This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft File: TS-f1cihTNyfMcRYXNYNtXz_tMI.mft (raw, json) Hash identifier: WoKvn7aK2aQc87ME2v3ta21L1Cjxmxbdm8H/tub4Fh8= Subject key identifier: 90:FB:51:4F:2D:AA:CD:3B:85:56:10:6B:9B:6B:D9:D9:F9:56:A6:ED Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2 Certificate issuer: /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2 Certificate serial: 019AF50AD96DCAB16876338ACA6F82547CC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft Manifest number: 0E26 Signing time: Sat 06 Dec 2025 19:02:00 +0000 Manifest this update: Sat 06 Dec 2025 19:02:00 +0000 Manifest next update: Sun 07 Dec 2025 19:02:00 +0000 Files and hashes: 1: 1-QMPtoomm6W5CX-SS0fyQ5AS734.roa (hash: hcd0LKLxrMub9hVDF7pi719s+IDTrzb/8hX4yl7gw2w=) 2: 8-JB4jMg3_rMGJjuIMVCBLnxwQ8.roa (hash: buBER4odhou/4TCkZQ3UeIhbfaoQJUXmTZ3cmJ4K9k8=) 3: TS-f1cihTNyfMcRYXNYNtXz_tMI.crl (hash: q9aitJbmPWTJx+YrxhZvXsw4rQ+eOUe0rokOhx+Ol4U=) 4: pSmbhIOz_v9DcZ6BjkBTv88tPZ4.roa (hash: 1vOAxGM5C9HFgFv3tm1lOiYWc4bRDbFQtmaO7PV8kkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:d9:6d:ca:b1:68:76:33:8a:ca:6f:82:54:7c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2 Validity Not Before: Dec 6 19:02:00 2025 GMT Not After : Dec 7 19:02:00 2025 GMT Subject: CN=90fb514f2daacd3b8556106b9b6bd9d9f956a6ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f5:9f:77:16:fd:a3:6b:18:46:64:5e:bc:c4: 2b:c4:45:b1:98:be:ca:35:9e:8f:91:51:fd:3d:39: 15:b2:fc:7d:d7:1a:1a:70:52:db:00:1a:f3:bc:50: a1:ff:99:24:10:51:6b:02:4d:dd:5f:53:9f:d5:a1: ed:39:1b:cc:00:28:81:fb:51:23:49:e0:ab:ed:9d: 34:4e:6b:1d:f1:5d:79:49:90:82:7b:3e:7c:bf:ed: 79:79:73:61:46:a9:9b:9f:64:42:c8:3f:c7:72:69: 3c:52:a9:66:cc:67:a7:8a:88:2e:2e:1e:16:53:7b: 3a:07:4e:2d:f1:aa:f9:aa:84:3a:93:cd:32:88:96: ca:be:00:db:aa:39:0d:aa:8a:34:b2:48:49:65:fb: 82:d6:2c:da:8b:79:88:fb:32:03:97:c7:95:83:e7: bf:76:8b:be:c0:c6:3b:9e:06:7d:8c:30:f4:86:0d: 58:d1:d7:95:c3:0e:e5:92:a6:de:f0:49:c1:4f:93: fa:5c:23:7c:6f:3f:99:4e:e5:c2:e5:66:50:ce:d8: 15:a2:8f:d7:0c:41:1d:30:cd:84:f2:92:1c:81:d8: c9:14:c9:3e:5a:d6:eb:20:07:1d:f8:f1:e8:c4:64: f0:d4:13:77:3e:d5:7e:28:75:6b:2a:f9:ed:a3:b9: d4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FB:51:4F:2D:AA:CD:3B:85:56:10:6B:9B:6B:D9:D9:F9:56:A6:ED X509v3 Authority Key Identifier: keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:6e:c3:1a:ac:8e:48:17:eb:c7:a8:26:81:85:d8:5b:e2:ab: b0:e8:d7:bd:78:d4:bf:7e:d4:4e:15:40:50:d5:6d:8f:c3:b3: 50:c6:af:0b:b0:23:9c:5c:ce:da:5c:08:09:63:a5:94:ad:27: 42:9f:c4:c6:b1:1a:98:20:fb:dc:40:c7:65:52:42:ef:6e:80: 42:35:6e:8b:81:d0:a4:96:2d:7d:d5:d5:48:fa:38:2a:2b:d7: 70:5a:05:65:c8:7e:16:64:b3:70:0f:b2:e8:8e:22:dc:a1:c0: a9:6a:2a:12:81:a8:70:d9:58:c8:8a:48:9b:c1:4a:8c:a3:1c: ff:f3:d3:b9:a8:8f:13:d8:1c:59:84:d5:85:66:7a:42:2e:9c: ed:bb:ba:9d:49:2c:24:53:4d:af:ba:86:cb:66:03:a6:a6:20: 80:06:a8:64:c5:22:98:fd:87:72:1d:8e:8d:00:83:45:f2:f7: ea:b3:41:49:bc:22:e9:8d:93:a8:41:5d:55:d4:98:04:6e:e6: 7e:da:9c:ec:59:58:ff:81:85:02:80:f0:ac:72:a7:b3:e1:74: 5f:59:0e:44:db:c4:27:38:77:e3:32:0b:e0:36:a0:6a:27:c7: c3:1e:b5:0e:6a:d0:6d:b3:16:8a:bc:9b:82:88:46:11:01:7f: d3:d8:5a:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CtltyrFodjOKym+CVHzDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMmY5ZmQ1YzhhMTRjZGM5ZjMxYzQ1ODVjZDYwZGI1N2Nm ZmI0YzIwHhcNMjUxMjA2MTkwMjAwWhcNMjUxMjA3MTkwMjAwWjAzMTEwLwYDVQQD Eyg5MGZiNTE0ZjJkYWFjZDNiODU1NjEwNmI5YjZiZDlkOWY5NTZhNmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/Wfdxb9o2sYRmRevMQrxEWxmL7K NZ6PkVH9PTkVsvx91xoacFLbABrzvFCh/5kkEFFrAk3dX1Of1aHtORvMACiB+1Ej SeCr7Z00Tmsd8V15SZCCez58v+15eXNhRqmbn2RCyD/Hcmk8UqlmzGenioguLh4W U3s6B04t8ar5qoQ6k80yiJbKvgDbqjkNqoo0skhJZfuC1izai3mI+zIDl8eVg+e/ dou+wMY7ngZ9jDD0hg1Y0deVww7lkqbe8EnBT5P6XCN8bz+ZTuXC5WZQztgVoo/X DEEdMM2E8pIcgdjJFMk+WtbrIAcd+PHoxGTw1BN3PtV+KHVrKvnto7nUwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJD7UU8tqs07hVYQa5tr2dn5VqbtMB8GA1UdIwQY MBaAFE0vn9XIoUzcnzHEWFzWDbV8/7TCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kYTRlNDYtMmE5My00NGE0LWI4ZTMt YzIxMzNkZDgxYjU2LzEvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9kYTRlNDYtMmE5My00NGE0LWI4ZTMtYzIxMzNkZDgxYjU2 LzEvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArm7DGqyO SBfrx6gmgYXYW+KrsOjXvXjUv37UThVAUNVtj8OzUMavC7AjnFzO2lwICWOllK0n Qp/ExrEamCD73EDHZVJC726AQjVui4HQpJYtfdXVSPo4KivXcFoFZch+FmSzcA+y 6I4i3KHAqWoqEoGocNlYyIpIm8FKjKMc//PTuaiPE9gcWYTVhWZ6Qi6c7bu6nUks JFNNr7qGy2YDpqYggAaoZMUimP2Hch2OjQCDRfL36rNBSbwi6Y2TqEFdVdSYBG7m ftqc7FlY/4GFAoDwrHKns+F0X1kORNvEJzh34zIL4DagaifHwx61DmrQbbMWiryb gohGEQF/09havw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:41:19 2025 by rpki-client