This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json) Hash identifier: xypKB8GdLFOBVjQxIhbjyb2GSP9LPbmJtTkuPgC8iT4= Subject key identifier: A9:19:8D:48:1D:69:97:A8:7D:E1:56:E9:A9:10:D9:02:F1:9A:C7:89 Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46 Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546 Certificate serial: 019AF2AD7A296C0928F94B7381BF6C18770F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:00:46 +0000 Manifest this update: Sat 06 Dec 2025 08:00:46 +0000 Manifest next update: Sun 07 Dec 2025 08:00:46 +0000 Files and hashes: 1: dMyCW0_TBkO1nYNBL_n11IKNaBI.roa (hash: WTKaBFp1QPSs1ROafjR4WJfZR1PRtcVHfjnPURoJWEQ=) 2: iWujOO5h_XVMHY2nSFxBko0o46E.roa (hash: hfZ0O6pRdbOdpr8hVRCYtXgEcI0jSP4lHjfs8kAt2hk=) 3: qrrQR7WuIleyYS2sO7I0VvjROUo.roa (hash: 4JE74Aq/xmpPqZIRbZrMja/xvjU3RSpM11pAC7vf4sE=) 4: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: Le7OQ69i+/MFFGFhcaTpJFuRJig/IZHnHMPhv8cT3pE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:7a:29:6c:09:28:f9:4b:73:81:bf:6c:18:77:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546 Validity Not Before: Dec 6 08:00:46 2025 GMT Not After : Dec 7 08:00:46 2025 GMT Subject: CN=a9198d481d6997a87de156e9a910d902f19ac789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:24:90:d2:66:de:30:75:51:3e:d4:b2:be:f2: 09:8d:6c:ff:74:84:5d:0b:62:64:ce:9f:15:a4:c0: 8b:a5:48:91:13:6b:4a:5f:81:10:4a:63:8c:82:c3: ae:66:db:7f:f5:34:30:19:07:43:23:cd:df:31:f9: 0d:ad:1f:8e:f3:57:17:60:17:e6:0b:84:5d:5c:f5: 7f:6f:25:16:7e:4b:cb:5e:98:83:40:e3:9f:1e:9d: 1f:4d:e1:16:9b:08:65:66:fc:c7:ed:eb:cb:a9:2e: 59:21:95:19:30:1e:64:c5:bb:b3:7f:af:04:65:47: 41:1d:6c:3f:7b:7d:22:87:ea:ce:33:c5:32:f1:c0: a4:15:22:b0:94:58:d7:1d:63:69:a4:57:31:31:d4: 3f:f4:bc:7d:33:c2:8b:a9:87:05:be:3e:2f:6f:fb: 79:18:bf:80:a1:83:be:a1:13:bc:f7:3e:01:ff:d9: d5:63:b4:62:31:9c:db:0c:9f:18:c4:95:30:52:e2: b1:1d:14:b9:7e:76:61:f3:b6:11:48:7f:b2:90:be: 8f:41:34:77:04:6e:cf:57:e9:7f:33:d5:a0:8d:cc: 4b:9a:3d:92:b1:c7:e4:65:52:ee:98:b9:8f:df:c2: b3:2b:ca:13:bf:9f:6a:dd:f4:a3:55:13:be:da:44: bd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:19:8D:48:1D:69:97:A8:7D:E1:56:E9:A9:10:D9:02:F1:9A:C7:89 X509v3 Authority Key Identifier: keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c0:46:0f:f7:84:d0:f5:9e:d7:df:3f:68:63:33:be:6d:b6: 0c:fc:95:e4:80:f0:26:74:f9:96:81:48:05:bd:56:50:02:47: 4f:cc:89:7b:45:0e:dd:8d:54:51:a6:2c:7f:0c:d6:50:3c:6c: c7:a7:05:a3:e2:b0:54:a8:1a:1f:d0:b6:6f:19:25:c8:f9:2d: 03:0e:bc:24:0a:6c:f9:8c:bc:2d:77:1f:79:dc:98:3e:ad:d7: da:a6:cb:12:1f:19:06:2a:f6:18:33:33:a8:a6:d4:33:f3:de: 2f:77:b8:75:5b:44:a5:5b:26:7d:bc:14:6a:a0:a9:53:cd:2f: 09:43:e4:d5:b1:d6:c5:02:7e:13:af:6c:8b:25:48:87:7d:bc: 11:e1:e4:3f:c1:17:13:4d:3e:6f:4d:e8:a6:53:2a:8f:72:7a: 8a:ae:c6:89:3f:37:21:f6:a0:fe:50:98:9b:cf:a6:dd:08:45: 27:69:5b:0d:f1:14:e9:7e:52:71:6b:26:f0:6a:79:8a:97:0e: 44:78:31:bc:ec:ce:52:b2:f5:ab:f6:a1:3b:98:12:d8:8d:7c: f6:67:c3:4d:a8:0b:50:6f:26:9e:34:82:ec:9d:41:eb:6c:00: f9:09:45:9e:8f:8a:74:0a:43:2e:ff:ad:01:0a:2e:82:94:b5: 7f:43:0c:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXopbAko+Utzgb9sGHcPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZjE5ZWIwZGQ0OGUxYjI0OTI0OTA4YmI1YjY4NDhjYzE2 Nzg1NDYwHhcNMjUxMjA2MDgwMDQ2WhcNMjUxMjA3MDgwMDQ2WjAzMTEwLwYDVQQD EyhhOTE5OGQ0ODFkNjk5N2E4N2RlMTU2ZTlhOTEwZDkwMmYxOWFjNzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqySQ0mbeMHVRPtSyvvIJjWz/dIRd C2Jkzp8VpMCLpUiRE2tKX4EQSmOMgsOuZtt/9TQwGQdDI83fMfkNrR+O81cXYBfm C4RdXPV/byUWfkvLXpiDQOOfHp0fTeEWmwhlZvzH7evLqS5ZIZUZMB5kxbuzf68E ZUdBHWw/e30ih+rOM8Uy8cCkFSKwlFjXHWNppFcxMdQ/9Lx9M8KLqYcFvj4vb/t5 GL+AoYO+oRO89z4B/9nVY7RiMZzbDJ8YxJUwUuKxHRS5fnZh87YRSH+ykL6PQTR3 BG7PV+l/M9WgjcxLmj2SscfkZVLumLmP38KzK8oTv59q3fSjVRO+2kS97wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkZjUgdaZeofeFW6akQ2QLxmseJMB8GA1UdIwQY MBaAFLXxnrDdSOGySSSQi7W2hIzBZ4VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jZTAwMWItYTRkOC00ZjBlLTgzMWQt MzVjNjZkN2M1MjYwLzEvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9jZTAwMWItYTRkOC00ZjBlLTgzMWQtMzVjNjZkN2M1MjYw LzEvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8BGD/eE 0PWe198/aGMzvm22DPyV5IDwJnT5loFIBb1WUAJHT8yJe0UO3Y1UUaYsfwzWUDxs x6cFo+KwVKgaH9C2bxklyPktAw68JAps+Yy8LXcfedyYPq3X2qbLEh8ZBir2GDMz qKbUM/PeL3e4dVtEpVsmfbwUaqCpU80vCUPk1bHWxQJ+E69siyVIh328EeHkP8EX E00+b03oplMqj3J6iq7GiT83Ifag/lCYm8+m3QhFJ2lbDfEU6X5ScWsm8Gp5ipcO RHgxvOzOUrL1q/ahO5gS2I189mfDTagLUG8mnjSC7J1B62wA+QlFno+KdApDLv+t AQougpS1f0MMZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:32:01 2025 by rpki-client