This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft File: tXikYahZ3cmGwIqI6VEtXD0iEOY.mft (raw, json) Hash identifier: nOVqlV2Lm6z71O5l+opnMjsuP3ISyftt6duuyUCixe4= Subject key identifier: A5:44:BC:00:7B:66:54:69:99:F5:C3:7A:6A:68:B6:92:D4:3A:CB:0D Authority key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6 Certificate issuer: /CN=b578a461a859ddc986c08a88e9512d5c3d2210e6 Certificate serial: 019AF23FE58E047F18A62C0848ACA89D08DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft Manifest number: 1443 Signing time: Sat 06 Dec 2025 06:01:04 +0000 Manifest this update: Sat 06 Dec 2025 06:01:04 +0000 Manifest next update: Sun 07 Dec 2025 06:01:04 +0000 Files and hashes: 1: NOGA0CjkDnET03-2XNCrDJ4eMKk.roa (hash: pcupg8qezDQzVSVv6X2qJzowxTMngs8AYSobXls8P4A=) 2: O9usaKrUgEAZmgEEboI2zMwhay8.roa (hash: TeoCN9eeGOBAvs1/Si2jJZev4TVjpqPjDdBSDl3hCpg=) 3: tXikYahZ3cmGwIqI6VEtXD0iEOY.crl (hash: 5wkl1vxOuTn98nKiMwYjSYUu5B7zN1OOw6OfH3W9cn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e5:8e:04:7f:18:a6:2c:08:48:ac:a8:9d:08:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6 Validity Not Before: Dec 6 06:01:04 2025 GMT Not After : Dec 7 06:01:04 2025 GMT Subject: CN=a544bc007b66546999f5c37a6a68b692d43acb0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:88:a9:3f:9e:b9:82:c3:54:c9:5d:28:47:4a: 01:42:0e:f7:37:07:73:be:a2:f6:a5:62:7c:e6:a9: 25:ea:92:49:82:c0:73:c9:ee:59:2e:fa:46:78:26: de:5e:8f:8f:43:31:e1:03:fc:0b:d0:10:c6:45:3b: b8:dc:16:84:9c:b5:ec:80:eb:32:ed:e2:c4:68:4d: 40:0c:51:7d:6d:d2:7f:8e:eb:bc:ce:39:bf:b8:e4: 4d:3a:25:ce:c3:44:87:ce:f5:4a:47:94:2a:79:f8: b5:f6:b0:b8:6f:15:9e:7a:15:0f:ea:cc:98:55:f2: a3:f3:0a:60:75:a1:8d:1a:eb:4b:e6:a9:b4:3e:56: c7:a5:bb:f0:f8:df:0e:e7:41:c4:19:c8:28:b5:ed: 3b:24:b8:3e:f6:10:e6:36:90:16:65:63:37:c8:6f: c4:0b:43:e0:98:d9:14:2f:0d:1e:2a:a6:be:08:83: d4:a4:bd:ba:65:be:e4:d7:93:2a:53:87:f2:d4:99: 33:3a:0f:dd:7d:2c:a8:09:a0:9f:51:7c:25:f1:8b: 55:b4:52:7e:8a:b7:bb:d9:4d:23:5f:b3:b4:ed:35: 2a:f3:23:9f:56:8a:05:94:c0:ef:d8:1d:19:4a:c9: 7b:8b:a6:2b:25:c6:52:dc:ac:9a:16:7a:f0:80:1b: 59:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:44:BC:00:7B:66:54:69:99:F5:C3:7A:6A:68:B6:92:D4:3A:CB:0D X509v3 Authority Key Identifier: keyid:B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:23:0a:1e:24:b7:d1:53:d2:58:25:8b:0c:31:06:c0:8f:f5: 18:3d:b8:c1:48:8c:0e:45:db:f7:03:90:b3:a9:dc:0b:0f:89: 33:18:c7:2a:0f:ae:9d:39:1a:f8:86:b5:6f:c4:00:f3:d3:5c: a1:70:4a:d1:40:0f:60:67:93:b8:3a:24:c7:9e:52:ee:34:66: d8:3d:e5:a1:8b:49:29:6e:54:ee:a3:64:25:c8:ab:47:36:c3: 03:6b:69:fc:fe:94:56:34:43:56:63:d3:70:a6:f6:aa:b9:bd: 89:f9:45:ce:12:e3:5f:94:aa:f3:6a:da:8e:61:a7:54:53:8f: 57:b4:3f:a3:c5:6e:68:05:52:7e:62:f4:3e:f3:96:e8:5a:68: 12:e0:f0:63:b3:77:71:59:bf:77:89:e1:0c:e1:ec:07:88:03: a1:c1:01:b4:21:c9:d7:65:14:dd:33:20:31:1b:ca:7d:31:1c: b1:59:36:f1:7b:94:23:e4:de:f2:31:8b:6a:9c:27:83:11:b3: cf:72:e6:77:9c:8d:58:3b:80:08:55:39:f4:57:52:f2:55:46: 46:87:ce:44:4f:7d:0e:60:1e:47:d0:b4:85:9d:3c:f3:1e:70: 59:30:7b:fc:c1:75:ee:72:af:34:19:97:2f:be:54:0f:8c:98: e1:f3:dc:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+WOBH8YpiwISKyonQjcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NzhhNDYxYTg1OWRkYzk4NmMwOGE4OGU5NTEyZDVjM2Qy MjEwZTYwHhcNMjUxMjA2MDYwMTA0WhcNMjUxMjA3MDYwMTA0WjAzMTEwLwYDVQQD EyhhNTQ0YmMwMDdiNjY1NDY5OTlmNWMzN2E2YTY4YjY5MmQ0M2FjYjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoipP565gsNUyV0oR0oBQg73Nwdz vqL2pWJ85qkl6pJJgsBzye5ZLvpGeCbeXo+PQzHhA/wL0BDGRTu43BaEnLXsgOsy 7eLEaE1ADFF9bdJ/juu8zjm/uORNOiXOw0SHzvVKR5Qqefi19rC4bxWeehUP6syY VfKj8wpgdaGNGutL5qm0PlbHpbvw+N8O50HEGcgote07JLg+9hDmNpAWZWM3yG/E C0PgmNkULw0eKqa+CIPUpL26Zb7k15MqU4fy1JkzOg/dfSyoCaCfUXwl8YtVtFJ+ ire72U0jX7O07TUq8yOfVooFlMDv2B0ZSsl7i6YrJcZS3KyaFnrwgBtZowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVEvAB7ZlRpmfXDempotpLUOssNMB8GA1UdIwQY MBaAFLV4pGGoWd3JhsCKiOlRLVw9IhDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wY2VlMzQtNWFjYy00MmQ1LWE1YmYt ZmMxYzBjY2JjMGI3LzEvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8wY2VlMzQtNWFjYy00MmQ1LWE1YmYtZmMxYzBjY2JjMGI3 LzEvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyMKHiS3 0VPSWCWLDDEGwI/1GD24wUiMDkXb9wOQs6ncCw+JMxjHKg+unTka+Ia1b8QA89Nc oXBK0UAPYGeTuDokx55S7jRm2D3loYtJKW5U7qNkJcirRzbDA2tp/P6UVjRDVmPT cKb2qrm9iflFzhLjX5Sq82rajmGnVFOPV7Q/o8VuaAVSfmL0PvOW6FpoEuDwY7N3 cVm/d4nhDOHsB4gDocEBtCHJ12UU3TMgMRvKfTEcsVk28XuUI+Te8jGLapwngxGz z3Lmd5yNWDuACFU59FdS8lVGRofORE99DmAeR9C0hZ088x5wWTB7/MF17nKvNBmX L75UD4yY4fPczA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:48 2025 by rpki-client