This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft File: TPzH4BfCyfdjLacpNHa7fkowNlo.mft (raw, json) Hash identifier: 5e8hqbF7BSKuCeSUY7B8+x4gNYPzpozYSdFzljDNRtI= Subject key identifier: 0D:25:B0:96:41:1A:73:5D:C1:0B:32:C4:C8:D4:89:39:87:FF:E0:BA Authority key identifier: 4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A Certificate issuer: /CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a Certificate serial: 019B23D17BF57920A13291F9A817E456B8C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft Manifest number: 177D Signing time: Mon 15 Dec 2025 21:01:29 +0000 Manifest this update: Mon 15 Dec 2025 21:01:29 +0000 Manifest next update: Tue 16 Dec 2025 21:01:29 +0000 Files and hashes: 1: OQKKfCP8SjNyLo9484epfP4wbRU.roa (hash: GIFqkdSx0szCVRVxH/rU2b7Y/JXh/nneSVo+VlwXpJY=) 2: TPzH4BfCyfdjLacpNHa7fkowNlo.crl (hash: zrokybKzVlsjpnEg10YHgyVYkV22O6Kigm1mjgqBHcg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d1:7b:f5:79:20:a1:32:91:f9:a8:17:e4:56:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a Validity Not Before: Dec 15 21:01:29 2025 GMT Not After : Dec 16 21:01:29 2025 GMT Subject: CN=0d25b096411a735dc10b32c4c8d4893987ffe0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fc:2f:90:96:f2:80:6c:bf:c9:ec:75:f9:c6: 74:db:08:79:fc:85:bd:c8:7e:b8:df:7d:41:c1:3d: d6:33:68:f9:cf:4b:d0:7c:b5:42:6e:a8:42:cb:8b: c3:12:1a:fa:4d:54:ac:37:bf:93:3c:5c:c8:f3:ae: 93:f9:da:ad:14:da:39:46:c7:52:a4:83:14:19:1b: 63:66:f1:cb:c2:21:af:35:9a:a0:12:c4:a7:ce:78: 01:04:0b:e2:b3:e0:e8:fe:ca:2f:83:65:38:25:77: 51:fd:de:95:34:20:05:f4:6b:a0:3f:13:35:b6:30: 76:16:83:a6:61:2f:0a:96:1c:30:1c:0d:70:02:e9: 0c:64:ee:a6:06:4c:b8:ff:66:99:88:7d:8d:9c:22: fe:c0:53:36:0a:c0:7b:2e:56:fb:17:ca:cc:ef:d7: 62:f1:75:8a:ee:1e:ce:d6:6c:ce:b9:71:47:4c:92: 20:2a:3a:e2:4f:0d:c1:29:98:c8:1d:ee:c9:83:4c: d8:28:b9:c7:90:b9:72:30:7c:41:86:ff:eb:34:9c: a1:8b:aa:80:2a:58:15:19:b4:2b:5a:f2:db:cf:93: 83:b7:3f:c9:20:67:c0:61:ed:3b:1e:28:bf:25:fb: dd:c2:93:bb:86:a3:e2:cb:8a:0b:07:61:9b:da:c0: 1c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:25:B0:96:41:1A:73:5D:C1:0B:32:C4:C8:D4:89:39:87:FF:E0:BA X509v3 Authority Key Identifier: keyid:4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:96:f3:02:c0:a4:88:c3:32:1d:4e:14:d3:d7:5c:9d:7f:28: c4:e2:f1:2c:f2:71:a2:27:51:4e:96:a7:65:7e:7c:f6:f0:b0: f9:e3:f4:4f:2c:6b:a6:01:50:3e:6f:42:0c:49:83:77:7c:84: 77:c9:46:12:46:fe:f3:4f:7c:c4:18:14:00:b9:d2:ba:c7:0d: cd:41:ac:c3:e0:76:e9:4c:c7:40:3c:bb:b6:83:60:7e:86:31: 86:70:ca:15:94:57:48:7b:be:b7:39:7a:71:1f:c7:18:20:46: 3a:8f:d6:20:39:db:ca:96:a1:29:19:a4:4d:ae:83:56:27:7b: d6:cc:24:92:4e:88:7c:9e:f9:7e:bd:0d:70:e7:98:7e:82:c3: 0d:35:e7:fa:83:6f:fe:a7:1b:a3:e1:b8:c3:51:f4:b8:72:3c: 9a:37:b6:93:4c:13:22:00:ff:d4:f3:1b:ff:63:a8:eb:e0:07: bf:d4:c5:2e:dc:f3:3c:95:f3:1a:2b:e3:09:96:0f:c8:1f:c6: 8b:75:52:0e:16:35:83:37:04:2d:76:ac:e9:99:ef:c3:b3:8b: c1:a1:b7:64:79:3b:c7:4a:2c:92:7e:9d:fd:43:94:63:7b:de: 67:e5:95:f6:d1:31:55:52:bd:17:c8:99:bd:31:cd:18:24:d9: 36:80:18:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0Xv1eSChMpH5qBfkVrjAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZmNjN2UwMTdjMmM5Zjc2MzJkYTcyOTM0NzZiYjdlNGEz MDM2NWEwHhcNMjUxMjE1MjEwMTI5WhcNMjUxMjE2MjEwMTI5WjAzMTEwLwYDVQQD EygwZDI1YjA5NjQxMWE3MzVkYzEwYjMyYzRjOGQ0ODkzOTg3ZmZlMGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPwvkJbygGy/yex1+cZ02wh5/IW9 yH64331BwT3WM2j5z0vQfLVCbqhCy4vDEhr6TVSsN7+TPFzI866T+dqtFNo5RsdS pIMUGRtjZvHLwiGvNZqgEsSnzngBBAvis+Do/sovg2U4JXdR/d6VNCAF9GugPxM1 tjB2FoOmYS8KlhwwHA1wAukMZO6mBky4/2aZiH2NnCL+wFM2CsB7Llb7F8rM79di 8XWK7h7O1mzOuXFHTJIgKjriTw3BKZjIHe7Jg0zYKLnHkLlyMHxBhv/rNJyhi6qA KlgVGbQrWvLbz5ODtz/JIGfAYe07Hii/JfvdwpO7hqPiy4oLB2Gb2sAcRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0lsJZBGnNdwQsyxMjUiTmH/+C6MB8GA1UdIwQY MBaAFEz8x+AXwsn3Yy2nKTR2u35KMDZaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFB6SDRCZkN5ZmRqTGFjcE5IYTdma293TmxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iYmVkYmUtODgyMS00YmQ4LWJiY2Mt M2FkZjliNjEzNDdkLzEvVFB6SDRCZkN5ZmRqTGFjcE5IYTdma293TmxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9iYmVkYmUtODgyMS00YmQ4LWJiY2MtM2FkZjliNjEzNDdk LzEvVFB6SDRCZkN5ZmRqTGFjcE5IYTdma293TmxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpbzAsCk iMMyHU4U09dcnX8oxOLxLPJxoidRTpanZX589vCw+eP0TyxrpgFQPm9CDEmDd3yE d8lGEkb+8098xBgUALnSuscNzUGsw+B26UzHQDy7toNgfoYxhnDKFZRXSHu+tzl6 cR/HGCBGOo/WIDnbypahKRmkTa6DVid71swkkk6IfJ75fr0NcOeYfoLDDTXn+oNv /qcbo+G4w1H0uHI8mje2k0wTIgD/1PMb/2Oo6+AHv9TFLtzzPJXzGivjCZYPyB/G i3VSDhY1gzcELXas6Znvw7OLwaG3ZHk7x0oskn6d/UOUY3veZ+WV9tExVVK9F8iZ vTHNGCTZNoAYdw== -----END CERTIFICATE-----Generated at Tue Dec 16 07:01:00 2025 by rpki-client