This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft File: TBdAzvl0ncKw9fiM3xA02oHWBtw.mft (raw, json) Hash identifier: 1PU2cuAuPFUxhhNF+8QTanTyMVwXVfOLajS8eDa/Y6c= Subject key identifier: AE:9E:D5:FC:BF:2D:A2:87:7A:F9:8A:F8:45:91:38:6B:B7:A3:FE:82 Authority key identifier: 4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC Certificate issuer: /CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc Certificate serial: 019AF23F91F1787B1FE01D8FB325E4F09C13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft Manifest number: 10E0 Signing time: Sat 06 Dec 2025 06:00:43 +0000 Manifest this update: Sat 06 Dec 2025 06:00:43 +0000 Manifest next update: Sun 07 Dec 2025 06:00:43 +0000 Files and hashes: 1: 9UfG7ZfqsnxXdNjOVBB4EufGuiU.roa (hash: nBGGqWZhxqHLJh+Oq/1SCIlZ0ENh9e+rLU6y/LQvQNA=) 2: TBdAzvl0ncKw9fiM3xA02oHWBtw.crl (hash: RPFp/9zoSoCC6sN/tNp5kdxD5tD42G27ldMrVC4pXII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:91:f1:78:7b:1f:e0:1d:8f:b3:25:e4:f0:9c:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc Validity Not Before: Dec 6 06:00:43 2025 GMT Not After : Dec 7 06:00:43 2025 GMT Subject: CN=ae9ed5fcbf2da2877af98af84591386bb7a3fe82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:86:44:7b:5a:cd:a7:b4:39:9f:9d:57:ec:c2: 9c:00:d4:ea:fd:68:7c:16:99:5d:05:b1:0a:47:88: 45:45:d7:dd:1e:11:98:a4:9f:59:45:26:ae:52:fd: 5f:cf:b2:a1:c0:3d:ba:bd:d3:a7:aa:9c:01:7b:4d: 8d:fc:1e:e3:40:3b:fe:a7:a6:5b:c3:68:2d:1f:96: 74:39:3b:1f:62:7d:ae:63:44:84:8a:a4:4a:32:f8: 96:aa:1d:05:12:66:6b:da:29:be:5c:49:ab:a9:3a: 73:0f:47:29:22:68:a1:84:79:4d:7c:c5:d8:07:09: d9:71:eb:69:89:f0:4e:3d:05:45:d5:91:80:46:3a: 82:76:a9:c5:7d:91:89:44:95:49:ef:a2:07:46:bb: 29:a5:fc:60:a0:84:37:64:08:04:a8:16:eb:15:27: a4:51:e7:15:b7:c6:44:86:46:f7:cd:a4:96:37:a0: c3:b2:4f:07:c8:92:2d:8f:cb:31:55:13:a9:c3:b1: b1:c9:19:b2:5d:2f:d1:84:09:80:71:02:bf:a3:3f: 13:81:58:c2:33:f5:db:58:7f:92:dd:f4:82:ca:b4: 27:13:24:5c:d4:b8:ad:34:9f:20:ef:90:ea:f0:78: 41:69:fb:02:df:19:d7:42:3c:27:76:6c:ec:30:dc: f4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9E:D5:FC:BF:2D:A2:87:7A:F9:8A:F8:45:91:38:6B:B7:A3:FE:82 X509v3 Authority Key Identifier: keyid:4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c6:0b:92:de:90:7a:09:6b:a0:76:e3:4c:06:5c:c0:cd:0b: d5:36:50:56:c4:76:d1:ee:b8:f0:21:02:4f:e3:bb:c4:d8:aa: a1:d6:8b:e4:74:43:06:cf:00:ac:0a:85:e6:99:a3:b7:35:23: 9e:63:dd:fb:7a:d6:cb:d5:c2:ba:bb:1c:7f:21:44:db:bc:9f: b3:76:23:d4:00:db:25:47:44:87:11:66:02:b4:1e:51:da:75: c6:67:52:27:4d:77:8e:36:a0:d0:3c:77:8d:cd:fc:39:65:18: 41:03:81:9b:3a:69:a9:ed:3f:f9:09:57:df:8d:8f:22:90:33: 4f:8b:63:e5:e0:ec:ba:58:5b:eb:92:50:15:b9:b8:5e:88:d5: 5c:4b:08:91:71:a5:e3:8d:ff:cb:77:6e:db:19:0d:55:03:3b: cd:bd:fc:bc:ff:16:4e:5b:3b:11:6e:7e:6d:d2:40:5a:09:bd: 04:ac:99:77:d8:b4:13:99:1b:62:8a:be:de:33:a8:99:a8:81: d7:9d:47:8c:ea:9b:0e:a5:5a:88:6b:d4:cb:7e:49:e5:dc:4f: b8:9a:13:9f:2e:81:f4:5d:f0:5e:d7:ed:dc:d6:6c:75:1b:0a: a5:2b:54:fd:0a:73:7a:dc:c6:df:e9:5c:0b:74:cb:3e:3d:c6: cd:8c:8f:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5HxeHsf4B2PsyXk8JwTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMTc0MGNlZjk3NDlkYzJiMGY1Zjg4Y2RmMTAzNGRhODFk NjA2ZGMwHhcNMjUxMjA2MDYwMDQzWhcNMjUxMjA3MDYwMDQzWjAzMTEwLwYDVQQD EyhhZTllZDVmY2JmMmRhMjg3N2FmOThhZjg0NTkxMzg2YmI3YTNmZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4ZEe1rNp7Q5n51X7MKcANTq/Wh8 FpldBbEKR4hFRdfdHhGYpJ9ZRSauUv1fz7KhwD26vdOnqpwBe02N/B7jQDv+p6Zb w2gtH5Z0OTsfYn2uY0SEiqRKMviWqh0FEmZr2im+XEmrqTpzD0cpImihhHlNfMXY BwnZcetpifBOPQVF1ZGARjqCdqnFfZGJRJVJ76IHRrsppfxgoIQ3ZAgEqBbrFSek UecVt8ZEhkb3zaSWN6DDsk8HyJItj8sxVROpw7GxyRmyXS/RhAmAcQK/oz8TgVjC M/XbWH+S3fSCyrQnEyRc1LitNJ8g75Dq8HhBafsC3xnXQjwndmzsMNz0bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6e1fy/LaKHevmK+EWROGu3o/6CMB8GA1UdIwQY MBaAFEwXQM75dJ3CsPX4jN8QNNqB1gbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEJkQXp2bDBuY0t3OWZpTTN4QTAyb0hXQnR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xYTE1ZmEtYWNlNi00NjRkLTg5Njkt ZTQ5MjgxODAwMzNjLzEvVEJkQXp2bDBuY0t3OWZpTTN4QTAyb0hXQnR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xYTE1ZmEtYWNlNi00NjRkLTg5NjktZTQ5MjgxODAwMzNj LzEvVEJkQXp2bDBuY0t3OWZpTTN4QTAyb0hXQnR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcYLkt6Q eglroHbjTAZcwM0L1TZQVsR20e648CECT+O7xNiqodaL5HRDBs8ArAqF5pmjtzUj nmPd+3rWy9XCurscfyFE27yfs3Yj1ADbJUdEhxFmArQeUdp1xmdSJ013jjag0Dx3 jc38OWUYQQOBmzppqe0/+QlX342PIpAzT4tj5eDsulhb65JQFbm4XojVXEsIkXGl 443/y3du2xkNVQM7zb38vP8WTls7EW5+bdJAWgm9BKyZd9i0E5kbYoq+3jOomaiB 151HjOqbDqVaiGvUy35J5dxPuJoTny6B9F3wXtft3NZsdRsKpStU/QpzetzG3+lc C3TLPj3GzYyPpA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:25:58 2025 by rpki-client