This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft File: TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft (raw, json) Hash identifier: QZsGZnnv0oEnzNVVcpIHWMAV3GYFJ4Pck1+bpz1cZIg= Subject key identifier: DB:65:CE:78:91:81:82:7B:7B:68:81:6F:B3:65:E1:FA:43:55:85:9C Authority key identifier: 4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C Certificate issuer: /CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c Certificate serial: 019AF276B5D1FF193AE1EE3EE968063B65C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft Manifest number: 0822 Signing time: Sat 06 Dec 2025 07:00:57 +0000 Manifest this update: Sat 06 Dec 2025 07:00:57 +0000 Manifest next update: Sun 07 Dec 2025 07:00:57 +0000 Files and hashes: 1: TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl (hash: bZQF9YUEY9KkFGkrd704POMQACug4jTfKpfSlIHz4dU=) 2: UJ9_FeIGOOjgZRJDmb3mfb4BJZs.roa (hash: Iv5M96f/4AyXNBfTo49Zxh554cDlKiW0Et8FXEewisM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b5:d1:ff:19:3a:e1:ee:3e:e9:68:06:3b:65:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c Validity Not Before: Dec 6 07:00:57 2025 GMT Not After : Dec 7 07:00:57 2025 GMT Subject: CN=db65ce789181827b7b68816fb365e1fa4355859c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:94:2a:2d:b2:c5:de:d7:bf:43:86:3e:e6:45: ba:85:d0:c2:7d:58:29:44:f2:fa:ea:dc:f7:df:c5: 0f:c1:15:60:8c:ef:bc:7c:92:37:7a:08:2d:f6:d2: 29:2e:e6:1a:9a:ab:cf:94:3d:c5:d0:01:d9:02:a3: 01:4a:62:dc:e7:3a:a2:72:63:02:82:e7:04:ea:37: 9b:20:b7:2b:84:3e:db:11:30:a7:25:90:f4:ca:69: 0a:a0:2b:15:0d:33:69:f1:e3:df:ef:03:72:14:4f: 82:24:08:92:07:22:e8:07:91:dd:31:e5:fd:34:63: dd:ea:0b:f2:c5:85:c1:ef:ca:3e:a4:ad:41:6b:81: 2e:22:de:0b:b6:9d:75:fe:08:f4:ab:13:81:0d:13: 63:91:0b:26:3b:3d:3f:b6:7d:8d:47:3f:7e:e7:3e: 7c:9e:3c:db:00:56:c9:ac:2d:1c:b0:f7:cc:12:e3: 8d:28:19:52:f0:57:a6:f9:a1:f5:01:30:5a:81:f8: ac:e9:7f:1a:83:da:61:35:d2:7e:64:e9:4d:59:6a: 25:41:ce:f9:46:40:79:66:d9:79:3f:8b:18:8c:5e: ca:d1:93:bc:4d:8a:d6:db:3f:87:71:e6:5f:80:42: b7:83:5f:fe:6a:0d:d2:5a:61:33:49:68:ce:82:86: b8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:65:CE:78:91:81:82:7B:7B:68:81:6F:B3:65:E1:FA:43:55:85:9C X509v3 Authority Key Identifier: keyid:4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:c5:c9:2b:45:e8:68:67:29:86:81:d9:18:af:af:d5:4c:07: 8d:82:50:ed:35:47:8a:28:ea:2e:00:b4:c1:44:7f:0b:d8:a5: cf:18:8c:dd:c0:16:29:8c:5c:39:8b:9d:26:5c:6f:5c:46:4e: ad:20:c9:2e:6a:af:65:64:ec:37:5b:98:8b:98:18:e8:09:d4: ce:d9:11:cd:54:33:72:6e:a1:b0:d5:8a:01:de:93:f4:c4:3f: f5:b7:fb:2d:08:3f:b5:71:af:7f:23:4b:40:e6:c8:11:9b:a6: df:3d:93:dd:69:44:35:02:90:e9:76:8d:e7:8c:f9:60:a3:ed: 80:d3:ed:64:c8:88:d9:50:0f:d6:93:41:d7:d5:07:62:3f:5d: 9c:34:03:c8:2f:09:8c:cf:2f:5b:77:f0:9c:8f:9e:06:a7:60: 06:ab:75:a4:da:26:d5:ff:62:31:84:b3:8a:02:17:3a:b6:59: 6e:37:03:18:fb:bb:ec:19:b0:a6:89:e5:ff:98:fa:ff:18:8f: e6:19:5b:7e:25:c9:e2:06:29:32:b6:a4:6d:8f:9e:7b:e0:8c: 34:1c:3b:8f:30:2f:d1:76:8d:48:15:14:fa:af:20:5f:f1:53: d5:ba:fd:c9:85:ae:87:64:f0:8d:e9:e8:74:a6:4b:d2:0b:3f: 1f:18:af:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrXR/xk64e4+6WgGO2XFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZjljM2VjNDdmY2NmMDFkOTMwNWZlMGQ3ZDQ4MWIzMDZi MGQ0OGMwHhcNMjUxMjA2MDcwMDU3WhcNMjUxMjA3MDcwMDU3WjAzMTEwLwYDVQQD EyhkYjY1Y2U3ODkxODE4MjdiN2I2ODgxNmZiMzY1ZTFmYTQzNTU4NTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5QqLbLF3te/Q4Y+5kW6hdDCfVgp RPL66tz338UPwRVgjO+8fJI3eggt9tIpLuYamqvPlD3F0AHZAqMBSmLc5zqicmMC gucE6jebILcrhD7bETCnJZD0ymkKoCsVDTNp8ePf7wNyFE+CJAiSByLoB5HdMeX9 NGPd6gvyxYXB78o+pK1Ba4EuIt4Ltp11/gj0qxOBDRNjkQsmOz0/tn2NRz9+5z58 njzbAFbJrC0csPfMEuONKBlS8Fem+aH1ATBagfis6X8ag9phNdJ+ZOlNWWolQc75 RkB5Ztl5P4sYjF7K0ZO8TYrW2z+HceZfgEK3g1/+ag3SWmEzSWjOgoa4wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtlzniRgYJ7e2iBb7Nl4fpDVYWcMB8GA1UdIwQY MBaAFEz5w+xH/M8B2TBf4NfUgbMGsNSMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFBuRDdFZjh6d0haTUZfZzE5U0Jzd2F3MUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iM2ZhNjQtZjhiMS00NGU4LWFiYTYt ODYwMTY2MzM5NWViLzEvVFBuRDdFZjh6d0haTUZfZzE5U0Jzd2F3MUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9iM2ZhNjQtZjhiMS00NGU4LWFiYTYtODYwMTY2MzM5NWVi LzEvVFBuRDdFZjh6d0haTUZfZzE5U0Jzd2F3MUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8XJK0Xo aGcphoHZGK+v1UwHjYJQ7TVHiijqLgC0wUR/C9ilzxiM3cAWKYxcOYudJlxvXEZO rSDJLmqvZWTsN1uYi5gY6AnUztkRzVQzcm6hsNWKAd6T9MQ/9bf7LQg/tXGvfyNL QObIEZum3z2T3WlENQKQ6XaN54z5YKPtgNPtZMiI2VAP1pNB19UHYj9dnDQDyC8J jM8vW3fwnI+eBqdgBqt1pNom1f9iMYSzigIXOrZZbjcDGPu77Bmwponl/5j6/xiP 5hlbfiXJ4gYpMrakbY+ee+CMNBw7jzAv0XaNSBUU+q8gX/FT1br9yYWuh2Twjeno dKZL0gs/HxivdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:08:49 2025 by rpki-client