This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft File: Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft (raw, json) Hash identifier: 0bckceq6pFWX57RgA4J/xw9zfeEkVtLRekHr7psPA3o= Subject key identifier: 00:EA:84:2B:57:AB:8E:FA:B0:C2:B6:C9:66:E7:50:37:2D:D7:40:76 Authority key identifier: 4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB Certificate issuer: /CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab Certificate serial: 019AF0BEF3368C95095D309BE070EFF6D33F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft Manifest number: 041C Signing time: Fri 05 Dec 2025 23:00:37 +0000 Manifest this update: Fri 05 Dec 2025 23:00:37 +0000 Manifest next update: Sat 06 Dec 2025 23:00:37 +0000 Files and hashes: 1: 1-KGFkp6-58CAfMM59AAzTBwEK5A.roa (hash: LpeybfjrfgjM/OjVBSR68hbsEhIa7z+y+IoR5F/Kfmc=) 2: Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl (hash: /ap7XDwJozNzJvjlNfCycg2eb2dbZt7o2OFpJILGLb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:f3:36:8c:95:09:5d:30:9b:e0:70:ef:f6:d3:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab Validity Not Before: Dec 5 23:00:37 2025 GMT Not After : Dec 6 23:00:37 2025 GMT Subject: CN=00ea842b57ab8efab0c2b6c966e750372dd74076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a0:3d:e1:c9:21:5b:85:85:2a:8e:8c:32:83: de:fa:8b:cb:b5:38:f6:da:e9:8a:db:d4:a7:58:2b: 2e:12:b4:14:0a:56:a0:dc:41:41:12:14:43:6d:07: 31:4a:b5:a0:b8:15:5b:c8:f5:1a:2e:10:eb:df:de: a2:ac:16:c1:9f:a6:90:fd:44:1a:f8:51:56:39:59: 9b:e8:a2:a3:81:bf:2c:85:d8:66:28:6a:53:54:6a: 16:7b:b6:85:cd:d6:4c:eb:9b:49:8f:e1:c0:33:7b: b4:3d:dc:64:83:26:62:54:96:d7:7a:37:bf:37:76: 9e:4c:84:f7:d0:bb:aa:aa:e1:7c:99:81:e8:eb:94: 46:3a:9c:6b:e9:64:6d:f3:aa:5c:3b:12:da:c7:e2: 34:76:65:9c:3e:42:5e:f1:eb:20:21:6a:55:4c:88: 50:fb:11:df:3d:c3:31:ee:26:55:ed:c4:f1:b1:9d: ad:fd:11:30:00:63:87:f1:f7:79:d9:61:1d:ec:91: 9b:f6:09:d1:ed:c3:60:7d:ef:fb:67:ac:f0:d3:12: 43:6c:6d:85:d2:fa:bf:80:45:27:2e:6f:07:43:c7: 7c:2f:f8:3c:61:d6:ab:5f:b6:28:5f:47:ba:36:6e: 6e:48:43:ee:2a:ac:81:ec:a8:d3:1b:cb:4f:18:c2: e6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EA:84:2B:57:AB:8E:FA:B0:C2:B6:C9:66:E7:50:37:2D:D7:40:76 X509v3 Authority Key Identifier: keyid:4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:3a:d1:64:5f:fe:f3:4f:29:d9:93:e0:76:f2:a7:4d:db:f0: dc:b3:a7:90:99:61:0c:74:3a:e0:be:70:5c:48:07:35:76:0d: 7c:ac:2b:df:6d:94:f8:92:75:e0:e5:a8:e8:0f:e0:28:e2:a4: 6b:6c:b2:fa:b8:af:23:e5:b9:4d:79:89:4a:fd:e3:5e:fe:cd: db:03:b5:ef:1d:af:8c:d8:87:41:43:2e:ab:e5:ef:f8:c1:d6: 49:70:14:6d:44:d9:04:1f:53:1f:9b:f2:8e:d5:94:9a:fb:64: 49:b8:58:62:65:f4:e4:93:48:32:04:f3:cf:c4:51:15:0f:87: 9f:35:7e:44:a3:07:3f:2a:2e:48:86:0f:24:d1:f2:bb:6f:ec: c7:88:31:9b:f0:7c:65:41:31:5e:04:5d:72:79:91:9b:bf:30: 7f:4b:f7:32:82:4e:85:a9:49:2b:d4:7b:1e:b4:2f:c3:ad:e7: 1b:21:37:3d:c6:64:6c:29:87:d7:b3:82:f8:84:2c:ae:e8:ed: ae:f3:17:ae:4e:a8:69:1f:c3:cf:1e:3e:bb:61:7b:12:39:8f: cb:e7:d7:8c:09:97:9a:0d:f1:29:35:5a:24:c3:ce:11:df:29: fa:56:0e:7f:bd:d9:3d:ac:3f:5d:d0:a6:05:dc:db:2f:60:de: df:ad:14:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvvM2jJUJXTCb4HDv9tM/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlOWY1MmZkNTUwNjkyYmU3ZWVjMTkyZmMzZWQyMzI3ZjVh MmY5YWIwHhcNMjUxMjA1MjMwMDM3WhcNMjUxMjA2MjMwMDM3WjAzMTEwLwYDVQQD EygwMGVhODQyYjU3YWI4ZWZhYjBjMmI2Yzk2NmU3NTAzNzJkZDc0MDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6A94ckhW4WFKo6MMoPe+ovLtTj2 2umK29SnWCsuErQUClag3EFBEhRDbQcxSrWguBVbyPUaLhDr396irBbBn6aQ/UQa +FFWOVmb6KKjgb8shdhmKGpTVGoWe7aFzdZM65tJj+HAM3u0PdxkgyZiVJbXeje/ N3aeTIT30LuqquF8mYHo65RGOpxr6WRt86pcOxLax+I0dmWcPkJe8esgIWpVTIhQ +xHfPcMx7iZV7cTxsZ2t/REwAGOH8fd52WEd7JGb9gnR7cNgfe/7Z6zw0xJDbG2F 0vq/gEUnLm8HQ8d8L/g8YdarX7YoX0e6Nm5uSEPuKqyB7KjTG8tPGMLmCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADqhCtXq476sMK2yWbnUDct10B2MB8GA1UdIwQY MBaAFE6fUv1VBpK+fuwZL8PtIyf1ovmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHA5U19WVUdrcjUtN0JrdnctMGpKX1dpLWFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kNmJhOGQtMTUwZS00NTBlLTg0OWMt ZjM4ZmEwZTcxZDk5LzEvVHA5U19WVUdrcjUtN0JrdnctMGpKX1dpLWFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9kNmJhOGQtMTUwZS00NTBlLTg0OWMtZjM4ZmEwZTcxZDk5 LzEvVHA5U19WVUdrcjUtN0JrdnctMGpKX1dpLWFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDrRZF/+ 808p2ZPgdvKnTdvw3LOnkJlhDHQ64L5wXEgHNXYNfKwr322U+JJ14OWo6A/gKOKk a2yy+rivI+W5TXmJSv3jXv7N2wO17x2vjNiHQUMuq+Xv+MHWSXAUbUTZBB9TH5vy jtWUmvtkSbhYYmX05JNIMgTzz8RRFQ+HnzV+RKMHPyouSIYPJNHyu2/sx4gxm/B8 ZUExXgRdcnmRm78wf0v3MoJOhalJK9R7HrQvw63nGyE3PcZkbCmH17OC+IQsrujt rvMXrk6oaR/Dzx4+u2F7EjmPy+fXjAmXmg3xKTVaJMPOEd8p+lYOf73ZPaw/XdCm BdzbL2De360UAA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:46 2025 by rpki-client