This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft File: tVNDqiHHSjn81Rg_T99V3EZ56D0.mft (raw, json) Hash identifier: f/LfwGlrDOKqlwQKWTl9UqPQ0OGVLFljy6tuVmkTTTE= Subject key identifier: 0D:C4:76:1B:3E:60:BA:2F:3B:00:13:EB:17:B6:D7:88:EA:0D:80:F1 Authority key identifier: B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D Certificate issuer: /CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d Certificate serial: 019B59E3F56E942886B1518CB0300DC7848E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft Manifest number: 02CF Signing time: Fri 26 Dec 2025 09:01:10 +0000 Manifest this update: Fri 26 Dec 2025 09:01:10 +0000 Manifest next update: Sat 27 Dec 2025 09:01:10 +0000 Files and hashes: 1: RXmLcd13ajoTVlcEirVukYVayjY.roa (hash: VMYnLhwMDYwO9ah7mzCKDLgq1vs8pRSHkOzi/+9nkdg=) 2: tVNDqiHHSjn81Rg_T99V3EZ56D0.crl (hash: vUoudFiiDlzGINOniDM60MSPQ0WRIK5uwhIFw23THg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:f5:6e:94:28:86:b1:51:8c:b0:30:0d:c7:84:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d Validity Not Before: Dec 26 09:01:10 2025 GMT Not After : Dec 27 09:01:10 2025 GMT Subject: CN=0dc4761b3e60ba2f3b0013eb17b6d788ea0d80f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a7:e5:8a:3e:d8:00:56:27:82:ab:c0:f8:29: 3d:17:27:ae:07:6d:d1:24:38:1e:dc:10:f9:28:ed: 9f:42:c7:43:6c:2b:79:dc:88:23:df:96:63:13:f2: b0:f1:1e:d7:42:84:9f:dd:2d:8a:5f:71:64:5a:e9: 63:57:da:60:a1:98:b2:b4:17:a6:3a:d0:7d:4c:db: 6b:34:a1:dd:62:a8:9c:80:9e:32:cb:e7:0d:0e:1e: 35:96:a5:8f:75:e8:77:15:1a:23:62:2b:83:a5:4c: 8d:32:82:a3:a0:3d:7f:37:8f:83:a9:15:a3:95:1b: 09:96:52:ea:93:b2:c0:42:b8:ad:2d:93:15:90:68: 43:31:20:d7:3f:b2:51:9d:fe:f4:5d:8e:41:83:f7: 17:40:70:a6:e0:01:2e:15:6a:d0:d2:62:28:27:76: db:d6:c2:bf:de:da:2f:c8:b1:1c:8b:56:2d:24:66: 05:2d:df:94:d8:3f:05:0e:02:b4:0b:7b:3a:c5:a2: 87:3e:f5:a1:1e:a6:fc:16:0c:2c:dc:ff:b5:f1:00: d0:77:8c:06:6d:50:a8:ef:a2:69:43:b6:99:c9:53: 98:35:b8:04:6e:0a:7f:c2:ff:28:3d:93:31:d5:5b: ef:da:93:64:09:2e:33:76:1d:ef:8f:1e:d9:e0:fd: 01:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C4:76:1B:3E:60:BA:2F:3B:00:13:EB:17:B6:D7:88:EA:0D:80:F1 X509v3 Authority Key Identifier: keyid:B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:50:2f:f3:68:25:8b:4b:3b:56:24:5e:b8:d8:98:e2:e1:2a: 40:9f:6b:d7:9d:69:5f:bf:b3:50:59:90:2d:b6:85:4f:3a:bb: 41:10:1c:33:09:e8:c4:fa:d0:b9:bf:e1:95:97:7f:01:70:75: d1:29:86:ca:c9:4c:c9:27:cb:ef:dd:29:1f:5a:14:01:c1:20: 8a:b5:38:2b:ba:80:e0:44:c8:56:b6:9d:de:2b:73:82:ae:bc: af:f3:bd:3f:41:a2:a3:30:76:15:cb:44:ee:47:4f:9d:0e:f2: d4:e3:4b:2b:cd:fa:ce:c2:4d:e6:9f:cc:6f:ed:24:2b:d1:bf: 64:75:59:9c:97:80:e6:a2:69:7a:6e:86:f0:77:ee:d3:09:8f: 3b:7c:71:45:d2:30:d9:a0:24:46:47:9e:39:97:22:69:e2:67: c5:80:62:9d:c4:53:8f:21:01:34:02:25:ad:83:c5:e5:e9:1d: cd:11:9c:fb:11:51:b4:89:3e:99:bd:96:07:ec:22:b7:7c:26: 08:af:e3:d1:8f:96:78:19:ae:15:a6:d6:5c:31:e6:d3:73:9a: 32:18:2a:3b:80:f4:ad:cf:56:ab:0c:62:7f:58:44:ba:6a:dd: 49:b4:ec:14:9f:8c:51:28:a9:fe:65:8a:60:aa:36:34:a1:df: 2e:f3:5f:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4/VulCiGsVGMsDANx4SOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTM0M2FhMjFjNzRhMzlmY2Q1MTgzZjRmZGY1NWRjNDY3 OWU4M2QwHhcNMjUxMjI2MDkwMTEwWhcNMjUxMjI3MDkwMTEwWjAzMTEwLwYDVQQD EygwZGM0NzYxYjNlNjBiYTJmM2IwMDEzZWIxN2I2ZDc4OGVhMGQ4MGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaflij7YAFYngqvA+Ck9FyeuB23R JDge3BD5KO2fQsdDbCt53Igj35ZjE/Kw8R7XQoSf3S2KX3FkWuljV9pgoZiytBem OtB9TNtrNKHdYqicgJ4yy+cNDh41lqWPdeh3FRojYiuDpUyNMoKjoD1/N4+DqRWj lRsJllLqk7LAQritLZMVkGhDMSDXP7JRnf70XY5Bg/cXQHCm4AEuFWrQ0mIoJ3bb 1sK/3tovyLEci1YtJGYFLd+U2D8FDgK0C3s6xaKHPvWhHqb8Fgws3P+18QDQd4wG bVCo76JpQ7aZyVOYNbgEbgp/wv8oPZMx1Vvv2pNkCS4zdh3vjx7Z4P0BSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3Edhs+YLovOwAT6xe214jqDYDxMB8GA1UdIwQY MBaAFLVTQ6ohx0o5/NUYP0/fVdxGeeg9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZORHFpSEhTam44MVJnX1Q5OVYzRVo1NkQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jNDljMDgtOTJhYi00Y2IxLTgwOWIt NGVjN2I1ZWZhZTM3LzEvdFZORHFpSEhTam44MVJnX1Q5OVYzRVo1NkQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jNDljMDgtOTJhYi00Y2IxLTgwOWItNGVjN2I1ZWZhZTM3 LzEvdFZORHFpSEhTam44MVJnX1Q5OVYzRVo1NkQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlAv82gl i0s7ViReuNiY4uEqQJ9r151pX7+zUFmQLbaFTzq7QRAcMwnoxPrQub/hlZd/AXB1 0SmGyslMySfL790pH1oUAcEgirU4K7qA4ETIVrad3itzgq68r/O9P0GiozB2FctE 7kdPnQ7y1ONLK836zsJN5p/Mb+0kK9G/ZHVZnJeA5qJpem6G8Hfu0wmPO3xxRdIw 2aAkRkeeOZciaeJnxYBincRTjyEBNAIlrYPF5ekdzRGc+xFRtIk+mb2WB+wit3wm CK/j0Y+WeBmuFabWXDHm03OaMhgqO4D0rc9Wqwxif1hEumrdSbTsFJ+MUSip/mWK YKo2NKHfLvNfGg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:34 2025 by rpki-client