This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft File: tn8bh-Z1L0VDm4UozJaLR3CloPs.mft (raw, json) Hash identifier: 9CJeCNY7smW5AgteICsYfUcZxzg7ozAfj+uGvSKcAis= Subject key identifier: 95:7C:DD:FC:6F:6A:EC:D7:8E:80:D4:D4:BA:7D:3B:D0:5D:32:55:ED Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb Certificate serial: 019AF19ADDC944155F2BC189C59BBF10D350 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:00:49 +0000 Manifest this update: Sat 06 Dec 2025 03:00:49 +0000 Manifest next update: Sun 07 Dec 2025 03:00:49 +0000 Files and hashes: 1: kYfhtSfEKW3P-62E9GiF_Ua9EUo.roa (hash: p1no5bz1+uk9Sv3KCtgs/QuEn0taiRhnvBxPn7m9ACY=) 2: tn8bh-Z1L0VDm4UozJaLR3CloPs.crl (hash: RcmtM0XTbDWH2e0/wbmmvouAdQZE6qR2KuB28FJLFS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:dd:c9:44:15:5f:2b:c1:89:c5:9b:bf:10:d3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb Validity Not Before: Dec 6 03:00:49 2025 GMT Not After : Dec 7 03:00:49 2025 GMT Subject: CN=957cddfc6f6aecd78e80d4d4ba7d3bd05d3255ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:25:58:74:17:cb:ed:71:fe:a6:ea:97:74:8c: 45:76:23:0c:c8:2d:13:34:53:ae:31:b4:b1:c5:4d: 1d:0a:72:f6:88:86:cd:53:ab:5a:d4:cc:fd:52:ae: 94:c5:37:ae:98:0e:52:c4:84:0b:8b:a9:4c:d6:39: f8:f9:c6:c8:9e:e9:65:a2:12:4c:33:c3:62:fc:d2: 00:24:33:bd:5a:6f:4d:d3:69:84:9a:c0:43:09:d9: 99:9a:77:26:30:5a:43:be:07:bd:51:02:b3:9e:98: c4:4e:9b:84:2a:e5:53:80:6e:f6:2d:e0:4c:ca:d2: 77:33:fb:79:1a:51:1d:80:48:c0:54:85:ae:7f:ea: e4:c1:b9:2f:ca:f8:1f:0b:c9:bb:15:af:bd:2f:e2: 6d:a2:79:39:4e:1a:40:9d:55:05:ab:32:bf:02:b2: 96:9e:e2:14:26:4a:21:3d:ad:40:ca:ce:f0:d1:8a: 7d:da:1e:3d:96:7d:a1:7c:38:34:c4:10:76:81:23: 1a:3d:c8:e4:0e:ed:35:95:8c:39:df:32:09:9a:c3: 8f:6e:c7:ae:cb:0d:06:37:1a:3e:10:b0:11:67:51: 13:17:6d:ba:56:32:60:1a:34:6b:69:18:8c:41:17: bd:1d:4b:08:e3:5e:c6:ce:a3:a4:34:3a:d0:45:19: 57:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7C:DD:FC:6F:6A:EC:D7:8E:80:D4:D4:BA:7D:3B:D0:5D:32:55:ED X509v3 Authority Key Identifier: keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:d8:55:d0:50:1a:4c:b8:16:43:84:a4:34:23:0c:cb:8d:ee: 14:d4:60:3b:49:77:a3:89:6f:2e:b2:14:6c:8c:e2:56:15:60: f7:b8:a2:27:8e:b8:6e:8b:f6:ce:02:55:bc:ba:30:af:33:93: d0:ee:39:b3:e6:ba:f8:bc:d7:73:4a:ef:23:a8:a8:aa:ba:90: 34:3b:e9:c6:ce:95:e8:a8:cc:2e:54:6b:99:8d:b5:df:d4:48: 50:8d:05:23:1f:ca:8f:df:b4:ab:cb:d7:fc:c5:36:9d:2e:8c: e2:82:3b:6e:6a:c8:d2:29:af:4d:68:21:b1:ae:ec:27:5d:a0: d7:f7:e4:7e:d6:b9:09:35:b4:05:c0:de:ad:49:d8:75:92:ec: c7:7f:80:0d:f3:5a:be:08:0e:94:44:97:51:3d:7d:4f:c1:1f: 30:34:48:53:0b:12:a6:35:74:3b:70:3a:24:27:06:08:83:cb: 5e:d3:19:e3:9d:98:91:ae:01:93:b5:b6:a9:4f:f9:10:f0:3d: 23:8d:a5:fa:de:66:5b:20:a8:4d:9d:b2:58:90:2c:e7:9d:1c: 55:15:dd:ff:5c:eb:fb:0f:78:89:35:7f:be:49:5c:b0:80:f5: 93:99:e1:c8:52:8f:e1:3c:05:d8:03:7f:37:9d:c0:d4:cb:15: 81:fa:3f:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmt3JRBVfK8GJxZu/ENNQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2N2YxYjg3ZTY3NTJmNDU0MzliODUyOGNjOTY4YjQ3NzBh NWEwZmIwHhcNMjUxMjA2MDMwMDQ5WhcNMjUxMjA3MDMwMDQ5WjAzMTEwLwYDVQQD Eyg5NTdjZGRmYzZmNmFlY2Q3OGU4MGQ0ZDRiYTdkM2JkMDVkMzI1NWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiVYdBfL7XH+puqXdIxFdiMMyC0T NFOuMbSxxU0dCnL2iIbNU6ta1Mz9Uq6UxTeumA5SxIQLi6lM1jn4+cbInullohJM M8Ni/NIAJDO9Wm9N02mEmsBDCdmZmncmMFpDvge9UQKznpjETpuEKuVTgG72LeBM ytJ3M/t5GlEdgEjAVIWuf+rkwbkvyvgfC8m7Fa+9L+Jtonk5ThpAnVUFqzK/ArKW nuIUJkohPa1Ays7w0Yp92h49ln2hfDg0xBB2gSMaPcjkDu01lYw53zIJmsOPbseu yw0GNxo+ELARZ1ETF226VjJgGjRraRiMQRe9HUsI417GzqOkNDrQRRlXtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJV83fxvauzXjoDU1Lp9O9BdMlXtMB8GA1UdIwQY MBaAFLZ/G4fmdS9FQ5uFKMyWi0dwpaD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG44YmgtWjFMMFZEbTRVb3pKYUxSM0Nsb1BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85ZmY0M2UtZjgxNy00ZWJlLWEwZDkt N2ExODkzMWQ5ODViLzEvdG44YmgtWjFMMFZEbTRVb3pKYUxSM0Nsb1BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85ZmY0M2UtZjgxNy00ZWJlLWEwZDktN2ExODkzMWQ5ODVi LzEvdG44YmgtWjFMMFZEbTRVb3pKYUxSM0Nsb1BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdhV0FAa TLgWQ4SkNCMMy43uFNRgO0l3o4lvLrIUbIziVhVg97iiJ464bov2zgJVvLowrzOT 0O45s+a6+LzXc0rvI6ioqrqQNDvpxs6V6KjMLlRrmY2139RIUI0FIx/Kj9+0q8vX /MU2nS6M4oI7bmrI0imvTWghsa7sJ12g1/fkfta5CTW0BcDerUnYdZLsx3+ADfNa vggOlESXUT19T8EfMDRIUwsSpjV0O3A6JCcGCIPLXtMZ452Yka4Bk7W2qU/5EPA9 I42l+t5mWyCoTZ2yWJAs550cVRXd/1zr+w94iTV/vklcsID1k5nhyFKP4TwF2AN/ N53A1MsVgfo/GA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:36 2025 by rpki-client