This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft File: ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft (raw, json) Hash identifier: f7Wm2UnQL5/16rRY8nZAcbwaQ6XX25qmhGwHvQEO1QQ= Subject key identifier: BB:E5:B6:CB:D0:B3:FE:CE:45:30:F8:F3:7B:F4:EE:60:91:80:20:4E Authority key identifier: 4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0 Certificate issuer: /CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0 Certificate serial: 019AF42E53EA4D49F2A65BD071D37620FF46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 15:01:08 +0000 Manifest this update: Sat 06 Dec 2025 15:01:08 +0000 Manifest next update: Sun 07 Dec 2025 15:01:08 +0000 Files and hashes: 1: ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl (hash: Qu452jDtddpTj9oVqAY0g9Qxz/rPcPN8/em8E0Y5fiU=) 2: zYbNNn2pDjFT8gDS_6qFcvUdYos.roa (hash: 7AsdJdwMwtIuFiP9RKf61Dpwj0s/SnQWNIRFQ6k6zXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:53:ea:4d:49:f2:a6:5b:d0:71:d3:76:20:ff:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0 Validity Not Before: Dec 6 15:01:08 2025 GMT Not After : Dec 7 15:01:08 2025 GMT Subject: CN=bbe5b6cbd0b3fece4530f8f37bf4ee609180204e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:eb:ea:7d:a0:f3:a4:10:2a:ed:02:95:04:dd: 58:f0:3c:3a:75:ba:67:a6:be:83:d6:69:aa:c5:b1: da:e5:84:41:21:ff:92:05:bd:ab:c3:98:e5:98:eb: 31:de:c7:7a:3b:7c:f6:07:c2:4e:b4:2e:67:94:21: cf:af:6f:f1:98:34:ab:09:0e:28:9b:93:e2:f1:6a: 1e:51:61:88:02:11:15:25:72:88:f6:7f:4c:31:4c: ec:81:1e:7f:3b:8e:78:40:30:9f:b5:16:88:fb:c6: 38:07:42:7d:f1:b9:f4:99:0d:f4:b4:7b:29:5b:53: dd:83:f0:76:96:3a:1e:d4:86:1f:2b:cb:ab:30:43: 18:c4:f2:59:02:84:eb:5f:dd:a2:9f:7a:a8:3d:fa: c7:ff:41:69:9d:47:78:99:96:02:90:df:5b:59:0c: 33:a1:f9:27:4f:48:2d:5d:f3:cc:b0:5f:ce:e2:e3: d6:07:b2:8a:3c:c0:46:b1:dd:a8:78:ff:e0:78:f1: 9e:5d:ee:e4:91:ca:c8:c6:03:17:bb:0e:26:30:6e: 47:04:fb:3c:de:be:92:6b:f5:c2:e7:c4:e2:6d:ab: 99:6d:b3:ee:3a:cf:e8:11:5d:2f:75:e0:33:5d:a8: 5a:99:9c:20:72:0a:a4:03:c0:08:ed:cd:d3:2f:f1: cc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E5:B6:CB:D0:B3:FE:CE:45:30:F8:F3:7B:F4:EE:60:91:80:20:4E X509v3 Authority Key Identifier: keyid:4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:56:ff:6d:15:7b:bc:cd:86:da:c7:2c:5a:75:f1:e8:37:99: 1e:d6:8d:f5:93:9d:e2:9f:53:d4:c4:12:85:61:d6:9d:a6:38: 40:0d:12:20:77:33:ca:ab:a5:72:a2:02:62:a9:51:06:ea:bc: cb:da:f4:78:d0:df:91:36:7f:24:08:72:bc:ba:b0:25:c5:8e: af:de:39:2b:3c:c3:4b:b8:14:91:e3:26:fe:68:53:6c:3d:f7: 4e:cc:4a:df:e8:05:78:43:82:4b:9e:70:61:1a:6b:8e:4f:04: 4b:3a:c6:4b:55:a9:15:5c:ff:15:d9:47:06:f4:91:0e:7f:df: 18:a6:dd:1f:6b:2b:2d:64:34:92:2e:1f:5a:33:6e:31:04:70: 2f:3e:af:9a:65:56:55:a0:2a:fd:d4:21:fa:69:6f:4a:43:75: f0:a4:36:6e:84:3c:41:a7:c6:e5:cc:5d:45:bd:c4:c3:33:50: cf:03:94:bf:e5:be:39:e1:61:28:e2:43:54:48:94:57:43:15: c0:4b:ef:5f:29:c0:fa:01:10:a2:cd:25:09:22:c4:bc:30:f1: 91:37:6d:67:39:26:02:5e:45:23:f0:f2:e4:17:dd:31:0e:1d: 4f:42:ae:2e:e6:09:f0:38:24:67:87:7d:ec:3b:53:74:c2:a3: a3:e6:4f:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LlPqTUnyplvQcdN2IP9GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMTY3ZWU1ZjhkMmFjMGQ5Y2MwMTM3YjQxOTEyZjE4MWIw NDg5YjAwHhcNMjUxMjA2MTUwMTA4WhcNMjUxMjA3MTUwMTA4WjAzMTEwLwYDVQQD EyhiYmU1YjZjYmQwYjNmZWNlNDUzMGY4ZjM3YmY0ZWU2MDkxODAyMDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uvqfaDzpBAq7QKVBN1Y8Dw6dbpn pr6D1mmqxbHa5YRBIf+SBb2rw5jlmOsx3sd6O3z2B8JOtC5nlCHPr2/xmDSrCQ4o m5Pi8WoeUWGIAhEVJXKI9n9MMUzsgR5/O454QDCftRaI+8Y4B0J98bn0mQ30tHsp W1Pdg/B2ljoe1IYfK8urMEMYxPJZAoTrX92in3qoPfrH/0FpnUd4mZYCkN9bWQwz ofknT0gtXfPMsF/O4uPWB7KKPMBGsd2oeP/gePGeXe7kkcrIxgMXuw4mMG5HBPs8 3r6Sa/XC58TibauZbbPuOs/oEV0vdeAzXahamZwgcgqkA8AI7c3TL/HM2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvltsvQs/7ORTD483v07mCRgCBOMB8GA1UdIwQY MBaAFE4WfuX40qwNnMATe0GRLxgbBImwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGhaLTVmalNyQTJjd0JON1FaRXZHQnNFaWJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS82ZTE3OGUtOWNiZi00ODllLWFhM2Et ZjY2MmIwYTY1ZThlLzEvVGhaLTVmalNyQTJjd0JON1FaRXZHQnNFaWJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS82ZTE3OGUtOWNiZi00ODllLWFhM2EtZjY2MmIwYTY1ZThl LzEvVGhaLTVmalNyQTJjd0JON1FaRXZHQnNFaWJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFb/bRV7 vM2G2scsWnXx6DeZHtaN9ZOd4p9T1MQShWHWnaY4QA0SIHczyqulcqICYqlRBuq8 y9r0eNDfkTZ/JAhyvLqwJcWOr945KzzDS7gUkeMm/mhTbD33TsxK3+gFeEOCS55w YRprjk8ESzrGS1WpFVz/FdlHBvSRDn/fGKbdH2srLWQ0ki4fWjNuMQRwLz6vmmVW VaAq/dQh+mlvSkN18KQ2boQ8QafG5cxdRb3EwzNQzwOUv+W+OeFhKOJDVEiUV0MV wEvvXynA+gEQos0lCSLEvDDxkTdtZzkmAl5FI/Dy5BfdMQ4dT0KuLuYJ8DgkZ4d9 7DtTdMKjo+ZP1w== -----END CERTIFICATE-----Generated at Sat Dec 6 23:55:29 2025 by rpki-client