This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft File: TphKWkt4CLtOoy0xC90H7MlXURM.mft (raw, json) Hash identifier: ffJB0/WYbv6y84yuNcgNAJKvv9gs6j7izGs3dibQGHQ= Subject key identifier: 67:DE:65:28:20:AC:28:DA:B4:6A:EF:3D:3A:FA:0B:A5:76:79:55:E0 Authority key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13 Certificate issuer: /CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113 Certificate serial: 019B300C630BC282849548387356077950B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 06:01:16 +0000 Manifest this update: Thu 18 Dec 2025 06:01:16 +0000 Manifest next update: Fri 19 Dec 2025 06:01:16 +0000 Files and hashes: 1: 8ZKbnPniu913SnjXvn3kXFXoTm0.roa (hash: 5HixzWr+kvtOLRKOe0GySJFEoBIN8n7Szdz/SR3iCoA=) 2: TphKWkt4CLtOoy0xC90H7MlXURM.crl (hash: sncSCOW4lKb7w35GEH+2WM02PyIi8d24xH6wJHBrVbY=) 3: c5p1cEEnGb5RFBRHp7Sxm_tjKvM.roa (hash: M29Br9NKk77+hhhlGq1bhWv7l0daFqIJWaEI7ntt2wY=) 4: iDLcfc6aCabj7RN8rRXRQoXvHeA.roa (hash: UvXUgafoqKLsjB+HeAD02OLRE2t5kuX7jZTUuLZ1nRA=) 5: u6tKtCCW-Dj0-HkdzJ6yaeEuRAI.roa (hash: dfQrij6E/OioNCwBaUVfNrimg1NkdqgGbAXbWqoJr0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:63:0b:c2:82:84:95:48:38:73:56:07:79:50:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113 Validity Not Before: Dec 18 06:01:16 2025 GMT Not After : Dec 19 06:01:16 2025 GMT Subject: CN=67de652820ac28dab46aef3d3afa0ba5767955e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6c:c8:6b:14:52:78:79:e6:d5:28:ac:c0:e0: 4e:bb:05:72:c1:59:27:7e:59:17:05:be:79:82:e9: 06:de:16:66:6e:c5:13:f6:14:17:7b:8a:d5:cc:13: b1:c8:0e:87:5f:31:97:e7:23:27:93:de:24:9d:b4: 02:29:67:2c:dc:9f:a3:2a:c2:52:1e:fc:98:15:26: a2:23:1b:f9:30:11:28:ec:a7:87:99:e8:1b:9e:f3: 5b:16:d3:cc:e9:d3:01:9e:d8:14:6d:eb:27:17:83: 58:c7:2f:08:5b:fc:fb:0d:57:8c:4a:8c:5d:f5:35: 8c:11:dd:51:02:90:90:5b:2d:a3:18:ed:64:1d:80: a2:37:99:67:62:7b:27:a4:fc:74:b1:16:f4:7d:72: fa:c8:e1:f4:14:bb:12:f1:71:d4:3c:48:4f:09:80: f6:58:ee:82:74:e1:03:a6:b4:78:83:38:b9:fb:7f: 4c:e2:0c:d7:a4:d3:54:99:b8:90:1d:b7:24:74:94: 6b:1a:22:be:51:6c:02:d9:ec:f0:a0:43:91:29:18: 7c:82:d4:00:8e:9c:11:da:51:98:c2:b2:06:1c:fd: be:d8:c2:53:c7:b2:b7:5e:52:63:47:ea:82:93:4c: 06:fd:5f:ef:6f:2f:ca:a2:6c:a5:8f:b3:f9:28:ba: f8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DE:65:28:20:AC:28:DA:B4:6A:EF:3D:3A:FA:0B:A5:76:79:55:E0 X509v3 Authority Key Identifier: keyid:4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:2f:54:8e:5d:3c:53:9f:80:7f:7e:1b:49:6c:fa:86:95:4a: 66:07:55:68:a8:9d:62:98:c9:7c:98:22:56:89:be:fe:d6:44: 42:bb:b2:44:35:dd:f7:49:62:fc:c8:ea:63:f6:c5:e9:9e:c1: 99:c0:37:95:52:ab:4e:7c:b6:fd:3b:82:87:49:93:45:50:53: de:8c:a6:f0:d4:97:2e:a4:8e:cc:bc:3a:5f:46:17:fc:6b:4e: 17:a8:dd:a1:d0:b9:37:5a:96:3a:dc:a1:7b:c0:05:c2:45:84: 0d:23:d4:c3:95:6b:ac:b4:57:cf:4c:38:e2:f1:16:6e:4e:43: 42:bc:24:21:fe:26:79:bb:53:13:4d:31:c4:ab:07:4a:7c:31: 71:57:17:23:88:d0:62:ba:8d:03:d1:93:15:a5:b2:14:ce:01: e0:cd:ea:af:91:5b:e1:3e:42:94:16:2e:e6:12:6a:71:02:5e: 83:8a:5d:ac:d8:18:76:94:c8:e7:0d:4b:9b:7e:7a:b3:79:fe: 88:a7:99:44:ac:c6:87:bf:57:64:8a:b3:de:6c:e3:92:5e:6d: 20:7d:ff:16:84:94:50:7d:1d:93:7a:9c:c6:88:3e:c0:5c:b2: 17:50:32:e0:4f:67:ba:e1:89:d4:83:59:e2:bd:50:a9:d9:3f: e6:0a:bf:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDGMLwoKElUg4c1YHeVC2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlOTg0YTVhNGI3ODA4YmI0ZWEzMmQzMTBiZGQwN2VjYzk1 NzUxMTMwHhcNMjUxMjE4MDYwMTE2WhcNMjUxMjE5MDYwMTE2WjAzMTEwLwYDVQQD Eyg2N2RlNjUyODIwYWMyOGRhYjQ2YWVmM2QzYWZhMGJhNTc2Nzk1NWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WzIaxRSeHnm1SiswOBOuwVywVkn flkXBb55gukG3hZmbsUT9hQXe4rVzBOxyA6HXzGX5yMnk94knbQCKWcs3J+jKsJS HvyYFSaiIxv5MBEo7KeHmegbnvNbFtPM6dMBntgUbesnF4NYxy8IW/z7DVeMSoxd 9TWMEd1RApCQWy2jGO1kHYCiN5lnYnsnpPx0sRb0fXL6yOH0FLsS8XHUPEhPCYD2 WO6CdOEDprR4gzi5+39M4gzXpNNUmbiQHbckdJRrGiK+UWwC2ezwoEORKRh8gtQA jpwR2lGYwrIGHP2+2MJTx7K3XlJjR+qCk0wG/V/vby/Komylj7P5KLr4AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfeZSggrCjatGrvPTr6C6V2eVXgMB8GA1UdIwQY MBaAFE6YSlpLeAi7TqMtMQvdB+zJV1ETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHBoS1drdDRDTHRPb3kweEM5MEg3TWxYVVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC80MWRlYzEtMWViMS00OWM3LTlkNTAt Y2E1OTVlMzRkNWFjLzEvVHBoS1drdDRDTHRPb3kweEM5MEg3TWxYVVJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC80MWRlYzEtMWViMS00OWM3LTlkNTAtY2E1OTVlMzRkNWFj LzEvVHBoS1drdDRDTHRPb3kweEM5MEg3TWxYVVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGi9Ujl08 U5+Af34bSWz6hpVKZgdVaKidYpjJfJgiVom+/tZEQruyRDXd90li/MjqY/bF6Z7B mcA3lVKrTny2/TuCh0mTRVBT3oym8NSXLqSOzLw6X0YX/GtOF6jdodC5N1qWOtyh e8AFwkWEDSPUw5VrrLRXz0w44vEWbk5DQrwkIf4mebtTE00xxKsHSnwxcVcXI4jQ YrqNA9GTFaWyFM4B4M3qr5Fb4T5ClBYu5hJqcQJeg4pdrNgYdpTI5w1Lm356s3n+ iKeZRKzGh79XZIqz3mzjkl5tIH3/FoSUUH0dk3qcxog+wFyyF1Ay4E9nuuGJ1INZ 4r1Qqdk/5gq/LQ== -----END CERTIFICATE-----Generated at Thu Dec 18 08:37:28 2025 by rpki-client