This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft File: Tchxtd3wdAsxfR4042smgQu5gCY.mft (raw, json) Hash identifier: nAD9L/FqRssBC+kGat7MgGrhr5diRL1owQIcengxjOU= Subject key identifier: AE:10:29:B6:CD:D4:17:49:4B:1C:9B:A6:89:7F:36:92:C6:5C:B3:A4 Authority key identifier: 4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26 Certificate issuer: /CN=4dc871b5ddf0740b317d1e34e36b26810bb98026 Certificate serial: 019AF0BF7B8CD0EF41D8A463D5C071EE86D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft Manifest number: 0A32 Signing time: Fri 05 Dec 2025 23:01:12 +0000 Manifest this update: Fri 05 Dec 2025 23:01:12 +0000 Manifest next update: Sat 06 Dec 2025 23:01:12 +0000 Files and hashes: 1: Tchxtd3wdAsxfR4042smgQu5gCY.crl (hash: SLvjxrZJhexImFxTnBBcOPIDbK1lexg6Sg9+cyBBX/4=) 2: paYxpLOj5q1m1CkvSIrYuNJXnfY.roa (hash: oASY8mwNlrx1vBXDbDUsEVfC2Mdva3sHjU/P5M6cgKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:7b:8c:d0:ef:41:d8:a4:63:d5:c0:71:ee:86:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dc871b5ddf0740b317d1e34e36b26810bb98026 Validity Not Before: Dec 5 23:01:12 2025 GMT Not After : Dec 6 23:01:12 2025 GMT Subject: CN=ae1029b6cdd417494b1c9ba6897f3692c65cb3a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:13:fd:e0:09:44:7e:e5:cd:48:8b:d9:8a:f5: 79:8f:da:21:bc:7c:97:cb:19:44:77:8c:d6:87:91: ee:fa:61:7c:10:a7:0c:15:ac:d6:77:b4:b6:94:d7: 9a:7e:92:5f:6c:66:ae:f3:d0:87:79:a3:7f:42:53: ed:70:55:4b:6f:ac:1e:de:8e:fa:f5:13:90:39:49: 1e:0b:1c:eb:22:e9:b5:c6:59:9d:12:a4:8c:ba:5c: f8:92:7b:dd:46:32:8b:11:6b:17:c3:87:a8:50:59: a4:bd:d1:9a:f5:ab:97:34:c4:31:92:5b:1b:e5:17: 90:20:10:b7:c2:bb:05:69:51:50:9c:82:41:13:44: 0d:bd:31:8c:1b:50:8a:b2:07:19:c1:45:50:d2:83: 9e:0f:47:c3:32:b0:ff:5e:c1:e6:51:11:ce:6e:5c: 85:7e:12:4c:b1:be:45:20:ca:96:68:ab:b6:35:8b: 0a:6d:6d:f0:4b:c4:3c:ff:33:94:a2:61:6e:d0:34: 51:37:f0:b1:28:ee:ad:7b:34:88:0e:fe:ea:95:df: 17:9e:08:c9:7a:df:6c:5c:1d:86:3d:c3:ae:d6:c3: 42:ad:75:97:3f:1a:38:fb:c5:34:2a:09:d6:11:83: 0a:86:1a:5b:58:a3:07:c1:d0:a4:9e:cd:62:a2:30: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:10:29:B6:CD:D4:17:49:4B:1C:9B:A6:89:7F:36:92:C6:5C:B3:A4 X509v3 Authority Key Identifier: keyid:4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:9d:e9:18:29:53:d9:a1:a5:b6:e1:37:3b:11:79:08:d2:79: 09:f1:e8:b0:bd:ef:fd:9a:0e:64:54:d9:c3:df:b2:54:6d:aa: 8f:bf:20:02:c9:01:e5:48:65:37:81:1c:a7:52:4c:04:20:3b: bb:d1:38:4a:d1:91:a1:cc:95:d2:eb:53:76:99:8f:fd:3c:13: b5:e8:2d:b8:8e:80:39:fa:60:39:8a:c5:32:14:3d:95:e4:6d: 93:eb:bb:65:33:2a:da:1f:bc:69:2b:00:08:9a:af:51:38:a5: bf:8f:7e:a6:fa:e7:fa:27:42:dd:a0:be:51:90:52:60:83:12: 2e:b6:b2:4c:31:6f:a9:49:fd:0a:69:bd:85:09:96:1c:4e:e0: 48:5c:ff:7b:f7:25:f6:2d:ee:20:2e:14:e7:ca:cb:61:58:42: 49:0e:2b:ee:d0:70:09:61:9c:5b:59:87:15:df:b1:10:33:fc: a1:51:f8:3a:e8:76:d4:ab:1b:e1:84:88:93:a1:9e:83:0d:7f: b3:c3:e1:18:4b:ab:a9:29:41:6d:22:f7:15:b7:82:2f:cb:09: 2f:f4:f2:1f:77:85:fe:56:44:d5:f1:f2:2e:87:d8:07:cc:d5: e4:cb:cb:ce:00:38:8b:94:d0:69:c8:d2:fc:d8:ec:a9:01:f1: d7:2e:47:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3uM0O9B2KRj1cBx7obQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYzg3MWI1ZGRmMDc0MGIzMTdkMWUzNGUzNmIyNjgxMGJi OTgwMjYwHhcNMjUxMjA1MjMwMTEyWhcNMjUxMjA2MjMwMTEyWjAzMTEwLwYDVQQD EyhhZTEwMjliNmNkZDQxNzQ5NGIxYzliYTY4OTdmMzY5MmM2NWNiM2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRP94AlEfuXNSIvZivV5j9ohvHyX yxlEd4zWh5Hu+mF8EKcMFazWd7S2lNeafpJfbGau89CHeaN/QlPtcFVLb6we3o76 9ROQOUkeCxzrIum1xlmdEqSMulz4knvdRjKLEWsXw4eoUFmkvdGa9auXNMQxklsb 5ReQIBC3wrsFaVFQnIJBE0QNvTGMG1CKsgcZwUVQ0oOeD0fDMrD/XsHmURHOblyF fhJMsb5FIMqWaKu2NYsKbW3wS8Q8/zOUomFu0DRRN/CxKO6tezSIDv7qld8XngjJ et9sXB2GPcOu1sNCrXWXPxo4+8U0KgnWEYMKhhpbWKMHwdCkns1iojDPbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4QKbbN1BdJSxybpol/NpLGXLOkMB8GA1UdIwQY MBaAFE3IcbXd8HQLMX0eNONrJoELuYAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGNoeHRkM3dkQXN4ZlI0MDQyc21nUXU1Z0NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zNTVlZmItMjZiMC00MTEyLWI0YjUt OTNjMjk2NDBiYmZlLzEvVGNoeHRkM3dkQXN4ZlI0MDQyc21nUXU1Z0NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8zNTVlZmItMjZiMC00MTEyLWI0YjUtOTNjMjk2NDBiYmZl LzEvVGNoeHRkM3dkQXN4ZlI0MDQyc21nUXU1Z0NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU53pGClT 2aGltuE3OxF5CNJ5CfHosL3v/ZoOZFTZw9+yVG2qj78gAskB5UhlN4Ecp1JMBCA7 u9E4StGRocyV0utTdpmP/TwTtegtuI6AOfpgOYrFMhQ9leRtk+u7ZTMq2h+8aSsA CJqvUTilv49+pvrn+idC3aC+UZBSYIMSLrayTDFvqUn9Cmm9hQmWHE7gSFz/e/cl 9i3uIC4U58rLYVhCSQ4r7tBwCWGcW1mHFd+xEDP8oVH4Ouh21Ksb4YSIk6Gegw1/ s8PhGEurqSlBbSL3FbeCL8sJL/TyH3eF/lZE1fHyLofYB8zV5MvLzgA4i5TQacjS /NjsqQHx1y5Hiw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:07:00 2025 by rpki-client