This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft File: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft (raw, json) Hash identifier: GtHrXA0gJEHrAzASvZnq+nf2tAxASfgOJOuhJur8cGU= Subject key identifier: C0:92:EC:75:F3:0B:0C:65:C9:0D:78:EE:D8:D2:62:34:41:DE:B7:66 Authority key identifier: 4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6 Certificate issuer: /CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6 Certificate serial: 019AF5E6531E7638A95789C1B5A77E6C6282 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft Manifest number: 09AB Signing time: Sat 06 Dec 2025 23:01:43 +0000 Manifest this update: Sat 06 Dec 2025 23:01:43 +0000 Manifest next update: Sun 07 Dec 2025 23:01:43 +0000 Files and hashes: 1: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl (hash: fAnIXKcENBEP5dw5HjRrnloG2mGnR/3Tj1+KVku7lwE=) 2: jkZUIqdvougoYWTFFIYTmQ_0c3I.roa (hash: FvJzMAch2URVowys51R40ZrFG4sKpVwuQwZnFuBLSQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:53:1e:76:38:a9:57:89:c1:b5:a7:7e:6c:62:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6 Validity Not Before: Dec 6 23:01:43 2025 GMT Not After : Dec 7 23:01:43 2025 GMT Subject: CN=c092ec75f30b0c65c90d78eed8d2623441deb766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:43:9c:4d:7a:4c:33:db:d7:30:7c:bb:f0:30: 99:c5:6f:6f:bb:c7:62:95:94:ef:45:45:78:57:8d: 25:f1:35:0a:6c:f3:83:5b:fa:70:15:c8:03:78:43: 55:48:f1:c6:5f:b5:89:c1:b8:ae:48:90:7d:6b:96: 70:da:82:d7:45:dd:2f:e1:c9:d7:fb:ee:af:2f:c0: c7:6c:47:db:aa:cf:65:83:77:dc:c8:78:c8:97:39: 6c:2d:aa:71:26:a3:02:6d:b5:a7:a1:62:bb:63:36: 64:cf:cc:91:3a:cd:76:e8:b0:9f:63:ce:8d:37:57: 4f:4d:9b:d1:c6:b1:b1:ae:d0:2b:8b:71:6c:b4:4d: a0:8f:40:e8:9d:dd:c6:0f:f6:07:f9:2e:d2:2c:86: 10:0d:a9:2f:10:d7:ba:e6:b7:ff:bf:9b:b2:0c:9a: ab:44:b1:2f:02:f1:2c:b3:ce:53:67:03:78:65:ba: 32:19:e7:3b:1e:ef:a7:0d:8e:eb:bd:d1:c7:5d:ae: 1b:4d:22:13:e9:12:25:a5:05:b7:71:2d:2c:f1:1a: b5:27:4f:f3:69:65:5c:dc:4b:ce:7c:dc:da:c3:2a: 15:50:11:47:50:ca:e0:b5:ba:be:50:1a:9a:e4:b2: 10:77:75:ab:45:e5:88:04:29:fd:08:4b:f7:0f:90: 98:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:92:EC:75:F3:0B:0C:65:C9:0D:78:EE:D8:D2:62:34:41:DE:B7:66 X509v3 Authority Key Identifier: keyid:4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:37:ec:72:7e:98:51:75:45:5d:7a:57:05:cf:da:b5:26:28: aa:e9:c2:7c:7a:34:44:20:9c:be:91:a0:77:e4:6d:ac:21:34: eb:1b:54:19:22:9f:ec:77:b8:4d:66:fb:aa:d1:82:fa:b3:6f: 8c:66:87:f9:f2:81:1a:6b:47:1c:9b:ca:44:96:39:c8:42:5e: d6:60:23:70:9a:75:4b:ba:07:f1:cf:b8:f8:70:c0:90:33:be: ef:4a:27:72:85:f9:a7:2e:c7:b0:3e:ef:2c:54:5e:5d:59:a0: 06:45:00:4c:27:b8:b9:ea:a9:3d:00:38:33:39:a8:8a:11:93: 6d:9b:78:0b:a4:1b:0f:db:72:10:7b:64:50:13:b0:d6:ac:9a: 08:ad:fd:bf:b3:2e:78:4e:80:cc:c0:60:a0:10:f1:d1:00:3f: c0:79:e3:f9:dc:4e:1a:62:ba:8c:ff:c7:5e:25:3a:71:14:51: 50:da:bc:0c:20:05:8d:97:73:3a:c5:ba:e3:d4:cb:72:f0:6d: 94:db:37:26:f6:80:81:67:7c:e2:10:58:25:75:55:27:c2:5a: c5:c9:c9:93:38:5f:b1:6f:86:59:44:a2:0d:c8:46:d9:fd:0a: 8e:49:3d:36:66:dc:1d:80:95:bf:a5:0a:b1:6a:0c:75:b1:80: 42:00:39:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15lMedjipV4nBtad+bGKCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjOWZiZTQ3NTYwMjhmYTQxODdhMzk5NTk1ZmFjNjVjM2Mx YzQzYzYwHhcNMjUxMjA2MjMwMTQzWhcNMjUxMjA3MjMwMTQzWjAzMTEwLwYDVQQD EyhjMDkyZWM3NWYzMGIwYzY1YzkwZDc4ZWVkOGQyNjIzNDQxZGViNzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEOcTXpMM9vXMHy78DCZxW9vu8di lZTvRUV4V40l8TUKbPODW/pwFcgDeENVSPHGX7WJwbiuSJB9a5Zw2oLXRd0v4cnX ++6vL8DHbEfbqs9lg3fcyHjIlzlsLapxJqMCbbWnoWK7YzZkz8yROs126LCfY86N N1dPTZvRxrGxrtAri3FstE2gj0Dond3GD/YH+S7SLIYQDakvENe65rf/v5uyDJqr RLEvAvEss85TZwN4ZboyGec7Hu+nDY7rvdHHXa4bTSIT6RIlpQW3cS0s8Rq1J0/z aWVc3EvOfNzawyoVUBFHUMrgtbq+UBqa5LIQd3WrReWIBCn9CEv3D5CYzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCS7HXzCwxlyQ147tjSYjRB3rdmMB8GA1UdIwQY MBaAFEyfvkdWAo+kGHo5lZX6xlw8HEPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEotLVIxWUNqNlFZZWptVmxmckdYRHdjUThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iNWZiNTgtOTI4Yy00MzhmLWJjZWYt ODU4ZjhhY2EzMjNmLzEvVEotLVIxWUNqNlFZZWptVmxmckdYRHdjUThZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9iNWZiNTgtOTI4Yy00MzhmLWJjZWYtODU4ZjhhY2EzMjNm LzEvVEotLVIxWUNqNlFZZWptVmxmckdYRHdjUThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjfscn6Y UXVFXXpXBc/atSYoqunCfHo0RCCcvpGgd+RtrCE06xtUGSKf7He4TWb7qtGC+rNv jGaH+fKBGmtHHJvKRJY5yEJe1mAjcJp1S7oH8c+4+HDAkDO+70oncoX5py7HsD7v LFReXVmgBkUATCe4ueqpPQA4MzmoihGTbZt4C6QbD9tyEHtkUBOw1qyaCK39v7Mu eE6AzMBgoBDx0QA/wHnj+dxOGmK6jP/HXiU6cRRRUNq8DCAFjZdzOsW649TLcvBt lNs3JvaAgWd84hBYJXVVJ8JaxcnJkzhfsW+GWUSiDchG2f0Kjkk9NmbcHYCVv6UK sWoMdbGAQgA5Nw== -----END CERTIFICATE-----Generated at Sun Dec 7 07:27:51 2025 by rpki-client