This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json) Hash identifier: E7pCFyxJActvv/+n6WsMNSptbQfGRO2TO1v8QHsoPaQ= Subject key identifier: 49:83:1F:F7:E0:2E:F6:0C:7B:FE:AA:D7:50:DB:CE:4F:3C:87:BD:4B Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e Certificate serial: 019B413692A18DB7037A27C2967D6A73B761 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 14:00:54 +0000 Manifest this update: Sun 21 Dec 2025 14:00:54 +0000 Manifest next update: Mon 22 Dec 2025 14:00:54 +0000 Files and hashes: 1: LKAft93oZKWm8C5vqJwOGZJiSJU.roa (hash: DXlp4EQmxRSQHGzjwfBhaby6m7/cBeVJqjDN3Ga+MWk=) 2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: jVCTzSrp9JyBeH7YAOZr+6mGdPFb9bEtns+iB78P+6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:92:a1:8d:b7:03:7a:27:c2:96:7d:6a:73:b7:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e Validity Not Before: Dec 21 14:00:54 2025 GMT Not After : Dec 22 14:00:54 2025 GMT Subject: CN=49831ff7e02ef60c7bfeaad750dbce4f3c87bd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0e:e2:d2:34:85:3f:9a:b5:c2:06:2e:5e:54: 80:c5:7f:be:47:ff:b7:e9:26:13:f8:48:31:8b:a4: 47:1c:55:a3:f7:3e:6a:5e:db:c6:ea:c1:4d:13:53: f2:8e:f0:19:17:4a:b6:39:e7:80:3b:df:26:61:58: f4:f9:21:aa:40:a6:97:f0:26:c0:ee:a9:f1:21:1c: c9:19:73:35:6b:bf:3b:33:76:26:68:ca:4d:98:e8: fa:42:b1:53:f1:c9:59:c8:58:e6:ae:81:1a:12:55: 24:44:6c:2a:b6:c8:5f:9d:d3:6e:7b:da:19:51:36: 2e:4d:5c:1d:7b:1c:13:34:b2:51:97:f1:24:38:73: 0f:19:8b:90:9e:0f:f5:e1:e9:33:af:8b:02:3e:7a: 8e:28:39:95:56:03:1f:04:e7:06:51:4a:0b:80:27: 80:50:6a:2d:26:76:17:86:9d:2f:9f:3a:6f:03:1b: bb:b7:80:93:c7:31:24:8e:a8:84:32:e3:a1:31:03: 5c:f2:b1:2a:75:7a:da:b4:39:4c:c1:d7:69:4c:8d: e1:52:92:e6:5e:25:36:77:f5:e4:ae:ef:f9:bb:4d: 6b:e3:02:06:f8:4d:61:d1:a9:2b:5b:40:1f:6e:41: fe:0e:3e:68:2b:4f:6f:85:01:d5:1a:1d:53:b1:54: c1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:83:1F:F7:E0:2E:F6:0C:7B:FE:AA:D7:50:DB:CE:4F:3C:87:BD:4B X509v3 Authority Key Identifier: keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ac:52:e2:72:e7:d4:fb:3e:5f:76:73:3f:c3:57:28:0e:d4: 99:99:40:d4:2a:78:4c:cc:c5:10:8f:44:c8:bf:75:7a:04:b3: b1:69:be:30:82:0e:58:18:2c:65:1e:c8:ef:3f:d5:40:2d:52: ac:40:ff:2e:52:5a:34:59:a9:db:20:77:66:2e:dd:2e:69:62: f6:82:6f:e3:8d:c6:d8:b9:b3:26:e9:fd:74:be:7b:c0:91:1b: bb:b3:e7:b8:e8:b1:57:52:29:6d:fa:87:fe:db:e7:5d:e0:7b: 77:83:09:45:b6:1b:2e:41:52:4a:fc:2b:c3:97:66:83:97:c7: 71:fc:43:42:8a:dc:9e:3b:58:43:16:04:d6:d5:cc:2b:03:e3: 58:d2:48:b4:af:88:f6:66:c7:73:93:d2:f7:49:7b:5c:8f:6b: c6:39:39:a5:25:9e:5f:5c:d2:ba:1c:e4:17:69:69:d2:71:af: 70:5b:4d:5a:be:9a:f7:2f:1f:0d:99:7e:0d:c2:ce:3d:7a:a5: f7:be:db:12:26:14:fa:93:41:06:a6:8a:b0:0a:74:a8:b0:0a: ab:60:11:bf:16:52:44:af:e4:72:57:08:b0:a8:3d:7e:1f:f7: e5:64:4c:aa:01:7d:06:54:51:c7:d0:34:a0:ad:be:b1:04:d4: 7b:54:90:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNpKhjbcDeifCln1qc7dhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZGQ2ZDY1OGUxNDU3MWU4MzlmNzgxM2RhMzFmMjIxNzQy MjgxOGUwHhcNMjUxMjIxMTQwMDU0WhcNMjUxMjIyMTQwMDU0WjAzMTEwLwYDVQQD Eyg0OTgzMWZmN2UwMmVmNjBjN2JmZWFhZDc1MGRiY2U0ZjNjODdiZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw7i0jSFP5q1wgYuXlSAxX++R/+3 6SYT+Egxi6RHHFWj9z5qXtvG6sFNE1PyjvAZF0q2OeeAO98mYVj0+SGqQKaX8CbA 7qnxIRzJGXM1a787M3YmaMpNmOj6QrFT8clZyFjmroEaElUkRGwqtshfndNue9oZ UTYuTVwdexwTNLJRl/EkOHMPGYuQng/14ekzr4sCPnqOKDmVVgMfBOcGUUoLgCeA UGotJnYXhp0vnzpvAxu7t4CTxzEkjqiEMuOhMQNc8rEqdXratDlMwddpTI3hUpLm XiU2d/Xkru/5u01r4wIG+E1h0akrW0AfbkH+Dj5oK09vhQHVGh1TsVTBKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmDH/fgLvYMe/6q11Dbzk88h71LMB8GA1UdIwQY MBaAFLTdbWWOFFceg594E9ox8iF0IoGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUt ODFkMjE0ZWRmMjk4LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUtODFkMjE0ZWRmMjk4 LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6xS4nLn 1Ps+X3ZzP8NXKA7UmZlA1Cp4TMzFEI9EyL91egSzsWm+MIIOWBgsZR7I7z/VQC1S rED/LlJaNFmp2yB3Zi7dLmli9oJv443G2LmzJun9dL57wJEbu7PnuOixV1IpbfqH /tvnXeB7d4MJRbYbLkFSSvwrw5dmg5fHcfxDQorcnjtYQxYE1tXMKwPjWNJItK+I 9mbHc5PS90l7XI9rxjk5pSWeX1zSuhzkF2lp0nGvcFtNWr6a9y8fDZl+DcLOPXql 977bEiYU+pNBBqaKsAp0qLAKq2ARvxZSRK/kclcIsKg9fh/35WRMqgF9BlRRx9A0 oK2+sQTUe1SQTQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:32:34 2025 by rpki-client