This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft File: tpHQC9tiauVzB9XNTord2UdWgLM.mft (raw, json) Hash identifier: 7nrWd97JzFTSxPZOwc84PdkpCckxg8HqNKlfGx2VyhI= Subject key identifier: 40:B7:9B:27:12:22:8F:C9:EE:18:3C:35:E3:1F:21:95:79:7B:EE:D9 Authority key identifier: B6:91:D0:0B:DB:62:6A:E5:73:07:D5:CD:4E:8A:DD:D9:47:56:80:B3 Certificate issuer: /CN=b691d00bdb626ae57307d5cd4e8addd9475680b3 Certificate serial: 019AF209516F83282150D8500524A5550508 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft Manifest number: 1035 Signing time: Sat 06 Dec 2025 05:01:28 +0000 Manifest this update: Sat 06 Dec 2025 05:01:28 +0000 Manifest next update: Sun 07 Dec 2025 05:01:28 +0000 Files and hashes: 1: AQvnwjdpCCJVGghqg0nwe9L0mVk.roa (hash: lmMkrxQHgFH9/tCkdiNxxBNSfZZ+AeKUjyZG6YnOW/4=) 2: tpHQC9tiauVzB9XNTord2UdWgLM.crl (hash: oR3C1od7eqyyQds2qUtQKfgK4jnehpAYDNiIkNsLCZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.crl rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:51:6f:83:28:21:50:d8:50:05:24:a5:55:05:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b691d00bdb626ae57307d5cd4e8addd9475680b3 Validity Not Before: Dec 6 05:01:28 2025 GMT Not After : Dec 7 05:01:28 2025 GMT Subject: CN=40b79b2712228fc9ee183c35e31f2195797beed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:87:6e:5e:39:0c:3b:f2:78:5b:9c:44:fa:b8: c3:0b:d0:6a:8e:07:89:62:78:4d:8c:0f:7f:56:7e: ef:3c:49:3a:9f:03:c4:99:6c:c5:e5:48:f5:d7:4b: 4f:b6:8c:2c:0d:69:d6:7c:80:c0:8d:29:73:95:d0: f3:dc:da:1a:b6:ad:65:7b:c0:ac:66:03:eb:11:ae: 92:75:a8:e9:72:aa:64:29:14:09:ed:ba:af:53:75: 98:d2:35:65:1d:ea:13:2a:b1:a3:bd:59:d7:ed:93: 7b:b6:51:4f:f1:8a:4a:44:ce:72:eb:2a:1e:21:e5: 2b:d0:54:81:f1:57:47:99:d8:2d:65:38:be:70:9a: 37:e9:e9:6c:a7:e6:60:83:2f:1f:3d:c9:d5:59:dc: 02:f5:93:ab:2f:a7:55:ef:bf:88:56:d4:e2:24:0c: 89:ed:d9:a7:21:75:f9:06:24:1b:ce:c6:0d:44:9c: 0a:f7:cf:b9:36:84:76:13:74:77:8b:90:6d:ab:e6: fa:31:b7:5b:bc:c9:da:35:33:aa:04:df:75:19:8b: 30:a4:74:a4:57:26:5e:a7:a3:5f:48:9a:0f:07:da: 7d:76:df:26:e6:19:4c:2c:d6:4c:59:5a:46:86:8c: 5d:85:54:7d:1b:3c:af:fa:9b:2e:77:b5:0c:48:d3: 8d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B7:9B:27:12:22:8F:C9:EE:18:3C:35:E3:1F:21:95:79:7B:EE:D9 X509v3 Authority Key Identifier: keyid:B6:91:D0:0B:DB:62:6A:E5:73:07:D5:CD:4E:8A:DD:D9:47:56:80:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:bc:2d:96:de:8a:11:0e:fd:12:60:3f:62:85:c6:ae:f2:0c: 68:ed:1e:2e:13:ee:1c:e3:aa:e6:f5:75:2a:d2:82:27:f6:84: d8:18:36:af:12:3c:31:fd:8b:f5:f8:19:93:2c:67:49:62:59: f7:3d:ef:f7:0b:2e:27:b3:87:1f:03:27:f2:f2:a3:50:07:8d: a7:d7:56:51:1e:27:c8:00:40:a5:30:d8:af:a9:98:99:2e:f0: da:a8:93:95:85:91:f6:48:f5:bd:61:0c:be:16:48:49:6e:f8: 1c:e6:21:4f:c5:84:ab:43:92:fe:e4:23:9f:96:ab:0e:f9:4a: 9c:be:aa:2a:53:e5:d3:32:a7:44:84:9d:e0:4b:6a:05:f7:fc: 0d:ce:ea:f3:d0:da:43:d8:8f:e6:c9:62:15:86:20:84:8f:67: 14:18:fa:35:67:4e:d8:cc:2a:40:4f:77:a3:00:86:c4:43:3a: ec:64:79:37:ae:f8:25:34:94:95:03:0c:c0:ed:92:bb:d2:16: 6c:70:53:61:e0:03:d3:0e:d8:b2:b6:2c:19:50:19:d3:53:5f: dc:24:dd:07:b2:8c:88:37:80:fa:98:b7:11:9e:8c:b4:7a:ea: 9f:9e:a7:a9:f6:36:17:83:4e:8a:a2:35:00:ce:e7:19:bc:9c: 7e:ae:a0:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVFvgyghUNhQBSSlVQUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OTFkMDBiZGI2MjZhZTU3MzA3ZDVjZDRlOGFkZGQ5NDc1 NjgwYjMwHhcNMjUxMjA2MDUwMTI4WhcNMjUxMjA3MDUwMTI4WjAzMTEwLwYDVQQD Eyg0MGI3OWIyNzEyMjI4ZmM5ZWUxODNjMzVlMzFmMjE5NTc5N2JlZWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4duXjkMO/J4W5xE+rjDC9BqjgeJ YnhNjA9/Vn7vPEk6nwPEmWzF5Uj110tPtowsDWnWfIDAjSlzldDz3Noatq1le8Cs ZgPrEa6SdajpcqpkKRQJ7bqvU3WY0jVlHeoTKrGjvVnX7ZN7tlFP8YpKRM5y6yoe IeUr0FSB8VdHmdgtZTi+cJo36elsp+Zggy8fPcnVWdwC9ZOrL6dV77+IVtTiJAyJ 7dmnIXX5BiQbzsYNRJwK98+5NoR2E3R3i5Btq+b6MbdbvMnaNTOqBN91GYswpHSk VyZep6NfSJoPB9p9dt8m5hlMLNZMWVpGhoxdhVR9Gzyv+psud7UMSNONKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEC3mycSIo/J7hg8NeMfIZV5e+7ZMB8GA1UdIwQY MBaAFLaR0AvbYmrlcwfVzU6K3dlHVoCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHBIUUM5dGlhdVZ6QjlYTlRvcmQyVWRXZ0xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zZTNkMDgtZTRjNS00ZjNkLWJlMDEt NDUwYWQ1NWQzMjVhLzEvdHBIUUM5dGlhdVZ6QjlYTlRvcmQyVWRXZ0xNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8zZTNkMDgtZTRjNS00ZjNkLWJlMDEtNDUwYWQ1NWQzMjVh LzEvdHBIUUM5dGlhdVZ6QjlYTlRvcmQyVWRXZ0xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7wtlt6K EQ79EmA/YoXGrvIMaO0eLhPuHOOq5vV1KtKCJ/aE2Bg2rxI8Mf2L9fgZkyxnSWJZ 9z3v9wsuJ7OHHwMn8vKjUAeNp9dWUR4nyABApTDYr6mYmS7w2qiTlYWR9kj1vWEM vhZISW74HOYhT8WEq0OS/uQjn5arDvlKnL6qKlPl0zKnRISd4EtqBff8Dc7q89Da Q9iP5sliFYYghI9nFBj6NWdO2MwqQE93owCGxEM67GR5N674JTSUlQMMwO2Su9IW bHBTYeAD0w7YsrYsGVAZ01Nf3CTdB7KMiDeA+pi3EZ6MtHrqn56nqfY2F4NOiqI1 AM7nGbycfq6gKg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:45 2025 by rpki-client