This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json) Hash identifier: 5Yoy30UwiZCC3/TXN37IU0/CPgX9J/YNMZ+p9ETRjHs= Subject key identifier: B2:71:B9:F2:6B:B1:F1:66:CB:4A:A0:21:BB:D0:4C:47:BB:7B:16:DD Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a Certificate serial: 019B2F6731D47CF99CD14A9A1BB37365D4F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft Manifest number: 1096 Signing time: Thu 18 Dec 2025 03:00:50 +0000 Manifest this update: Thu 18 Dec 2025 03:00:50 +0000 Manifest next update: Fri 19 Dec 2025 03:00:50 +0000 Files and hashes: 1: VYJ9qKilNSj9Z30pGpYaNAGU4Z0.roa (hash: j29BGrdUX9gZWLn/MqLu3C1IYATOJG6BtpBREfenzkc=) 2: dek1yBz9hU9Sw_jKA33of_zM9K4.roa (hash: yub3ufVUEc3WS+XkUJMCp9euptnf3DjONJgSPtRCvNQ=) 3: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: 419rfUHI5VfYYt5GFIs8gJHvl+ASSFwh8JMY0pnvhOQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:31:d4:7c:f9:9c:d1:4a:9a:1b:b3:73:65:d4:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a Validity Not Before: Dec 18 03:00:50 2025 GMT Not After : Dec 19 03:00:50 2025 GMT Subject: CN=b271b9f26bb1f166cb4aa021bbd04c47bb7b16dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:23:4f:bb:c4:fe:9f:87:de:b3:18:34:64:db: 6f:ba:5c:fa:b1:3f:ea:d0:20:79:0a:f2:4c:98:80: 8d:81:cf:51:13:1a:9d:0c:ba:da:31:dd:fe:4d:1b: 5b:dd:e4:b0:f8:22:d5:17:91:35:96:6b:16:2b:67: dd:0c:d0:6b:a8:ce:fe:36:0f:fe:20:00:7a:0b:d3: fa:a5:bd:dd:17:b8:02:b6:72:f7:71:8f:cd:b0:eb: 5d:78:dd:63:ce:27:e8:b9:ac:c7:77:2c:4e:6f:3d: 2b:fc:b9:c8:eb:50:b3:a3:cf:bd:a1:69:43:58:e1: 10:3d:4e:89:b5:bb:5a:2a:55:3a:a1:40:ea:6a:bb: 4f:be:94:07:92:b4:a5:e6:83:df:72:88:43:ae:3c: 14:79:ae:4b:a0:c3:e9:73:85:10:fe:11:17:05:4a: 5e:52:9e:6a:50:8d:cc:32:8d:c8:31:a4:6b:01:59: 05:84:54:01:57:b8:6c:2b:7c:d8:f0:eb:43:16:c6: 2d:97:1d:6d:02:09:0c:48:c1:47:6d:d9:c8:4a:d3: 7a:98:1f:1f:66:73:24:ec:ec:0a:41:bb:a5:ef:65: 49:6c:58:c5:b9:94:91:ed:bf:1a:8d:5b:f6:45:df: 82:d5:e2:b6:3a:c0:1d:6e:40:bc:f7:00:1b:f8:82: bc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:71:B9:F2:6B:B1:F1:66:CB:4A:A0:21:BB:D0:4C:47:BB:7B:16:DD X509v3 Authority Key Identifier: keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:3a:9c:37:ec:1b:37:0f:1b:a1:18:07:49:7a:56:37:51:eb: a8:1b:d8:4e:49:41:f3:84:b1:6a:1c:fc:c7:e8:55:ef:b9:a7: e7:5c:08:9c:3d:81:c6:eb:71:c2:37:3e:c6:c2:90:72:31:fe: 72:53:22:c9:e2:49:f0:1d:55:e7:f6:36:ff:af:73:01:e2:19: 17:0a:2c:20:4d:20:03:e5:59:46:78:d4:e3:63:5d:09:1e:b0: 1c:d1:4c:a5:03:a6:4d:a9:2f:a0:b9:89:29:dc:5a:b5:54:85: 9c:e1:5f:35:d4:e1:a5:37:54:0d:15:38:d4:e2:92:04:1a:f2: ba:83:00:0a:2e:aa:30:e7:61:f4:38:3d:92:0c:6b:e9:66:54: 1e:8c:f4:6f:0d:a0:91:a8:73:b8:e3:28:17:96:af:fc:2c:75: 9d:76:95:a1:cd:2c:8c:66:69:59:2c:5b:6f:0f:f7:c5:d1:21: 56:79:57:d9:ca:d0:61:f5:9e:6c:84:70:c2:ab:fe:9d:f6:e1: 54:8e:d6:d9:56:4b:c0:83:a2:3f:04:8a:87:5b:9a:a3:22:03: cc:a9:5e:e3:b3:e8:50:37:8b:31:b5:fb:20:8c:c6:73:9c:af: ec:85:e8:93:e4:d6:8c:a0:bf:e0:51:7f:b9:da:dc:cd:71:72: d7:71:99:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZzHUfPmc0UqaG7NzZdTxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MGQ0OTQzMzNjYjRkOWU1ZmQxMGM4NDZjNDdjZjU2NDQ1 YzUwM2EwHhcNMjUxMjE4MDMwMDUwWhcNMjUxMjE5MDMwMDUwWjAzMTEwLwYDVQQD EyhiMjcxYjlmMjZiYjFmMTY2Y2I0YWEwMjFiYmQwNGM0N2JiN2IxNmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9SNPu8T+n4fesxg0ZNtvulz6sT/q 0CB5CvJMmICNgc9RExqdDLraMd3+TRtb3eSw+CLVF5E1lmsWK2fdDNBrqM7+Ng/+ IAB6C9P6pb3dF7gCtnL3cY/NsOtdeN1jzifouazHdyxObz0r/LnI61Czo8+9oWlD WOEQPU6JtbtaKlU6oUDqartPvpQHkrSl5oPfcohDrjwUea5LoMPpc4UQ/hEXBUpe Up5qUI3MMo3IMaRrAVkFhFQBV7hsK3zY8OtDFsYtlx1tAgkMSMFHbdnIStN6mB8f ZnMk7OwKQbul72VJbFjFuZSR7b8ajVv2Rd+C1eK2OsAdbkC89wAb+IK8nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJxufJrsfFmy0qgIbvQTEe7exbdMB8GA1UdIwQY MBaAFLQNSUMzy02eX9EMhGxHz1ZEXFA6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMt MTgzZjk5NzVmYzk0LzEvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMtMTgzZjk5NzVmYzk0 LzEvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDqcN+wb Nw8boRgHSXpWN1HrqBvYTklB84Sxahz8x+hV77mn51wInD2Bxutxwjc+xsKQcjH+ clMiyeJJ8B1V5/Y2/69zAeIZFwosIE0gA+VZRnjU42NdCR6wHNFMpQOmTakvoLmJ KdxatVSFnOFfNdThpTdUDRU41OKSBBryuoMACi6qMOdh9Dg9kgxr6WZUHoz0bw2g kahzuOMoF5av/Cx1nXaVoc0sjGZpWSxbbw/3xdEhVnlX2crQYfWebIRwwqv+nfbh VI7W2VZLwIOiPwSKh1uaoyIDzKle47PoUDeLMbX7IIzGc5yv7IXok+TWjKC/4FF/ udrczXFy13GZDw== -----END CERTIFICATE-----Generated at Thu Dec 18 05:45:10 2025 by rpki-client