This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft File: TpisyG9BxHFbEMHdUmMcMqgZSjA.mft (raw, json) Hash identifier: t1WG8DpM7vamJohJAs+5fFx80pTURgVzK8fiKt06O4c= Subject key identifier: 9A:E4:2D:8F:A5:30:9F:5F:72:74:58:EA:36:A4:E5:3B:19:E3:08:72 Authority key identifier: 4E:98:AC:C8:6F:41:C4:71:5B:10:C1:DD:52:63:1C:32:A8:19:4A:30 Certificate issuer: /CN=4e98acc86f41c4715b10c1dd52631c32a8194a30 Certificate serial: 019AF50AD7A77600D53F3D4016BF44824780 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TpisyG9BxHFbEMHdUmMcMqgZSjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft Manifest number: 124C Signing time: Sat 06 Dec 2025 19:01:59 +0000 Manifest this update: Sat 06 Dec 2025 19:01:59 +0000 Manifest next update: Sun 07 Dec 2025 19:01:59 +0000 Files and hashes: 1: TpisyG9BxHFbEMHdUmMcMqgZSjA.crl (hash: NBGPazZ65g8zYSSeg6wBcw1rtxCCYtLmYBohkz6F1y0=) 2: ohqKuhVASRrB9T2VKGm2oxF8gPE.roa (hash: BAH92y9b1xJW2sbjfw7QOsduF26YD433wmBfFvaPMSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft rsync://rpki.ripe.net/repository/DEFAULT/TpisyG9BxHFbEMHdUmMcMqgZSjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:d7:a7:76:00:d5:3f:3d:40:16:bf:44:82:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e98acc86f41c4715b10c1dd52631c32a8194a30 Validity Not Before: Dec 6 19:01:59 2025 GMT Not After : Dec 7 19:01:59 2025 GMT Subject: CN=9ae42d8fa5309f5f727458ea36a4e53b19e30872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8f:10:6c:4d:e2:c2:8c:b4:8a:86:af:95:d6: 43:70:c5:2c:ee:02:7e:39:3d:ee:2d:10:2a:63:a9: 79:54:a3:77:68:79:09:18:7f:2b:bc:cc:e8:07:23: 3b:d7:7b:a8:1a:1d:c3:99:c8:a1:24:cf:01:7d:bc: 35:06:09:88:7a:6f:de:37:32:8f:de:0b:f6:c4:12: a5:00:85:60:16:17:40:8b:87:81:3e:a1:8a:8f:cf: 42:ab:12:1a:ec:d7:6d:57:54:a8:a9:f8:fd:5e:65: ec:f1:d7:84:32:2f:4d:80:21:18:3b:19:3b:5d:45: 9b:24:c7:63:61:ae:f5:c6:2f:f7:1e:b4:28:57:5f: 9c:c9:20:a1:aa:3d:e2:83:20:9e:55:e5:e8:2e:12: 1d:e3:82:f2:dc:01:4a:d0:d5:02:46:d5:8a:9a:4e: f4:db:df:fc:ac:86:2e:0d:8c:3f:07:1b:c9:25:f2: 12:0e:9f:03:89:cf:f1:34:7b:03:40:f7:31:7d:54: ce:94:2e:c0:2e:9a:1c:5d:2b:bc:0a:32:46:09:e0: 8e:8b:f2:ee:4f:6d:03:56:6d:58:0f:ef:ce:ab:a5: 9e:9d:1e:29:2c:74:aa:94:92:4b:28:b8:23:ff:e7: d2:a6:ba:ce:97:d3:43:e8:85:1e:c8:f5:c7:3e:08: 8d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E4:2D:8F:A5:30:9F:5F:72:74:58:EA:36:A4:E5:3B:19:E3:08:72 X509v3 Authority Key Identifier: keyid:4E:98:AC:C8:6F:41:C4:71:5B:10:C1:DD:52:63:1C:32:A8:19:4A:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TpisyG9BxHFbEMHdUmMcMqgZSjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:fb:85:71:40:55:05:0f:8f:70:5d:76:1a:87:52:ac:69:a8: 5a:49:ba:f6:e2:c3:40:88:25:f3:77:38:41:59:cc:98:c9:45: ed:e6:08:18:6e:6b:ae:d5:a5:3c:12:ef:b0:1a:e2:6d:7b:62: cf:fe:fa:a0:54:4c:98:56:bd:be:d6:fd:d9:40:76:fe:48:52: 1e:a8:13:73:b3:6a:ef:ba:e0:57:fa:6d:c9:40:ad:b4:a6:8e: 7e:ba:a4:81:4c:2e:42:7f:f0:99:fa:d5:38:58:f9:8b:bd:30: bb:65:4c:ca:ea:2a:58:63:3c:99:b6:da:37:2f:60:c0:f9:87: d6:a3:c4:f4:49:3e:c2:fb:26:8a:b5:77:b1:de:2a:f5:2a:c2: c7:46:a4:eb:94:36:b6:ce:70:93:f4:5f:f4:e6:db:0c:e8:47: e7:f4:f8:16:f1:1f:d3:a9:6f:f6:9e:cd:ad:f7:37:bf:91:ee: cb:d9:b9:81:50:f8:bf:d3:28:57:63:ec:7a:e3:89:c9:c2:09: 61:2d:7a:4a:05:75:57:3f:02:c9:9c:b3:2b:6d:d9:96:22:0f: 57:df:b1:65:4e:de:df:ca:4c:67:13:7d:90:0c:8e:6e:e1:ae: 63:01:44:cc:fa:4f:18:ae:4a:f7:0a:6e:41:73:89:45:ac:05: 7b:d2:94:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CtendgDVPz1AFr9EgkeAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlOThhY2M4NmY0MWM0NzE1YjEwYzFkZDUyNjMxYzMyYTgx OTRhMzAwHhcNMjUxMjA2MTkwMTU5WhcNMjUxMjA3MTkwMTU5WjAzMTEwLwYDVQQD Eyg5YWU0MmQ4ZmE1MzA5ZjVmNzI3NDU4ZWEzNmE0ZTUzYjE5ZTMwODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y8QbE3iwoy0ioavldZDcMUs7gJ+ OT3uLRAqY6l5VKN3aHkJGH8rvMzoByM713uoGh3DmcihJM8Bfbw1BgmIem/eNzKP 3gv2xBKlAIVgFhdAi4eBPqGKj89CqxIa7NdtV1Soqfj9XmXs8deEMi9NgCEYOxk7 XUWbJMdjYa71xi/3HrQoV1+cySChqj3igyCeVeXoLhId44Ly3AFK0NUCRtWKmk70 29/8rIYuDYw/BxvJJfISDp8Dic/xNHsDQPcxfVTOlC7ALpocXSu8CjJGCeCOi/Lu T20DVm1YD+/Oq6WenR4pLHSqlJJLKLgj/+fSprrOl9ND6IUeyPXHPgiNXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrkLY+lMJ9fcnRY6jak5TsZ4whyMB8GA1UdIwQY MBaAFE6YrMhvQcRxWxDB3VJjHDKoGUowMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHBpc3lHOUJ4SEZiRU1IZFVtTWNNcWdaU2pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mODcwYzQtYmRjOS00NTNiLWIzYzgt NDkxZDMwZjRhMmM4LzEvVHBpc3lHOUJ4SEZiRU1IZFVtTWNNcWdaU2pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9mODcwYzQtYmRjOS00NTNiLWIzYzgtNDkxZDMwZjRhMmM4 LzEvVHBpc3lHOUJ4SEZiRU1IZFVtTWNNcWdaU2pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/uFcUBV BQ+PcF12GodSrGmoWkm69uLDQIgl83c4QVnMmMlF7eYIGG5rrtWlPBLvsBribXti z/76oFRMmFa9vtb92UB2/khSHqgTc7Nq77rgV/ptyUCttKaOfrqkgUwuQn/wmfrV OFj5i70wu2VMyuoqWGM8mbbaNy9gwPmH1qPE9Ek+wvsmirV3sd4q9SrCx0ak65Q2 ts5wk/Rf9ObbDOhH5/T4FvEf06lv9p7Nrfc3v5Huy9m5gVD4v9MoV2PseuOJycIJ YS16SgV1Vz8CyZyzK23ZliIPV9+xZU7e38pMZxN9kAyObuGuYwFEzPpPGK5K9wpu QXOJRawFe9KUrQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:51:20 2025 by rpki-client