This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft File: TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json) Hash identifier: KKfIL6ju1j9n+akGFnPVOVFS7+4IUwHSGdzWG0x9bg4= Subject key identifier: 1F:46:ED:73:B8:07:63:20:1A:CB:EA:C3:DF:EC:C5:F8:93:BF:F3:3E Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49 Certificate issuer: /CN=4c51636fde905f8521f411479e81321cdcf49049 Certificate serial: 019AF12D893D5470CA08592790738CB881A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft Manifest number: 09F1 Signing time: Sat 06 Dec 2025 01:01:24 +0000 Manifest this update: Sat 06 Dec 2025 01:01:24 +0000 Manifest next update: Sun 07 Dec 2025 01:01:24 +0000 Files and hashes: 1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: AZs42O3fDPmgJMFrMth/urDMImlqOXJyP4nYq0iD7NA=) 2: k88eKZ3ggVkstFfz6v9jAollFdM.roa (hash: RToXutf5Qdv2Y+G73kPgZr6gfiGthSFW8G2eqnaoH64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:89:3d:54:70:ca:08:59:27:90:73:8c:b8:81:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049 Validity Not Before: Dec 6 01:01:24 2025 GMT Not After : Dec 7 01:01:24 2025 GMT Subject: CN=1f46ed73b80763201acbeac3dfecc5f893bff33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a6:c9:1a:93:e8:cc:bf:15:a5:f0:64:f3:89: f9:f8:98:4a:d4:ac:77:0d:a5:2e:a7:d3:6c:a8:5b: 18:69:e4:7d:fa:cc:9d:2b:b3:76:4b:4e:c6:15:37: cb:79:b7:02:51:27:2b:94:a3:6a:59:19:14:d5:9c: f4:16:b0:a9:90:63:d0:5b:47:bc:65:bb:07:3e:8f: 3f:47:96:68:26:22:04:71:10:c0:24:09:4a:be:77: 95:9a:9d:57:fc:f7:8c:1a:4a:70:fc:74:be:98:8a: 26:6b:d5:80:96:80:35:74:e3:0c:dd:59:3a:62:6b: ac:a9:47:e3:a4:9f:72:d8:fd:49:e5:24:04:be:01: 89:c8:d0:9e:77:f2:54:43:79:24:02:f0:2d:16:05: ff:26:a7:43:cb:5b:56:d6:e5:f7:46:fc:80:7c:95: ff:ec:5e:00:c9:fc:16:d6:f6:37:d4:f5:c0:89:1d: 6d:1a:aa:d2:a4:e0:0b:d8:b4:39:a3:6b:28:91:a8: 65:b6:3c:e0:7a:a9:54:3f:f6:50:8f:3e:86:fa:2a: 50:03:bd:7b:09:f2:61:30:e9:b1:40:4a:7b:d9:44: c4:ab:6b:04:71:0d:bf:86:3b:4a:8b:67:52:7f:2a: 80:c3:48:6b:31:cb:f0:a5:6f:72:5a:6d:38:2c:2e: f2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:46:ED:73:B8:07:63:20:1A:CB:EA:C3:DF:EC:C5:F8:93:BF:F3:3E X509v3 Authority Key Identifier: keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:9c:59:3a:98:4f:b1:26:f8:e1:f4:0b:aa:bb:44:13:8d:63: ef:c7:17:53:7f:0b:93:b8:b7:c7:e5:49:94:74:14:65:07:95: 2d:33:80:76:64:8c:f3:83:4e:f3:ee:d8:75:d3:76:23:e7:73: 33:53:70:0b:40:8c:f8:76:3a:5d:47:2f:23:dc:40:b4:15:6d: 1e:95:a4:b2:98:44:00:20:2f:89:6b:5f:c6:fe:6f:e1:cb:3d: ff:21:13:7c:ae:24:d0:2b:53:bf:6d:8d:70:5b:df:5b:2d:0b: 63:69:24:e3:bb:af:c0:05:38:d7:bb:67:36:e9:55:6b:75:d8: 0d:80:85:51:3d:89:06:f9:bd:32:98:3f:17:10:9b:66:54:4e: a8:a6:09:aa:dc:c0:c8:3e:70:11:6d:d9:3c:12:2c:15:cb:bb: 40:8e:38:cc:c2:2b:ed:1a:7c:b3:ff:e6:27:50:55:79:86:ad: 08:1e:47:09:82:43:86:21:a8:33:56:ad:20:da:66:5c:be:fb: 48:6e:59:db:25:fd:75:9a:52:1c:14:15:04:70:c1:f2:34:bc: 26:8f:9d:43:be:2e:c3:0f:75:0e:45:d1:56:a2:b3:cf:a4:8b: 6c:f3:e6:87:8b:1e:64:ef:bc:e1:c4:0a:4b:c4:b0:45:c4:16: 8e:0a:e4:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYk9VHDKCFknkHOMuIGpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNTE2MzZmZGU5MDVmODUyMWY0MTE0NzllODEzMjFjZGNm NDkwNDkwHhcNMjUxMjA2MDEwMTI0WhcNMjUxMjA3MDEwMTI0WjAzMTEwLwYDVQQD EygxZjQ2ZWQ3M2I4MDc2MzIwMWFjYmVhYzNkZmVjYzVmODkzYmZmMzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqbJGpPozL8VpfBk84n5+JhK1Kx3 DaUup9NsqFsYaeR9+sydK7N2S07GFTfLebcCUScrlKNqWRkU1Zz0FrCpkGPQW0e8 ZbsHPo8/R5ZoJiIEcRDAJAlKvneVmp1X/PeMGkpw/HS+mIoma9WAloA1dOMM3Vk6 YmusqUfjpJ9y2P1J5SQEvgGJyNCed/JUQ3kkAvAtFgX/JqdDy1tW1uX3RvyAfJX/ 7F4AyfwW1vY31PXAiR1tGqrSpOAL2LQ5o2sokahltjzgeqlUP/ZQjz6G+ipQA717 CfJhMOmxQEp72UTEq2sEcQ2/hjtKi2dSfyqAw0hrMcvwpW9yWm04LC7yOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9G7XO4B2MgGsvqw9/sxfiTv/M+MB8GA1UdIwQY MBaAFExRY2/ekF+FIfQRR56BMhzc9JBJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84MDA4ZmUtMTc1Yi00MWJmLWIxZDYt MmNlMGViNDU4Nzg4LzEvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84MDA4ZmUtMTc1Yi00MWJmLWIxZDYtMmNlMGViNDU4Nzg4 LzEvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJxZOphP sSb44fQLqrtEE41j78cXU38Lk7i3x+VJlHQUZQeVLTOAdmSM84NO8+7YddN2I+dz M1NwC0CM+HY6XUcvI9xAtBVtHpWksphEACAviWtfxv5v4cs9/yETfK4k0CtTv22N cFvfWy0LY2kk47uvwAU417tnNulVa3XYDYCFUT2JBvm9Mpg/FxCbZlROqKYJqtzA yD5wEW3ZPBIsFcu7QI44zMIr7Rp8s//mJ1BVeYatCB5HCYJDhiGoM1atINpmXL77 SG5Z2yX9dZpSHBQVBHDB8jS8Jo+dQ74uww91DkXRVqKzz6SLbPPmh4seZO+84cQK S8SwRcQWjgrkpA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:36 2025 by rpki-client