This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft File: tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json) Hash identifier: WD0jTJizhu4RYYetPE8LLKjnP9CxnoRjhE0HHtQxkSU= Subject key identifier: C2:49:2B:43:2E:81:2B:8B:63:77:F1:AC:82:57:A8:09:BE:8B:62:93 Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45 Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145 Certificate serial: 019B5CAE5B4243EDC955CF2DE0CC5BDFDCAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 22:01:28 +0000 Manifest this update: Fri 26 Dec 2025 22:01:28 +0000 Manifest next update: Sat 27 Dec 2025 22:01:28 +0000 Files and hashes: 1: BDcEAKntpIejrVcoW-jQtFYDt4A.roa (hash: 9rJ6V8MVwpwUlBMeKLrrT4d005j4mZf3dlxw+gQ0CuE=) 2: n9wbgcYA2gFozQl-awLgvubO0Jw.roa (hash: I7/eXt/2fdY6ma/4TQO3Dibom5bD15oMz/+pqihDXpI=) 3: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: 544PG6CApVE/hEhg5UPHqzGcGkP3sN8jHjvvdeUCIl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ae:5b:42:43:ed:c9:55:cf:2d:e0:cc:5b:df:dc:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145 Validity Not Before: Dec 26 22:01:28 2025 GMT Not After : Dec 27 22:01:28 2025 GMT Subject: CN=c2492b432e812b8b6377f1ac8257a809be8b6293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:77:6c:f1:c2:74:4d:39:fa:85:1e:4c:c0:73: 8e:91:48:61:39:85:ea:e8:51:5d:b0:cd:82:06:c3: 10:ac:a6:9f:16:81:db:42:2d:ae:46:38:cc:c2:82: 02:1b:92:ce:ab:04:9b:33:f1:5d:84:64:72:7d:ac: 85:55:89:c9:e1:46:ad:3e:1b:fa:7e:8e:45:06:53: 09:ad:9f:d8:0c:68:b9:ae:df:63:de:83:f8:e6:cd: 80:3b:3e:35:07:8e:9a:40:d8:a4:e9:7e:f1:62:5c: 5d:91:3b:88:21:a2:ba:91:c6:23:f1:c9:27:0f:ce: 46:54:f9:53:27:58:94:d2:70:0b:01:c3:f8:1d:d1: 94:5c:6e:a6:6e:fe:aa:77:38:77:4c:82:ee:bb:22: 82:c9:c9:de:69:3a:a7:ae:a2:bd:3a:8d:7f:b4:e3: 26:6c:fc:04:43:02:69:1b:3c:4d:84:78:e6:a4:73: ce:e7:6a:ec:ef:b2:31:ee:57:30:af:96:2f:48:71: 7e:47:ba:13:40:cf:ec:3e:63:7f:96:6d:6f:86:66: fd:03:c6:18:cb:68:25:89:1f:73:3b:84:63:6f:fe: 10:9c:cb:5c:3b:b3:c4:b6:8b:01:af:56:e6:fd:72: eb:8c:fe:49:c4:ce:f6:e0:6c:81:a7:31:46:de:0e: 9a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:49:2B:43:2E:81:2B:8B:63:77:F1:AC:82:57:A8:09:BE:8B:62:93 X509v3 Authority Key Identifier: keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e0:9a:42:a8:1e:c7:9e:23:3f:7c:e3:65:01:67:1e:fe:46: 7a:6f:e0:ce:08:13:3f:33:32:18:99:19:f4:a7:de:be:cb:e2: c8:ec:2a:fa:01:ba:b4:e1:e7:7d:84:df:e9:6b:0a:7d:97:95: d4:27:77:8d:a0:f2:8c:68:70:fc:41:d8:47:e6:22:4e:ea:82: 86:e5:36:f1:0c:6a:a6:8a:17:4c:3e:ec:2a:b5:bc:8d:52:6f: 70:ad:9d:1b:a3:5e:79:9e:5d:b4:f0:87:00:c0:59:77:2a:06: 3f:f0:7b:88:07:af:a5:fc:0d:b2:6d:e5:13:29:5d:d9:b9:99: dc:ab:a9:2c:31:d7:fb:09:92:74:d4:83:52:83:ab:c5:a4:ec: d5:66:e2:ee:74:1d:0b:b9:05:07:0a:c9:1c:46:0b:d1:9f:c5: 0b:88:3f:dc:d4:bc:e1:c8:3b:a7:a1:27:71:c2:b4:06:a2:a7: 18:47:64:b5:73:8b:84:72:4c:b5:15:99:e5:19:95:ee:a3:d9: a5:37:52:d9:09:a2:9d:ce:00:a8:d1:be:84:8d:91:ef:42:ee: ce:74:c1:27:16:61:58:fc:7e:58:5a:e1:ee:0d:d6:b6:9f:ff: 08:3c:f8:6e:1e:85:fb:d4:75:35:80:02:1f:70:99:7a:44:c9: 59:55:0d:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrltCQ+3JVc8t4Mxb39ytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YTE2NTRkYWU5NmM1MzI1NzhjZTFkZjFlYmI4MjIxZGJi NjgxNDUwHhcNMjUxMjI2MjIwMTI4WhcNMjUxMjI3MjIwMTI4WjAzMTEwLwYDVQQD EyhjMjQ5MmI0MzJlODEyYjhiNjM3N2YxYWM4MjU3YTgwOWJlOGI2MjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnds8cJ0TTn6hR5MwHOOkUhhOYXq 6FFdsM2CBsMQrKafFoHbQi2uRjjMwoICG5LOqwSbM/FdhGRyfayFVYnJ4UatPhv6 fo5FBlMJrZ/YDGi5rt9j3oP45s2AOz41B46aQNik6X7xYlxdkTuIIaK6kcYj8ckn D85GVPlTJ1iU0nALAcP4HdGUXG6mbv6qdzh3TILuuyKCycneaTqnrqK9Oo1/tOMm bPwEQwJpGzxNhHjmpHPO52rs77Ix7lcwr5YvSHF+R7oTQM/sPmN/lm1vhmb9A8YY y2gliR9zO4Rjb/4QnMtcO7PEtosBr1bm/XLrjP5JxM724GyBpzFG3g6azQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJJK0MugSuLY3fxrIJXqAm+i2KTMB8GA1UdIwQY MBaAFLahZU2ulsUyV4zh3x67giHbtoFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHFGbFRhNld4VEpYak9IZkhydUNJZHUyZ1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iMDExZDMtYmRiYS00NWNkLWE4YWMt ZTBiZTg5YzRmMTY5LzEvdHFGbFRhNld4VEpYak9IZkhydUNJZHUyZ1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9iMDExZDMtYmRiYS00NWNkLWE4YWMtZTBiZTg5YzRmMTY5 LzEvdHFGbFRhNld4VEpYak9IZkhydUNJZHUyZ1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuCaQqge x54jP3zjZQFnHv5Gem/gzggTPzMyGJkZ9KfevsviyOwq+gG6tOHnfYTf6WsKfZeV 1Cd3jaDyjGhw/EHYR+YiTuqChuU28QxqpooXTD7sKrW8jVJvcK2dG6NeeZ5dtPCH AMBZdyoGP/B7iAevpfwNsm3lEyld2bmZ3KupLDHX+wmSdNSDUoOrxaTs1Wbi7nQd C7kFBwrJHEYL0Z/FC4g/3NS84cg7p6EnccK0BqKnGEdktXOLhHJMtRWZ5RmV7qPZ pTdS2Qminc4AqNG+hI2R70LuznTBJxZhWPx+WFrh7g3Wtp//CDz4bh6F+9R1NYAC H3CZekTJWVUNRw== -----END CERTIFICATE-----Generated at Sat Dec 27 00:41:27 2025 by rpki-client