This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft File: tqiXx5jwGbJHexqc47I7tddhZsM.mft (raw, json) Hash identifier: gKhyU/pzIEexnk9ChuKo2fWc7uioMuuNbahOcDCsr3Q= Subject key identifier: A2:E9:1B:9B:39:E9:06:5E:51:E4:81:11:F8:BE:EE:44:BE:D5:85:E0 Authority key identifier: B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3 Certificate issuer: /CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3 Certificate serial: 019AF3F78D9000DCAB91B0A427DE6D43F3AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft Manifest number: 1503 Signing time: Sat 06 Dec 2025 14:01:18 +0000 Manifest this update: Sat 06 Dec 2025 14:01:18 +0000 Manifest next update: Sun 07 Dec 2025 14:01:18 +0000 Files and hashes: 1: f9JCdqsJLWfadd987fFlDNk7mdM.roa (hash: 5CurkeU+eAkjrTT560cBjUlbg7hvGNi0G0d/Uo5/6r0=) 2: tqiXx5jwGbJHexqc47I7tddhZsM.crl (hash: sTRBrsqR3Is4FLQATEVKDo4BhkzuwLNGs7h+IIZhEnI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:8d:90:00:dc:ab:91:b0:a4:27:de:6d:43:f3:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3 Validity Not Before: Dec 6 14:01:18 2025 GMT Not After : Dec 7 14:01:18 2025 GMT Subject: CN=a2e91b9b39e9065e51e48111f8beee44bed585e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:81:a8:54:54:4b:c3:31:ac:2a:80:11:ce:4d: c2:bd:51:78:b4:6f:48:09:cc:2d:f4:94:53:b5:8b: fa:22:7e:ad:b4:38:93:4a:c9:23:b4:96:e3:57:22: 4a:32:a5:8c:73:a4:d6:48:76:0c:74:be:df:74:29: 01:39:92:5d:68:2d:18:25:7d:46:ff:01:8d:8c:be: c7:74:6e:f3:a3:cf:97:a1:81:c6:d8:0a:54:92:1d: bf:37:0d:ef:56:09:2b:50:04:28:e0:e5:a2:60:e6: fa:06:df:58:81:6a:1b:78:b9:eb:9e:c3:f8:08:7a: ed:ef:42:0a:3b:ab:e1:22:05:3b:75:d9:e6:46:be: 83:ae:c8:fb:87:29:2a:41:d6:f5:d9:ea:0e:a9:7e: 38:ff:2b:c1:2c:b1:ff:cb:6f:cf:9d:8c:ed:a0:3b: 54:47:bd:90:1e:59:6a:f8:1e:37:b3:4f:f8:ad:5c: a0:34:38:65:da:68:23:d5:1b:3d:11:93:f4:c1:f9: 7f:13:e2:09:78:d8:81:5d:41:e6:d0:8d:51:67:81: ce:ff:2f:ce:5e:85:c9:12:e1:dc:09:9a:e3:ce:52: d5:f9:f6:fc:cd:e4:33:5b:63:0b:8b:f9:8e:06:83: e2:b7:3c:2a:f7:f6:6f:47:84:3e:da:6e:62:ac:4d: 80:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E9:1B:9B:39:E9:06:5E:51:E4:81:11:F8:BE:EE:44:BE:D5:85:E0 X509v3 Authority Key Identifier: keyid:B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:df:e1:f8:a9:1a:55:75:74:b4:2e:81:76:7e:95:e3:43:fe: 70:9c:0b:50:83:70:aa:be:13:62:d4:3a:2f:a4:eb:47:df:0d: 85:b8:64:8a:13:c9:23:c9:6c:8f:73:53:b3:23:b4:ad:a7:80: be:cd:3d:75:c6:41:81:4e:97:4e:30:a0:d9:0f:06:e5:74:01: 06:03:a4:0f:32:c0:14:cb:70:15:10:fd:a7:96:93:9a:ed:a0: 59:ac:4c:55:bc:c8:a7:4c:c2:5d:0a:c7:7c:e9:fa:d2:bc:f1: bb:6d:fc:36:0c:0a:37:0c:e2:e9:38:82:d2:74:ba:9d:7f:f2: db:21:a0:7e:ca:fa:9b:d8:a1:54:a8:63:c6:4e:8c:fa:5b:4f: aa:3a:c8:16:27:07:d4:5e:ef:62:62:cd:d2:69:18:86:dd:1f: 75:0e:8a:54:93:9f:1c:8f:da:4c:29:ab:1b:69:71:bb:bf:44: 0b:af:d4:5b:cf:a6:71:47:a7:41:78:c3:a8:5d:a9:60:1e:b2: 8c:ff:b3:2f:60:e7:49:a9:0d:eb:37:0c:87:bf:f6:92:a3:74: 0e:bd:89:6e:e5:08:13:c1:70:4e:b4:d4:dc:47:21:20:ea:d9: 67:f5:be:61:20:e4:b9:3d:a9:b4:62:51:90:9d:17:aa:c6:a0: f1:1d:6c:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz942QANyrkbCkJ95tQ/OvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YTg5N2M3OThmMDE5YjI0NzdiMWE5Y2UzYjIzYmI1ZDc2 MTY2YzMwHhcNMjUxMjA2MTQwMTE4WhcNMjUxMjA3MTQwMTE4WjAzMTEwLwYDVQQD EyhhMmU5MWI5YjM5ZTkwNjVlNTFlNDgxMTFmOGJlZWU0NGJlZDU4NWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84GoVFRLwzGsKoARzk3CvVF4tG9I Ccwt9JRTtYv6In6ttDiTSskjtJbjVyJKMqWMc6TWSHYMdL7fdCkBOZJdaC0YJX1G /wGNjL7HdG7zo8+XoYHG2ApUkh2/Nw3vVgkrUAQo4OWiYOb6Bt9YgWobeLnrnsP4 CHrt70IKO6vhIgU7ddnmRr6Drsj7hykqQdb12eoOqX44/yvBLLH/y2/PnYztoDtU R72QHllq+B43s0/4rVygNDhl2mgj1Rs9EZP0wfl/E+IJeNiBXUHm0I1RZ4HO/y/O XoXJEuHcCZrjzlLV+fb8zeQzW2MLi/mOBoPitzwq9/ZvR4Q+2m5irE2A4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLpG5s56QZeUeSBEfi+7kS+1YXgMB8GA1UdIwQY MBaAFLaol8eY8BmyR3sanOOyO7XXYWbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHFpWHg1andHYkpIZXhxYzQ3STd0ZGRoWnNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTdkZDctN2Y3Yy00OTRkLWI4ODYt NTJmODUwY2E1NWM2LzEvdHFpWHg1andHYkpIZXhxYzQ3STd0ZGRoWnNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTdkZDctN2Y3Yy00OTRkLWI4ODYtNTJmODUwY2E1NWM2 LzEvdHFpWHg1andHYkpIZXhxYzQ3STd0ZGRoWnNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQt/h+Kka VXV0tC6Bdn6V40P+cJwLUINwqr4TYtQ6L6TrR98NhbhkihPJI8lsj3NTsyO0raeA vs09dcZBgU6XTjCg2Q8G5XQBBgOkDzLAFMtwFRD9p5aTmu2gWaxMVbzIp0zCXQrH fOn60rzxu238NgwKNwzi6TiC0nS6nX/y2yGgfsr6m9ihVKhjxk6M+ltPqjrIFicH 1F7vYmLN0mkYht0fdQ6KVJOfHI/aTCmrG2lxu79EC6/UW8+mcUenQXjDqF2pYB6y jP+zL2DnSakN6zcMh7/2kqN0Dr2JbuUIE8FwTrTU3EchIOrZZ/W+YSDkuT2ptGJR kJ0Xqsag8R1s8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 23:18:05 2025 by rpki-client