This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft File: tkB0qoRJgw2psgs6-waC08Ay-f4.mft (raw, json) Hash identifier: CcCboPJjv++IeQ4qZ9oqbo5Iu1QTIGpk3pucUIEroUQ= Subject key identifier: D2:81:8D:9A:54:D9:41:92:F1:B9:E2:0F:82:11:48:EB:4E:8A:21:F8 Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe Certificate serial: 019AF1D191D8C9479CD0B214C7ABADBAC50B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 04:00:34 +0000 Manifest this update: Sat 06 Dec 2025 04:00:34 +0000 Manifest next update: Sun 07 Dec 2025 04:00:34 +0000 Files and hashes: 1: BdOIN-x7p5NQNZFat3HBRk8aNP8.roa (hash: E6O+SQKCroETYNOj7yjRqDXwGgY2i2+LPEeaEfVM6HA=) 2: SvbWjBtA5USrFJEFyfsvP-SCofs.roa (hash: La++FukCI88aoCCAWTG9ojz1zryPe+WC1BNRSElIvDw=) 3: ZqMh09XL_OuL0ICq-TfvGdj4pmM.roa (hash: l5g5wXS3ZWKojPoOXqpehHnI+SHAfeYcurBv6Xo/WU8=) 4: tkB0qoRJgw2psgs6-waC08Ay-f4.crl (hash: Hz51vCAVQuqezJMypgzgp7gEOvDMyDqrOlVGywnyBRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:91:d8:c9:47:9c:d0:b2:14:c7:ab:ad:ba:c5:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe Validity Not Before: Dec 6 04:00:34 2025 GMT Not After : Dec 7 04:00:34 2025 GMT Subject: CN=d2818d9a54d94192f1b9e20f821148eb4e8a21f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1a:7f:9f:b2:84:aa:ac:f8:43:3b:f1:66:64: 2e:f1:cd:bc:47:32:0b:a4:bc:3d:a6:b9:97:5d:b8: 0b:60:66:ae:65:96:de:48:9e:d9:4b:1f:e6:c0:1c: a3:1e:35:52:41:f2:81:16:b6:72:24:9e:5d:6c:81: 4e:7e:59:ef:1a:ed:6f:95:42:47:f3:db:f9:e7:42: 0b:79:e8:df:cd:43:fb:5f:aa:4e:41:8d:a2:0c:b7: c9:69:53:b8:e1:8d:d4:77:5f:5b:d8:0e:1a:16:e8: 6f:90:e9:81:e0:3e:7c:15:6c:86:f9:ed:d1:03:23: ae:96:59:24:af:66:49:92:f3:d6:75:89:57:23:01: 2a:7c:ca:d2:91:d0:f8:38:d3:bb:48:8c:e2:90:6b: 35:1f:e2:e5:47:7f:06:46:e7:f5:07:37:49:22:10: b2:e6:df:73:63:98:a8:a3:23:b8:6b:52:0a:17:fe: a8:12:c4:5a:52:f0:d0:d8:22:84:33:10:dd:ff:24: 32:31:1d:60:85:ca:dc:7c:d1:26:31:8a:83:ad:f9: 44:89:8f:05:c7:6e:8d:9b:e5:c3:87:e7:0b:2d:1f: ea:f9:19:9f:be:cb:5c:85:91:ca:67:10:d2:21:ac: a6:77:8e:71:b3:ed:ef:ec:01:c7:c6:1c:6a:69:b6: c6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:81:8D:9A:54:D9:41:92:F1:B9:E2:0F:82:11:48:EB:4E:8A:21:F8 X509v3 Authority Key Identifier: keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:a4:62:61:23:a0:aa:20:eb:82:ab:3b:0a:00:0e:ce:e5:47: f1:b1:25:a2:10:f9:e3:c2:e9:32:38:de:df:35:27:38:46:30: 8a:30:64:0f:02:cb:3b:7f:0d:68:ef:83:2b:dd:87:c0:84:f8: 8c:c6:9b:17:ec:e1:ac:47:80:06:a6:6d:2f:06:27:06:08:6e: 2d:30:d7:e1:63:dd:96:f8:95:af:1e:fa:3e:45:30:79:09:a5: 55:33:ec:58:6d:06:19:a3:e1:45:4a:8b:1b:5d:84:25:3e:bd: 2d:dc:eb:90:0f:27:fe:9c:86:34:af:6a:5f:4e:6f:6e:66:59: 79:89:6a:a6:42:95:6e:02:54:29:4f:bd:a4:09:e7:56:6d:ad: 3f:5b:7f:ab:e4:f5:4e:6f:fe:f8:31:ab:2c:aa:6c:a2:e2:f5: 44:ed:ef:af:da:a7:9a:43:e2:82:0e:3b:6f:8d:d7:bf:7f:80: fd:a1:d0:f8:93:c3:c0:ff:c2:20:7e:53:aa:cc:78:15:c1:68: 74:da:e7:5c:ad:37:49:de:94:52:6f:b0:bd:28:5f:a0:15:32: fe:13:df:6c:f3:a9:67:e2:94:f9:25:6e:f6:82:98:0e:f0:3c: f8:c9:bd:c7:e9:ea:b9:16:fa:b4:ee:45:df:f6:18:ce:46:a5: e3:f9:13:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZHYyUec0LIUx6utusULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NDA3NGFhODQ0OTgzMGRhOWIyMGIzYWZiMDY4MmQzYzAz MmY5ZmUwHhcNMjUxMjA2MDQwMDM0WhcNMjUxMjA3MDQwMDM0WjAzMTEwLwYDVQQD EyhkMjgxOGQ5YTU0ZDk0MTkyZjFiOWUyMGY4MjExNDhlYjRlOGEyMWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxp/n7KEqqz4QzvxZmQu8c28RzIL pLw9prmXXbgLYGauZZbeSJ7ZSx/mwByjHjVSQfKBFrZyJJ5dbIFOflnvGu1vlUJH 89v550ILeejfzUP7X6pOQY2iDLfJaVO44Y3Ud19b2A4aFuhvkOmB4D58FWyG+e3R AyOullkkr2ZJkvPWdYlXIwEqfMrSkdD4ONO7SIzikGs1H+LlR38GRuf1BzdJIhCy 5t9zY5iooyO4a1IKF/6oEsRaUvDQ2CKEMxDd/yQyMR1ghcrcfNEmMYqDrflEiY8F x26Nm+XDh+cLLR/q+RmfvstchZHKZxDSIaymd45xs+3v7AHHxhxqabbGkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKBjZpU2UGS8bniD4IRSOtOiiH4MB8GA1UdIwQY MBaAFLZAdKqESYMNqbILOvsGgtPAMvn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mYzdjODItMzE1OS00ZDU0LWEwYTEt MzUxNzFhZWRkMzEzLzEvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mYzdjODItMzE1OS00ZDU0LWEwYTEtMzUxNzFhZWRkMzEz LzEvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqRiYSOg qiDrgqs7CgAOzuVH8bElohD548LpMjje3zUnOEYwijBkDwLLO38NaO+DK92HwIT4 jMabF+zhrEeABqZtLwYnBghuLTDX4WPdlviVrx76PkUweQmlVTPsWG0GGaPhRUqL G12EJT69LdzrkA8n/pyGNK9qX05vbmZZeYlqpkKVbgJUKU+9pAnnVm2tP1t/q+T1 Tm/++DGrLKpsouL1RO3vr9qnmkPigg47b43Xv3+A/aHQ+JPDwP/CIH5Tqsx4FcFo dNrnXK03Sd6UUm+wvShfoBUy/hPfbPOpZ+KU+SVu9oKYDvA8+Mm9x+nquRb6tO5F 3/YYzkal4/kTEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:45 2025 by rpki-client