhKz2g7IEMlLeAZrqhLC9Rnx/VWhKpxsZmyICSmRs3zCpa iqowkyD6Wv5SiYIopZDR71P7Rt5azH9xvthJUXXn4fgu0PkwbZrk8u04tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyqRuFtykCkOiRWbh4RkPHh+D6CMB8GA1UdIwQY MBaAFLYacr+kyqvLpOwEhBN6UW+fNENGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGhweXY2VEtxOHVrN0FTRUUzcFJiNTgwUTBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hMjQ4NzQtOThkMy00NzM0LThlZmEt OGMyNTNjNDU5MjcxLzEvdGhweXY2VEtxOHVrN0FTRUUzcFJiNTgwUTBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hMjQ4NzQtOThkMy00NzM0LThlZmEtOGMyNTNjNDU5Mjcx LzEvdGhweXY2VEtxOHVrN0FTRUUzcFJiNTgwUTBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgDNLxK6 yzRaWVwKj9x61v01wPU7/Gj/raDunqXzxKHZHkjrU0fAjhDX3t+QlP0IyNyjNXZQ imHe4zmnnJn2DfNZFdVTe5cvloYDPJjiHX6TkTDKdBKXfpeBktJl6JNRxo2xNl7C Xsufoe0qwbk1TWXNT0wzqOgdcQUH6/lPpNvpKa64KOqTS19CXzElFrJacc4Gi+dr pOw4HpLjh5Qs5eEpBiLV89xqL0SGszLAe1iwCCiPuifZ9G9H6bgdgT5jO8rYysYu NmH4QhSlMeZy9Wmxz4R2O7K3NSBZNl0sG+DwyoQV53gXs7kXTGdhjIl4lg9SkcrY KGcgZSZDRHUGWw== -----END CERTIFICATE-----Generated at Sat Dec 20 13:59:37 2025 by rpki-client