This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft File: TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft (raw, json) Hash identifier: 5kPK2ZbLNGHXQUFdH3EHhINfzEZCN2NqrXmpGJN07k4= Subject key identifier: 67:23:4F:70:7F:A9:70:02:EC:B8:9B:98:E7:40:76:D7:F7:1E:D9:59 Authority key identifier: 4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3 Certificate issuer: /CN=4c8343edc843542f529fbc3e650cb6578c9206c3 Certificate serial: 019AF19B871AD6071446BC8DE2463C30FA7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft Manifest number: 0FBC Signing time: Sat 06 Dec 2025 03:01:32 +0000 Manifest this update: Sat 06 Dec 2025 03:01:32 +0000 Manifest next update: Sun 07 Dec 2025 03:01:32 +0000 Files and hashes: 1: TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl (hash: wWEO2wGC5wYXGhlyUQDCnzwTHPMcYo3HzvBt0CwRi3o=) 2: yO8yGDlp-pgPsfCtW6-Sdqgf6z8.roa (hash: SH391E3HYBBZSzKR5WZ5E1ALuIU3dss9i9wIgwa0Lyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:87:1a:d6:07:14:46:bc:8d:e2:46:3c:30:fa:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c8343edc843542f529fbc3e650cb6578c9206c3 Validity Not Before: Dec 6 03:01:32 2025 GMT Not After : Dec 7 03:01:32 2025 GMT Subject: CN=67234f707fa97002ecb89b98e74076d7f71ed959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:83:4f:39:6d:52:98:ec:7e:6b:52:35:df:a2: 00:80:11:78:37:b2:e1:99:99:cd:59:9c:19:b0:5f: 90:c6:cf:4b:6c:85:b8:e0:d9:99:ae:e2:d2:f1:75: 49:34:55:49:c2:b0:9a:5d:32:a2:8b:45:0b:ed:f7: 20:e0:31:f6:35:50:5c:af:d0:cc:ff:42:05:7e:0f: ee:73:8e:05:35:1f:49:16:83:a2:64:32:c4:05:7b: 5d:42:a6:83:2b:69:94:08:84:47:c4:3d:32:40:3e: 1b:9b:33:eb:fd:33:48:e1:47:19:50:7f:7c:5b:34: 16:a2:92:4c:e5:b9:79:0e:62:24:9a:53:af:34:65: c2:20:d3:8f:0d:7e:5d:28:e4:ee:ff:63:79:a4:cd: b4:41:ab:04:6d:d0:26:f5:f2:98:f0:4b:c0:9e:89: 88:3a:48:1a:b7:a8:fb:df:67:22:0b:12:0d:12:6e: 39:32:e7:4b:13:c7:4e:ff:63:80:50:f2:b1:04:6c: d4:8d:3d:e1:17:b1:df:03:77:57:c0:b8:92:f6:32: c4:7c:f5:23:0c:67:be:71:fc:53:b0:28:b8:69:ef: 89:a9:d3:4e:12:73:4a:4a:03:c4:bc:ae:ee:d0:4b: 61:1a:08:7b:52:7d:7e:59:2e:87:0d:d4:cd:5b:45: 42:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:23:4F:70:7F:A9:70:02:EC:B8:9B:98:E7:40:76:D7:F7:1E:D9:59 X509v3 Authority Key Identifier: keyid:4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:04:7e:3d:b4:3b:b6:b0:93:5e:40:e5:1f:8f:30:a0:5f:2a: 8f:12:09:8b:a2:59:09:94:80:f8:36:fc:50:47:6e:61:12:c2: 23:c9:4a:36:fd:c6:5a:00:7f:aa:a1:0a:ad:92:b0:fb:62:46: a6:08:99:d5:f2:a7:38:83:df:ee:1f:ed:04:c7:b1:4e:a0:5e: 1d:fd:c0:bd:5c:6a:5e:e4:cf:b7:70:b3:2b:63:f7:d7:40:da: 9e:7f:8d:5c:13:ca:12:d8:40:58:cf:b0:f4:7d:db:e3:f4:d0: 4e:5e:c2:d7:f1:d8:9e:b9:0f:f9:36:15:ad:58:b7:49:00:5f: e3:09:c9:9e:fb:ac:6f:47:22:af:e8:e7:0e:83:19:48:e3:96: ad:f1:6e:bb:28:a9:91:5b:33:91:84:ce:2a:d7:b1:ab:af:ad: 71:e9:14:fa:ac:7c:94:b1:fb:a4:13:a6:9f:bb:fd:6c:33:70: c8:ee:b0:f5:10:26:10:0c:a9:a6:75:1d:f1:1a:73:40:b3:c2: ff:81:04:da:ee:a1:9d:3b:86:d0:d6:98:cb:b6:80:0e:35:6a: 22:ef:25:56:ee:28:61:46:57:3a:27:06:a8:5e:9f:82:20:69: 7b:63:c5:e6:4e:03:f5:52:3c:c9:c2:7e:09:f5:6a:f1:eb:f7: f6:62:27:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4ca1gcURryN4kY8MPp+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODM0M2VkYzg0MzU0MmY1MjlmYmMzZTY1MGNiNjU3OGM5 MjA2YzMwHhcNMjUxMjA2MDMwMTMyWhcNMjUxMjA3MDMwMTMyWjAzMTEwLwYDVQQD Eyg2NzIzNGY3MDdmYTk3MDAyZWNiODliOThlNzQwNzZkN2Y3MWVkOTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyINPOW1SmOx+a1I136IAgBF4N7Lh mZnNWZwZsF+Qxs9LbIW44NmZruLS8XVJNFVJwrCaXTKii0UL7fcg4DH2NVBcr9DM /0IFfg/uc44FNR9JFoOiZDLEBXtdQqaDK2mUCIRHxD0yQD4bmzPr/TNI4UcZUH98 WzQWopJM5bl5DmIkmlOvNGXCINOPDX5dKOTu/2N5pM20QasEbdAm9fKY8EvAnomI Okgat6j732ciCxINEm45MudLE8dO/2OAUPKxBGzUjT3hF7HfA3dXwLiS9jLEfPUj DGe+cfxTsCi4ae+JqdNOEnNKSgPEvK7u0EthGgh7Un1+WS6HDdTNW0VCKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcjT3B/qXAC7LibmOdAdtf3HtlZMB8GA1UdIwQY MBaAFEyDQ+3IQ1QvUp+8PmUMtleMkgbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVElORDdjaERWQzlTbjd3LVpReTJWNHlTQnNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC84ZTgyMTgtNmZiNi00ZTY5LTkyZTYt ZTljZTI5MWQyMThmLzEvVElORDdjaERWQzlTbjd3LVpReTJWNHlTQnNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC84ZTgyMTgtNmZiNi00ZTY5LTkyZTYtZTljZTI5MWQyMThm LzEvVElORDdjaERWQzlTbjd3LVpReTJWNHlTQnNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAR+PbQ7 trCTXkDlH48woF8qjxIJi6JZCZSA+Db8UEduYRLCI8lKNv3GWgB/qqEKrZKw+2JG pgiZ1fKnOIPf7h/tBMexTqBeHf3AvVxqXuTPt3CzK2P310Dann+NXBPKEthAWM+w 9H3b4/TQTl7C1/HYnrkP+TYVrVi3SQBf4wnJnvusb0cir+jnDoMZSOOWrfFuuyip kVszkYTOKtexq6+tcekU+qx8lLH7pBOmn7v9bDNwyO6w9RAmEAyppnUd8RpzQLPC /4EE2u6hnTuG0NaYy7aADjVqIu8lVu4oYUZXOicGqF6fgiBpe2PF5k4D9VI8ycJ+ CfVq8ev39mIndQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:51 2025 by rpki-client