This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft File: TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft (raw, json) Hash identifier: tWAKh0GL1LosF5AVg1Vf6iBDo5+mKs2e+UwC+kkg2kA= Subject key identifier: 0B:F9:26:56:DA:3D:55:3F:E1:F1:19:D6:2E:47:EC:12:5A:8A:D2:87 Authority key identifier: 4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11 Certificate issuer: /CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011 Certificate serial: 019AF1D214195A1DB6419636D0F0A1C6F247 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft Manifest number: 0D03 Signing time: Sat 06 Dec 2025 04:01:08 +0000 Manifest this update: Sat 06 Dec 2025 04:01:08 +0000 Manifest next update: Sun 07 Dec 2025 04:01:08 +0000 Files and hashes: 1: 8bYh9KTQNyhUoZK5Xa3Zu-_BqQk.roa (hash: Ckdj62IcP39fMv9cL87VgjiYlT1GoMjuC5C5dI+N2jA=) 2: MR-TaWWn4lHnPBNNw4lTIvLNpqc.roa (hash: Y9aYFZU2HCNzQnAyTtx7dtrBQZRdTDSp9t076Yfi8ac=) 3: TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl (hash: VRbZdsZOra+igV3IpH8P9XE0ZGmCt82T8OyYHPpV7Ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:14:19:5a:1d:b6:41:96:36:d0:f0:a1:c6:f2:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011 Validity Not Before: Dec 6 04:01:08 2025 GMT Not After : Dec 7 04:01:08 2025 GMT Subject: CN=0bf92656da3d553fe1f119d62e47ec125a8ad287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e1:74:ae:8d:4f:1a:79:10:e1:7c:fc:2c:9d: ff:95:a1:50:c3:39:cc:57:b8:ba:b5:d3:c6:22:02: 75:c0:91:19:e3:d2:95:27:17:9b:2a:0b:f4:e5:ea: 9d:b0:43:33:9c:23:5a:f6:d8:5d:03:2c:dd:0d:b3: 5e:99:1a:57:83:83:85:89:43:08:ce:e2:ac:47:98: 93:39:95:c5:2e:30:d6:f1:1f:4f:8b:93:c8:b2:bf: e4:45:ec:41:6d:72:b2:bb:9a:c7:2f:9e:90:8c:b6: 14:2d:fd:b5:0a:d9:ef:75:7d:61:b2:03:ee:ab:51: 9a:5f:be:2c:8c:8e:86:91:5a:b1:c2:5f:c7:97:f8: a0:4b:16:46:05:e6:b5:52:ca:9d:4a:dd:65:73:d9: 58:6a:90:8d:26:5c:fe:11:fa:02:ec:fc:d6:54:51: a1:44:35:b4:cf:e8:09:be:54:9d:9e:54:56:be:f9: 52:c4:69:77:e2:e0:c2:fa:30:67:37:7b:57:ba:6b: e5:f5:2c:86:ed:d8:49:08:1b:b3:7e:ff:11:e9:5a: 5a:d7:c9:d9:3d:e6:8d:95:34:5c:7e:8e:21:a1:d5: 29:b9:92:eb:c3:1b:b5:2f:88:7e:27:72:1b:a7:02: 59:82:56:f4:4b:b2:86:40:0a:36:00:5d:f6:1f:eb: fc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F9:26:56:DA:3D:55:3F:E1:F1:19:D6:2E:47:EC:12:5A:8A:D2:87 X509v3 Authority Key Identifier: keyid:4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:87:25:49:f7:48:5c:56:d9:2f:fa:ed:51:24:6d:1d:cb:23: 7b:94:52:44:d6:2d:2a:6a:b9:99:8e:70:54:3d:bd:bb:d7:25: 32:fb:b3:81:81:50:5b:dc:9f:7a:79:68:59:31:5c:95:13:17: ae:a4:7c:ac:a1:d6:be:f9:0a:6f:60:9c:51:9f:f0:de:5a:b7: ff:f0:a0:8e:b3:b9:47:3c:8d:9e:b8:7c:f0:fc:27:ae:08:0b: ce:77:39:7c:25:b0:06:fe:60:18:1b:a1:93:f8:72:74:93:8c: e9:f9:df:98:23:8b:32:c0:38:3b:54:2c:4d:8a:c0:64:dc:d7: 0f:d4:c7:ae:e1:06:02:8b:f3:bc:83:31:cd:c0:1e:4f:0e:7e: 8f:bc:1d:6d:cb:55:9d:02:2b:50:1b:e4:39:4f:eb:03:5e:e8: eb:20:56:fc:54:d2:e5:de:18:03:96:17:5e:4e:65:94:7d:32: d8:18:1d:23:8e:2a:82:0f:32:12:f1:51:31:33:7a:93:35:fc: 46:21:a7:68:0e:03:66:ad:4b:7a:78:ed:f3:64:b8:0d:76:34: a0:34:59:63:ad:51:94:4e:88:d4:30:bc:c1:78:88:b6:49:b1: 12:5c:1d:50:5c:a5:f5:22:1b:22:b0:0c:9b:e3:25:ca:f1:06: 00:07:fa:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hQZWh22QZY20PChxvJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZjA5NzA0ODRlYjI2YmM1OWZkOGZhOGQ1YmY3YzNjNzIx MmQwMTEwHhcNMjUxMjA2MDQwMTA4WhcNMjUxMjA3MDQwMTA4WjAzMTEwLwYDVQQD EygwYmY5MjY1NmRhM2Q1NTNmZTFmMTE5ZDYyZTQ3ZWMxMjVhOGFkMjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OF0ro1PGnkQ4Xz8LJ3/laFQwznM V7i6tdPGIgJ1wJEZ49KVJxebKgv05eqdsEMznCNa9thdAyzdDbNemRpXg4OFiUMI zuKsR5iTOZXFLjDW8R9Pi5PIsr/kRexBbXKyu5rHL56QjLYULf21CtnvdX1hsgPu q1GaX74sjI6GkVqxwl/Hl/igSxZGBea1UsqdSt1lc9lYapCNJlz+EfoC7PzWVFGh RDW0z+gJvlSdnlRWvvlSxGl34uDC+jBnN3tXumvl9SyG7dhJCBuzfv8R6Vpa18nZ PeaNlTRcfo4hodUpuZLrwxu1L4h+J3IbpwJZglb0S7KGQAo2AF32H+v80QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAv5JlbaPVU/4fEZ1i5H7BJaitKHMB8GA1UdIwQY MBaAFE3wlwSE6ya8Wf2PqNW/fDxyEtARMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84ZTExOTgtZTUwZi00MTZmLTlkNmIt MWU5YmZmNWU0MDIxLzEvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC84ZTExOTgtZTUwZi00MTZmLTlkNmItMWU5YmZmNWU0MDIx LzEvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYclSfdI XFbZL/rtUSRtHcsje5RSRNYtKmq5mY5wVD29u9clMvuzgYFQW9yfenloWTFclRMX rqR8rKHWvvkKb2CcUZ/w3lq3//CgjrO5RzyNnrh88PwnrggLznc5fCWwBv5gGBuh k/hydJOM6fnfmCOLMsA4O1QsTYrAZNzXD9THruEGAovzvIMxzcAeTw5+j7wdbctV nQIrUBvkOU/rA17o6yBW/FTS5d4YA5YXXk5llH0y2BgdI44qgg8yEvFRMTN6kzX8 RiGnaA4DZq1Lenjt82S4DXY0oDRZY61RlE6I1DC8wXiItkmxElwdUFyl9SIbIrAM m+MlyvEGAAf6dw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:36 2025 by rpki-client