This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft File: tcR4e4CrSAGrYrG9v7KOBtMM32o.mft (raw, json) Hash identifier: xweC2BuKdcIoOIoJPTQzoQCs7XMVzNL1BQe+MV/xfIc= Subject key identifier: 54:21:BB:8D:FE:4F:83:D0:55:03:39:8A:D7:31:B9:A1:BB:87:0A:B3 Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A Certificate issuer: /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a Certificate serial: 019AF1D206F5E48ED8B939C9C0FA24CDC732 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft Manifest number: 05BD Signing time: Sat 06 Dec 2025 04:01:04 +0000 Manifest this update: Sat 06 Dec 2025 04:01:04 +0000 Manifest next update: Sun 07 Dec 2025 04:01:04 +0000 Files and hashes: 1: ktAbm-eMqyUysDj5Rz0ozhsQgoU.roa (hash: sOoFB/V0u6n0JOO4WrnOrE08EvrJyrBKeqUzyGdoIfI=) 2: tcR4e4CrSAGrYrG9v7KOBtMM32o.crl (hash: JMNJCJ94y9xSDvO1IwE+Lisrvx4vOuMrYWYowQ/NxpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:06:f5:e4:8e:d8:b9:39:c9:c0:fa:24:cd:c7:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a Validity Not Before: Dec 6 04:01:04 2025 GMT Not After : Dec 7 04:01:04 2025 GMT Subject: CN=5421bb8dfe4f83d05503398ad731b9a1bb870ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a0:94:f0:ca:75:c2:d7:8f:e0:85:4b:3c:80: cd:d9:38:19:83:a8:8a:85:79:7c:88:80:aa:9f:05: 2c:76:a4:31:65:7f:93:20:23:63:81:29:02:ac:b2: 87:53:0a:ac:00:97:33:e2:f6:86:9b:3e:41:12:3e: 59:b9:51:db:b7:ff:2b:87:6c:8d:c2:8f:ec:f9:91: 70:6d:37:33:6b:d4:9b:4c:99:82:f6:6e:f2:a2:e8: 5a:79:e4:12:89:9c:dc:56:54:a2:8e:0f:38:65:c8: 7a:0a:8c:b3:35:bf:96:d7:82:ad:84:6c:69:52:1c: 13:e7:74:85:50:ab:f8:7b:ea:5b:02:e5:87:8c:2d: 2a:e0:ee:69:95:67:64:c7:94:86:48:2b:c9:9a:f4: 07:62:87:33:8d:22:4d:3b:a8:d8:d5:b4:23:62:69: 00:aa:7e:dc:76:bd:75:f8:65:07:9a:b8:33:e7:2c: f0:15:a2:a9:7d:94:80:bf:c3:3f:ff:62:3f:f4:dc: 4c:ce:3b:cf:ea:de:59:12:31:6c:ce:ee:c4:ef:ab: 00:5c:3d:a6:a3:8a:b9:a7:25:c4:0a:7e:65:f7:11: 5d:36:d3:c3:7c:4a:4f:51:ef:42:61:ff:f7:11:bf: 40:38:86:a8:47:c2:cc:cc:7b:16:52:4c:bc:cc:6f: 37:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:21:BB:8D:FE:4F:83:D0:55:03:39:8A:D7:31:B9:A1:BB:87:0A:B3 X509v3 Authority Key Identifier: keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:4b:1c:e4:3a:0f:f1:ef:78:90:f0:8c:4c:2f:16:12:bc:ac: 70:64:cf:a4:7e:cf:53:df:12:d5:b9:6c:35:fe:0a:2d:42:9d: 40:9e:50:73:21:1a:34:81:13:d4:7e:58:3d:fc:36:d0:29:5d: af:4f:d0:91:ce:de:57:5a:7d:30:76:b6:31:10:fa:d5:6c:ac: a5:c2:0c:02:10:f8:57:21:7e:cb:5e:c2:a3:51:5e:27:46:0b: d3:10:45:19:6f:ec:18:c3:52:72:c5:2e:86:9f:62:82:c4:88: 48:63:21:ab:56:87:b1:90:ba:8b:82:b8:9f:b6:77:0c:5a:35: f0:de:46:ce:2c:3a:a2:0d:e0:8b:3b:8e:51:bd:19:a4:f0:2e: 59:76:08:3a:85:f4:19:f8:5a:db:32:5d:c4:34:2a:31:0a:c0: 01:fc:0a:41:71:91:14:6e:cb:5d:c0:70:7f:b9:ec:00:74:cf: c2:b2:f9:e1:6b:8e:4f:85:61:ad:fe:c0:9a:62:3a:f1:d5:7c: 49:d9:97:bc:bd:80:77:8e:10:e7:fc:dd:f8:ce:d9:ab:94:7d: b6:07:9d:80:21:97:12:e7:68:55:0d:6e:a4:7a:35:69:8f:78: 71:2c:2d:75:76:55:2a:04:e5:20:bb:08:58:5f:e5:36:e9:ce: 0a:90:d5:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gb15I7YuTnJwPokzccyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YzQ3ODdiODBhYjQ4MDFhYjYyYjFiZGJmYjI4ZTA2ZDMw Y2RmNmEwHhcNMjUxMjA2MDQwMTA0WhcNMjUxMjA3MDQwMTA0WjAzMTEwLwYDVQQD Eyg1NDIxYmI4ZGZlNGY4M2QwNTUwMzM5OGFkNzMxYjlhMWJiODcwYWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKCU8Mp1wteP4IVLPIDN2TgZg6iK hXl8iICqnwUsdqQxZX+TICNjgSkCrLKHUwqsAJcz4vaGmz5BEj5ZuVHbt/8rh2yN wo/s+ZFwbTcza9SbTJmC9m7youhaeeQSiZzcVlSijg84Zch6CoyzNb+W14KthGxp UhwT53SFUKv4e+pbAuWHjC0q4O5plWdkx5SGSCvJmvQHYoczjSJNO6jY1bQjYmkA qn7cdr11+GUHmrgz5yzwFaKpfZSAv8M//2I/9NxMzjvP6t5ZEjFszu7E76sAXD2m o4q5pyXECn5l9xFdNtPDfEpPUe9CYf/3Eb9AOIaoR8LMzHsWUky8zG831wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQhu43+T4PQVQM5itcxuaG7hwqzMB8GA1UdIwQY MBaAFLXEeHuAq0gBq2Kxvb+yjgbTDN9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kOWQzYzktZjE5NC00YjI2LThmMTAt ZmY2YTljZGU2MzM1LzEvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kOWQzYzktZjE5NC00YjI2LThmMTAtZmY2YTljZGU2MzM1 LzEvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUsc5DoP 8e94kPCMTC8WEryscGTPpH7PU98S1blsNf4KLUKdQJ5QcyEaNIET1H5YPfw20Cld r0/Qkc7eV1p9MHa2MRD61WyspcIMAhD4VyF+y17Co1FeJ0YL0xBFGW/sGMNScsUu hp9igsSISGMhq1aHsZC6i4K4n7Z3DFo18N5Gziw6og3gizuOUb0ZpPAuWXYIOoX0 Gfha2zJdxDQqMQrAAfwKQXGRFG7LXcBwf7nsAHTPwrL54WuOT4Vhrf7AmmI68dV8 SdmXvL2Ad44Q5/zd+M7Zq5R9tgedgCGXEudoVQ1upHo1aY94cSwtdXZVKgTlILsI WF/lNunOCpDVfw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:17 2025 by rpki-client