This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft File: TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft (raw, json) Hash identifier: mEejojJkIo//XnX/k8Y2KTO9AtyK8DgPVbyXFM+iiM0= Subject key identifier: DB:2B:0F:70:EF:3D:58:11:F2:34:30:BC:A0:A8:D0:12:78:42:5A:FE Authority key identifier: 4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47 Certificate issuer: /CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47 Certificate serial: 019AF208D118AA2BF7BF03DC24A1F89082FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:00:55 +0000 Manifest this update: Sat 06 Dec 2025 05:00:55 +0000 Manifest next update: Sun 07 Dec 2025 05:00:55 +0000 Files and hashes: 1: TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl (hash: 4WlIj4sOuXxHODs36fP6vxv2io9KXRbYT38ODyN4qno=) 2: gtQnPoHQAssVploPdQKF3wMqPqg.roa (hash: oTvtYktXpzo6IvRkclIhI8X73gjSVVDXnm/5bjUENeo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d1:18:aa:2b:f7:bf:03:dc:24:a1:f8:90:82:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47 Validity Not Before: Dec 6 05:00:55 2025 GMT Not After : Dec 7 05:00:55 2025 GMT Subject: CN=db2b0f70ef3d5811f23430bca0a8d01278425afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:16:f4:ac:71:50:af:c5:e4:c9:b6:9c:c1:d1: d8:35:e4:5d:0a:f1:61:93:c8:fb:2e:db:23:4b:c9: cc:c6:58:16:0e:a5:62:d4:43:28:b5:07:4a:77:66: a8:8d:72:9f:c6:f5:60:21:a7:6f:5f:5d:10:fc:9c: 83:ac:45:03:b9:f7:fc:4e:83:83:21:2a:c4:5a:41: 58:02:33:40:77:bf:b9:24:eb:1d:48:e1:9d:d3:45: 5e:a7:56:22:e1:ec:c2:20:e5:27:f6:d6:7f:90:fa: 6e:db:ab:f5:d3:8f:81:c5:2a:40:a0:b7:6d:08:51: 44:ca:d0:4d:29:34:8d:10:98:93:40:63:40:21:3f: 34:1c:ec:65:0c:6e:77:d9:de:34:fc:8c:7e:1e:34: 87:8d:90:e0:4a:8a:74:5f:92:34:3a:3b:55:18:f0: b4:1e:0d:37:84:44:a2:69:49:7c:95:52:7b:97:36: 44:17:a1:67:db:2d:25:55:d7:5f:67:04:1a:c8:47: 44:61:b3:81:6a:bc:1e:c6:2f:6e:45:70:b1:1e:f6: 41:f5:95:57:76:19:87:6f:72:c6:2e:de:4f:d2:ec: 2c:10:c4:e8:74:dc:70:5b:9b:96:f6:ec:db:c7:c6: 49:0c:2e:f6:9b:9b:f1:5f:a8:95:44:12:5a:e7:3c: d6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2B:0F:70:EF:3D:58:11:F2:34:30:BC:A0:A8:D0:12:78:42:5A:FE X509v3 Authority Key Identifier: keyid:4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ca:07:8d:3f:89:8b:6c:c3:a0:93:0e:d4:7e:1c:f5:25:87: b3:46:37:26:e9:ac:db:97:4b:3f:ab:04:00:be:01:cf:70:89: 20:31:8d:44:07:55:82:3f:65:52:90:5d:21:0d:f9:19:d4:a4: 90:29:79:5a:dd:b8:3b:5f:51:18:bf:dd:2b:20:4b:fa:1f:28: a8:e3:06:df:7b:73:21:ac:00:58:dc:12:3f:9c:0b:42:94:1d: b8:96:5b:82:c3:85:fa:5f:62:71:8a:b6:fe:1e:5b:80:04:4c: 5b:1d:c0:d0:08:fa:74:15:d4:05:f2:6b:88:22:3e:19:47:cf: f0:a1:9e:95:4b:7a:52:54:a3:08:c0:ba:7e:be:51:9b:53:da: 05:12:27:5c:5e:2c:61:ed:11:6a:4e:27:82:bc:0b:43:6e:8d: d2:4b:27:11:86:78:0b:50:56:77:f4:a5:7e:97:ff:44:8e:de: 45:e9:df:cc:84:fb:9c:fc:23:05:ec:48:95:73:6f:4d:be:c6: fe:d5:df:e1:36:93:30:27:73:14:5f:97:77:73:37:c0:bd:55: 3a:5f:25:68:52:10:50:ce:af:5a:6d:b3:43:fd:2b:68:13:0c: 2b:62:76:d6:26:ff:f4:15:1e:16:fd:74:ca:ab:97:3d:6e:ae: 0d:b8:e0:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNEYqiv3vwPcJKH4kIL6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMGQ1OTQzYzI0MDM3MzBkZTgxOGUzMWI5YjVmZjFkOGMx YzljNDcwHhcNMjUxMjA2MDUwMDU1WhcNMjUxMjA3MDUwMDU1WjAzMTEwLwYDVQQD EyhkYjJiMGY3MGVmM2Q1ODExZjIzNDMwYmNhMGE4ZDAxMjc4NDI1YWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBb0rHFQr8XkybacwdHYNeRdCvFh k8j7LtsjS8nMxlgWDqVi1EMotQdKd2aojXKfxvVgIadvX10Q/JyDrEUDuff8ToOD ISrEWkFYAjNAd7+5JOsdSOGd00Vep1Yi4ezCIOUn9tZ/kPpu26v104+BxSpAoLdt CFFEytBNKTSNEJiTQGNAIT80HOxlDG532d40/Ix+HjSHjZDgSop0X5I0OjtVGPC0 Hg03hESiaUl8lVJ7lzZEF6Fn2y0lVddfZwQayEdEYbOBarwexi9uRXCxHvZB9ZVX dhmHb3LGLt5P0uwsEMTodNxwW5uW9uzbx8ZJDC72m5vxX6iVRBJa5zzWUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsrD3DvPVgR8jQwvKCo0BJ4Qlr+MB8GA1UdIwQY MBaAFE0NWUPCQDcw3oGOMbm1/x2MHJxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFExWlE4SkFOekRlZ1k0eHViWF9IWXdjbkVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jY2U1YmEtZmY5My00NDM4LWE4ZTMt NGE2MzdjNmQ5OTM4LzEvVFExWlE4SkFOekRlZ1k0eHViWF9IWXdjbkVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9jY2U1YmEtZmY5My00NDM4LWE4ZTMtNGE2MzdjNmQ5OTM4 LzEvVFExWlE4SkFOekRlZ1k0eHViWF9IWXdjbkVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8oHjT+J i2zDoJMO1H4c9SWHs0Y3Jums25dLP6sEAL4Bz3CJIDGNRAdVgj9lUpBdIQ35GdSk kCl5Wt24O19RGL/dKyBL+h8oqOMG33tzIawAWNwSP5wLQpQduJZbgsOF+l9icYq2 /h5bgARMWx3A0Aj6dBXUBfJriCI+GUfP8KGelUt6UlSjCMC6fr5Rm1PaBRInXF4s Ye0Rak4ngrwLQ26N0ksnEYZ4C1BWd/Slfpf/RI7eRenfzIT7nPwjBexIlXNvTb7G /tXf4TaTMCdzFF+Xd3M3wL1VOl8laFIQUM6vWm2zQ/0raBMMK2J21ib/9BUeFv10 yquXPW6uDbjgTA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:58 2025 by rpki-client