This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json) Hash identifier: 3VSbRiujuH/ZNLpRoSzsxxwMRWknytvSxeqMMcylwQU= Subject key identifier: 1F:73:7C:B9:BA:5A:23:A5:86:1D:9C:B4:52:4B:CE:71:DD:54:42:D7 Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8 Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8 Certificate serial: 019AF38998FB1E46B1D126D3B9ACB8318F8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 12:01:12 +0000 Manifest this update: Sat 06 Dec 2025 12:01:12 +0000 Manifest next update: Sun 07 Dec 2025 12:01:12 +0000 Files and hashes: 1: 3NL0_43JO4ViZMUt6FOGd4wRJes.roa (hash: iMUE0vTHXLYCmLZqj0qdPBpz5FgK9qmOUf7yFoe48OI=) 2: 4pgipsDtjzVZOnA4qzWqk83-xSA.roa (hash: nd8vlth0pBWJ/Is/avNVqT3xb/Gc3yDSmhppSZMRqxM=) 3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: 3UMyv8CrgIrgRiIf5YShe447qRtbrGxaAieuAeOZLWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:98:fb:1e:46:b1:d1:26:d3:b9:ac:b8:31:8f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8 Validity Not Before: Dec 6 12:01:12 2025 GMT Not After : Dec 7 12:01:12 2025 GMT Subject: CN=1f737cb9ba5a23a5861d9cb4524bce71dd5442d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cb:a7:14:0a:b3:ec:7c:f5:e0:98:09:15:5b: 85:6d:02:9d:56:74:cb:ce:8b:b8:43:cb:28:b8:88: 40:e4:2a:46:46:d8:10:09:09:3c:c7:13:fd:bb:0a: 0e:85:46:18:29:85:7f:23:fd:60:e3:94:b7:0f:43: 54:ab:78:2d:c5:89:62:80:bc:e9:ad:a8:60:c9:48: 36:c7:62:ca:0d:98:af:9a:92:a7:ba:27:04:a1:74: a2:fa:64:48:00:78:ab:78:31:59:c3:9d:ed:b2:e3: 07:eb:a4:ed:ec:68:af:9d:56:3a:89:13:de:c4:7a: 61:1d:55:4b:f0:68:b3:c3:44:c1:ba:8b:a2:bb:9d: f6:f2:cd:d0:85:b3:e9:cf:53:c0:35:53:9d:b2:43: 48:d1:03:f8:e7:d0:54:04:52:4e:f5:7c:48:93:71: 29:1b:88:71:dd:0e:5c:35:b6:27:63:e5:0e:1a:f2: bd:3c:26:98:e9:29:9d:23:c6:96:3a:48:0d:7a:bd: 1b:10:4b:ce:8a:1c:a4:83:5c:dc:f9:c4:c9:24:e2: f2:c0:44:55:b9:d4:93:6c:46:22:6e:92:3c:4c:00: af:11:27:09:5f:15:d9:a6:2d:1e:db:7f:4f:67:12: cc:51:1a:42:f0:ea:b5:50:74:ed:50:b1:d4:5d:ec: c7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:73:7C:B9:BA:5A:23:A5:86:1D:9C:B4:52:4B:CE:71:DD:54:42:D7 X509v3 Authority Key Identifier: keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:3c:89:6d:50:cf:2b:6e:1c:77:3c:a3:cc:f8:01:15:55:1d: 1f:a1:f7:07:11:3a:48:d9:ef:43:6f:9c:d7:91:92:9d:67:de: 3e:61:8c:5f:16:6e:13:99:fb:a1:c5:b5:7b:7b:7b:21:a9:4e: 3f:94:2c:38:f2:0f:38:f0:af:5a:9a:f2:70:87:cd:06:62:6d: 67:03:23:fa:88:e6:b9:24:c2:3b:15:cb:70:f4:b4:15:ee:da: 13:9e:6a:6a:36:1a:0d:3e:d8:05:ea:66:9e:2e:11:6b:2c:e2: fd:2e:d0:61:c5:99:88:ad:27:de:99:68:92:b9:29:5d:09:ad: 1d:54:8c:f3:2e:95:da:40:a9:0a:d8:da:8a:52:6d:e1:fe:48: eb:10:2b:0c:53:78:e2:b0:3f:2f:8f:6d:50:c6:98:46:e3:05: 9e:83:ac:e8:f2:d3:9a:ce:72:1c:0e:fd:ad:93:de:ba:c0:e1: 8b:92:1e:c2:14:f4:2f:8d:e7:ee:26:81:1f:50:0c:91:5c:6a: d7:7d:ce:fb:81:58:9b:13:82:42:ed:66:5e:4f:7c:36:ed:a8: 73:a4:ee:58:b5:78:5f:d8:a4:b9:d8:6c:fe:95:61:b2:0a:e4: 5a:69:9f:1d:ce:8d:f3:94:e6:5e:8d:11:0e:68:d6:3d:a2:18: 03:9d:b4:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZj7Hkax0SbTuay4MY+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMGYzOWUyY2FhZThlMmNmMTRiY2M0MWIyM2YzYzg2ZTFh NzIwZjgwHhcNMjUxMjA2MTIwMTEyWhcNMjUxMjA3MTIwMTEyWjAzMTEwLwYDVQQD EygxZjczN2NiOWJhNWEyM2E1ODYxZDljYjQ1MjRiY2U3MWRkNTQ0MmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38unFAqz7Hz14JgJFVuFbQKdVnTL zou4Q8souIhA5CpGRtgQCQk8xxP9uwoOhUYYKYV/I/1g45S3D0NUq3gtxYligLzp rahgyUg2x2LKDZivmpKnuicEoXSi+mRIAHireDFZw53tsuMH66Tt7GivnVY6iRPe xHphHVVL8Gizw0TBuouiu5328s3QhbPpz1PANVOdskNI0QP459BUBFJO9XxIk3Ep G4hx3Q5cNbYnY+UOGvK9PCaY6SmdI8aWOkgNer0bEEvOihykg1zc+cTJJOLywERV udSTbEYibpI8TACvEScJXxXZpi0e239PZxLMURpC8Oq1UHTtULHUXezHlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9zfLm6WiOlhh2ctFJLznHdVELXMB8GA1UdIwQY MBaAFE4POeLKro4s8UvMQbI/PIbhpyD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNWUzY2MtYzFjZC00ZDY4LWJlYzMt MWIwOGY3ZjUwMTVkLzEvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kNWUzY2MtYzFjZC00ZDY4LWJlYzMtMWIwOGY3ZjUwMTVk LzEvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTyJbVDP K24cdzyjzPgBFVUdH6H3BxE6SNnvQ2+c15GSnWfePmGMXxZuE5n7ocW1e3t7IalO P5QsOPIPOPCvWprycIfNBmJtZwMj+ojmuSTCOxXLcPS0Fe7aE55qajYaDT7YBepm ni4Rayzi/S7QYcWZiK0n3plokrkpXQmtHVSM8y6V2kCpCtjailJt4f5I6xArDFN4 4rA/L49tUMaYRuMFnoOs6PLTms5yHA79rZPeusDhi5IewhT0L43n7iaBH1AMkVxq 133O+4FYmxOCQu1mXk98Nu2oc6TuWLV4X9ikudhs/pVhsgrkWmmfHc6N85TmXo0R DmjWPaIYA520xA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:38:46 2025 by rpki-client