This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft File: Tk9mXUbWoqvwUh5csffEUcozeoc.mft (raw, json) Hash identifier: mEKuBnjJGciRbvR3kb4Tqq3TERyRa3nG5qEBXt30Fwc= Subject key identifier: 11:54:3A:5C:77:70:91:4C:E9:3A:FA:8B:D7:D2:86:CF:EB:3E:C3:25 Authority key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87 Certificate issuer: /CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87 Certificate serial: 019B35D73D187D57C16F32B8E142727588AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft Manifest number: 0366 Signing time: Fri 19 Dec 2025 09:00:56 +0000 Manifest this update: Fri 19 Dec 2025 09:00:56 +0000 Manifest next update: Sat 20 Dec 2025 09:00:56 +0000 Files and hashes: 1: 1KxZYvxri1sxva3r2G7KLnG5z_Y.roa (hash: 9JXmyyV6BbeWSwFTBJAUkp5UHelZgOhj8wsWM2RqVyk=) 2: HrSejbS-39NivWEqBB6_ezmUBgQ.roa (hash: 8T3MTXu6asTJ46RNeuQMt6iMOXHZ2zW1uZEJeSesDDw=) 3: Tk9mXUbWoqvwUh5csffEUcozeoc.crl (hash: eSOdiIrhBbZXIiJJ+C718qhOyFTMm9/NEszQhwWN2ZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:3d:18:7d:57:c1:6f:32:b8:e1:42:72:75:88:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87 Validity Not Before: Dec 19 09:00:56 2025 GMT Not After : Dec 20 09:00:56 2025 GMT Subject: CN=11543a5c7770914ce93afa8bd7d286cfeb3ec325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5a:1e:ab:e5:25:28:e9:28:c5:d8:be:da:a7: a4:b4:ee:a4:5e:12:75:0b:bf:60:7f:f5:d5:df:ce: f2:3c:f4:17:8b:21:81:78:2d:0f:77:02:cc:12:1a: ea:b1:55:8e:b3:d0:a8:d2:99:d6:fb:64:c3:c6:ed: 0d:d7:df:09:ad:bf:c6:c0:d8:d8:b7:14:b6:62:09: 58:fb:2b:b6:b4:2f:29:38:f6:f1:a4:ef:e6:1e:03: 7d:65:44:81:0d:7d:de:4a:58:b1:0f:1b:67:99:e5: aa:d0:25:fd:44:23:7b:c1:6d:eb:a0:9d:6c:2f:09: 08:c7:cf:94:6f:26:fa:a4:7c:c7:c9:5c:d7:22:d7: 0e:81:9e:6d:29:aa:13:8f:9b:d3:3d:aa:0d:98:fc: 40:fc:a2:ba:c6:f9:23:7e:ba:94:f8:8d:ed:6e:12: 72:1f:81:27:60:1f:74:20:27:44:0d:51:ff:5e:f4: f2:e4:5c:2f:3e:ed:c1:20:6a:1c:e8:b0:42:48:41: 3b:d6:b4:c9:d4:47:a8:5b:82:22:c0:80:49:53:d0: bc:6b:95:ba:ad:e9:cc:37:97:5d:cb:b7:f3:7d:67: dc:d4:8d:e6:71:21:bd:63:89:b0:71:7f:e4:2b:cf: 4b:d4:64:70:f7:0b:5b:6e:8e:82:8d:d5:0c:c6:b0: 13:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:54:3A:5C:77:70:91:4C:E9:3A:FA:8B:D7:D2:86:CF:EB:3E:C3:25 X509v3 Authority Key Identifier: keyid:4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:df:61:cf:7b:e0:48:07:ec:b1:61:3b:02:fb:58:ac:c1:a9: 01:4c:24:02:18:27:64:76:82:85:c7:58:bf:53:d7:6b:c0:a4: e9:13:ce:d4:4f:85:a0:cc:00:c3:61:1c:50:a2:0d:bc:0e:80: ac:9c:5e:12:17:bf:16:95:33:e3:dd:50:b2:0c:ff:95:62:7d: e2:cd:f7:f4:9e:13:c0:94:62:93:47:c3:07:61:44:57:5a:f0: 05:5d:39:8b:28:32:ea:60:79:ce:cc:53:01:3c:63:2e:f7:dc: 60:78:8a:11:2a:1a:fb:86:11:e8:b6:0e:ba:f5:f4:00:0a:49: 9f:5e:11:4a:8f:57:98:36:ca:80:0c:8a:1d:b1:9a:88:b8:2d: e1:90:ef:24:c4:a2:43:5d:ed:d1:eb:7f:1d:c0:dd:77:67:20: 69:05:93:89:47:3e:ee:07:f3:dc:f7:bb:b8:27:ad:5a:07:f6: 49:65:91:6b:7b:66:51:f9:ec:30:e5:24:4e:54:35:42:26:e9: 06:52:31:b3:9b:03:7e:77:c3:da:82:f3:7b:d7:ed:ef:41:50: e5:62:9f:57:36:69:69:60:c4:7c:3f:4b:f0:f6:87:23:57:54: 0a:0d:99:f5:b5:8b:1b:23:de:82:6d:51:4a:2a:4a:45:76:8f: 9b:6c:d8:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11z0YfVfBbzK44UJydYisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNGY2NjVkNDZkNmEyYWJmMDUyMWU1Y2IxZjdjNDUxY2Ez MzdhODcwHhcNMjUxMjE5MDkwMDU2WhcNMjUxMjIwMDkwMDU2WjAzMTEwLwYDVQQD EygxMTU0M2E1Yzc3NzA5MTRjZTkzYWZhOGJkN2QyODZjZmViM2VjMzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Voeq+UlKOkoxdi+2qektO6kXhJ1 C79gf/XV387yPPQXiyGBeC0PdwLMEhrqsVWOs9Co0pnW+2TDxu0N198Jrb/GwNjY txS2YglY+yu2tC8pOPbxpO/mHgN9ZUSBDX3eSlixDxtnmeWq0CX9RCN7wW3roJ1s LwkIx8+Ubyb6pHzHyVzXItcOgZ5tKaoTj5vTPaoNmPxA/KK6xvkjfrqU+I3tbhJy H4EnYB90ICdEDVH/XvTy5FwvPu3BIGoc6LBCSEE71rTJ1EeoW4IiwIBJU9C8a5W6 renMN5ddy7fzfWfc1I3mcSG9Y4mwcX/kK89L1GRw9wtbbo6CjdUMxrATPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFUOlx3cJFM6Tr6i9fShs/rPsMlMB8GA1UdIwQY MBaAFE5PZl1G1qKr8FIeXLH3xFHKM3qHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGs5bVhVYldvcXZ3VWg1Y3NmZkVVY296ZW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNzBiODktN2M0Ny00MjYzLTg2YTAt MDA3M2MyYjdhN2VlLzEvVGs5bVhVYldvcXZ3VWg1Y3NmZkVVY296ZW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8yNzBiODktN2M0Ny00MjYzLTg2YTAtMDA3M2MyYjdhN2Vl LzEvVGs5bVhVYldvcXZ3VWg1Y3NmZkVVY296ZW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnd9hz3vg SAfssWE7AvtYrMGpAUwkAhgnZHaChcdYv1PXa8Ck6RPO1E+FoMwAw2EcUKINvA6A rJxeEhe/FpUz491Qsgz/lWJ94s339J4TwJRik0fDB2FEV1rwBV05iygy6mB5zsxT ATxjLvfcYHiKESoa+4YR6LYOuvX0AApJn14RSo9XmDbKgAyKHbGaiLgt4ZDvJMSi Q13t0et/HcDdd2cgaQWTiUc+7gfz3Pe7uCetWgf2SWWRa3tmUfnsMOUkTlQ1Qibp BlIxs5sDfnfD2oLze9ft70FQ5WKfVzZpaWDEfD9L8PaHI1dUCg2Z9bWLGyPegm1R SipKRXaPm2zYIw== -----END CERTIFICATE-----Generated at Fri Dec 19 14:20:02 2025 by rpki-client