This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft File: TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json) Hash identifier: 7Hdkb8k03KiwoAj/L+ZPlW/TCMNgdOLyNT85nEgXGX4= Subject key identifier: 93:42:06:D3:F7:85:F8:4B:60:21:F2:72:2C:48:E7:74:F1:19:A6:D1 Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16 Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16 Certificate serial: 019AF2400CCD76F403933E5E98D726752942 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft Manifest number: 0623 Signing time: Sat 06 Dec 2025 06:01:15 +0000 Manifest this update: Sat 06 Dec 2025 06:01:15 +0000 Manifest next update: Sun 07 Dec 2025 06:01:15 +0000 Files and hashes: 1: S_Xx9-8zCphJzSWDqTG616N4Rxk.roa (hash: V5J5cYmKRxz4Xbqlmv0bBd8iH4Q+4weH7tvjv/5AKq0=) 2: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: zBAMEuCOmr1flkXkZaPMZQN9lSIeOYsBVHvU07Om1j4=) 3: Zm0Dq2AnN_oGbsWr2dkm8Ah92JY.roa (hash: K56Rc+BrZCeT8J+nXUlf16wW06qkAS6ZBAEr5balTOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:0c:cd:76:f4:03:93:3e:5e:98:d7:26:75:29:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16 Validity Not Before: Dec 6 06:01:15 2025 GMT Not After : Dec 7 06:01:15 2025 GMT Subject: CN=934206d3f785f84b6021f2722c48e774f119a6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:34:bb:b4:23:02:16:2f:d0:52:42:e9:e5:2c: 9d:41:77:81:cd:ac:92:a5:8f:cc:a1:fc:f6:c3:2e: 54:ce:91:0e:8a:e3:cf:9d:2d:b8:d0:d7:fc:9d:e9: 92:1f:77:b1:a9:b8:5c:c3:3c:e7:a3:ae:c2:fb:8e: 52:84:05:8e:1f:7c:ff:d6:cd:1d:e2:d4:b4:cb:ae: 78:48:46:77:ac:6a:0c:14:c0:ba:b6:ff:b0:4a:b4: c9:78:f8:08:f2:f1:66:0e:92:3e:30:96:72:04:4e: c0:e5:4a:9a:61:7e:2e:93:45:da:0c:30:6e:e2:0d: 9e:11:6e:d0:d6:c8:5f:ad:de:0f:5a:ab:d4:7d:10: b1:8c:11:05:9a:72:fd:61:d2:80:42:8d:26:ae:6a: d6:a9:f9:3d:64:bb:b8:23:e5:0c:5e:2f:a0:aa:fb: c6:a7:c1:0f:f1:17:09:7f:e5:5b:16:f1:5d:0f:e5: c6:67:32:68:33:4e:b8:74:45:e5:48:c1:e1:4f:04: 29:ef:00:b1:99:0f:90:2a:55:79:3b:33:8c:30:82: 39:b5:23:c3:e3:f6:88:81:38:db:53:a0:5d:6e:8f: 4e:cf:ad:19:79:67:c3:af:3b:13:87:e1:50:c0:9f: 20:cb:f5:a3:16:09:ae:39:11:ea:41:d4:dd:56:1d: 05:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:42:06:D3:F7:85:F8:4B:60:21:F2:72:2C:48:E7:74:F1:19:A6:D1 X509v3 Authority Key Identifier: keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:e0:dd:9e:f7:b9:17:54:d0:14:c6:00:a0:34:f2:f2:8a:c8: 7a:bf:7a:1e:66:cc:8b:29:c2:56:f8:46:40:5e:66:3a:65:d3: dd:15:24:8f:61:9b:b1:89:44:62:62:86:80:7c:81:8c:05:d2: ef:88:65:fb:b5:02:f0:a7:f6:7e:3d:28:53:a9:37:f9:36:b6: 2d:53:b9:d4:5a:f8:8e:cc:9a:71:ec:93:c2:d4:84:87:5d:dd: 34:8c:4e:ba:cc:51:67:16:f2:45:7f:29:23:b3:bd:ac:87:46: 0c:76:5c:fa:94:65:83:8e:34:bc:be:dc:84:06:3a:4e:c0:07: e0:cd:8b:7d:a3:cd:49:b0:68:62:40:79:cd:81:e0:ff:31:8e: d1:ae:ed:c1:ad:fd:1a:c6:77:1d:66:a5:d6:24:a9:ef:bd:d7: 0e:8c:bd:7b:1d:06:b3:a4:47:a9:28:1c:10:bb:62:92:eb:ab: de:f4:b5:39:00:6f:36:bf:1d:2d:28:d6:9b:cd:70:09:4c:83: 2d:99:ff:88:75:7a:28:01:7d:90:f1:95:9c:9e:09:6b:12:cd: 0b:62:86:ab:36:50:07:ce:b1:a8:1b:d7:c1:b7:42:0a:62:b1: 90:c3:81:a1:79:25:db:3f:e0:83:31:d7:18:8b:f2:71:87:e3: 8b:8c:96:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAzNdvQDkz5emNcmdSlCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZjgwODAyYzY1NzlhNGQ0YTEwNjA4ZGNmOTJlOWFjZTk5 MDViMTYwHhcNMjUxMjA2MDYwMTE1WhcNMjUxMjA3MDYwMTE1WjAzMTEwLwYDVQQD Eyg5MzQyMDZkM2Y3ODVmODRiNjAyMWYyNzIyYzQ4ZTc3NGYxMTlhNmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzS7tCMCFi/QUkLp5SydQXeBzayS pY/Mofz2wy5UzpEOiuPPnS240Nf8nemSH3exqbhcwzzno67C+45ShAWOH3z/1s0d 4tS0y654SEZ3rGoMFMC6tv+wSrTJePgI8vFmDpI+MJZyBE7A5UqaYX4uk0XaDDBu 4g2eEW7Q1shfrd4PWqvUfRCxjBEFmnL9YdKAQo0mrmrWqfk9ZLu4I+UMXi+gqvvG p8EP8RcJf+VbFvFdD+XGZzJoM064dEXlSMHhTwQp7wCxmQ+QKlV5OzOMMII5tSPD 4/aIgTjbU6Bdbo9Oz60ZeWfDrzsTh+FQwJ8gy/WjFgmuORHqQdTdVh0FTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNCBtP3hfhLYCHycixI53TxGabRMB8GA1UdIwQY MBaAFEz4CALGV5pNShBgjc+S6azpkFsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zOThiYmItMTg0Zi00ODUxLWIyYTAt OTFmNDlkOGQxMTVkLzEvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8zOThiYmItMTg0Zi00ODUxLWIyYTAtOTFmNDlkOGQxMTVk LzEvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcODdnve5 F1TQFMYAoDTy8orIer96HmbMiynCVvhGQF5mOmXT3RUkj2GbsYlEYmKGgHyBjAXS 74hl+7UC8Kf2fj0oU6k3+Ta2LVO51Fr4jsyaceyTwtSEh13dNIxOusxRZxbyRX8p I7O9rIdGDHZc+pRlg440vL7chAY6TsAH4M2LfaPNSbBoYkB5zYHg/zGO0a7twa39 GsZ3HWal1iSp773XDoy9ex0Gs6RHqSgcELtikuur3vS1OQBvNr8dLSjWm81wCUyD LZn/iHV6KAF9kPGVnJ4JaxLNC2KGqzZQB86xqBvXwbdCCmKxkMOBoXkl2z/ggzHX GIvycYfji4yWCA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:42:57 2025 by rpki-client