This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft File: TSkoLUc3P5QvCti5HtlAk7Zuo68.mft (raw, json) Hash identifier: fqoG7RgDMFq1ZhpI4uD81r/N6c0FaAtmEbojQIUdE3Y= Subject key identifier: 6F:20:F1:78:13:65:E1:AF:37:F4:12:78:81:B0:B6:97:24:DB:D4:2B Authority key identifier: 4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF Certificate issuer: /CN=4d29282d47373f942f0ad8b91ed94093b66ea3af Certificate serial: 019B59E3F7672EEFCFCF6EF08C54B9151AC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft Manifest number: 1720 Signing time: Fri 26 Dec 2025 09:01:10 +0000 Manifest this update: Fri 26 Dec 2025 09:01:10 +0000 Manifest next update: Sat 27 Dec 2025 09:01:10 +0000 Files and hashes: 1: 8G7CKA2HbZHRoNb9HaqBloS90vU.roa (hash: lDvm+Nsn5gFxpzefNnpEbQ5VLuNGtuV4rwnVopzkwq0=) 2: TSkoLUc3P5QvCti5HtlAk7Zuo68.crl (hash: g6lXwTTlP6Q6OBE2oA54+usIz+5vowFib9+TarnSCHQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:f7:67:2e:ef:cf:cf:6e:f0:8c:54:b9:15:1a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d29282d47373f942f0ad8b91ed94093b66ea3af Validity Not Before: Dec 26 09:01:10 2025 GMT Not After : Dec 27 09:01:10 2025 GMT Subject: CN=6f20f1781365e1af37f4127881b0b69724dbd42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:5e:51:50:91:ff:8d:db:41:2b:35:3f:95:15: 70:61:59:c6:16:d2:c9:c7:0b:c9:72:f2:2b:bd:2c: dd:e3:09:f4:c9:f5:2a:dc:4d:4f:b7:8e:dc:f1:17: 4a:fa:6c:37:d9:db:04:ed:5e:0c:82:9e:83:c2:62: 02:98:6e:d1:a8:eb:f7:61:39:df:7a:d2:6a:23:54: 62:30:87:10:6f:7b:13:a9:4f:10:bc:36:ac:4b:ea: 2f:e9:5c:d7:17:cf:68:1a:5f:85:30:39:23:2f:ce: 26:f6:cd:c1:b4:21:20:eb:ff:22:20:1c:ce:bc:05: f1:e2:93:de:bc:55:8a:c1:6b:06:cd:ab:e1:38:d2: 35:98:37:dc:50:8c:b6:31:a8:19:3a:9d:fe:ad:64: e5:16:70:52:4c:75:67:d8:f7:f7:b3:6c:5a:37:a0: 1d:65:c5:7f:98:10:cb:ce:dd:a0:1d:b1:72:ed:b9: 5d:23:99:ce:b2:dd:cd:48:29:ba:a8:28:e9:e3:67: 0d:d6:66:08:ff:f5:4a:b1:0f:13:99:38:77:09:d0: cc:f6:39:d1:99:af:16:e6:b0:ab:e5:03:cb:b7:56: 64:04:fb:9e:e2:a5:c3:3a:69:da:b9:61:ef:87:4b: ea:32:3e:80:6b:e6:42:ff:76:48:ce:a3:07:bd:a2: 81:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:20:F1:78:13:65:E1:AF:37:F4:12:78:81:B0:B6:97:24:DB:D4:2B X509v3 Authority Key Identifier: keyid:4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:5c:99:29:97:76:7e:4b:1f:54:70:44:03:ba:2b:fa:10:b2: 3d:fb:fc:a8:df:54:55:ab:77:ce:68:fd:dd:3b:11:ce:bf:73: 1d:b8:d2:fb:82:d4:0a:88:7c:1c:a7:a9:ba:10:9d:a4:de:0a: e3:05:56:db:26:74:41:c7:4f:8a:d6:d2:80:90:18:a9:c0:c7: 43:14:83:58:45:28:7e:88:6f:5f:51:36:77:d1:19:58:a5:cf: 04:ac:39:43:3f:c5:5c:27:97:ca:5c:c5:ae:1d:2f:03:51:0f: d0:7e:4e:72:10:e5:fc:f6:13:a4:34:48:63:03:20:96:52:b9: ab:7b:5e:41:9b:dc:d6:2f:d1:0b:19:b4:ab:17:a4:17:68:f3: 6e:ab:5e:7f:35:e6:03:38:84:88:03:d6:c4:f1:db:58:68:20: e6:d8:06:dd:24:ad:08:dc:4a:e3:67:3b:d3:1b:ef:1a:52:c0: f4:01:1f:22:e9:a6:08:a2:27:c0:28:92:55:7d:5b:fb:94:0a: c8:54:13:48:bb:61:42:8f:e3:47:c3:82:b5:1d:0d:66:90:f4: 93:ac:f5:d9:3f:6c:85:1d:0b:5c:2c:a9:3a:56:33:c2:47:7c: 1b:50:e2:24:c5:89:25:97:22:67:eb:ed:70:d2:55:60:dd:63: 03:db:9c:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4/dnLu/Pz27wjFS5FRrIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMjkyODJkNDczNzNmOTQyZjBhZDhiOTFlZDk0MDkzYjY2 ZWEzYWYwHhcNMjUxMjI2MDkwMTEwWhcNMjUxMjI3MDkwMTEwWjAzMTEwLwYDVQQD Eyg2ZjIwZjE3ODEzNjVlMWFmMzdmNDEyNzg4MWIwYjY5NzI0ZGJkNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+15RUJH/jdtBKzU/lRVwYVnGFtLJ xwvJcvIrvSzd4wn0yfUq3E1Pt47c8RdK+mw32dsE7V4Mgp6DwmICmG7RqOv3YTnf etJqI1RiMIcQb3sTqU8QvDasS+ov6VzXF89oGl+FMDkjL84m9s3BtCEg6/8iIBzO vAXx4pPevFWKwWsGzavhONI1mDfcUIy2MagZOp3+rWTlFnBSTHVn2Pf3s2xaN6Ad ZcV/mBDLzt2gHbFy7bldI5nOst3NSCm6qCjp42cN1mYI//VKsQ8TmTh3CdDM9jnR ma8W5rCr5QPLt1ZkBPue4qXDOmnauWHvh0vqMj6Aa+ZC/3ZIzqMHvaKBmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8g8XgTZeGvN/QSeIGwtpck29QrMB8GA1UdIwQY MBaAFE0pKC1HNz+ULwrYuR7ZQJO2bqOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFNrb0xVYzNQNVF2Q3RpNUh0bEFrN1p1bzY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82NWE0YzItMzRiMy00MjA1LWFmZDEt YzU0ODFkYjM3MThkLzEvVFNrb0xVYzNQNVF2Q3RpNUh0bEFrN1p1bzY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC82NWE0YzItMzRiMy00MjA1LWFmZDEtYzU0ODFkYjM3MThk LzEvVFNrb0xVYzNQNVF2Q3RpNUh0bEFrN1p1bzY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxlyZKZd2 fksfVHBEA7or+hCyPfv8qN9UVat3zmj93TsRzr9zHbjS+4LUCoh8HKepuhCdpN4K 4wVW2yZ0QcdPitbSgJAYqcDHQxSDWEUofohvX1E2d9EZWKXPBKw5Qz/FXCeXylzF rh0vA1EP0H5OchDl/PYTpDRIYwMgllK5q3teQZvc1i/RCxm0qxekF2jzbqtefzXm AziEiAPWxPHbWGgg5tgG3SStCNxK42c70xvvGlLA9AEfIummCKInwCiSVX1b+5QK yFQTSLthQo/jR8OCtR0NZpD0k6z12T9shR0LXCypOlYzwkd8G1DiJMWJJZciZ+vt cNJVYN1jA9ucvg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:13 2025 by rpki-client