This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json) Hash identifier: R8xxKlq+Vo+4chvPJLy8yPv/HVp9UB3e6NqzssLdpag= Subject key identifier: 0B:45:5D:08:FE:DF:91:29:15:2F:0B:AF:9A:53:80:72:AE:5C:D2:D7 Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95 Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95 Certificate serial: 019B210754E988D096ACFB46C6ED70C0D1E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft Manifest number: 1715 Signing time: Mon 15 Dec 2025 08:01:27 +0000 Manifest this update: Mon 15 Dec 2025 08:01:27 +0000 Manifest next update: Tue 16 Dec 2025 08:01:27 +0000 Files and hashes: 1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: GtXuqji0PmWD0nXI0Mbi24rCn3YJztQewq6W9skvm44=) 2: Zo-iXOH7eoz1wcNDU4gFPp4lbTo.roa (hash: lEXdntgkazPfcD7Ym6WQrguJ42W+/3phyup2XOjaUaA=) 3: w0BgVrxvQVnjW2X3qjBQ3ko9xOc.roa (hash: Ucfa4JRcD7zc33DVXeSZa1Nus1iwZHoQ8xtQZD2xfUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:07:54:e9:88:d0:96:ac:fb:46:c6:ed:70:c0:d1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95 Validity Not Before: Dec 15 08:01:27 2025 GMT Not After : Dec 16 08:01:27 2025 GMT Subject: CN=0b455d08fedf9129152f0baf9a538072ae5cd2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:e4:94:56:5e:0c:37:94:4f:1a:29:28:cb:dc: 5e:64:b1:49:0e:69:9d:a6:69:4e:85:cd:ce:74:b7: fc:31:64:3d:40:32:00:84:58:89:76:ea:f6:cc:96: 22:f7:2b:25:53:cb:3c:52:4e:b3:ca:1d:35:e5:17: b3:a9:50:95:f9:0d:78:dc:ba:ab:64:d5:21:70:39: 1a:61:2c:62:bc:30:9f:e1:6f:0e:f2:2d:94:91:1d: e3:10:99:e2:9c:4d:c9:63:95:d1:3f:ea:60:c1:3b: e6:1a:e2:a6:d3:83:c2:0d:3c:15:9e:ca:26:05:70: a8:a2:8a:09:59:c3:ac:6c:6d:7b:7d:f2:35:03:ed: 60:50:c4:2f:fe:58:63:7d:e3:ef:12:3e:58:f6:d7: c4:7d:b1:ea:e1:81:2d:c8:fd:75:f1:5f:66:65:73: 5e:a6:fa:83:d9:14:f5:9b:3a:ad:c6:e9:6e:87:10: 15:e7:49:74:2b:4a:d3:c4:19:57:5c:1c:8e:f7:a5: 24:93:be:a1:e2:99:57:96:2e:5e:f5:70:90:d6:8f: a8:79:63:c4:da:7b:dc:5c:3a:c7:31:20:d9:30:65: 58:77:d7:57:bb:72:66:0e:49:23:01:ec:20:c0:1c: cc:38:e6:9d:ce:30:2b:f7:b7:d7:c8:c8:cb:03:0f: 9c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:45:5D:08:FE:DF:91:29:15:2F:0B:AF:9A:53:80:72:AE:5C:D2:D7 X509v3 Authority Key Identifier: keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f3:b7:6e:ce:01:58:a5:75:85:c4:d0:f4:1f:a9:78:5c:c7: 5c:3e:df:e3:07:c6:d6:29:04:b8:7b:4e:8a:14:d7:64:08:2c: 60:05:3e:ec:a0:c7:34:2b:e7:23:3b:ae:f4:f1:6c:e7:d1:47: 20:99:46:21:65:82:8d:68:5d:36:db:2b:f1:1d:88:ba:e7:46: db:b3:26:a1:a8:30:67:e4:70:2f:d2:fa:7a:9d:fc:8e:c8:7e: 06:ed:e1:87:76:aa:f7:78:c5:13:de:ef:76:00:fe:1b:2d:20: 2e:97:11:4f:69:5b:38:25:e2:e5:13:fd:65:4e:8f:ea:14:1e: e4:03:17:8a:d7:ef:61:91:ca:47:f1:ab:02:92:3d:78:87:c1: ad:b3:f8:ce:bd:65:9a:f2:ad:61:06:7c:d0:b2:74:29:8f:63: 47:cd:3a:46:64:cb:b8:7a:5b:58:d3:98:74:ae:62:c4:f1:62: f4:0c:88:89:04:5b:93:6a:4b:2f:22:8f:c3:76:5d:ad:fa:31: 3c:4e:25:de:a5:ab:94:b8:e9:81:8f:27:13:f2:93:58:96:eb: 34:c1:8c:04:91:c8:17:b6:53:49:19:a5:9e:18:7b:e4:28:a5: 9e:00:8d:57:9a:8a:19:db:70:60:d1:96:99:1c:1a:f6:05:98: 25:0a:d9:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshB1TpiNCWrPtGxu1wwNHjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYzNhMDYyY2I5NmQ5YTNmMjFhOGIyZGE4NDhmODFjNmY3 M2JmOTUwHhcNMjUxMjE1MDgwMTI3WhcNMjUxMjE2MDgwMTI3WjAzMTEwLwYDVQQD EygwYjQ1NWQwOGZlZGY5MTI5MTUyZjBiYWY5YTUzODA3MmFlNWNkMmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9uSUVl4MN5RPGikoy9xeZLFJDmmd pmlOhc3OdLf8MWQ9QDIAhFiJdur2zJYi9yslU8s8Uk6zyh015RezqVCV+Q143Lqr ZNUhcDkaYSxivDCf4W8O8i2UkR3jEJninE3JY5XRP+pgwTvmGuKm04PCDTwVnsom BXCooooJWcOsbG17ffI1A+1gUMQv/lhjfePvEj5Y9tfEfbHq4YEtyP118V9mZXNe pvqD2RT1mzqtxuluhxAV50l0K0rTxBlXXByO96Ukk76h4plXli5e9XCQ1o+oeWPE 2nvcXDrHMSDZMGVYd9dXu3JmDkkjAewgwBzMOOadzjAr97fXyMjLAw+cewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtFXQj+35EpFS8Lr5pTgHKuXNLXMB8GA1UdIwQY MBaAFE7DoGLLltmj8hqLLahI+Bxvc7+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWIt ZjU2N2MzZTlmNWZmLzEvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWItZjU2N2MzZTlmNWZm LzEvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/O3bs4B WKV1hcTQ9B+peFzHXD7f4wfG1ikEuHtOihTXZAgsYAU+7KDHNCvnIzuu9PFs59FH IJlGIWWCjWhdNtsr8R2IuudG27MmoagwZ+RwL9L6ep38jsh+Bu3hh3aq93jFE97v dgD+Gy0gLpcRT2lbOCXi5RP9ZU6P6hQe5AMXitfvYZHKR/GrApI9eIfBrbP4zr1l mvKtYQZ80LJ0KY9jR806RmTLuHpbWNOYdK5ixPFi9AyIiQRbk2pLLyKPw3Zdrfox PE4l3qWrlLjpgY8nE/KTWJbrNMGMBJHIF7ZTSRmlnhh75CilngCNV5qKGdtwYNGW mRwa9gWYJQrZiw== -----END CERTIFICATE-----Generated at Mon Dec 15 17:08:56 2025 by rpki-client