This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft File: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft (raw, json) Hash identifier: 7BagnotgtRoG+xE04ooQdTzkfp3G+9rMMBKc5DEXquE= Subject key identifier: DB:8E:7A:8B:E4:B1:74:72:1E:74:36:CC:A8:36:EE:5C:AB:0D:34:10 Authority key identifier: 4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07 Certificate issuer: /CN=4ca509b35011ed71663952ba0e0c3c38457f9d07 Certificate serial: 019AF1D23AA0EAE3075FE9DFECE99F4CB3F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 04:01:17 +0000 Manifest this update: Sat 06 Dec 2025 04:01:17 +0000 Manifest next update: Sun 07 Dec 2025 04:01:17 +0000 Files and hashes: 1: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl (hash: n3IzX60CBPtDWdEvhtgPAkzvSpoq0o8ErnQRiBHds6U=) 2: ilNe5KDmG0o6LZVjHMLtOGd-0DQ.roa (hash: JkEgQ36ayeHC4m0mo3MRV7E4gABrbKLeaaxVJdDM2eE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3a:a0:ea:e3:07:5f:e9:df:ec:e9:9f:4c:b3:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca509b35011ed71663952ba0e0c3c38457f9d07 Validity Not Before: Dec 6 04:01:17 2025 GMT Not After : Dec 7 04:01:17 2025 GMT Subject: CN=db8e7a8be4b174721e7436cca836ee5cab0d3410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:90:8d:a1:b3:44:15:4e:3c:df:0b:7f:7c:78: d4:99:61:a9:c9:22:0e:c9:03:fc:32:06:f3:ed:e9: 25:bb:ec:10:47:6d:0e:c9:86:11:a9:3a:28:3c:48: 5e:20:03:5d:b0:1c:a5:c6:ab:9d:12:44:1c:92:2f: c6:3f:63:f8:69:16:fc:55:a9:a6:69:0f:9b:47:ee: 04:b1:66:1f:f8:e2:46:d4:cb:3a:6d:f6:44:ac:4b: e1:70:eb:16:8b:19:84:57:b8:4a:c5:72:6b:7d:57: b8:be:df:3a:a0:4f:8a:f2:48:23:f1:17:3a:34:8d: 82:72:d2:ad:4d:9a:68:37:33:ef:80:50:9f:51:8a: db:38:cb:58:26:72:dd:53:cb:83:58:83:53:0d:cc: 33:6b:97:e9:c9:a2:d2:09:86:ff:15:53:1f:4a:08: 0e:7c:57:b6:10:db:30:1c:9c:66:5e:5e:7c:8d:c3: 3d:60:18:94:68:b8:cf:d8:9e:e6:34:c4:1f:cc:f8: 1c:cf:18:34:88:03:73:a0:73:74:09:12:38:a2:c1: 80:d5:f7:4d:72:f7:ca:9b:75:7e:f2:d2:c4:f6:53: f8:6e:05:7c:7a:aa:74:cf:e8:62:10:c9:79:9f:56: df:19:18:f0:5e:7a:3a:b2:0c:bf:1c:23:7d:dd:ba: 30:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8E:7A:8B:E4:B1:74:72:1E:74:36:CC:A8:36:EE:5C:AB:0D:34:10 X509v3 Authority Key Identifier: keyid:4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d4:f4:92:e0:fd:22:5f:3c:21:d8:f2:16:9a:84:73:97:49: 91:7d:ac:97:02:5b:0a:06:31:15:ed:10:c5:b7:0f:92:86:e3: f6:d6:9e:8f:91:a9:fd:37:e4:e5:b9:68:cc:ba:e3:c2:a4:ec: 73:5f:36:89:06:c0:34:e0:dc:a5:22:65:67:95:96:4f:2e:2c: 0d:66:2b:b5:50:51:48:c1:54:22:ed:46:77:b1:44:ba:40:b5: 78:bb:c1:43:6c:69:b9:c5:46:b0:14:c4:29:0e:97:67:f2:3f: 05:5f:6f:2a:73:cf:0b:28:6b:f8:bc:29:32:a5:76:9b:f4:0d: 1c:3a:f1:0a:9b:f8:15:79:6d:5e:67:46:f5:ac:20:86:5a:eb: 6e:e0:dc:1b:e9:1a:73:20:a4:8c:b5:01:cb:11:42:77:13:86: 10:6b:e9:49:42:5c:97:be:17:7c:eb:53:1c:63:4e:15:76:3c: 92:12:ce:52:12:2f:fa:43:9c:ad:34:3c:d1:59:d8:ff:24:4a: 5f:32:37:10:66:b6:66:c9:8a:36:bc:aa:91:95:24:1a:49:b2: f2:74:22:2f:4a:51:3a:0e:78:f9:28:2d:d2:f4:e6:11:31:8b: 08:80:d9:5d:aa:86:cb:ee:cb:4f:5d:f3:ec:0e:d1:8b:c1:fb: 93:24:25:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jqg6uMHX+nf7OmfTLP4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTUwOWIzNTAxMWVkNzE2NjM5NTJiYTBlMGMzYzM4NDU3 ZjlkMDcwHhcNMjUxMjA2MDQwMTE3WhcNMjUxMjA3MDQwMTE3WjAzMTEwLwYDVQQD EyhkYjhlN2E4YmU0YjE3NDcyMWU3NDM2Y2NhODM2ZWU1Y2FiMGQzNDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5CNobNEFU483wt/fHjUmWGpySIO yQP8Mgbz7eklu+wQR20OyYYRqTooPEheIANdsBylxqudEkQcki/GP2P4aRb8Vamm aQ+bR+4EsWYf+OJG1Ms6bfZErEvhcOsWixmEV7hKxXJrfVe4vt86oE+K8kgj8Rc6 NI2CctKtTZpoNzPvgFCfUYrbOMtYJnLdU8uDWINTDcwza5fpyaLSCYb/FVMfSggO fFe2ENswHJxmXl58jcM9YBiUaLjP2J7mNMQfzPgczxg0iANzoHN0CRI4osGA1fdN cvfKm3V+8tLE9lP4bgV8eqp0z+hiEMl5n1bfGRjwXno6sgy/HCN93bowfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNuOeovksXRyHnQ2zKg27lyrDTQQMB8GA1UdIwQY MBaAFEylCbNQEe1xZjlSug4MPDhFf50HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtVSnMxQVI3WEZtT1ZLNkRndzhPRVZfblFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wYTEzMWUtMzdjNi00NWNiLTk2ODIt MGIwYzEyYjIyYmY5LzEvVEtVSnMxQVI3WEZtT1ZLNkRndzhPRVZfblFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8wYTEzMWUtMzdjNi00NWNiLTk2ODItMGIwYzEyYjIyYmY5 LzEvVEtVSnMxQVI3WEZtT1ZLNkRndzhPRVZfblFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9T0kuD9 Il88IdjyFpqEc5dJkX2slwJbCgYxFe0QxbcPkobj9taej5Gp/Tfk5blozLrjwqTs c182iQbANODcpSJlZ5WWTy4sDWYrtVBRSMFUIu1Gd7FEukC1eLvBQ2xpucVGsBTE KQ6XZ/I/BV9vKnPPCyhr+LwpMqV2m/QNHDrxCpv4FXltXmdG9awghlrrbuDcG+ka cyCkjLUByxFCdxOGEGvpSUJcl74XfOtTHGNOFXY8khLOUhIv+kOcrTQ80VnY/yRK XzI3EGa2ZsmKNryqkZUkGkmy8nQiL0pROg54+Sgt0vTmETGLCIDZXaqGy+7LT13z 7A7Ri8H7kyQlaA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:11 2025 by rpki-client