This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft File: tVNDqiHHSjn81Rg_T99V3EZ56D0.mft (raw, json) Hash identifier: f9qMvqQOuUJI2O//2cJ8AwEvMTttvbgHE135tW3kVtA= Subject key identifier: 48:43:90:4B:C0:CD:A0:6A:21:75:3B:5E:56:18:9C:91:FC:E6:92:FB Authority key identifier: B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D Certificate issuer: /CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d Certificate serial: 019B2B8A7858C9543F0F7AC96C7621F2939B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft Manifest number: 02B7 Signing time: Wed 17 Dec 2025 09:00:53 +0000 Manifest this update: Wed 17 Dec 2025 09:00:53 +0000 Manifest next update: Thu 18 Dec 2025 09:00:53 +0000 Files and hashes: 1: RXmLcd13ajoTVlcEirVukYVayjY.roa (hash: VMYnLhwMDYwO9ah7mzCKDLgq1vs8pRSHkOzi/+9nkdg=) 2: tVNDqiHHSjn81Rg_T99V3EZ56D0.crl (hash: +XLvAaux1vOVPIwrywyiKcQ3+F35j/LpKQUfJT4mhJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:78:58:c9:54:3f:0f:7a:c9:6c:76:21:f2:93:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d Validity Not Before: Dec 17 09:00:53 2025 GMT Not After : Dec 18 09:00:53 2025 GMT Subject: CN=4843904bc0cda06a21753b5e56189c91fce692fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5e:c4:ad:e2:49:dc:ad:12:44:2e:ee:d8:0d: a9:fc:98:9d:a7:4b:92:2d:a7:0e:a1:04:28:95:81: 89:ba:57:3d:21:11:6c:6b:b5:67:c2:ad:14:32:96: 21:df:cf:ae:15:ef:ed:26:b1:ca:4a:3c:c6:5d:3e: b5:01:7b:9d:2d:22:26:a2:85:cf:bc:1f:ee:88:8f: 40:98:7e:5e:e7:87:fa:14:24:17:5e:6d:06:6c:a8: d2:01:67:72:fa:49:cc:04:6b:71:cc:85:07:1e:51: 3e:85:5a:59:ca:c4:e1:24:63:c0:e4:65:bc:29:84: f1:55:4a:de:50:74:ff:95:df:39:05:2e:fc:ba:c5: 61:4a:b4:7c:64:b0:a3:e8:56:2e:f4:07:03:0a:bf: 6c:63:ba:83:f0:2f:11:9a:65:3f:b0:b8:4d:42:e2: 4d:d9:74:e9:88:76:ca:d2:ae:5d:9e:8a:b9:71:b2: 42:b5:84:e3:48:c1:4b:90:11:8c:df:4e:c8:ff:25: 48:ef:3c:00:e9:d9:10:e2:05:7d:5e:1c:8a:bb:a1: cc:51:9e:78:f0:b5:09:d0:da:60:7b:30:79:d5:66: 03:5a:cc:fb:93:54:ff:17:ec:bc:bb:02:6d:a2:33: 70:f8:28:49:4d:65:d4:70:88:0e:8a:3e:40:ea:13: c7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:43:90:4B:C0:CD:A0:6A:21:75:3B:5E:56:18:9C:91:FC:E6:92:FB X509v3 Authority Key Identifier: keyid:B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:20:a8:97:ed:c8:11:66:87:0d:d3:55:5d:65:22:9f:e1:9c: 65:76:12:49:9e:8c:96:50:64:82:df:1e:e4:0f:98:cd:1d:4b: 1a:7e:bd:57:37:07:ca:23:28:11:16:46:1f:db:5f:bc:b3:dd: d8:0c:2a:e7:d8:ca:de:61:ad:d1:e0:c0:d5:0c:c0:00:7d:31: f9:4e:25:0a:94:43:4d:bf:1c:ee:d0:97:38:57:8a:e4:44:60: 5e:43:56:41:4e:25:40:96:f2:0a:16:85:f6:32:1d:e8:2f:a1: 89:74:bc:e1:6b:25:36:b9:d6:fd:9c:90:5f:8b:d6:08:88:f0: c3:85:d7:dc:00:2e:59:b3:68:c9:b3:8e:ca:e6:b5:95:37:c8: f4:cd:92:00:0f:7e:77:89:f2:01:1d:d4:c3:b5:6d:16:a7:6b: 1e:cb:3f:e8:8a:1e:2a:3e:16:f8:2e:15:e2:1c:b0:cd:e5:c8: bf:5e:c3:21:fd:b3:aa:6e:c4:d3:1c:64:d0:45:2f:37:18:a9: 66:7d:47:00:80:f1:99:99:cd:a2:f0:e8:2a:07:38:7d:34:af: e7:13:6d:f0:4e:36:d8:96:2c:dd:c9:b9:1f:c4:6a:4e:2c:c7: 6d:46:19:69:62:1c:e5:f3:02:f6:e9:70:6a:2f:da:21:e3:d8: 7d:24:3e:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrinhYyVQ/D3rJbHYh8pObMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTM0M2FhMjFjNzRhMzlmY2Q1MTgzZjRmZGY1NWRjNDY3 OWU4M2QwHhcNMjUxMjE3MDkwMDUzWhcNMjUxMjE4MDkwMDUzWjAzMTEwLwYDVQQD Eyg0ODQzOTA0YmMwY2RhMDZhMjE3NTNiNWU1NjE4OWM5MWZjZTY5MmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8V7EreJJ3K0SRC7u2A2p/Jidp0uS LacOoQQolYGJulc9IRFsa7Vnwq0UMpYh38+uFe/tJrHKSjzGXT61AXudLSImooXP vB/uiI9AmH5e54f6FCQXXm0GbKjSAWdy+knMBGtxzIUHHlE+hVpZysThJGPA5GW8 KYTxVUreUHT/ld85BS78usVhSrR8ZLCj6FYu9AcDCr9sY7qD8C8RmmU/sLhNQuJN 2XTpiHbK0q5dnoq5cbJCtYTjSMFLkBGM307I/yVI7zwA6dkQ4gV9XhyKu6HMUZ54 8LUJ0NpgezB51WYDWsz7k1T/F+y8uwJtojNw+ChJTWXUcIgOij5A6hPH/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhDkEvAzaBqIXU7XlYYnJH85pL7MB8GA1UdIwQY MBaAFLVTQ6ohx0o5/NUYP0/fVdxGeeg9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZORHFpSEhTam44MVJnX1Q5OVYzRVo1NkQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jNDljMDgtOTJhYi00Y2IxLTgwOWIt NGVjN2I1ZWZhZTM3LzEvdFZORHFpSEhTam44MVJnX1Q5OVYzRVo1NkQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jNDljMDgtOTJhYi00Y2IxLTgwOWItNGVjN2I1ZWZhZTM3 LzEvdFZORHFpSEhTam44MVJnX1Q5OVYzRVo1NkQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPiCol+3I EWaHDdNVXWUin+GcZXYSSZ6MllBkgt8e5A+YzR1LGn69VzcHyiMoERZGH9tfvLPd 2Awq59jK3mGt0eDA1QzAAH0x+U4lCpRDTb8c7tCXOFeK5ERgXkNWQU4lQJbyChaF 9jId6C+hiXS84WslNrnW/ZyQX4vWCIjww4XX3AAuWbNoybOOyua1lTfI9M2SAA9+ d4nyAR3Uw7VtFqdrHss/6IoeKj4W+C4V4hywzeXIv17DIf2zqm7E0xxk0EUvNxip Zn1HAIDxmZnNovDoKgc4fTSv5xNt8E422JYs3cm5H8RqTizHbUYZaWIc5fMC9ulw ai/aIePYfSQ+3Q== -----END CERTIFICATE-----Generated at Wed Dec 17 18:12:52 2025 by rpki-client