This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json) Hash identifier: QXRFEfSFGGLev0w4bX8hPpmA7qPWc9j7S73E9HHUMcE= Subject key identifier: B2:09:D5:A3:D1:F7:BD:60:70:E0:84:43:0D:4A:A3:86:07:9D:7B:02 Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9 Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9 Certificate serial: 019B12A65715F11252082B7DC4BBE9C46ED0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft Manifest number: 079B Signing time: Fri 12 Dec 2025 13:00:49 +0000 Manifest this update: Fri 12 Dec 2025 13:00:49 +0000 Manifest next update: Sat 13 Dec 2025 13:00:49 +0000 Files and hashes: 1: CvcmVd2qiQMCtgnMEuQp7Q5S4Vg.roa (hash: 6oEqjna8oaHJiSK9+x9VxezwWYrKn62GKKSEaLSxdDU=) 2: UKY-oSMIFmmicltNFFzSJHvvmLM.roa (hash: cA262Na30QfQdhfhBPxJOrAeDIB1dyAnD2XIGiuSUOI=) 3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: wkhR1c06VXKrQ/0jnDIG0OdQq5e8ZaZfKRlwFEr9OE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:a6:57:15:f1:12:52:08:2b:7d:c4:bb:e9:c4:6e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9 Validity Not Before: Dec 12 13:00:49 2025 GMT Not After : Dec 13 13:00:49 2025 GMT Subject: CN=b209d5a3d1f7bd6070e084430d4aa386079d7b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5c:3d:fd:d3:36:df:d8:24:c1:33:1b:8c:db: 85:95:6c:47:e6:df:bd:d7:70:72:9a:46:9f:87:d6: 40:2c:7c:5b:6a:cf:61:8d:25:ee:49:87:53:8a:5b: b5:3e:4c:5a:92:fa:c3:11:d7:04:d6:cb:e9:c5:3d: 2b:45:d3:c2:ed:ec:3a:07:e5:94:58:14:da:18:be: 9f:ae:97:7d:ed:61:b6:d7:11:33:06:0f:fc:92:95: fe:43:7f:6a:96:38:f2:f0:00:00:9f:83:94:11:bc: ca:e7:f8:4d:67:84:64:ac:35:73:dc:b8:ab:e2:26: 92:b4:6f:a4:f0:02:98:f8:1d:f6:20:f0:c1:89:93: 39:1d:d1:25:05:71:87:c8:b2:24:56:e4:d0:c9:d1: 76:0f:75:57:33:f6:f5:d3:77:2f:bd:e0:92:41:d3: 6c:3b:26:09:de:54:6d:56:27:8f:ee:5c:20:ac:86: 26:5a:84:60:d6:fc:5d:27:3b:8f:ca:02:2f:05:ba: 2b:27:88:06:0d:85:40:c9:6b:fa:e4:15:69:07:0e: 53:e7:d6:70:7e:1f:a3:f6:6b:6f:30:3b:91:b7:aa: 13:d9:c1:fc:20:8d:74:ce:54:d5:9b:fe:35:2e:37: ec:2f:57:9b:c1:a1:6c:ae:c2:43:df:39:03:87:7a: 97:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:09:D5:A3:D1:F7:BD:60:70:E0:84:43:0D:4A:A3:86:07:9D:7B:02 X509v3 Authority Key Identifier: keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c0:52:21:b8:52:ae:42:2d:3c:34:0f:a3:43:7a:22:e5:4b: c1:3c:3e:ec:ab:37:eb:fa:2a:dd:88:c7:bf:bc:10:1f:06:45: ed:22:f0:da:6d:ae:ad:55:6d:b3:71:1f:74:5c:a5:94:4d:cf: 3e:a2:4f:56:4c:ca:af:cd:d6:23:82:23:83:04:2f:29:08:ef: 43:c2:60:c7:1c:ea:37:9c:29:28:1f:dd:f3:3b:b2:f9:40:6f: 35:6d:be:6e:f4:ac:57:a0:54:f8:0a:a1:55:a9:e7:14:24:94: 4b:e4:ef:3d:05:9a:0f:81:d8:1c:49:2a:9a:11:f8:c4:f9:c4: 9b:55:bc:03:46:a1:c3:a7:27:df:9b:21:89:d6:fe:45:fa:6b: be:92:f9:af:41:51:7f:82:f7:0f:23:0d:df:fd:34:05:5d:50: bb:f5:9f:9a:53:0f:26:e7:10:16:7d:df:6e:98:0e:a9:e4:48: 60:11:0c:f0:1f:29:ce:d1:12:22:6a:6c:c2:04:36:6f:34:f1: 23:80:80:ea:8c:a3:6b:54:ae:8e:31:ea:55:cb:ea:70:8c:ba: 8f:92:e9:95:b3:9d:8c:73:5a:bc:7a:af:60:a1:87:92:dd:80: d2:0e:28:9b:4a:22:a9:b9:55:7d:b1:b3:e9:7b:a5:91:b6:a5: b4:4e:3e:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSplcV8RJSCCt9xLvpxG7QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OThjOTdiMTRjMzc0YTUyODMzZGI2YTQwMDdiNTRiNDY2 MmM1YTkwHhcNMjUxMjEyMTMwMDQ5WhcNMjUxMjEzMTMwMDQ5WjAzMTEwLwYDVQQD EyhiMjA5ZDVhM2QxZjdiZDYwNzBlMDg0NDMwZDRhYTM4NjA3OWQ3YjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01w9/dM239gkwTMbjNuFlWxH5t+9 13Bymkafh9ZALHxbas9hjSXuSYdTilu1PkxakvrDEdcE1svpxT0rRdPC7ew6B+WU WBTaGL6frpd97WG21xEzBg/8kpX+Q39qljjy8AAAn4OUEbzK5/hNZ4RkrDVz3Lir 4iaStG+k8AKY+B32IPDBiZM5HdElBXGHyLIkVuTQydF2D3VXM/b103cvveCSQdNs OyYJ3lRtVieP7lwgrIYmWoRg1vxdJzuPygIvBborJ4gGDYVAyWv65BVpBw5T59Zw fh+j9mtvMDuRt6oT2cH8II10zlTVm/41LjfsL1ebwaFsrsJD3zkDh3qX2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIJ1aPR971gcOCEQw1Ko4YHnXsCMB8GA1UdIwQY MBaAFLSYyXsUw3SlKDPbakAHtUtGYsWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzct ODY1NDI2NjQ1N2M2LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzctODY1NDI2NjQ1N2M2 LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicBSIbhS rkItPDQPo0N6IuVLwTw+7Ks36/oq3YjHv7wQHwZF7SLw2m2urVVts3EfdFyllE3P PqJPVkzKr83WI4IjgwQvKQjvQ8JgxxzqN5wpKB/d8zuy+UBvNW2+bvSsV6BU+Aqh VannFCSUS+TvPQWaD4HYHEkqmhH4xPnEm1W8A0ahw6cn35shidb+RfprvpL5r0FR f4L3DyMN3/00BV1Qu/WfmlMPJucQFn3fbpgOqeRIYBEM8B8pztESImpswgQ2bzTx I4CA6oyja1SujjHqVcvqcIy6j5LplbOdjHNavHqvYKGHkt2A0g4om0oiqblVfbGz 6XulkbaltE4+2g== -----END CERTIFICATE-----Generated at Fri Dec 12 19:29:14 2025 by rpki-client