This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft File: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft (raw, json) Hash identifier: RHuXqXh84Wf/o9QBis2Qom2hJjazUOwVfHgvCwNCxAM= Subject key identifier: 2F:1C:F1:52:CF:51:1C:F9:30:40:BA:BA:88:8C:C1:FF:C4:49:8B:06 Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19 Certificate issuer: /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19 Certificate serial: 019AF12CBB70B3B5EF931CA4E60C2DC9438A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft Manifest number: 0DEE Signing time: Sat 06 Dec 2025 01:00:31 +0000 Manifest this update: Sat 06 Dec 2025 01:00:31 +0000 Manifest next update: Sun 07 Dec 2025 01:00:31 +0000 Files and hashes: 1: E7on5Vfvg98I2xAlaMeiutbcdZQ.roa (hash: 52cCubbGQVWlaOLXukS3Zd4+5KnclvBfBahudlSwT/s=) 2: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl (hash: BKgd00VC1cMYjgxlyri5Ee56iQMXiZseBD+opTZwBso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:bb:70:b3:b5:ef:93:1c:a4:e6:0c:2d:c9:43:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19 Validity Not Before: Dec 6 01:00:31 2025 GMT Not After : Dec 7 01:00:31 2025 GMT Subject: CN=2f1cf152cf511cf93040baba888cc1ffc4498b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:34:fb:07:21:84:87:22:23:67:83:b5:c0:ce: b4:87:9e:94:cd:35:c8:7c:77:57:6a:bc:01:1a:5f: f0:23:71:8f:92:cd:66:f2:8d:a3:ca:f5:7f:20:26: 1a:2d:33:e6:58:3b:7d:92:a4:33:b7:f8:c8:1a:cc: 54:10:23:3e:0f:2c:80:bf:18:5a:6b:0a:92:91:22: 1e:f4:f8:c8:e6:c8:cc:f5:a8:8b:65:8e:86:50:ea: 3e:cf:f8:9b:a4:f8:00:0b:94:8f:05:56:5f:a0:d5: 4b:ff:ce:b7:5d:b9:c9:f9:d5:fe:31:4f:22:74:a0: ea:0b:c1:98:ea:d3:60:78:1e:a3:06:f7:b1:c3:b3: 9b:0f:02:10:e3:76:16:58:69:02:23:14:5d:66:70: e0:3b:62:a7:80:9d:af:9b:a5:b7:cf:b5:bb:c0:72: 87:24:5d:b9:20:d4:4a:8d:ed:52:1a:b7:8f:ad:31: a6:79:b6:c2:2e:0e:61:01:81:55:51:7e:89:b8:5e: 6a:a3:74:e3:bf:38:80:8a:d8:d4:a0:3a:a2:75:0d: de:22:70:03:17:80:e5:74:58:78:af:95:17:a7:9c: 23:92:8d:cf:3f:bd:43:45:94:5a:11:90:28:92:f9: 9a:52:0d:a7:5e:df:60:fb:28:20:97:88:46:47:f8: 9d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1C:F1:52:CF:51:1C:F9:30:40:BA:BA:88:8C:C1:FF:C4:49:8B:06 X509v3 Authority Key Identifier: keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:96:e7:83:87:17:19:ae:d0:53:cf:fc:70:e1:0a:44:4b:de: 38:cb:12:3c:71:e6:bf:63:d1:ac:02:68:66:78:fc:63:a1:58: 8b:f4:52:ad:e3:1d:a0:ae:c3:b9:48:15:c2:a9:35:74:b7:19: 7f:35:3f:77:e2:29:58:50:8b:ec:9d:03:7c:84:af:f7:c5:14: a6:85:b4:e9:c6:cb:ad:5a:fe:64:67:02:f9:ee:70:3d:4b:26: c7:4f:e1:90:43:e2:11:56:f4:d7:97:c9:23:d2:d1:73:73:cd: 96:7c:7e:19:92:b4:18:09:4c:da:0b:2a:d6:06:f5:59:a8:e6: 3c:45:7b:02:50:67:7f:cb:69:f5:4b:05:31:cf:f8:3b:39:82: 80:f6:c5:d4:d9:b2:6d:41:82:1c:0a:cf:3f:dc:a8:9d:a7:ba: ad:f2:74:6f:b5:83:c6:11:5e:06:f1:37:91:5e:5c:c6:c8:08: 06:e0:ae:fe:c9:f7:79:62:ae:d2:4f:71:6d:41:90:ca:b0:45: d9:78:6b:f5:f5:69:ea:05:d7:2d:dc:6e:6c:73:34:8a:d4:b9: 6e:c0:0c:8d:80:0d:28:b9:95:4f:20:95:2d:80:ca:7e:44:3f: 8f:7f:ba:a0:0f:8c:9d:3b:38:82:9e:20:e3:12:bb:7a:64:17: a5:a0:c4:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLtws7Xvkxyk5gwtyUOKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMGExOWQ0OGMzNTQ3YzJhZGI5ZjhlZmZkZWFjNmFkOWU0 ZjlkMTkwHhcNMjUxMjA2MDEwMDMxWhcNMjUxMjA3MDEwMDMxWjAzMTEwLwYDVQQD EygyZjFjZjE1MmNmNTExY2Y5MzA0MGJhYmE4ODhjYzFmZmM0NDk4YjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTT7ByGEhyIjZ4O1wM60h56UzTXI fHdXarwBGl/wI3GPks1m8o2jyvV/ICYaLTPmWDt9kqQzt/jIGsxUECM+DyyAvxha awqSkSIe9PjI5sjM9aiLZY6GUOo+z/ibpPgAC5SPBVZfoNVL/863XbnJ+dX+MU8i dKDqC8GY6tNgeB6jBvexw7ObDwIQ43YWWGkCIxRdZnDgO2KngJ2vm6W3z7W7wHKH JF25INRKje1SGrePrTGmebbCLg5hAYFVUX6JuF5qo3TjvziAitjUoDqidQ3eInAD F4DldFh4r5UXp5wjko3PP71DRZRaEZAokvmaUg2nXt9g+yggl4hGR/idFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8c8VLPURz5MEC6uoiMwf/ESYsGMB8GA1UdIwQY MBaAFE4KGdSMNUfCrbn47/3qxq2eT50ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGdvWjFJdzFSOEt0dWZqdl9lckdyWjVQblJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jYjNlNmItYTQ0NC00OWRkLTlmNjQt MTdjMTIyNzNjNTRhLzEvVGdvWjFJdzFSOEt0dWZqdl9lckdyWjVQblJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9jYjNlNmItYTQ0NC00OWRkLTlmNjQtMTdjMTIyNzNjNTRh LzEvVGdvWjFJdzFSOEt0dWZqdl9lckdyWjVQblJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpbng4cX Ga7QU8/8cOEKREveOMsSPHHmv2PRrAJoZnj8Y6FYi/RSreMdoK7DuUgVwqk1dLcZ fzU/d+IpWFCL7J0DfISv98UUpoW06cbLrVr+ZGcC+e5wPUsmx0/hkEPiEVb015fJ I9LRc3PNlnx+GZK0GAlM2gsq1gb1WajmPEV7AlBnf8tp9UsFMc/4OzmCgPbF1Nmy bUGCHArPP9yonae6rfJ0b7WDxhFeBvE3kV5cxsgIBuCu/sn3eWKu0k9xbUGQyrBF 2Xhr9fVp6gXXLdxubHM0itS5bsAMjYANKLmVTyCVLYDKfkQ/j3+6oA+MnTs4gp4g 4xK7emQXpaDEgg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:29 2025 by rpki-client