This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft File: tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json) Hash identifier: Sv/u9qM2sTKj/hahUINSEHU1XbTL3w2r5gzf6JqvGD0= Subject key identifier: 8F:D5:96:80:43:B5:0C:F5:3D:1C:40:69:59:30:1D:B4:07:8B:99:E5 Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27 Certificate issuer: /CN=b45064c1ac8690e2c77a959a502546e98bcd3727 Certificate serial: 019B4A02FC0FFF987ED84F4BDA617F0F8555 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft Manifest number: 0E0F Signing time: Tue 23 Dec 2025 07:01:07 +0000 Manifest this update: Tue 23 Dec 2025 07:01:07 +0000 Manifest next update: Wed 24 Dec 2025 07:01:07 +0000 Files and hashes: 1: _INaZ6DycFqZuVm42lkSOfz9oRs.roa (hash: N1fFaEC6dFW7nNDOY6nEbXrF6dJ7s2tSPU9xB9zA38k=) 2: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: dfHOVPCGLtT4m64PizO9a6SjSNhgwLNxJ7E+p+DxpOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:02:fc:0f:ff:98:7e:d8:4f:4b:da:61:7f:0f:85:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727 Validity Not Before: Dec 23 07:01:07 2025 GMT Not After : Dec 24 07:01:07 2025 GMT Subject: CN=8fd5968043b50cf53d1c406959301db4078b99e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f0:b6:12:ae:fa:65:38:2f:26:f4:fd:83:d8: 66:67:4c:ee:26:6d:85:9e:0d:77:f6:2f:87:00:ee: ca:5d:31:01:48:84:45:f9:b2:66:11:1e:88:8a:1d: b8:cc:54:13:92:a6:15:67:df:19:3d:28:bc:96:e8: ec:df:e0:9c:1b:62:34:03:8f:96:61:ea:16:2f:0d: 49:52:44:d1:63:2a:65:ab:cc:ce:34:a1:ae:92:86: 75:09:13:a8:f6:ca:a8:b2:d8:9b:9a:70:e9:a9:5d: 77:1d:70:4a:27:8f:ad:ce:ef:73:e8:1a:3d:d7:5c: 7e:d6:6b:05:2c:f5:0d:33:2d:31:3e:73:df:8f:76: 01:8e:2c:1b:c6:d3:df:6c:59:5f:4e:7d:42:1c:5e: 1f:d7:52:6a:7a:a0:8e:eb:42:06:52:c8:ea:fa:57: 99:05:40:6e:85:73:2f:e3:88:d1:c9:80:31:d9:db: 3d:17:07:80:d5:69:f5:1d:dd:1a:f6:c1:74:f8:72: 5d:5f:98:ec:67:54:1b:57:c2:d3:a9:80:de:ad:ec: 62:3e:d6:9a:f6:2a:43:80:86:56:ac:1e:6b:31:b0: 90:75:b0:b7:5a:56:0c:10:f0:95:2b:7b:06:ee:ba: ce:d1:55:c1:ec:45:c7:9b:21:3a:35:3e:02:c0:54: 1e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D5:96:80:43:B5:0C:F5:3D:1C:40:69:59:30:1D:B4:07:8B:99:E5 X509v3 Authority Key Identifier: keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f2:73:02:95:fe:0f:a1:bb:70:ab:61:8f:9d:b9:17:1c:8f: 47:88:3b:30:4d:ae:da:ad:c5:39:4b:55:73:1d:fe:e5:ad:94: bc:e3:5d:e3:07:02:6f:2c:08:25:29:be:5d:2a:44:0f:8a:5e: 02:d9:b0:75:a4:27:11:7d:78:e9:08:ef:8c:71:b7:57:fd:bf: c3:13:08:12:62:c4:a7:5c:57:ae:2d:89:27:df:42:30:4a:6c: d5:a9:b9:2b:03:aa:21:ca:f0:58:0a:a3:d7:39:32:50:9f:9b: 04:8f:fe:bb:49:c0:bb:28:89:ad:67:e6:7a:ea:34:91:91:0c: 98:dc:f4:06:a7:d3:3b:16:21:e6:37:5d:dc:bb:f1:f0:fe:76: 52:69:f9:88:c9:8b:cf:d4:57:5e:36:66:fe:de:5d:99:2b:af: 7a:5d:7d:e4:1b:ed:38:3b:26:a5:03:e3:10:d2:0f:34:91:8b: 31:84:f9:0c:ae:0e:58:83:6d:13:01:a9:e8:e4:fc:57:ea:82: 32:7a:0b:c3:1f:d0:8b:bb:26:4a:30:50:6e:e6:22:41:eb:19: ca:32:e9:fc:6d:7e:1f:f6:3f:f0:a3:97:ab:70:0f:64:b7:e3: b3:6c:0f:4e:ab:35:09:dd:09:94:55:9d:6f:37:f0:24:bf:db: fa:d2:5a:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAvwP/5h+2E9L2mF/D4VVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTA2NGMxYWM4NjkwZTJjNzdhOTU5YTUwMjU0NmU5OGJj ZDM3MjcwHhcNMjUxMjIzMDcwMTA3WhcNMjUxMjI0MDcwMTA3WjAzMTEwLwYDVQQD Eyg4ZmQ1OTY4MDQzYjUwY2Y1M2QxYzQwNjk1OTMwMWRiNDA3OGI5OWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPC2Eq76ZTgvJvT9g9hmZ0zuJm2F ng139i+HAO7KXTEBSIRF+bJmER6Iih24zFQTkqYVZ98ZPSi8lujs3+CcG2I0A4+W YeoWLw1JUkTRYyplq8zONKGukoZ1CROo9sqostibmnDpqV13HXBKJ4+tzu9z6Bo9 11x+1msFLPUNMy0xPnPfj3YBjiwbxtPfbFlfTn1CHF4f11JqeqCO60IGUsjq+leZ BUBuhXMv44jRyYAx2ds9FweA1Wn1Hd0a9sF0+HJdX5jsZ1QbV8LTqYDerexiPtaa 9ipDgIZWrB5rMbCQdbC3WlYMEPCVK3sG7rrO0VXB7EXHmyE6NT4CwFQeLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/VloBDtQz1PRxAaVkwHbQHi5nlMB8GA1UdIwQY MBaAFLRQZMGshpDix3qVmlAlRumLzTcnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZCa3dheUdrT0xIZXBXYVVDVkc2WXZOTnljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8zNTkxNzktNGFjMi00MzFjLTk1MzEt MGI3YTMzZGQ1YjU2LzEvdEZCa3dheUdrT0xIZXBXYVVDVkc2WXZOTnljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8zNTkxNzktNGFjMi00MzFjLTk1MzEtMGI3YTMzZGQ1YjU2 LzEvdEZCa3dheUdrT0xIZXBXYVVDVkc2WXZOTnljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavJzApX+ D6G7cKthj525FxyPR4g7ME2u2q3FOUtVcx3+5a2UvONd4wcCbywIJSm+XSpED4pe AtmwdaQnEX146QjvjHG3V/2/wxMIEmLEp1xXri2JJ99CMEps1am5KwOqIcrwWAqj 1zkyUJ+bBI/+u0nAuyiJrWfmeuo0kZEMmNz0BqfTOxYh5jdd3Lvx8P52Umn5iMmL z9RXXjZm/t5dmSuvel195BvtODsmpQPjENIPNJGLMYT5DK4OWINtEwGp6OT8V+qC MnoLwx/Qi7smSjBQbuYiQesZyjLp/G1+H/Y/8KOXq3APZLfjs2wPTqs1Cd0JlFWd bzfwJL/b+tJa8g== -----END CERTIFICATE-----Generated at Tue Dec 23 14:15:38 2025 by rpki-client