This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft File: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft (raw, json) Hash identifier: qRsbOEDqMhUi6dvLygtxH0o5yse5J2pbdcfdYEeIT3A= Subject key identifier: F5:3F:B0:AB:4C:22:14:7B:89:79:E0:FA:70:EA:FF:52:FB:38:78:5D Authority key identifier: 4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09 Certificate issuer: /CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409 Certificate serial: 019AF1648894BD9C9B81A14995DC779A7C40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft Manifest number: 173C Signing time: Sat 06 Dec 2025 02:01:28 +0000 Manifest this update: Sat 06 Dec 2025 02:01:28 +0000 Manifest next update: Sun 07 Dec 2025 02:01:28 +0000 Files and hashes: 1: PHU8bveJ4V86SqIQTMnWW43DqBE.roa (hash: 3OhBnf8f8HGM5ArwPPNt9UU72cQZdAdKTbSA4Z11k2Y=) 2: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl (hash: r7PY2JechKM5Rf4ImLicFhoIH56PjpJ6jbgt1bUIqFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:88:94:bd:9c:9b:81:a1:49:95:dc:77:9a:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409 Validity Not Before: Dec 6 02:01:28 2025 GMT Not After : Dec 7 02:01:28 2025 GMT Subject: CN=f53fb0ab4c22147b8979e0fa70eaff52fb38785d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a2:fe:cf:62:93:56:f4:b3:08:06:56:b7:73: d2:d4:db:88:7d:fc:f1:09:0d:ae:ee:6b:cc:f4:a9: 94:d9:d7:47:5f:62:17:97:e1:df:c0:c1:cf:4a:82: 59:6a:dc:62:cc:ec:4a:e7:38:31:02:28:12:c7:93: fa:4a:f5:c6:33:e4:f6:e4:a3:2d:c5:78:35:57:f9: 3e:6c:c1:66:6d:58:e1:1b:8a:3a:3f:2f:57:65:03: 5b:d6:48:9e:19:b5:0e:6e:df:7a:7f:1f:9a:e4:76: fd:60:9a:c1:38:bd:c9:a0:8c:e5:b5:91:e8:80:57: c4:8c:e3:ae:8b:e7:f5:c6:e1:5e:34:dc:ec:9e:e0: 63:94:46:6e:11:6b:88:eb:3f:54:61:0d:68:8e:72: 26:fa:9b:8d:3b:09:5d:8e:d7:54:71:bf:28:ad:f9: 9f:5b:69:76:70:df:fa:40:c1:e0:15:7e:b4:b9:f3: 96:bd:8b:d7:4f:94:72:61:f0:cc:49:bd:5c:c0:a5: 05:26:97:b8:61:80:ed:f7:f0:25:4d:3a:3e:fb:22: 58:ab:bd:e1:c2:41:5b:66:97:8d:62:0b:8d:35:8c: 4f:97:11:58:7b:2e:ed:56:2a:74:47:f3:9e:f4:0d: 64:65:15:2d:5d:74:96:02:6f:0b:5e:ef:01:9b:d2: 62:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3F:B0:AB:4C:22:14:7B:89:79:E0:FA:70:EA:FF:52:FB:38:78:5D X509v3 Authority Key Identifier: keyid:4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:60:04:80:47:a3:d1:47:8b:b5:1b:99:63:d7:0f:ba:2d:4a: d1:2f:eb:9e:fb:59:5d:a6:6d:82:89:77:67:9d:4a:1f:07:78: ae:cd:08:2b:22:b4:8c:43:6c:97:9a:5b:71:0e:1e:6b:3a:88: 29:a1:4d:30:9f:88:59:27:3a:32:71:4d:5c:c4:15:fb:1a:6f: 09:e5:2e:5c:72:4e:0e:ad:e0:37:90:6c:ad:28:76:5a:a9:41: e0:a5:6a:9a:01:4e:a5:cf:cd:b4:7a:58:80:a3:4a:a9:d7:27: 47:c2:7a:3a:86:2a:0a:37:b4:d3:80:e8:1f:0a:e2:14:b3:1e: c1:2b:96:4f:54:02:75:e7:d8:ea:f5:5e:79:a5:d6:df:55:7d: d6:1c:9e:a3:ab:54:1e:b3:b1:0e:cf:bc:71:30:4c:93:6e:cf: 84:5c:48:75:17:73:70:5d:ea:f1:bb:db:8d:e4:6e:34:46:2a: d1:56:f8:da:be:7b:88:78:24:85:1b:80:9a:3b:f6:d0:5e:cf: d2:f8:ef:aa:aa:c4:f5:05:e7:5d:1c:a3:75:08:78:fc:41:ef: 2d:8b:8b:d7:21:d0:9b:e2:2f:dc:79:ac:dc:ee:0f:32:55:43: a6:2a:ef:84:f4:49:c0:42:1a:19:42:71:08:9c:7c:ab:4d:d2: a1:29:62:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIiUvZybgaFJldx3mnxAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjOWQ2YzU1YmUxYmU4YTg0YWQyZGZkNWE3ZmZhNTg0OGY1 NGQ0MDkwHhcNMjUxMjA2MDIwMTI4WhcNMjUxMjA3MDIwMTI4WjAzMTEwLwYDVQQD EyhmNTNmYjBhYjRjMjIxNDdiODk3OWUwZmE3MGVhZmY1MmZiMzg3ODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6L+z2KTVvSzCAZWt3PS1NuIffzx CQ2u7mvM9KmU2ddHX2IXl+HfwMHPSoJZatxizOxK5zgxAigSx5P6SvXGM+T25KMt xXg1V/k+bMFmbVjhG4o6Py9XZQNb1kieGbUObt96fx+a5Hb9YJrBOL3JoIzltZHo gFfEjOOui+f1xuFeNNzsnuBjlEZuEWuI6z9UYQ1ojnIm+puNOwldjtdUcb8orfmf W2l2cN/6QMHgFX60ufOWvYvXT5RyYfDMSb1cwKUFJpe4YYDt9/AlTTo++yJYq73h wkFbZpeNYguNNYxPlxFYey7tVip0R/Oe9A1kZRUtXXSWAm8LXu8Bm9JiRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPU/sKtMIhR7iXng+nDq/1L7OHhdMB8GA1UdIwQY MBaAFEydbFW+G+ioStLf1af/pYSPVNQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEoxc1ZiNGI2S2hLMHRfVnBfLWxoSTlVMUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zZTc3NWQtYjExNy00MGRkLWFlNmEt MmQ1MDJlOTU2YzA0LzEvVEoxc1ZiNGI2S2hLMHRfVnBfLWxoSTlVMUFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zZTc3NWQtYjExNy00MGRkLWFlNmEtMmQ1MDJlOTU2YzA0 LzEvVEoxc1ZiNGI2S2hLMHRfVnBfLWxoSTlVMUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGAEgEej 0UeLtRuZY9cPui1K0S/rnvtZXaZtgol3Z51KHwd4rs0IKyK0jENsl5pbcQ4eazqI KaFNMJ+IWSc6MnFNXMQV+xpvCeUuXHJODq3gN5BsrSh2WqlB4KVqmgFOpc/NtHpY gKNKqdcnR8J6OoYqCje004DoHwriFLMewSuWT1QCdefY6vVeeaXW31V91hyeo6tU HrOxDs+8cTBMk27PhFxIdRdzcF3q8bvbjeRuNEYq0Vb42r57iHgkhRuAmjv20F7P 0vjvqqrE9QXnXRyjdQh4/EHvLYuL1yHQm+Iv3Hms3O4PMlVDpirvhPRJwEIaGUJx CJx8q03SoSliog== -----END CERTIFICATE-----Generated at Sat Dec 6 10:21:47 2025 by rpki-client