This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft File: t9yTan9rpQeCJPgBc2_esNroqfs.mft (raw, json) Hash identifier: uGvW+WzTcWMvaa4L/8xPTVtR/S5olDobA3fimD0vV88= Subject key identifier: 23:50:0F:12:DE:52:23:15:14:D4:42:06:A0:BE:5A:3E:0E:B3:AE:3B Authority key identifier: B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB Certificate issuer: /CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb Certificate serial: 019B405C01BA92FEE5E67D4CA82AC8A28CB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 10:02:10 +0000 Manifest this update: Sun 21 Dec 2025 10:02:10 +0000 Manifest next update: Mon 22 Dec 2025 10:02:10 +0000 Files and hashes: 1: O8AFVnBt1m_KBZSzBdlAy6IskOk.roa (hash: drC0SH2uIRu+wIVyTkJpGVnxmbNSIHA06selPLS2xnY=) 2: svoR0cRb1Ihebi7quN7_XQpdL7U.roa (hash: FPcptyRdxs/x9VdKGmFyX9w4ws1CV2SbTs2IXTvhgNs=) 3: t9yTan9rpQeCJPgBc2_esNroqfs.crl (hash: UP+BNW4GCyoLoMWskIopEGQwk5Y1qeuVqnh2ebjFGgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:01:ba:92:fe:e5:e6:7d:4c:a8:2a:c8:a2:8c:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb Validity Not Before: Dec 21 10:02:10 2025 GMT Not After : Dec 22 10:02:10 2025 GMT Subject: CN=23500f12de52231514d44206a0be5a3e0eb3ae3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:40:4d:16:66:be:5f:7b:c4:17:fc:9c:8b: 6e:e7:66:d9:a4:f8:1f:95:8d:ca:2f:7e:cd:a7:f9: ca:10:d8:ce:4d:9f:12:fe:14:3e:98:81:bd:f6:f5: 88:3d:3d:ab:f4:cd:ed:40:bb:a4:1a:8a:b3:23:43: 44:b2:6c:6a:cd:6a:69:7d:32:70:79:fd:6d:b1:b2: 27:d6:48:47:c4:69:4b:9f:d2:cd:6f:8b:22:5d:db: ea:f1:1a:4f:55:20:2d:c8:f5:2f:6b:3d:4b:7e:71: 1a:68:b9:3f:b0:3f:8d:ca:d2:ee:28:e8:b4:a0:b6: da:4c:40:bf:6f:a5:b2:16:86:00:58:f7:2b:84:b6: 89:e0:d7:9a:f0:73:3f:f2:d8:79:b2:a8:5c:1a:3b: 84:48:74:6b:ee:6d:25:99:ea:7e:4d:80:eb:48:17: fd:7b:a6:b8:7b:d6:bd:35:52:58:3e:c9:e4:b9:91: 79:69:e9:2f:35:23:50:1d:d5:8a:43:9d:b0:cf:55: 63:83:4f:6c:33:8c:f8:56:c5:ab:35:67:a1:79:08: 29:fc:a2:58:fa:0f:77:a4:f6:77:6b:49:32:6d:a4: a2:2a:0a:01:cb:f7:1a:eb:e0:af:6b:03:df:d9:0d: 83:c6:41:ab:b1:20:23:62:a1:d4:57:61:71:7f:00: 34:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:50:0F:12:DE:52:23:15:14:D4:42:06:A0:BE:5A:3E:0E:B3:AE:3B X509v3 Authority Key Identifier: keyid:B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:55:a4:f6:bc:35:d2:99:b8:02:02:7c:f6:00:8a:5b:89:45: e4:33:e3:f3:9d:a4:63:7f:bc:f6:a5:4e:c2:e4:8f:2c:6f:6e: 60:a6:46:03:9d:61:b4:7e:72:ea:a3:93:a9:c8:d2:2f:34:67: 35:3c:f1:86:aa:5a:b1:fc:6b:34:08:46:b4:dd:eb:31:76:55: cf:a9:af:60:51:7d:25:79:00:3c:d3:39:48:fa:6f:3d:42:44: 56:cd:b9:b7:ba:c6:4a:46:f5:39:ca:88:fb:cd:87:19:9e:5b: 4e:bb:e6:77:85:ab:ec:1d:8a:cf:c0:72:d2:a1:a5:71:97:3f: 9f:99:ff:a4:1f:4d:f2:84:de:bd:a0:e4:27:0e:49:fd:db:47: ad:3e:e8:bd:56:8b:1e:19:74:ad:86:5e:4b:e5:61:a4:c9:c6: 03:8e:0e:84:96:0c:ce:90:c5:a6:b4:f5:24:ae:98:e4:d9:dc: 74:32:0c:b5:51:f4:0e:f0:75:cf:e9:9d:50:0a:39:98:32:5b: 86:f4:07:ff:f1:ed:7d:4a:07:df:35:55:52:51:d4:df:01:d4: d2:de:d6:ff:06:89:a6:51:7c:1f:58:69:9c:ee:7c:2d:6d:25: 00:68:47:53:f8:86:37:05:34:a7:67:32:c6:d2:34:a7:ff:90: 17:1f:1a:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXAG6kv7l5n1MqCrIooy1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ZGM5MzZhN2Y2YmE1MDc4MjI0ZjgwMTczNmZkZWIwZGFl OGE5ZmIwHhcNMjUxMjIxMTAwMjEwWhcNMjUxMjIyMTAwMjEwWjAzMTEwLwYDVQQD EygyMzUwMGYxMmRlNTIyMzE1MTRkNDQyMDZhMGJlNWEzZTBlYjNhZTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZpATRZmvl97xBf8nItu52bZpPgf lY3KL37Np/nKENjOTZ8S/hQ+mIG99vWIPT2r9M3tQLukGoqzI0NEsmxqzWppfTJw ef1tsbIn1khHxGlLn9LNb4siXdvq8RpPVSAtyPUvaz1LfnEaaLk/sD+NytLuKOi0 oLbaTEC/b6WyFoYAWPcrhLaJ4Nea8HM/8th5sqhcGjuESHRr7m0lmep+TYDrSBf9 e6a4e9a9NVJYPsnkuZF5aekvNSNQHdWKQ52wz1Vjg09sM4z4VsWrNWeheQgp/KJY +g93pPZ3a0kybaSiKgoBy/ca6+CvawPf2Q2DxkGrsSAjYqHUV2FxfwA00QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNQDxLeUiMVFNRCBqC+Wj4Os647MB8GA1UdIwQY MBaAFLfck2p/a6UHgiT4AXNv3rDa6Kn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YjE2MmMtNGUzNS00MDYxLTgxYmUt NzlkNDI4ODJjOGMwLzEvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84YjE2MmMtNGUzNS00MDYxLTgxYmUtNzlkNDI4ODJjOGMw LzEvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1Wk9rw1 0pm4AgJ89gCKW4lF5DPj852kY3+89qVOwuSPLG9uYKZGA51htH5y6qOTqcjSLzRn NTzxhqpasfxrNAhGtN3rMXZVz6mvYFF9JXkAPNM5SPpvPUJEVs25t7rGSkb1OcqI +82HGZ5bTrvmd4Wr7B2Kz8By0qGlcZc/n5n/pB9N8oTevaDkJw5J/dtHrT7ovVaL Hhl0rYZeS+VhpMnGA44OhJYMzpDFprT1JK6Y5NncdDIMtVH0DvB1z+mdUAo5mDJb hvQH//HtfUoH3zVVUlHU3wHU0t7W/waJplF8H1hpnO58LW0lAGhHU/iGNwU0p2cy xtI0p/+QFx8a4g== -----END CERTIFICATE-----Generated at Sun Dec 21 17:28:48 2025 by rpki-client