This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft File: TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft (raw, json) Hash identifier: QlW7+k1FSCf0uLop2PXcBqX7QUwbnz1CMlVUPfH5cm4= Subject key identifier: 8A:CD:59:B9:C2:DA:7D:38:5B:DA:FD:81:F5:85:51:48:28:E3:37:57 Authority key identifier: 4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C Certificate issuer: /CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c Certificate serial: 019AF5AEE57FEA4D2775BE8BCDA2517E6268 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft Manifest number: 1529 Signing time: Sat 06 Dec 2025 22:01:10 +0000 Manifest this update: Sat 06 Dec 2025 22:01:10 +0000 Manifest next update: Sun 07 Dec 2025 22:01:10 +0000 Files and hashes: 1: HJZuFg-aBDGic40vRoWhakH94Zo.roa (hash: b1vEsVgABbRc+hOZI2FcJP4+qO85CVqkQZmViTsB2bU=) 2: TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl (hash: 80u9mjnmLRV/7pVEBJc4GNIms6OzpGRj8MkVdActaoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:e5:7f:ea:4d:27:75:be:8b:cd:a2:51:7e:62:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c Validity Not Before: Dec 6 22:01:10 2025 GMT Not After : Dec 7 22:01:10 2025 GMT Subject: CN=8acd59b9c2da7d385bdafd81f585514828e33757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:20:1f:d7:f8:2f:06:d9:15:60:05:51:fc:a5: c4:1d:ae:6c:94:04:10:89:6c:f7:33:c6:2e:fe:f7: 8b:9b:d7:54:bc:84:e9:cf:b3:d3:d4:ac:c8:6c:a6: f9:3d:c7:ff:5f:11:66:a2:fa:4c:0d:ec:72:17:71: 55:38:6c:6a:f0:a8:58:4b:f5:77:c2:20:99:8e:cc: 6e:1d:dc:c4:f1:1d:29:bb:ac:f7:59:65:5f:d7:e7: 04:14:f4:03:51:ea:bc:95:28:b8:4e:83:d6:3e:94: 76:4a:df:76:98:43:0e:79:71:dc:b0:e0:f2:d1:c4: 04:45:c8:07:17:85:26:13:14:f2:dd:41:c7:2c:e1: 92:71:97:c0:c6:0c:d3:c6:9f:04:1d:4a:a8:56:fd: 5d:ff:c1:88:5c:97:51:02:c4:4c:7d:15:26:b3:cd: 41:d4:da:d6:e7:bd:db:ba:8f:43:d0:1f:35:41:68: e6:0f:b1:30:e3:91:c6:a2:b0:b5:01:6c:4b:06:ba: 36:5b:ee:67:ce:21:01:99:cc:c8:18:ca:a5:20:d5: ac:10:9a:d2:03:e6:42:63:7a:7d:57:a6:0f:aa:9f: 48:14:0b:8c:bb:e1:05:03:00:12:b6:08:4b:7a:c9: a9:a7:b2:38:a8:06:d6:16:e8:f5:b4:31:f2:25:16: 94:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CD:59:B9:C2:DA:7D:38:5B:DA:FD:81:F5:85:51:48:28:E3:37:57 X509v3 Authority Key Identifier: keyid:4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:17:2f:e7:ee:1d:8f:80:f8:d8:6c:bb:c3:30:2f:34:77:38: 93:f2:b8:9c:c4:93:c9:58:5f:2a:62:8f:6c:e1:71:55:81:47: 35:6b:73:76:c7:5d:dc:ef:38:00:4e:cc:3d:c2:20:44:66:73: e1:19:be:58:1f:5d:39:8c:5e:5b:b7:03:fe:60:96:8b:2c:b5: c1:68:49:ac:90:6d:6b:8e:78:ac:91:5b:58:67:14:2a:a5:48: 2e:59:17:c1:2d:82:2a:c1:2d:67:e8:05:c7:35:50:b4:66:ae: d9:4e:7b:30:5d:78:d1:3c:0e:12:56:e8:81:29:86:98:9d:b3: e3:7c:ed:32:ac:e0:fc:40:64:7d:c7:3e:f6:db:a9:06:5d:a3: 6f:e2:f6:e2:77:1a:4a:27:76:59:4a:bb:cf:a5:86:b8:81:0b: 46:ec:41:01:af:7f:8b:40:89:ca:4f:c1:13:c1:4e:f1:3d:6d: c5:7c:9d:c5:58:ea:61:55:62:b6:0b:19:a1:46:ac:e5:35:69: 06:4b:d6:ea:63:b4:11:f0:8d:58:d5:30:2d:fa:bf:45:a3:27: 5a:19:f9:68:14:fc:91:cd:9a:3e:6c:68:b2:e6:82:e7:af:4b: 5d:d3:5d:1e:34:91:74:ea:67:0b:be:d3:bb:0e:13:08:01:40: b8:90:d8:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ruV/6k0ndb6LzaJRfmJoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYTViMmYzNzUyNGMzZDM4ZGM4MGE3MWQ4ZjAwMWVkMmM0 NWU4OWMwHhcNMjUxMjA2MjIwMTEwWhcNMjUxMjA3MjIwMTEwWjAzMTEwLwYDVQQD Eyg4YWNkNTliOWMyZGE3ZDM4NWJkYWZkODFmNTg1NTE0ODI4ZTMzNzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSAf1/gvBtkVYAVR/KXEHa5slAQQ iWz3M8Yu/veLm9dUvITpz7PT1KzIbKb5Pcf/XxFmovpMDexyF3FVOGxq8KhYS/V3 wiCZjsxuHdzE8R0pu6z3WWVf1+cEFPQDUeq8lSi4ToPWPpR2St92mEMOeXHcsODy 0cQERcgHF4UmExTy3UHHLOGScZfAxgzTxp8EHUqoVv1d/8GIXJdRAsRMfRUms81B 1NrW573buo9D0B81QWjmD7Ew45HGorC1AWxLBro2W+5nziEBmczIGMqlINWsEJrS A+ZCY3p9V6YPqp9IFAuMu+EFAwAStghLesmpp7I4qAbWFuj1tDHyJRaUdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrNWbnC2n04W9r9gfWFUUgo4zdXMB8GA1UdIwQY MBaAFE6lsvN1JMPTjcgKcdjwAe0sReicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHFXeTgzVWt3OU9OeUFweDJQQUI3U3hGNkp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85MDQxYjctZjU0My00YzYzLThlMmIt MzY2YTk3NjFlYTIwLzEvVHFXeTgzVWt3OU9OeUFweDJQQUI3U3hGNkp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS85MDQxYjctZjU0My00YzYzLThlMmItMzY2YTk3NjFlYTIw LzEvVHFXeTgzVWt3OU9OeUFweDJQQUI3U3hGNkp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBcv5+4d j4D42Gy7wzAvNHc4k/K4nMSTyVhfKmKPbOFxVYFHNWtzdsdd3O84AE7MPcIgRGZz 4Rm+WB9dOYxeW7cD/mCWiyy1wWhJrJBta454rJFbWGcUKqVILlkXwS2CKsEtZ+gF xzVQtGau2U57MF140TwOElbogSmGmJ2z43ztMqzg/EBkfcc+9tupBl2jb+L24nca Sid2WUq7z6WGuIELRuxBAa9/i0CJyk/BE8FO8T1txXydxVjqYVVitgsZoUas5TVp BkvW6mO0EfCNWNUwLfq/RaMnWhn5aBT8kc2aPmxosuaC569LXdNdHjSRdOpnC77T uw4TCAFAuJDYkg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:00 2025 by rpki-client