This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft File: TkwTiahJ713MuDA3A7iYyR5j0U8.mft (raw, json) Hash identifier: Sd4dsxKJ+QRmRhzkwHXS6nLniNsfar5cGQdlgFv4zBQ= Subject key identifier: B8:B0:E8:2E:4F:89:3F:D4:7E:8F:43:02:C3:41:E2:CE:25:68:A5:EA Authority key identifier: 4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F Certificate issuer: /CN=4e4c1389a849ef5dccb8303703b898c91e63d14f Certificate serial: 019B31C3569B5ED737689BD62E441232D914 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft Manifest number: 107E Signing time: Thu 18 Dec 2025 14:00:43 +0000 Manifest this update: Thu 18 Dec 2025 14:00:43 +0000 Manifest next update: Fri 19 Dec 2025 14:00:43 +0000 Files and hashes: 1: TkwTiahJ713MuDA3A7iYyR5j0U8.crl (hash: KvbS4KgNUrmIF38ozsG7aHiJK7D7lXK6AQiEdDTplkg=) 2: Y2AwHZ4LjgCyZ7c3VA39uJ1uOJA.roa (hash: jN16HvDKq8wIqjLIVTWw0neRTt/pe6lIdR9PV+gdOvM=) 3: oslVCzjJDktKYJryYSyNdvUnSkk.roa (hash: SorYVglRqEFAzZq8qsgmev36Xx5W3U58FYVpLFp4hYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:56:9b:5e:d7:37:68:9b:d6:2e:44:12:32:d9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e4c1389a849ef5dccb8303703b898c91e63d14f Validity Not Before: Dec 18 14:00:43 2025 GMT Not After : Dec 19 14:00:43 2025 GMT Subject: CN=b8b0e82e4f893fd47e8f4302c341e2ce2568a5ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4b:0f:31:33:3f:dc:0b:aa:1e:80:8f:6f:b0: 4a:41:df:91:d5:21:26:d6:9c:0d:57:72:77:dd:ff: 13:4b:10:3b:22:06:a8:1f:6b:17:41:30:1e:ad:ba: 8b:21:f2:01:f7:32:7e:b6:fe:d3:d1:28:4f:bb:7b: fe:54:04:1c:91:be:3d:11:7f:ae:5b:01:3d:0b:8f: 8a:2f:bc:e9:90:c8:53:f8:20:06:a9:f4:e7:54:ae: 3f:6b:00:2a:4c:66:93:6d:b9:bd:e9:b7:c2:85:1c: 34:78:71:85:26:00:b3:b4:34:15:c1:73:05:cf:36: 1a:1f:a4:7c:45:b6:c2:b4:fd:af:38:9d:10:22:93: a5:4b:24:f1:64:8f:2a:d6:ad:c7:11:c8:ee:69:8d: ac:97:ee:48:f9:b1:a6:7c:82:d0:13:d4:48:24:7e: 9c:12:88:7c:d5:34:a6:7c:a8:24:bb:ad:63:ae:26: d9:57:9c:62:2f:16:81:01:7e:49:49:d7:6c:4b:a3: d0:d3:1c:0d:1c:ba:53:0b:27:55:6a:87:93:98:67: 80:d9:7f:ec:b7:c3:ed:f0:57:79:2f:0c:7a:c3:09: 5f:75:87:1c:45:50:ae:ff:7e:0a:ac:a2:94:1e:8b: eb:be:99:2a:c8:16:bf:1e:9b:ca:c8:23:be:03:11: 9a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B0:E8:2E:4F:89:3F:D4:7E:8F:43:02:C3:41:E2:CE:25:68:A5:EA X509v3 Authority Key Identifier: keyid:4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d8:50:a6:e9:0f:6b:b1:79:10:15:da:1a:48:81:2e:ca:9a: 63:7d:05:3a:a9:f8:d1:ad:d7:5a:32:0e:8c:b3:dd:2a:ec:c8: 97:3b:7c:e3:85:43:1e:a6:c4:68:28:33:22:16:e1:54:df:db: 3e:a5:80:94:93:c9:c8:0b:1f:c2:e0:0a:95:cf:1a:87:95:19: ad:b4:cf:7b:db:f3:43:54:54:c0:02:41:b2:b6:fb:c2:ac:cd: 33:25:dd:d2:7c:80:e8:7f:b2:7e:fb:41:09:34:7e:e3:5b:dc: 14:a6:f0:f7:eb:d1:7f:78:be:a1:62:3f:55:70:67:94:cd:14: d7:79:02:3f:8c:22:38:35:83:e6:4a:f2:95:47:fe:95:d3:0f: 2e:4e:28:4d:e4:64:c8:7d:12:8c:68:97:6f:07:4d:05:e5:4b: 66:47:eb:13:95:14:5b:45:1a:0e:2b:e2:56:fa:e7:5e:3d:36: 15:a5:aa:b4:e6:77:6a:37:ad:a9:07:e4:0c:a5:fd:32:38:2c: ff:64:c6:fa:db:56:dd:8b:08:ff:54:18:12:57:e5:bd:2d:7a: df:c3:d1:f8:3a:d3:b5:20:a7:b7:a5:ff:83:e0:de:88:a8:de: 25:4e:f3:b0:bb:90:5e:07:65:2d:96:7c:87:ae:86:d3:05:3f: 59:3f:f5:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw1abXtc3aJvWLkQSMtkUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNGMxMzg5YTg0OWVmNWRjY2I4MzAzNzAzYjg5OGM5MWU2 M2QxNGYwHhcNMjUxMjE4MTQwMDQzWhcNMjUxMjE5MTQwMDQzWjAzMTEwLwYDVQQD EyhiOGIwZTgyZTRmODkzZmQ0N2U4ZjQzMDJjMzQxZTJjZTI1NjhhNWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0sPMTM/3AuqHoCPb7BKQd+R1SEm 1pwNV3J33f8TSxA7IgaoH2sXQTAerbqLIfIB9zJ+tv7T0ShPu3v+VAQckb49EX+u WwE9C4+KL7zpkMhT+CAGqfTnVK4/awAqTGaTbbm96bfChRw0eHGFJgCztDQVwXMF zzYaH6R8RbbCtP2vOJ0QIpOlSyTxZI8q1q3HEcjuaY2sl+5I+bGmfILQE9RIJH6c Eoh81TSmfKgku61jribZV5xiLxaBAX5JSddsS6PQ0xwNHLpTCydVaoeTmGeA2X/s t8Pt8Fd5Lwx6wwlfdYccRVCu/34KrKKUHovrvpkqyBa/HpvKyCO+AxGaLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiw6C5PiT/Ufo9DAsNB4s4laKXqMB8GA1UdIwQY MBaAFE5ME4moSe9dzLgwNwO4mMkeY9FPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGt3VGlhaEo3MTNNdURBM0E3aVl5UjVqMFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zOTY1YjAtZmVlOS00OWJmLWE1NGQt YThkODM4NDM4ZDhhLzEvVGt3VGlhaEo3MTNNdURBM0E3aVl5UjVqMFU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zOTY1YjAtZmVlOS00OWJmLWE1NGQtYThkODM4NDM4ZDhh LzEvVGt3VGlhaEo3MTNNdURBM0E3aVl5UjVqMFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9hQpukP a7F5EBXaGkiBLsqaY30FOqn40a3XWjIOjLPdKuzIlzt844VDHqbEaCgzIhbhVN/b PqWAlJPJyAsfwuAKlc8ah5UZrbTPe9vzQ1RUwAJBsrb7wqzNMyXd0nyA6H+yfvtB CTR+41vcFKbw9+vRf3i+oWI/VXBnlM0U13kCP4wiODWD5krylUf+ldMPLk4oTeRk yH0SjGiXbwdNBeVLZkfrE5UUW0UaDiviVvrnXj02FaWqtOZ3ajetqQfkDKX9Mjgs /2TG+ttW3YsI/1QYElflvS1638PR+DrTtSCnt6X/g+DeiKjeJU7zsLuQXgdlLZZ8 h66G0wU/WT/1iw== -----END CERTIFICATE-----Generated at Thu Dec 18 23:07:07 2025 by rpki-client