This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft File: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft (raw, json) Hash identifier: 0ShPn/eSDa56SIDY7nc1JaoFvgbSwUUn+xFgjE7vPg8= Subject key identifier: B1:6A:9E:D8:92:8B:54:50:08:FB:01:98:1F:4A:51:8D:FB:14:AC:2C Authority key identifier: 4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93 Certificate issuer: /CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93 Certificate serial: 019AF389516D1939711228BA844B065042ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft Manifest number: 115C Signing time: Sat 06 Dec 2025 12:00:54 +0000 Manifest this update: Sat 06 Dec 2025 12:00:54 +0000 Manifest next update: Sun 07 Dec 2025 12:00:54 +0000 Files and hashes: 1: GJVV3SoEfsa0pgtLtiw7hYQqnlY.roa (hash: X3L+IE/tHK5/79Ef7HYRs6p2vD8nOugSbhs0gMsz8zU=) 2: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl (hash: j/lwIRtsg64opKJ9H/fm1GZOrmkppLlW/X+XlBoIGu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:51:6d:19:39:71:12:28:ba:84:4b:06:50:42:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93 Validity Not Before: Dec 6 12:00:54 2025 GMT Not After : Dec 7 12:00:54 2025 GMT Subject: CN=b16a9ed8928b545008fb01981f4a518dfb14ac2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1b:00:07:3f:c8:17:01:bc:e2:a8:7c:bd:f6: 7d:6d:9a:ca:af:6a:30:ae:70:29:21:4f:65:22:95: af:33:0b:0b:49:2d:25:fc:1b:93:2d:67:50:c2:79: 55:88:f1:70:67:ba:9e:8f:a7:8d:45:57:f0:86:a7: d3:6c:cf:ce:99:8b:95:5a:fe:f5:5c:5b:4a:f6:32: ed:7c:d3:5a:6f:00:07:6a:85:36:0a:41:b5:43:f1: c0:bf:ad:41:a8:9f:63:ee:63:7d:b7:c2:4c:ae:79: 84:cd:fc:45:bf:5d:c1:9a:df:e0:a5:7f:1c:65:42: 14:65:11:76:23:43:94:b4:60:c6:e4:1f:c9:64:ad: e4:95:f2:37:43:df:fa:11:6b:c8:6a:59:3a:ef:e0: 2a:fb:80:c0:1a:90:20:46:5a:82:12:98:6f:60:8e: 12:a6:27:18:d9:1c:76:bc:0a:61:f5:5e:fb:9f:ab: 1b:e9:f9:06:30:cd:b4:c5:ba:3a:19:81:ba:2f:20: 0e:e7:e9:5b:31:c1:40:16:ad:f7:36:92:e8:f5:2e: a8:5e:58:93:cb:33:e9:c4:1d:30:8f:eb:35:98:17: 4a:d9:22:c8:15:3b:82:44:74:4f:72:bd:d6:54:50: 79:1e:f7:02:77:f9:19:75:95:ec:2e:81:80:0c:e6: 5a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6A:9E:D8:92:8B:54:50:08:FB:01:98:1F:4A:51:8D:FB:14:AC:2C X509v3 Authority Key Identifier: keyid:4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f6:e9:8a:2f:fa:a5:4e:a8:c4:f8:5e:4b:eb:f6:34:32:7d: f0:17:47:18:07:94:05:6c:fb:b4:af:89:9c:96:61:e6:25:12: 9c:63:3c:fb:66:59:c8:41:5c:20:6c:97:0f:fb:f9:b7:15:30: ba:91:4d:a1:53:91:93:bf:40:ec:02:db:31:17:c1:91:b1:57: 48:20:7f:0c:9e:c4:46:38:d4:4b:c4:6e:7d:08:e2:e6:34:78: f3:3c:72:80:52:35:88:4a:a5:d9:f1:93:14:c9:4b:94:dd:c1: a0:2d:d6:59:87:c6:86:0a:cd:0b:c1:ab:d5:aa:c5:58:78:ba: 43:2c:19:9d:c4:7a:50:31:99:72:1c:cd:9e:d6:08:dc:f3:a4: a6:be:a2:81:70:49:a5:1d:e6:79:64:75:03:ec:8d:3f:35:dd: 7b:d7:2d:99:cf:dd:5b:8d:2e:ac:17:15:84:6e:1d:4b:da:77: db:2a:72:20:c6:1d:c9:7f:87:fc:17:d7:37:23:a3:3b:66:af: 1f:1f:93:39:ac:b4:66:6e:be:79:b6:da:9d:6a:0e:04:30:d7: 42:49:0d:39:23:40:00:a2:5e:6f:64:89:49:ae:e6:2c:32:13: d8:7d:ab:82:fc:8b:82:5f:bf:0e:fa:d4:64:83:7b:80:4a:db: 69:db:5a:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziVFtGTlxEii6hEsGUELtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjM2Y0MjhmZDk4MzRjZDVlYzliYjE2MGY4YjZkY2Y0NDZl ZjVkOTMwHhcNMjUxMjA2MTIwMDU0WhcNMjUxMjA3MTIwMDU0WjAzMTEwLwYDVQQD EyhiMTZhOWVkODkyOGI1NDUwMDhmYjAxOTgxZjRhNTE4ZGZiMTRhYzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BsABz/IFwG84qh8vfZ9bZrKr2ow rnApIU9lIpWvMwsLSS0l/BuTLWdQwnlViPFwZ7qej6eNRVfwhqfTbM/OmYuVWv71 XFtK9jLtfNNabwAHaoU2CkG1Q/HAv61BqJ9j7mN9t8JMrnmEzfxFv13Bmt/gpX8c ZUIUZRF2I0OUtGDG5B/JZK3klfI3Q9/6EWvIalk67+Aq+4DAGpAgRlqCEphvYI4S picY2Rx2vAph9V77n6sb6fkGMM20xbo6GYG6LyAO5+lbMcFAFq33NpLo9S6oXliT yzPpxB0wj+s1mBdK2SLIFTuCRHRPcr3WVFB5HvcCd/kZdZXsLoGADOZa4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFqntiSi1RQCPsBmB9KUY37FKwsMB8GA1UdIwQY MBaAFEw/Qo/Zg0zV7JuxYPi23PRG712TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEQ5Q2o5bURUTlhzbTdGZy1MYmM5RWJ2WFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85MmJlNmEtOTJjNS00NTM3LWFjMzIt MTM5NTM2OTUyODk2LzEvVEQ5Q2o5bURUTlhzbTdGZy1MYmM5RWJ2WFpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy85MmJlNmEtOTJjNS00NTM3LWFjMzItMTM5NTM2OTUyODk2 LzEvVEQ5Q2o5bURUTlhzbTdGZy1MYmM5RWJ2WFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/bpii/6 pU6oxPheS+v2NDJ98BdHGAeUBWz7tK+JnJZh5iUSnGM8+2ZZyEFcIGyXD/v5txUw upFNoVORk79A7ALbMRfBkbFXSCB/DJ7ERjjUS8RufQji5jR48zxygFI1iEql2fGT FMlLlN3BoC3WWYfGhgrNC8Gr1arFWHi6QywZncR6UDGZchzNntYI3POkpr6igXBJ pR3meWR1A+yNPzXde9ctmc/dW40urBcVhG4dS9p32ypyIMYdyX+H/BfXNyOjO2av Hx+TOay0Zm6+ebbanWoOBDDXQkkNOSNAAKJeb2SJSa7mLDIT2H2rgvyLgl+/DvrU ZIN7gErbadtaeg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:26 2025 by rpki-client