This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json) Hash identifier: 9VHudKMSfmxQiSoFZeX2RxpM6v7zm55faZnlSp9DjFI= Subject key identifier: DB:71:E5:F1:C7:2E:1D:B1:36:78:AE:5D:0A:D2:C8:28:94:C7:2E:DD Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f Certificate serial: 019B32D75870CF33D50A9C3D36DE471F2FAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft Manifest number: 1715 Signing time: Thu 18 Dec 2025 19:02:12 +0000 Manifest this update: Thu 18 Dec 2025 19:02:12 +0000 Manifest next update: Fri 19 Dec 2025 19:02:12 +0000 Files and hashes: 1: BeOIJLd8_MIXUGufXTnw_YPsJgs.roa (hash: UFekJjmZxy4vjH3dPZliRBeAZT4NRRq/0IMLKsXu0f8=) 2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: Gut1ULEfDHezOYgOCBEgIVbmqI/eXIV1d34mRN6IFJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:58:70:cf:33:d5:0a:9c:3d:36:de:47:1f:2f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f Validity Not Before: Dec 18 19:02:12 2025 GMT Not After : Dec 19 19:02:12 2025 GMT Subject: CN=db71e5f1c72e1db13678ae5d0ad2c82894c72edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a9:bf:02:e5:d2:a5:bd:29:c1:53:a5:2d:3f: f7:67:46:9b:87:9d:86:14:c5:0e:a9:f8:b6:fd:49: ff:4f:2e:b5:c9:8b:7e:9a:cb:21:0f:9a:b6:bf:c3: 7a:fa:72:fd:73:9c:d9:0f:c7:ac:99:87:0e:a8:b0: 60:70:b4:14:09:cd:11:5e:cb:b5:e9:7b:7d:e4:6e: 00:ef:c5:ee:cd:38:bb:f3:65:8d:70:f0:82:8e:76: 25:4a:b7:3e:94:33:80:67:57:73:12:88:f4:ea:a7: 10:ee:bc:ee:4d:02:b6:a2:75:ed:c4:23:8a:15:82: c7:b2:8f:5d:43:29:4b:42:da:c9:2f:55:5a:82:14: d4:fc:03:e8:7d:9d:51:35:85:ec:25:4d:c2:64:9e: 4f:c8:ea:fc:0f:67:a1:3b:76:3c:1c:75:ba:d7:c9: e3:46:d2:8b:5b:c8:77:78:bc:29:2a:2f:48:e7:5f: 11:b1:01:ea:58:76:dd:f8:20:dd:b1:95:3a:fa:ee: 7c:cd:19:68:4f:69:eb:36:0d:3d:5d:57:1b:fb:f0: 26:8a:ca:c3:ad:91:b1:cc:09:fc:ca:45:a4:01:d6: fe:65:4f:1e:78:c7:f3:9a:39:19:e7:ab:2a:ab:cb: 02:c5:16:c8:63:7d:b2:c8:c9:8c:e9:c6:74:63:ec: 18:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:71:E5:F1:C7:2E:1D:B1:36:78:AE:5D:0A:D2:C8:28:94:C7:2E:DD X509v3 Authority Key Identifier: keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:cd:90:55:02:74:07:c3:6d:43:f7:e9:dd:84:7d:46:5d:97: 7f:d6:b0:5a:a3:c2:0f:9a:0d:16:a5:98:1e:e1:ac:3a:68:fb: 0c:5c:8b:8c:10:f0:72:73:89:9a:1a:42:71:a8:bb:60:56:b9: d3:b5:a6:e0:ff:e2:b4:04:c3:1a:e0:8d:6a:a1:de:1c:fc:dd: da:fa:b0:c8:0c:14:73:05:05:d3:d8:2f:c9:33:26:d2:1d:44: 6d:f3:96:cb:5b:22:5f:3c:39:e8:b0:d9:dd:dc:af:f1:42:a9: 7d:33:24:52:07:af:00:1d:02:4a:0a:5f:67:50:a3:25:a9:56: e7:2f:8d:b8:09:64:c1:71:b2:bd:d4:ea:79:0b:88:ce:70:30: d5:9b:f1:f8:d5:77:b7:9f:4f:49:cd:2b:12:b5:a6:bb:ae:08: f7:7a:4b:59:ba:a8:8f:3a:10:69:ff:12:92:4f:ef:df:b2:1c: 54:c1:11:bd:dc:80:92:31:04:f0:f3:7b:83:16:dd:8a:36:1e: 6c:ad:a6:9e:e8:af:b0:7a:31:12:5b:75:ff:e3:53:da:21:17: 05:f4:f2:48:9e:34:91:31:4b:21:cb:a7:94:9f:02:c3:80:60: 0a:89:57:31:a9:0d:a4:e0:02:2c:81:3a:42:bd:92:fe:ae:47: 43:9e:10:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy11hwzzPVCpw9Nt5HHy+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MGI1NzRmMDNkOTg4MTU1ZjQ0YmEyY2IwN2JjN2RmYjQ1 N2NmMGYwHhcNMjUxMjE4MTkwMjEyWhcNMjUxMjE5MTkwMjEyWjAzMTEwLwYDVQQD EyhkYjcxZTVmMWM3MmUxZGIxMzY3OGFlNWQwYWQyYzgyODk0YzcyZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6m/AuXSpb0pwVOlLT/3Z0abh52G FMUOqfi2/Un/Ty61yYt+msshD5q2v8N6+nL9c5zZD8esmYcOqLBgcLQUCc0RXsu1 6Xt95G4A78XuzTi782WNcPCCjnYlSrc+lDOAZ1dzEoj06qcQ7rzuTQK2onXtxCOK FYLHso9dQylLQtrJL1VaghTU/APofZ1RNYXsJU3CZJ5PyOr8D2ehO3Y8HHW618nj RtKLW8h3eLwpKi9I518RsQHqWHbd+CDdsZU6+u58zRloT2nrNg09XVcb+/AmisrD rZGxzAn8ykWkAdb+ZU8eeMfzmjkZ56sqq8sCxRbIY32yyMmM6cZ0Y+wY1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtx5fHHLh2xNniuXQrSyCiUxy7dMB8GA1UdIwQY MBaAFLYLV08D2YgVX0S6LLB7x9+0V88PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0Mzgt YmJjYWUwZGYxZjJmLzEvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0MzgtYmJjYWUwZGYxZjJm LzEvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhM2QVQJ0 B8NtQ/fp3YR9Rl2Xf9awWqPCD5oNFqWYHuGsOmj7DFyLjBDwcnOJmhpCcai7YFa5 07Wm4P/itATDGuCNaqHeHPzd2vqwyAwUcwUF09gvyTMm0h1EbfOWy1siXzw56LDZ 3dyv8UKpfTMkUgevAB0CSgpfZ1CjJalW5y+NuAlkwXGyvdTqeQuIznAw1Zvx+NV3 t59PSc0rErWmu64I93pLWbqojzoQaf8Skk/v37IcVMERvdyAkjEE8PN7gxbdijYe bK2mnuivsHoxElt1/+NT2iEXBfTySJ40kTFLIcunlJ8Cw4BgColXMakNpOACLIE6 Qr2S/q5HQ54QzA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:38:49 2025 by rpki-client