This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft File: TPzH4BfCyfdjLacpNHa7fkowNlo.mft (raw, json) Hash identifier: DJouTMoe+ekxGVj0PUr9uTnA/sXAgbKwKD+/9nl9m7s= Subject key identifier: 3A:77:08:38:11:AA:D7:FB:39:D1:0F:C8:7F:F4:3A:C6:80:10:A9:5E Authority key identifier: 4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A Certificate issuer: /CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a Certificate serial: 019AF38937EC39FDC04B490116CEA46A4300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 12:00:47 +0000 Manifest this update: Sat 06 Dec 2025 12:00:47 +0000 Manifest next update: Sun 07 Dec 2025 12:00:47 +0000 Files and hashes: 1: OQKKfCP8SjNyLo9484epfP4wbRU.roa (hash: GIFqkdSx0szCVRVxH/rU2b7Y/JXh/nneSVo+VlwXpJY=) 2: TPzH4BfCyfdjLacpNHa7fkowNlo.crl (hash: 0B9cYlyvIC6Yk2VgJVqP63VZn6ALIbcDSk6SuZe32g8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:37:ec:39:fd:c0:4b:49:01:16:ce:a4:6a:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a Validity Not Before: Dec 6 12:00:47 2025 GMT Not After : Dec 7 12:00:47 2025 GMT Subject: CN=3a77083811aad7fb39d10fc87ff43ac68010a95e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e5:19:9b:68:f4:71:11:a5:1f:08:67:71:b1: 88:20:f7:3f:db:b3:5d:92:2f:35:bb:bf:6b:55:79: 33:c8:70:27:62:bb:b1:d3:92:6f:da:bf:26:13:88: 10:56:39:7e:4c:26:c3:ef:6d:af:af:17:45:29:ea: 7c:69:eb:e6:0b:c5:10:8f:be:83:b2:72:b2:44:4d: 46:85:70:47:f9:b7:7a:e8:31:b8:f5:4d:55:92:13: 25:fa:f6:c5:e8:6e:46:7b:a1:2a:e4:b7:7c:46:13: 4c:e4:1a:9b:64:cf:22:18:3a:aa:ae:71:8e:d8:24: 31:ab:6e:ce:6d:d8:5a:fb:4b:fb:85:7d:e5:db:1a: 29:c5:d5:54:90:36:ce:61:cc:d5:b8:a4:dc:8d:0a: f9:3b:15:ef:03:2f:6a:63:c5:44:1d:d4:e0:d2:9d: 86:c8:12:5e:11:66:79:3c:a0:d6:15:7e:13:10:81: 5a:c7:2a:23:f1:1d:f2:9f:f7:78:35:67:c9:1c:0e: 5b:e0:9e:c8:a1:35:c5:ad:38:5b:65:35:13:97:1b: bb:02:70:00:6b:04:9b:b7:73:1c:27:3b:34:49:d0: 2c:75:ed:53:cb:a5:2d:bb:c7:10:db:10:a1:c4:48: 4f:0e:51:c3:c0:4f:6f:33:ad:c8:1b:26:a9:fa:c9: 4b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:77:08:38:11:AA:D7:FB:39:D1:0F:C8:7F:F4:3A:C6:80:10:A9:5E X509v3 Authority Key Identifier: keyid:4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:cc:8e:8e:b5:9b:48:30:2d:59:b2:28:ab:42:70:bf:99:6a: 92:58:ab:a3:61:18:9a:38:b9:d2:ab:74:0b:5a:3a:d4:d8:7d: 94:c2:83:9c:60:14:6a:16:a1:37:35:24:1d:76:3f:e3:c6:90: 2a:09:f2:ae:00:ec:23:45:73:f9:96:50:54:3c:84:0d:1b:3c: 5c:60:88:6f:1d:54:ae:31:21:e6:62:2d:a8:f2:96:9b:b0:0a: 4b:a4:0c:32:0b:8e:f3:8a:e7:47:c7:6f:79:9e:cd:10:f5:f2: e7:86:30:31:0b:cd:ae:0e:75:9c:e6:93:61:87:13:5f:fd:25: 62:98:f0:e4:38:02:12:e7:19:55:40:cb:4c:5e:9a:25:b2:fa: 80:24:1b:0c:25:4d:12:d8:f1:3b:fa:56:22:51:4b:de:86:73: eb:88:f3:f6:59:85:83:ea:98:77:56:90:2b:cd:86:4a:24:34: 67:fe:9d:4f:2e:63:d0:86:b8:63:7b:ba:56:51:f6:db:8c:23: b9:59:3a:75:62:4c:c2:85:62:8f:c6:e3:31:46:bc:1e:6e:12: b7:6e:ca:ca:40:0d:1e:08:29:eb:bc:51:38:b8:31:11:35:85: 0f:55:c1:54:09:b6:ba:f3:1d:5d:d8:37:76:b2:02:95:1f:3a: 7b:9b:cb:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziTfsOf3AS0kBFs6kakMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZmNjN2UwMTdjMmM5Zjc2MzJkYTcyOTM0NzZiYjdlNGEz MDM2NWEwHhcNMjUxMjA2MTIwMDQ3WhcNMjUxMjA3MTIwMDQ3WjAzMTEwLwYDVQQD EygzYTc3MDgzODExYWFkN2ZiMzlkMTBmYzg3ZmY0M2FjNjgwMTBhOTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuUZm2j0cRGlHwhncbGIIPc/27Nd ki81u79rVXkzyHAnYrux05Jv2r8mE4gQVjl+TCbD722vrxdFKep8aevmC8UQj76D snKyRE1GhXBH+bd66DG49U1VkhMl+vbF6G5Ge6Eq5Ld8RhNM5BqbZM8iGDqqrnGO 2CQxq27Obdha+0v7hX3l2xopxdVUkDbOYczVuKTcjQr5OxXvAy9qY8VEHdTg0p2G yBJeEWZ5PKDWFX4TEIFaxyoj8R3yn/d4NWfJHA5b4J7IoTXFrThbZTUTlxu7AnAA awSbt3McJzs0SdAsde1Ty6Utu8cQ2xChxEhPDlHDwE9vM63IGyap+slLNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDp3CDgRqtf7OdEPyH/0OsaAEKleMB8GA1UdIwQY MBaAFEz8x+AXwsn3Yy2nKTR2u35KMDZaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFB6SDRCZkN5ZmRqTGFjcE5IYTdma293TmxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iYmVkYmUtODgyMS00YmQ4LWJiY2Mt M2FkZjliNjEzNDdkLzEvVFB6SDRCZkN5ZmRqTGFjcE5IYTdma293TmxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9iYmVkYmUtODgyMS00YmQ4LWJiY2MtM2FkZjliNjEzNDdk LzEvVFB6SDRCZkN5ZmRqTGFjcE5IYTdma293TmxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8yOjrWb SDAtWbIoq0Jwv5lqkliro2EYmji50qt0C1o61Nh9lMKDnGAUahahNzUkHXY/48aQ KgnyrgDsI0Vz+ZZQVDyEDRs8XGCIbx1UrjEh5mItqPKWm7AKS6QMMguO84rnR8dv eZ7NEPXy54YwMQvNrg51nOaTYYcTX/0lYpjw5DgCEucZVUDLTF6aJbL6gCQbDCVN EtjxO/pWIlFL3oZz64jz9lmFg+qYd1aQK82GSiQ0Z/6dTy5j0Ia4Y3u6VlH224wj uVk6dWJMwoVij8bjMUa8Hm4St27KykANHggp67xROLgxETWFD1XBVAm2uvMdXdg3 drIClR86e5vLkw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:52:05 2025 by rpki-client