This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft File: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft (raw, json) Hash identifier: 9hcEXfwhVQqZF48nWVMUDOhbp/Rd6uOxxH8AaZDoF6Q= Subject key identifier: 58:C4:B9:CA:71:E8:29:28:3A:68:69:E6:80:12:EA:3A:73:3A:23:13 Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84 Certificate issuer: /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684 Certificate serial: 019B2B53F79A469C1876791367DF38C80506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft Manifest number: 09AE Signing time: Wed 17 Dec 2025 08:01:21 +0000 Manifest this update: Wed 17 Dec 2025 08:01:21 +0000 Manifest next update: Thu 18 Dec 2025 08:01:21 +0000 Files and hashes: 1: XkoFzkhGOVU5LUerqTHh__leFZg.roa (hash: z0PB3OIVOF5qm40evjJvgBDDcdbv5T70mZxHdxYv7d4=) 2: lE8Zy8N-xpY9U-oK5WN375n1Ofw.roa (hash: eG5bABtFszI7d/P1aStzKC6pmrIphfH8b15K2w83lWk=) 3: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl (hash: Ksvvo8VBxFifpC07KlImekSz2nrDvCr5pYu/g9oo7p8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:f7:9a:46:9c:18:76:79:13:67:df:38:c8:05:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684 Validity Not Before: Dec 17 08:01:21 2025 GMT Not After : Dec 18 08:01:21 2025 GMT Subject: CN=58c4b9ca71e829283a6869e68012ea3a733a2313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:12:e3:df:fd:da:b3:0f:6e:ba:7d:b1:59:f7: 9b:5c:ed:dc:7e:c6:b0:56:13:ca:14:a0:11:d1:a9: f8:6c:79:8c:96:d6:a6:a5:ec:d5:d0:5d:e7:f0:3e: 01:42:a1:c5:0d:37:e7:68:19:0e:70:d8:52:82:31: 20:0c:ce:89:b6:cd:b1:5a:ad:c0:c2:f0:8a:e8:e9: 0c:df:5d:cd:37:cb:5d:f7:03:3e:a9:20:c1:fa:37: 3e:b6:d2:bb:5d:21:fa:c0:1f:e4:08:16:de:da:77: 36:76:74:8c:bb:5b:5f:7e:d6:f6:68:96:43:58:4b: ac:77:1d:07:1f:25:15:46:27:70:2b:f4:e9:a0:84: 56:72:ad:e6:52:b4:2d:5d:ed:a7:1a:84:8c:65:3e: b7:1e:36:17:aa:be:7b:af:94:bb:26:68:e1:3a:ca: 76:cd:ec:b4:68:08:48:67:bf:b8:96:8c:72:4c:21: 43:a3:7b:99:c7:33:fe:11:56:ab:b8:c3:7e:61:50: 7e:1e:b7:db:c7:88:18:19:dd:71:86:18:8f:36:9a: aa:ce:de:4b:16:0a:be:20:c7:d1:d2:af:de:d8:9c: e5:ad:b3:62:56:ed:d2:e1:42:3d:c3:4d:a5:e8:40: 5f:1f:c1:03:79:d1:dc:f0:a6:88:de:a9:70:8d:3e: 40:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C4:B9:CA:71:E8:29:28:3A:68:69:E6:80:12:EA:3A:73:3A:23:13 X509v3 Authority Key Identifier: keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:de:67:fd:3e:0b:e1:98:e9:75:50:bf:de:1c:3c:bc:a2:85: 00:10:e8:19:b6:38:53:31:61:4c:bd:1e:4c:60:84:d7:5c:f8: 04:0e:b0:a6:bd:e9:27:5e:e6:97:a5:0c:43:28:59:84:57:0a: 03:3d:e3:de:f4:ac:8c:41:0d:60:c9:87:64:f3:97:34:82:ec: 66:b5:28:05:22:db:49:86:50:49:aa:3b:54:10:d2:89:15:18: e7:a2:d3:12:8b:3c:56:55:57:8b:5f:b8:a0:bb:7e:5f:d3:8f: ff:a3:fb:e1:cb:a7:f2:78:30:5f:63:3a:c5:8f:6a:85:4d:af: 8b:e9:d3:b8:f2:a0:de:06:15:78:67:e2:52:b8:fa:ff:ff:aa: 23:f9:09:ba:d7:ee:0b:2c:92:ca:95:1c:6d:97:43:cd:df:b5: 11:10:03:9c:47:2b:8d:15:2f:e3:41:50:20:b5:8a:dc:da:37: 55:9e:f1:33:15:e4:7f:8b:d2:42:b1:8c:de:00:ec:eb:6f:3f: 1b:bf:2f:19:58:f7:3e:5c:52:1a:91:68:ff:a8:36:ed:71:1c: 0f:f6:d9:cc:43:18:42:df:74:fe:d9:a9:e4:41:d9:bc:3c:e2: 55:a3:55:7e:10:89:16:28:62:df:1c:9b:97:1a:6b:58:ef:5f: c9:1f:b8:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU/eaRpwYdnkTZ984yAUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MDRiY2NlYjljMzYzZjEzZTNhZGFhNGMwZmE1Mjc4MGYw NjQ2ODQwHhcNMjUxMjE3MDgwMTIxWhcNMjUxMjE4MDgwMTIxWjAzMTEwLwYDVQQD Eyg1OGM0YjljYTcxZTgyOTI4M2E2ODY5ZTY4MDEyZWEzYTczM2EyMzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BLj3/3asw9uun2xWfebXO3cfsaw VhPKFKAR0an4bHmMltampezV0F3n8D4BQqHFDTfnaBkOcNhSgjEgDM6Jts2xWq3A wvCK6OkM313NN8td9wM+qSDB+jc+ttK7XSH6wB/kCBbe2nc2dnSMu1tfftb2aJZD WEusdx0HHyUVRidwK/TpoIRWcq3mUrQtXe2nGoSMZT63HjYXqr57r5S7JmjhOsp2 zey0aAhIZ7+4loxyTCFDo3uZxzP+EVaruMN+YVB+Hrfbx4gYGd1xhhiPNpqqzt5L Fgq+IMfR0q/e2JzlrbNiVu3S4UI9w02l6EBfH8EDedHc8KaI3qlwjT5ANwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjEucpx6CkoOmhp5oAS6jpzOiMTMB8GA1UdIwQY MBaAFLUEvM65w2PxPjrapMD6UngPBkaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFFTOHpybkRZX0UtT3Rxa3dQcFNlQThHUm9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xZDNjZGMtZDA0Yi00YWRiLWIwNjkt MmEzNTFhYjNiOGY2LzEvdFFTOHpybkRZX0UtT3Rxa3dQcFNlQThHUm9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8xZDNjZGMtZDA0Yi00YWRiLWIwNjktMmEzNTFhYjNiOGY2 LzEvdFFTOHpybkRZX0UtT3Rxa3dQcFNlQThHUm9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKt5n/T4L 4ZjpdVC/3hw8vKKFABDoGbY4UzFhTL0eTGCE11z4BA6wpr3pJ17ml6UMQyhZhFcK Az3j3vSsjEENYMmHZPOXNILsZrUoBSLbSYZQSao7VBDSiRUY56LTEos8VlVXi1+4 oLt+X9OP/6P74cun8ngwX2M6xY9qhU2vi+nTuPKg3gYVeGfiUrj6//+qI/kJutfu CyySypUcbZdDzd+1ERADnEcrjRUv40FQILWK3No3VZ7xMxXkf4vSQrGM3gDs628/ G78vGVj3PlxSGpFo/6g27XEcD/bZzEMYQt90/tmp5EHZvDziVaNVfhCJFihi3xyb lxprWO9fyR+4oQ== -----END CERTIFICATE-----Generated at Wed Dec 17 16:43:23 2025 by rpki-client