This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft File: TEaPGBJltNlsooNaPlcMJnkDXf8.mft (raw, json) Hash identifier: 4eOXEMn2FsjdT4R4eRor990FtZiiSRRmN+Uqw6PkxQw= Subject key identifier: 3B:73:19:BE:FA:CA:E9:83:A8:16:60:C7:93:77:66:0F:02:96:1A:88 Authority key identifier: 4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF Certificate issuer: /CN=4c468f181265b4d96ca2835a3e570c2679035dff Certificate serial: 019AF54121782D296F0513A966BD3AEC7D0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft Manifest number: 1695 Signing time: Sat 06 Dec 2025 20:01:17 +0000 Manifest this update: Sat 06 Dec 2025 20:01:17 +0000 Manifest next update: Sun 07 Dec 2025 20:01:17 +0000 Files and hashes: 1: TEaPGBJltNlsooNaPlcMJnkDXf8.crl (hash: hNI+IfcNf+ympcNdxGj/sqMLbirtGlLGlw4tpMKYlL4=) 2: TlMdFyo8UfqJ-RDrKLDhrg_5XKw.roa (hash: xU0L/Ky30tv9qoqHoWWKteKnPJXzN1H+V1CKVuBw5jA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:21:78:2d:29:6f:05:13:a9:66:bd:3a:ec:7d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c468f181265b4d96ca2835a3e570c2679035dff Validity Not Before: Dec 6 20:01:17 2025 GMT Not After : Dec 7 20:01:17 2025 GMT Subject: CN=3b7319befacae983a81660c79377660f02961a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:46:f3:4e:7e:c3:d8:2d:b0:97:b4:50:3e:21: 40:89:74:e6:19:6d:43:c3:33:c3:0a:2f:5a:b6:a9: 13:a0:51:5d:45:b7:6f:20:85:30:f5:cf:43:21:ce: 77:ec:90:2c:f2:a8:01:ec:02:0f:f7:63:34:f3:d0: 7b:54:6f:24:5e:a1:0d:f9:3b:fe:50:ad:31:df:84: dc:69:62:9d:15:ec:34:e8:16:ed:52:a2:90:e2:c0: e4:ed:5d:85:a2:f8:63:9b:58:ac:26:41:dc:e4:4f: ab:37:00:30:38:85:7b:1f:e5:6a:f5:d7:ce:9c:2c: 91:80:c6:58:cc:e1:6a:57:09:00:50:96:1c:fb:17: a6:e6:98:f5:1d:bd:69:f3:e3:9c:14:39:fa:76:78: d4:5b:6c:6b:0b:e6:58:eb:dc:f7:0f:84:2a:0c:6e: a8:13:11:16:d9:63:7c:58:8c:40:8b:ff:96:2b:13: c4:3d:b1:b1:e2:7e:66:04:de:ab:ae:be:a4:6b:31: 30:b7:a0:07:f9:9f:96:db:a1:16:90:f7:70:12:e2: c5:e3:78:17:6c:07:f1:bd:3b:94:05:ba:25:6a:18: c9:f1:58:69:be:e9:19:64:93:de:7c:1b:41:e4:23: dd:c6:98:5d:90:4e:e8:2a:90:6c:44:f9:00:45:ee: b1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:73:19:BE:FA:CA:E9:83:A8:16:60:C7:93:77:66:0F:02:96:1A:88 X509v3 Authority Key Identifier: keyid:4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ee:d7:8d:a7:44:41:ae:0b:0e:fa:f1:20:be:c5:e9:ac:ba: 21:43:7e:c8:2a:a8:54:50:e6:c1:2c:b2:7e:0f:ee:d9:57:ae: e2:45:9b:e8:56:d1:9b:07:70:cb:dc:59:a0:8e:1f:e0:2a:68: 52:9b:c1:5d:c7:15:4f:ff:ce:b8:ab:27:67:90:8a:e7:b5:e4: 29:16:cf:5a:ea:36:d0:6e:f3:3b:98:a9:23:c7:24:1e:5e:84: aa:64:a5:ce:62:b2:5f:22:6d:8b:3f:74:1b:af:22:4a:43:5e: 02:78:8c:cf:51:db:2d:3e:32:a6:0d:96:68:c4:5c:65:1d:f9: c3:f1:f5:8e:1d:db:44:32:de:88:67:eb:49:c4:2e:df:3f:aa: 35:94:7e:34:77:44:bd:1a:98:02:a8:5b:0d:01:b1:18:77:16: 07:e5:99:bc:40:d5:b3:c4:7a:cb:a5:61:f1:90:83:24:47:89: 6a:c1:b4:b8:30:3e:4e:ed:c3:bc:fa:36:8a:e6:fd:0f:01:a6: 7d:ed:7e:fd:4f:a8:9c:f5:dd:d1:9e:62:f1:6a:74:0a:ac:5a: 2a:5c:62:f7:63:bb:8a:f7:6b:ab:b0:33:15:7e:a8:ff:25:ce: 00:b3:68:ab:9d:92:8e:d8:c2:8a:53:94:52:a4:00:89:a0:27: 01:3f:7e:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QSF4LSlvBROpZr067H0PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNDY4ZjE4MTI2NWI0ZDk2Y2EyODM1YTNlNTcwYzI2Nzkw MzVkZmYwHhcNMjUxMjA2MjAwMTE3WhcNMjUxMjA3MjAwMTE3WjAzMTEwLwYDVQQD EygzYjczMTliZWZhY2FlOTgzYTgxNjYwYzc5Mzc3NjYwZjAyOTYxYTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUbzTn7D2C2wl7RQPiFAiXTmGW1D wzPDCi9atqkToFFdRbdvIIUw9c9DIc537JAs8qgB7AIP92M089B7VG8kXqEN+Tv+ UK0x34TcaWKdFew06BbtUqKQ4sDk7V2Fovhjm1isJkHc5E+rNwAwOIV7H+Vq9dfO nCyRgMZYzOFqVwkAUJYc+xem5pj1Hb1p8+OcFDn6dnjUW2xrC+ZY69z3D4QqDG6o ExEW2WN8WIxAi/+WKxPEPbGx4n5mBN6rrr6kazEwt6AH+Z+W26EWkPdwEuLF43gX bAfxvTuUBbolahjJ8VhpvukZZJPefBtB5CPdxphdkE7oKpBsRPkARe6xjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtzGb76yumDqBZgx5N3Zg8ClhqIMB8GA1UdIwQY MBaAFExGjxgSZbTZbKKDWj5XDCZ5A13/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEVhUEdCSmx0Tmxzb29OYVBsY01KbmtEWGY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi82OTA2NTktMzE5MC00MzRkLThjMjIt MWNkMzM5M2QwYmY1LzEvVEVhUEdCSmx0Tmxzb29OYVBsY01KbmtEWGY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi82OTA2NTktMzE5MC00MzRkLThjMjItMWNkMzM5M2QwYmY1 LzEvVEVhUEdCSmx0Tmxzb29OYVBsY01KbmtEWGY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANu7XjadE Qa4LDvrxIL7F6ay6IUN+yCqoVFDmwSyyfg/u2Veu4kWb6FbRmwdwy9xZoI4f4Cpo UpvBXccVT//OuKsnZ5CK57XkKRbPWuo20G7zO5ipI8ckHl6EqmSlzmKyXyJtiz90 G68iSkNeAniMz1HbLT4ypg2WaMRcZR35w/H1jh3bRDLeiGfrScQu3z+qNZR+NHdE vRqYAqhbDQGxGHcWB+WZvEDVs8R6y6Vh8ZCDJEeJasG0uDA+Tu3DvPo2iub9DwGm fe1+/U+onPXd0Z5i8Wp0CqxaKlxi92O7ivdrq7AzFX6o/yXOALNoq52SjtjCilOU UqQAiaAnAT9+3g== -----END CERTIFICATE-----Generated at Sat Dec 6 22:41:49 2025 by rpki-client