This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft File: TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft (raw, json) Hash identifier: MLw3qXGs9XwZLJTGvHe9+GC/CyZiFZwoTddBlPAdhM8= Subject key identifier: 8B:D3:95:5C:A5:B0:29:DB:A5:72:A8:C3:56:91:24:1F:98:D7:84:37 Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e Certificate serial: 019AF509EC5A0353642266E8404A4832C024 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 19:00:59 +0000 Manifest this update: Sat 06 Dec 2025 19:00:59 +0000 Manifest next update: Sun 07 Dec 2025 19:00:59 +0000 Files and hashes: 1: 5XqYz3igdHBUJOarhV6UCk20p4g.roa (hash: OiTQYPv4ItBCPhGaoL4ocDwYxXkvxpj8Eo+XMn3YAwI=) 2: BWzUAYzWxehGB0sc7Hoq3s64-5A.roa (hash: Y2Cmk2o0Bi2v58k/tp8mbuKNOVbGQJJqiMnQXIqfVfA=) 3: TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl (hash: 6LPncDegltItUynv4lwZ1sBTqunh7ed2kGWy+99VnuA=) 4: uJBF8l1YNTX1rQwpWIP4iAOZYes.roa (hash: W5zW790ApNcbjg521YyvqbQ8pFLrwOkcD0CU1yoVHdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:ec:5a:03:53:64:22:66:e8:40:4a:48:32:c0:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e Validity Not Before: Dec 6 19:00:59 2025 GMT Not After : Dec 7 19:00:59 2025 GMT Subject: CN=8bd3955ca5b029dba572a8c35691241f98d78437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f6:fb:43:f1:c2:a5:fe:d8:db:21:12:ae:79: 6a:40:a4:1d:d2:69:ec:65:5f:83:a2:97:01:42:cf: c4:a0:88:54:8a:db:38:02:b0:de:d4:53:20:f3:16: 31:25:63:67:11:2a:61:e7:a9:5c:8e:8a:b6:e9:b8: 2f:be:7c:96:bb:11:2d:2b:b1:b7:9a:b0:ce:be:88: 7d:88:37:c2:16:8b:cb:19:62:b1:04:42:8f:d4:ac: 50:41:d1:c5:d4:7b:4d:58:0a:81:18:8b:d4:49:7f: 1e:13:57:7f:75:ad:7e:e7:eb:dd:06:8e:66:22:a2: 33:6f:22:7a:f7:ca:d8:f4:cc:db:96:fe:54:4d:c0: 0d:3b:0b:6c:ce:a7:c3:9a:0a:57:ff:9e:68:03:a9: 4f:5d:8d:94:57:6b:03:6c:00:86:6d:c9:23:4c:80: d6:f6:cd:02:5b:3a:10:95:0c:83:31:00:16:ac:da: e4:ee:ad:72:0c:d4:c4:18:75:aa:02:b1:7c:20:63: 25:10:00:d4:17:af:f7:5a:b8:33:97:53:45:5e:1a: a9:3d:f2:66:08:39:4f:9d:68:de:57:a6:5c:40:b0: f8:c4:2c:20:a5:d3:af:a7:f1:25:a2:95:b3:58:5b: 1c:e2:30:a2:55:12:f9:b0:88:2f:61:d6:a7:f3:35: 98:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D3:95:5C:A5:B0:29:DB:A5:72:A8:C3:56:91:24:1F:98:D7:84:37 X509v3 Authority Key Identifier: keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:92:d5:23:34:3e:b6:55:db:1f:62:69:bb:e0:1d:46:42:28: ef:aa:00:be:be:da:7a:b2:1d:4e:8b:55:bd:2a:28:c9:ce:6c: f2:c2:70:de:af:9d:40:0f:8c:5e:2d:2d:0a:0c:22:4e:7b:49: c4:b0:f7:fc:81:d2:0f:e7:73:42:bb:45:3b:67:20:d5:49:04: bc:2f:5c:31:1e:d1:36:82:fc:fb:0f:71:eb:6e:ad:1c:f6:79: b3:20:c1:a7:54:bc:2a:c9:40:09:4a:3c:51:cc:bb:9e:c0:5c: 53:13:77:74:25:da:da:76:8d:d9:fd:7a:2d:63:73:01:a3:ee: c8:24:39:be:14:b0:a5:93:55:84:7f:5a:de:ed:e3:e4:d0:ad: 55:a5:e3:17:22:62:f6:99:2f:26:0e:fb:0c:69:cb:22:a5:8d: ef:e8:82:fc:c8:fe:fe:51:b8:cf:a3:54:da:3d:28:a5:ba:92: ff:e7:2e:dc:18:d4:92:a7:51:63:7e:ac:af:96:b7:31:84:7a: 04:f7:8e:06:93:77:0d:1f:2f:d5:9f:02:78:21:f3:17:6f:59: 25:10:88:30:5b:4c:e3:cf:ce:a3:8b:ec:2d:d8:bf:68:ea:ab: 29:23:57:f2:4d:ea:1c:2d:5f:16:49:4d:b9:58:3f:a5:81:00: 88:8c:6d:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CexaA1NkImboQEpIMsAkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjOTg4YjkzYWI3YTI5OTlhMzI1NWVlYWU0ZTE4YWIyM2Iy ZTBmM2UwHhcNMjUxMjA2MTkwMDU5WhcNMjUxMjA3MTkwMDU5WjAzMTEwLwYDVQQD Eyg4YmQzOTU1Y2E1YjAyOWRiYTU3MmE4YzM1NjkxMjQxZjk4ZDc4NDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfb7Q/HCpf7Y2yESrnlqQKQd0mns ZV+DopcBQs/EoIhUits4ArDe1FMg8xYxJWNnESph56lcjoq26bgvvnyWuxEtK7G3 mrDOvoh9iDfCFovLGWKxBEKP1KxQQdHF1HtNWAqBGIvUSX8eE1d/da1+5+vdBo5m IqIzbyJ698rY9Mzblv5UTcANOwtszqfDmgpX/55oA6lPXY2UV2sDbACGbckjTIDW 9s0CWzoQlQyDMQAWrNrk7q1yDNTEGHWqArF8IGMlEADUF6/3Wrgzl1NFXhqpPfJm CDlPnWjeV6ZcQLD4xCwgpdOvp/ElopWzWFsc4jCiVRL5sIgvYdan8zWYBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvTlVylsCnbpXKow1aRJB+Y14Q3MB8GA1UdIwQY MBaAFEyYi5OreimZoyVe6uThirI7Lg8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEppTGs2dDZLWm1qSlY3cTVPR0tzanN1RHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80YzFmNTktMGMxMi00MTUzLWExNWMt NzE1ZjljZDYzMDg2LzEvVEppTGs2dDZLWm1qSlY3cTVPR0tzanN1RHo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80YzFmNTktMGMxMi00MTUzLWExNWMtNzE1ZjljZDYzMDg2 LzEvVEppTGs2dDZLWm1qSlY3cTVPR0tzanN1RHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJLVIzQ+ tlXbH2Jpu+AdRkIo76oAvr7aerIdTotVvSooyc5s8sJw3q+dQA+MXi0tCgwiTntJ xLD3/IHSD+dzQrtFO2cg1UkEvC9cMR7RNoL8+w9x626tHPZ5syDBp1S8KslACUo8 Ucy7nsBcUxN3dCXa2naN2f16LWNzAaPuyCQ5vhSwpZNVhH9a3u3j5NCtVaXjFyJi 9pkvJg77DGnLIqWN7+iC/Mj+/lG4z6NU2j0opbqS/+cu3BjUkqdRY36sr5a3MYR6 BPeOBpN3DR8v1Z8CeCHzF29ZJRCIMFtM48/Oo4vsLdi/aOqrKSNX8k3qHC1fFklN uVg/pYEAiIxt5A== -----END CERTIFICATE-----Generated at Sun Dec 7 04:12:35 2025 by rpki-client