This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft File: TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft (raw, json) Hash identifier: D9s0Rrhgjo8/fm5PgaVQaGkzXBOiiChMHoITusq2yDQ= Subject key identifier: D9:44:2B:D4:37:D0:A6:6E:11:72:38:2F:F4:47:23:F3:17:22:27:9B Authority key identifier: 4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79 Certificate issuer: /CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779 Certificate serial: 019AF12E0C841021F65FD0CAE305CABB86AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft Manifest number: 08A8 Signing time: Sat 06 Dec 2025 01:01:58 +0000 Manifest this update: Sat 06 Dec 2025 01:01:58 +0000 Manifest next update: Sun 07 Dec 2025 01:01:58 +0000 Files and hashes: 1: GQnwoz9GTo0_6aViyidBMz0OXtQ.roa (hash: nHXXJO9fTVBgm0+nbMIO/zyd2MM+aOqt/Y2KW6tLr74=) 2: TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl (hash: T8wpcdcPmXPYwBt1W0ZzIjnvnZjjnsVhR+QLvJnUjYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:0c:84:10:21:f6:5f:d0:ca:e3:05:ca:bb:86:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779 Validity Not Before: Dec 6 01:01:58 2025 GMT Not After : Dec 7 01:01:58 2025 GMT Subject: CN=d9442bd437d0a66e1172382ff44723f31722279b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ca:f6:7d:dc:b4:06:1f:5f:9d:ee:20:26:e2: bf:96:4b:f1:d5:f9:db:c2:a4:a3:64:eb:a6:5d:43: c7:d3:76:f4:48:b4:e2:86:a0:f1:df:eb:e6:f4:0a: 1b:bc:ce:47:8f:d4:9c:d7:fd:5d:c8:62:8e:d6:9f: ab:7d:df:61:2e:0c:40:d1:b8:86:e4:0e:3c:c2:97: c2:50:2d:27:65:d0:57:87:0f:ab:51:79:ad:37:b3: 20:09:e5:2a:d1:29:f3:21:ae:1d:4a:ce:ea:2a:14: cd:3f:4d:6b:25:e0:bf:2c:41:bd:4f:22:53:1e:30: b7:df:0a:ea:1c:d7:ae:36:33:68:e9:64:1d:3e:a3: 64:c4:e4:e2:32:b4:ee:d2:01:5f:34:b8:cd:e4:1d: 1e:c6:7e:80:35:12:35:6d:76:83:f5:42:24:77:66: 7c:34:42:25:3f:ee:ba:4c:65:3e:ee:56:0c:7f:ac: 89:7f:64:64:b4:8e:df:ca:00:01:9a:89:46:00:45: c0:60:ff:30:5a:02:47:7a:e3:34:9f:2e:14:1f:f5: 2e:ed:97:60:f1:36:d5:81:7d:15:b5:8d:52:38:ca: b5:e0:ee:07:46:b0:61:be:39:62:1f:a7:fe:4c:68: 8e:af:fc:95:f0:99:93:52:26:bd:c9:c6:6c:cd:55: ce:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:44:2B:D4:37:D0:A6:6E:11:72:38:2F:F4:47:23:F3:17:22:27:9B X509v3 Authority Key Identifier: keyid:4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:7b:ea:ff:3e:ad:0a:fa:88:22:ed:e6:b7:d6:fb:8e:b2:78: 9f:23:5c:fa:f2:75:03:ae:fb:be:6e:e4:3a:34:f0:4e:65:c9: 51:dd:85:e6:83:7d:1b:42:00:54:aa:1b:c9:9f:90:de:60:0e: 0a:5e:40:4f:55:7b:7a:f6:3c:62:63:d3:09:29:a0:da:07:ea: 58:81:ba:2f:eb:c0:86:99:2a:07:0a:76:4b:3f:5b:8a:cc:db: 42:57:3c:6c:99:2a:7c:bd:c2:74:34:1e:77:6e:14:c5:d8:bf: db:cf:23:ed:1b:b7:f7:bd:a2:d7:2a:18:03:1d:da:cf:06:ff: 84:54:30:9c:d2:60:02:66:a0:0d:f6:75:97:93:51:25:45:77: 3b:86:aa:d8:59:4e:38:50:2c:05:21:6e:7f:81:e3:c1:b8:ae: ee:b0:33:ba:ec:44:b6:88:18:96:3e:c1:e5:eb:94:29:ad:69: 82:62:48:b0:a4:37:b9:20:1c:7e:4c:fa:e8:f3:e0:20:a7:3c: a0:35:38:dc:e6:2f:a0:51:3a:84:b3:35:11:f9:f9:b7:15:05: bd:bb:75:d0:17:9d:e7:ef:01:fa:3b:68:f2:bd:ae:67:d6:91: 92:40:e0:85:69:fa:aa:74:be:fb:8b:b9:54:8e:43:66:7f:e1: 43:1f:f9:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgyEECH2X9DK4wXKu4auMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNGYyMDZmZGNjYWI4M2RkZmUxOWU4OTZlOTE2M2Q3YTlh ZDQ3NzkwHhcNMjUxMjA2MDEwMTU4WhcNMjUxMjA3MDEwMTU4WjAzMTEwLwYDVQQD EyhkOTQ0MmJkNDM3ZDBhNjZlMTE3MjM4MmZmNDQ3MjNmMzE3MjIyNzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycr2fdy0Bh9fne4gJuK/lkvx1fnb wqSjZOumXUPH03b0SLTihqDx3+vm9AobvM5Hj9Sc1/1dyGKO1p+rfd9hLgxA0biG 5A48wpfCUC0nZdBXhw+rUXmtN7MgCeUq0SnzIa4dSs7qKhTNP01rJeC/LEG9TyJT HjC33wrqHNeuNjNo6WQdPqNkxOTiMrTu0gFfNLjN5B0exn6ANRI1bXaD9UIkd2Z8 NEIlP+66TGU+7lYMf6yJf2RktI7fygABmolGAEXAYP8wWgJHeuM0ny4UH/Uu7Zdg 8TbVgX0VtY1SOMq14O4HRrBhvjliH6f+TGiOr/yV8JmTUia9ycZszVXOUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlEK9Q30KZuEXI4L/RHI/MXIiebMB8GA1UdIwQY MBaAFExPIG/cyrg93+GeiW6RY9eprUd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEU4Z2I5ekt1RDNmNFo2SmJwRmoxNm10UjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jMjliYWMtNmNmOC00Yjg3LWE4ZTIt YWQ1NDkzMWMyNGIzLzEvVEU4Z2I5ekt1RDNmNFo2SmJwRmoxNm10UjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9jMjliYWMtNmNmOC00Yjg3LWE4ZTItYWQ1NDkzMWMyNGIz LzEvVEU4Z2I5ekt1RDNmNFo2SmJwRmoxNm10UjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXvq/z6t CvqIIu3mt9b7jrJ4nyNc+vJ1A677vm7kOjTwTmXJUd2F5oN9G0IAVKobyZ+Q3mAO Cl5AT1V7evY8YmPTCSmg2gfqWIG6L+vAhpkqBwp2Sz9biszbQlc8bJkqfL3CdDQe d24Uxdi/288j7Ru3972i1yoYAx3azwb/hFQwnNJgAmagDfZ1l5NRJUV3O4aq2FlO OFAsBSFuf4Hjwbiu7rAzuuxEtogYlj7B5euUKa1pgmJIsKQ3uSAcfkz66PPgIKc8 oDU43OYvoFE6hLM1Efn5txUFvbt10Bed5+8B+jto8r2uZ9aRkkDghWn6qnS++4u5 VI5DZn/hQx/5VA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:04 2025 by rpki-client