This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft File: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft (raw, json) Hash identifier: 1Du/eP3G9Ft6WNLNUTgqagaiyb36GbFzIu2KcGyEDE8= Subject key identifier: 2B:30:59:93:DC:83:15:13:24:82:AC:02:D4:28:37:97:E8:A8:A2:9A Authority key identifier: 4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44 Certificate issuer: /CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44 Certificate serial: 019AF3F79930C0FA4BAD32A7909F0069FA75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 14:01:21 +0000 Manifest this update: Sat 06 Dec 2025 14:01:21 +0000 Manifest next update: Sun 07 Dec 2025 14:01:21 +0000 Files and hashes: 1: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl (hash: nS8xwDZtCidHvg+wGfpRPm1E9DvvXh7W3kTylEG+a9A=) 2: pXY7p3AnqDJfjALLmtVHw8U2GfM.roa (hash: ZUNXce9TBnEjmUfFa15l+WlhliqRz/AO8NwAB4Sid60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:99:30:c0:fa:4b:ad:32:a7:90:9f:00:69:fa:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44 Validity Not Before: Dec 6 14:01:21 2025 GMT Not After : Dec 7 14:01:21 2025 GMT Subject: CN=2b305993dc8315132482ac02d4283797e8a8a29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:62:bc:86:47:8a:7a:9f:ac:24:54:9d:c3:18: ef:02:25:66:3e:ce:a4:be:7c:f7:2d:06:78:a7:c7: 3e:62:bf:c9:6e:36:76:71:2d:14:fd:10:20:72:fd: ff:70:d8:11:a7:87:8e:44:2a:91:c8:fc:35:22:86: 52:6a:34:32:a2:b5:a0:0c:8a:1e:27:d3:e4:f3:e0: c7:36:80:bd:39:6c:39:0f:ca:58:3f:06:14:4f:f9: c5:68:37:3c:0e:78:1a:b4:26:f8:e9:ba:6e:cf:86: dd:bc:15:f4:9b:f7:1e:8b:0f:77:e5:87:02:b2:ae: ba:e1:2a:1b:35:e9:8e:c1:1c:af:62:c9:19:11:ed: c0:ad:29:cd:aa:8c:e1:30:0d:7d:fc:89:c4:c4:6e: 77:2f:eb:7f:72:f2:9e:4a:c4:d7:b5:69:71:e8:dd: 67:c7:bb:3c:63:25:3d:e8:57:d9:a9:ee:b5:f8:4f: f5:6d:0a:10:5c:90:73:1d:e8:81:c5:8a:ea:05:65: 8e:14:2c:31:44:97:ac:2a:e2:52:23:f5:a6:a6:b2: 0a:53:46:b1:d7:53:91:3b:f2:cf:83:1a:c1:b9:44: 17:62:dc:00:cb:f8:d9:a0:8e:e4:6e:42:73:4b:cb: 19:a5:0a:2f:4f:a0:8e:fa:86:b5:d9:23:28:89:b4: ea:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:30:59:93:DC:83:15:13:24:82:AC:02:D4:28:37:97:E8:A8:A2:9A X509v3 Authority Key Identifier: keyid:4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a4:9d:a8:68:bf:7b:0b:34:24:8d:8e:bf:62:dc:d5:33:b6: 7a:64:0c:a0:c5:cf:b2:27:b8:45:6a:00:22:a5:b3:8a:69:37: 9a:c0:3d:59:e3:46:5e:4b:82:96:52:13:d5:41:1d:1d:9d:ca: e5:1c:c0:47:21:79:34:74:c0:81:9a:b8:99:fd:7c:47:66:f4: 9b:48:7a:b4:04:e1:d5:ec:d4:7a:e6:91:3c:dd:f5:4b:87:b8: 8d:07:de:1a:7a:fc:3a:2f:62:f5:43:70:7e:25:65:0f:53:b8: 4f:d2:84:e9:2f:ab:85:f9:72:cb:d5:b0:ff:01:4b:24:26:35: 5d:00:f2:19:55:ba:55:6e:35:ed:4a:c7:a1:22:7a:90:47:62: 53:8d:b9:55:ba:f0:39:4f:fb:78:cb:3c:c7:54:74:af:61:9b: 31:eb:89:82:de:82:f9:83:85:80:50:a6:5f:f2:bb:19:63:5b: f4:50:af:dc:10:92:f6:d7:a7:05:dc:21:0b:63:e2:ad:67:af: dd:80:52:40:27:05:ca:4e:6f:58:1e:4d:f2:b7:0e:8c:b9:6a: 54:bf:18:97:35:8e:3c:06:ce:18:5e:77:e4:ff:56:01:2d:fb: e9:45:a6:ea:98:84:62:ec:06:62:53:07:c1:1b:7a:e8:48:a0: 8b:d9:67:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz95kwwPpLrTKnkJ8Aafp1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYWVmYzQ5ZTZjZDY3ZTI1OTk2YTJjMGZjNTdiODBjYzIz ZGJhNDQwHhcNMjUxMjA2MTQwMTIxWhcNMjUxMjA3MTQwMTIxWjAzMTEwLwYDVQQD EygyYjMwNTk5M2RjODMxNTEzMjQ4MmFjMDJkNDI4Mzc5N2U4YThhMjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WK8hkeKep+sJFSdwxjvAiVmPs6k vnz3LQZ4p8c+Yr/JbjZ2cS0U/RAgcv3/cNgRp4eORCqRyPw1IoZSajQyorWgDIoe J9Pk8+DHNoC9OWw5D8pYPwYUT/nFaDc8DngatCb46bpuz4bdvBX0m/ceiw935YcC sq664SobNemOwRyvYskZEe3ArSnNqozhMA19/InExG53L+t/cvKeSsTXtWlx6N1n x7s8YyU96FfZqe61+E/1bQoQXJBzHeiBxYrqBWWOFCwxRJesKuJSI/WmprIKU0ax 11ORO/LPgxrBuUQXYtwAy/jZoI7kbkJzS8sZpQovT6CO+oa12SMoibTqXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCswWZPcgxUTJIKsAtQoN5foqKKaMB8GA1UdIwQY MBaAFE6u/EnmzWfiWZaiwPxXuAzCPbpEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHE3OFNlYk5aLUpabHFMQV9GZTRETUk5dWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85ZjU4ZjItNzkxOS00YmZjLThmNzMt ZTcwNzNjZmUxMzRmLzEvVHE3OFNlYk5aLUpabHFMQV9GZTRETUk5dWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85ZjU4ZjItNzkxOS00YmZjLThmNzMtZTcwNzNjZmUxMzRm LzEvVHE3OFNlYk5aLUpabHFMQV9GZTRETUk5dWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXaSdqGi/ ews0JI2Ov2Lc1TO2emQMoMXPsie4RWoAIqWzimk3msA9WeNGXkuCllIT1UEdHZ3K 5RzARyF5NHTAgZq4mf18R2b0m0h6tATh1ezUeuaRPN31S4e4jQfeGnr8Oi9i9UNw fiVlD1O4T9KE6S+rhflyy9Ww/wFLJCY1XQDyGVW6VW417UrHoSJ6kEdiU425Vbrw OU/7eMs8x1R0r2GbMeuJgt6C+YOFgFCmX/K7GWNb9FCv3BCS9tenBdwhC2PirWev 3YBSQCcFyk5vWB5N8rcOjLlqVL8YlzWOPAbOGF535P9WAS376UWm6piEYuwGYlMH wRt66Eigi9lngQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:05:30 2025 by rpki-client