This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft File: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft (raw, json) Hash identifier: YuBkW/Dc111xQCuVh4qdRvRwoZMnLYJxBquJTzQPEuA= Subject key identifier: 48:18:D2:8A:35:BA:64:95:74:F7:82:CA:DF:BB:7D:F1:23:BC:25:0C Authority key identifier: 4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00 Certificate issuer: /CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000 Certificate serial: 019AF49BAD58B64CD3208DA64AC7AE0B74B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft Manifest number: 017E Signing time: Sat 06 Dec 2025 17:00:34 +0000 Manifest this update: Sat 06 Dec 2025 17:00:34 +0000 Manifest next update: Sun 07 Dec 2025 17:00:34 +0000 Files and hashes: 1: 1-U8-4zu6FwPD_h-JBtHqluBUugc.roa (hash: B3V6UvPy+Yv+8toI+28gvW2unDO4YgNU77Me0s0gt9U=) 2: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl (hash: nNDcWNRDLekpsbvZ8OF1KtpfoSY+hlUDITT5mXYx09Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:ad:58:b6:4c:d3:20:8d:a6:4a:c7:ae:0b:74:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000 Validity Not Before: Dec 6 17:00:34 2025 GMT Not After : Dec 7 17:00:34 2025 GMT Subject: CN=4818d28a35ba649574f782cadfbb7df123bc250c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e3:d6:c7:f5:57:14:93:be:0b:dc:b8:a8:6c: f4:73:7b:46:25:0d:e6:60:4c:85:ff:28:08:bf:96: d0:2f:f4:3e:c4:98:08:fe:0b:b5:57:fe:c6:8d:e1: 9b:c1:f0:35:ae:d1:54:f4:96:68:70:5a:0b:6e:09: b9:ee:2c:0c:45:00:86:49:85:f0:cf:a9:2d:a0:91: 6e:25:f9:0b:10:0d:fd:f8:c1:cc:4d:e6:34:73:71: 02:58:92:47:7b:f6:70:15:86:59:cc:6e:1b:93:cd: 4a:69:f1:85:b6:63:41:db:66:dc:a5:d3:4d:e7:9a: c3:53:a3:4a:90:82:20:af:01:cc:93:3e:b4:c0:f6: 89:45:66:08:90:b1:e5:7d:42:0f:4b:3c:89:d7:7f: 84:02:9f:5b:3c:52:a9:2d:d2:40:5e:98:b8:ee:5d: b2:87:ea:bf:9f:0b:af:e1:a0:a2:c0:f6:5f:0b:90: 5e:62:85:c0:31:98:57:65:4e:a9:3f:7a:c8:64:5d: 2b:ca:18:22:18:68:eb:32:82:1a:8b:3e:0c:79:26: 4d:e6:9e:80:01:57:ff:ce:dd:6e:78:71:46:4b:aa: 87:c1:cb:6a:dd:13:f2:67:4d:b1:da:01:8d:2a:65: d6:8a:40:37:5b:be:e4:9a:89:f2:95:8a:72:e7:ad: f2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:18:D2:8A:35:BA:64:95:74:F7:82:CA:DF:BB:7D:F1:23:BC:25:0C X509v3 Authority Key Identifier: keyid:4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:ff:b2:7e:65:c6:c4:0f:92:ab:91:b0:38:4e:cb:5a:ef:4a: 35:d7:71:5e:05:da:7d:2b:a9:c4:66:2b:2c:a0:d6:e4:43:3e: c4:cd:ec:a8:74:1c:43:7f:9a:07:3e:a9:4f:23:6e:e1:c4:f7: a7:ac:91:55:8c:1d:28:60:1f:35:3c:23:eb:54:7a:d8:c0:ee: f2:74:11:f2:fe:5e:0a:c7:31:db:40:8e:d5:c5:a1:8b:e7:d4: 69:09:0e:93:6a:c7:68:19:23:28:db:fb:7c:d6:c1:68:be:d4: 4f:70:9d:19:62:17:ff:88:09:56:7b:f3:8f:1a:7f:78:d6:70: c0:81:77:e6:03:42:b0:e3:65:88:34:d2:01:8a:7b:6d:e4:d4: 5e:d3:03:6c:23:a0:10:7b:e1:a6:11:03:1e:87:f1:8f:ff:ae: f6:68:0b:47:f6:21:ab:33:31:34:eb:03:8b:d5:18:52:4b:02: ba:ca:8f:4e:80:44:cc:82:02:36:16:f9:60:5e:60:58:d0:91: 99:b5:9e:19:c2:8d:4f:31:dd:da:25:76:2c:67:14:25:9b:01: 8b:6d:e0:d6:5a:41:64:58:c9:02:1f:1c:da:08:0f:ab:0f:d9: a1:98:ba:d4:f7:eb:ab:0f:2d:72:d2:84:c1:a0:41:8d:51:58: 79:5e:e3:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m61YtkzTII2mSseuC3S2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMGYzMWM2ZWZkYjlhNDQ1YjhmMTcyZjBiZTBkZmQ1MTQy YmUwMDAwHhcNMjUxMjA2MTcwMDM0WhcNMjUxMjA3MTcwMDM0WjAzMTEwLwYDVQQD Eyg0ODE4ZDI4YTM1YmE2NDk1NzRmNzgyY2FkZmJiN2RmMTIzYmMyNTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+PWx/VXFJO+C9y4qGz0c3tGJQ3m YEyF/ygIv5bQL/Q+xJgI/gu1V/7GjeGbwfA1rtFU9JZocFoLbgm57iwMRQCGSYXw z6ktoJFuJfkLEA39+MHMTeY0c3ECWJJHe/ZwFYZZzG4bk81KafGFtmNB22bcpdNN 55rDU6NKkIIgrwHMkz60wPaJRWYIkLHlfUIPSzyJ13+EAp9bPFKpLdJAXpi47l2y h+q/nwuv4aCiwPZfC5BeYoXAMZhXZU6pP3rIZF0ryhgiGGjrMoIaiz4MeSZN5p6A AVf/zt1ueHFGS6qHwctq3RPyZ02x2gGNKmXWikA3W77kmonylYpy563yxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgY0oo1umSVdPeCyt+7ffEjvCUMMB8GA1UdIwQY MBaAFE4PMcbv25pEW48XLwvg39UUK+AAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGc4eHh1X2Jta1JianhjdkMtRGYxUlFyNEFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hY2E3OTAtNjMyOS00MTRhLWJlZDUt YmFkMmNiNDgwOTEyLzEvVGc4eHh1X2Jta1JianhjdkMtRGYxUlFyNEFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9hY2E3OTAtNjMyOS00MTRhLWJlZDUtYmFkMmNiNDgwOTEy LzEvVGc4eHh1X2Jta1JianhjdkMtRGYxUlFyNEFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt/+yfmXG xA+Sq5GwOE7LWu9KNddxXgXafSupxGYrLKDW5EM+xM3sqHQcQ3+aBz6pTyNu4cT3 p6yRVYwdKGAfNTwj61R62MDu8nQR8v5eCscx20CO1cWhi+fUaQkOk2rHaBkjKNv7 fNbBaL7UT3CdGWIX/4gJVnvzjxp/eNZwwIF35gNCsONliDTSAYp7beTUXtMDbCOg EHvhphEDHofxj/+u9mgLR/YhqzMxNOsDi9UYUksCusqPToBEzIICNhb5YF5gWNCR mbWeGcKNTzHd2iV2LGcUJZsBi23g1lpBZFjJAh8c2ggPqw/ZoZi61Pfrqw8tctKE waBBjVFYeV7jmA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:15:52 2025 by rpki-client