This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft File: Tc_QAaZn4WRatAxbvtifWScAT4U.mft (raw, json) Hash identifier: eDNQROq2qNr3O9ArAFXtGoZwzsCPQeSMJ6uzRtUsOSk= Subject key identifier: 5F:C0:27:46:C0:6B:C9:E5:75:73:39:73:D2:64:FC:DC:D2:9A:84:12 Authority key identifier: 4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85 Certificate issuer: /CN=4dcfd001a667e1645ab40c5bbed89f5927004f85 Certificate serial: 019AF389982DA3366C20FE227E0A8559D227 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft Manifest number: 0B8D Signing time: Sat 06 Dec 2025 12:01:11 +0000 Manifest this update: Sat 06 Dec 2025 12:01:11 +0000 Manifest next update: Sun 07 Dec 2025 12:01:11 +0000 Files and hashes: 1: Tc_QAaZn4WRatAxbvtifWScAT4U.crl (hash: hee+NyhHW84s1dlkgQu21ONKdlUEngPkZ59V6cw25tY=) 2: jdMFheDlAIgKvi6YF6C6Rm8zqwg.roa (hash: 0uopvNrGmCf9iLiAY1t8oTN34NZD3FhGP5c/aZny+2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:98:2d:a3:36:6c:20:fe:22:7e:0a:85:59:d2:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dcfd001a667e1645ab40c5bbed89f5927004f85 Validity Not Before: Dec 6 12:01:11 2025 GMT Not After : Dec 7 12:01:11 2025 GMT Subject: CN=5fc02746c06bc9e575733973d264fcdcd29a8412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cd:38:dc:bb:34:7c:eb:6a:45:64:f3:3e:d3: f8:74:b2:2b:f9:a1:e3:bc:c0:9a:83:de:33:ba:7a: 32:8e:08:39:ac:b1:89:25:6b:65:fd:dd:d8:7a:92: a4:16:33:2f:69:a6:c0:e6:7e:15:72:77:63:b7:98: b5:c5:c2:06:33:91:d1:35:94:2f:a9:97:9c:a2:85: cf:30:2e:c0:91:bd:b9:c0:b4:69:fd:77:51:2e:4b: b5:31:85:a6:a7:9d:76:1c:5f:39:a6:59:6a:8c:bd: b3:11:12:4e:9d:7f:00:28:58:8c:54:06:2f:9d:f9: 08:25:76:36:9e:4e:22:07:e4:7c:6d:4d:40:70:48: b4:4d:49:f0:79:8a:64:ef:5e:6f:4d:bd:05:81:a3: 9c:36:2c:a8:a5:7f:6d:bd:1c:b2:7f:26:12:88:e2: 39:31:93:7a:67:17:a8:c4:53:bd:7b:c4:2f:f3:ef: 1f:55:e1:fa:ec:41:ae:cc:df:74:77:6e:1e:ae:28: 07:e5:e6:fc:48:7c:3a:0a:95:ab:d6:b1:f6:b9:1b: c6:0a:08:cc:7d:cb:3d:69:2e:f4:32:5d:84:7d:45: 44:8c:47:9c:32:fe:51:e9:94:f2:ed:45:55:13:f0: 15:26:a7:7d:74:8a:c9:50:55:4c:1b:e8:f2:16:1b: 36:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C0:27:46:C0:6B:C9:E5:75:73:39:73:D2:64:FC:DC:D2:9A:84:12 X509v3 Authority Key Identifier: keyid:4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:68:75:6b:6d:74:42:91:62:db:ee:7d:fb:08:11:9c:c9:1b: 55:56:22:3c:8d:75:d2:2d:d9:10:fe:9a:33:97:b5:23:5a:4d: f8:0e:7d:be:25:17:87:4a:09:b6:24:12:d3:de:fb:b7:b8:7c: 7c:8b:1e:61:e6:da:29:1b:a4:b5:f7:65:ed:05:54:1c:73:2e: 0b:cf:10:cf:32:08:55:8a:70:ee:8d:ab:13:67:bc:3c:ad:96: 3c:3a:0b:c7:77:08:93:2a:aa:78:85:23:81:c4:bc:87:9e:74: 73:35:e7:ef:8b:e4:e6:f0:ce:c7:f6:67:6d:53:fb:6e:36:58: 73:83:14:78:f6:0c:5d:c6:5f:df:96:a1:ba:cf:b1:28:75:69: cc:73:78:02:b6:86:f2:5e:3a:2d:b9:0e:00:52:d9:75:63:6c: 08:16:36:f8:e2:62:f9:b3:28:03:f2:04:08:e1:bf:dd:85:79: db:b9:45:59:76:b6:d4:46:8d:58:3d:1c:da:29:9f:0b:97:d2: 72:e4:96:8d:8d:4b:77:a6:1c:ab:f5:60:95:5b:43:25:89:0c: 52:79:e3:d9:b6:5f:e2:d6:d8:b4:d4:07:06:a0:b2:1f:38:4f: e5:ec:f8:b8:41:65:0c:97:06:e6:f6:bd:16:47:55:75:83:67: 11:aa:61:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZgtozZsIP4ifgqFWdInMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkY2ZkMDAxYTY2N2UxNjQ1YWI0MGM1YmJlZDg5ZjU5Mjcw MDRmODUwHhcNMjUxMjA2MTIwMTExWhcNMjUxMjA3MTIwMTExWjAzMTEwLwYDVQQD Eyg1ZmMwMjc0NmMwNmJjOWU1NzU3MzM5NzNkMjY0ZmNkY2QyOWE4NDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M043Ls0fOtqRWTzPtP4dLIr+aHj vMCag94zunoyjgg5rLGJJWtl/d3YepKkFjMvaabA5n4Vcndjt5i1xcIGM5HRNZQv qZecooXPMC7Akb25wLRp/XdRLku1MYWmp512HF85pllqjL2zERJOnX8AKFiMVAYv nfkIJXY2nk4iB+R8bU1AcEi0TUnweYpk715vTb0FgaOcNiyopX9tvRyyfyYSiOI5 MZN6ZxeoxFO9e8Qv8+8fVeH67EGuzN90d24erigH5eb8SHw6CpWr1rH2uRvGCgjM fcs9aS70Ml2EfUVEjEecMv5R6ZTy7UVVE/AVJqd9dIrJUFVMG+jyFhs2MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/AJ0bAa8nldXM5c9Jk/NzSmoQSMB8GA1UdIwQY MBaAFE3P0AGmZ+FkWrQMW77Yn1knAE+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81YmE4MWUtZTI3NC00YmEzLTk1NGQt YmRmOTRhM2ZiMzJkLzEvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC81YmE4MWUtZTI3NC00YmEzLTk1NGQtYmRmOTRhM2ZiMzJk LzEvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmh1a210 QpFi2+59+wgRnMkbVVYiPI110i3ZEP6aM5e1I1pN+A59viUXh0oJtiQS0977t7h8 fIseYebaKRuktfdl7QVUHHMuC88QzzIIVYpw7o2rE2e8PK2WPDoLx3cIkyqqeIUj gcS8h550czXn74vk5vDOx/ZnbVP7bjZYc4MUePYMXcZf35ahus+xKHVpzHN4AraG 8l46LbkOAFLZdWNsCBY2+OJi+bMoA/IECOG/3YV527lFWXa21EaNWD0c2imfC5fS cuSWjY1Ld6Ycq/VglVtDJYkMUnnj2bZf4tbYtNQHBqCyHzhP5ez4uEFlDJcG5va9 FkdVdYNnEaphVw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:07 2025 by rpki-client