This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft File: TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft (raw, json) Hash identifier: x1TC2w00Zh/uSRT7pfiUXlJYJX1qSWbP7/XgYIuJK6M= Subject key identifier: 3E:43:7B:4E:01:A8:EE:E6:B8:FD:E8:9B:FB:1D:9C:3A:4C:3F:A5:43 Authority key identifier: 4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1 Certificate issuer: /CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1 Certificate serial: 019AF12D83E6CE7D6DC8576D452187C61419 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft Manifest number: 0444 Signing time: Sat 06 Dec 2025 01:01:23 +0000 Manifest this update: Sat 06 Dec 2025 01:01:23 +0000 Manifest next update: Sun 07 Dec 2025 01:01:23 +0000 Files and hashes: 1: TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl (hash: N0lXApIsr5beLxPxtCuPIjF+S+xrzUHFgEIvWfaogrg=) 2: _l-XctLDCPzRb-pMlqXmGyqDvHM.roa (hash: myqB80koPH8JwlE9qSMpb7bOcTN1/cJ21+MIuMT+GyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:83:e6:ce:7d:6d:c8:57:6d:45:21:87:c6:14:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1 Validity Not Before: Dec 6 01:01:23 2025 GMT Not After : Dec 7 01:01:23 2025 GMT Subject: CN=3e437b4e01a8eee6b8fde89bfb1d9c3a4c3fa543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:57:40:d5:c0:24:52:5a:50:51:a5:15:39:f4: c6:a2:a3:4a:ed:d4:4e:07:e7:ec:2f:99:1e:e0:49: 33:d1:60:5d:43:80:cb:74:ba:c4:45:9c:5a:1e:ad: 23:33:9b:28:7c:61:3f:22:f7:e6:0b:f3:bf:55:2d: 89:3a:45:7b:be:36:3d:7c:2a:15:94:62:3f:ec:4b: ec:9b:21:80:e9:16:60:54:ad:53:1e:a9:3a:3d:b1: 9a:0d:4f:88:65:f3:48:b0:6e:fa:52:43:e3:48:ca: 7b:bb:ca:da:3c:65:26:d9:97:c7:db:4a:65:73:5d: a0:cf:8e:03:d9:a1:34:bd:bf:af:3e:6d:57:d8:1c: 27:f7:8f:b5:01:e3:5e:be:da:7e:9b:cc:1a:d8:d9: 43:04:a1:67:d9:3e:3e:28:30:50:77:e8:93:2f:cc: cf:8c:9d:ca:07:d6:00:b8:d9:e6:c6:08:86:94:dc: c1:7d:61:36:43:aa:5f:8e:48:c7:49:3d:32:f6:39: ae:bd:cc:76:b3:b3:a6:ba:ab:70:32:56:07:7e:d9: e8:0c:9e:c4:70:94:e9:8e:09:fb:88:cf:a1:3b:26: 8e:08:2b:27:32:a3:71:08:4f:7d:9a:2a:af:ef:14: 7a:9f:1c:2b:ee:9a:6a:d4:23:c5:93:6e:a6:69:f1: ab:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:43:7B:4E:01:A8:EE:E6:B8:FD:E8:9B:FB:1D:9C:3A:4C:3F:A5:43 X509v3 Authority Key Identifier: keyid:4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:cc:b6:88:4a:a1:91:75:04:bd:e8:03:a5:90:56:17:ac:1f: e6:14:09:23:1a:48:ea:4a:7b:e2:b5:2e:a1:b9:2a:ca:09:78: 0c:2c:9c:57:aa:25:9b:f5:65:93:91:ea:d8:9f:2f:f6:23:35: 7b:e3:b0:f7:33:ad:2f:04:c7:04:29:94:1f:bd:19:80:4b:a1: b2:71:7e:ce:2b:49:04:b9:19:c1:53:74:4d:2b:64:50:1b:76: ab:8b:be:dc:0e:72:3e:da:bc:9a:4c:ea:ad:6a:f4:04:b9:b5: f6:d4:7d:4f:65:d5:4d:b3:b5:84:60:c7:32:ac:9a:17:be:95: 2d:53:5a:e3:d8:1f:75:f2:d8:4c:bb:be:68:62:2b:cf:0c:ba: 30:d3:e5:83:41:ff:44:dd:4f:f0:79:3f:ff:2c:10:b0:80:97: c9:a1:7f:a4:7e:ca:05:12:81:1e:8d:23:25:17:b2:05:df:d7: 79:02:87:ad:b7:9c:b0:7b:39:84:27:59:13:75:40:44:50:90: 48:1f:c6:b7:76:0c:8d:8e:75:5a:78:0e:7e:67:a3:77:03:38: ca:20:58:5f:dc:5e:4e:be:ee:cc:89:e1:42:97:ae:75:a9:e1: f8:fc:e4:3c:fb:c9:27:36:8a:72:37:9c:c0:d4:b1:6a:cd:b3: 3c:a1:4d:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYPmzn1tyFdtRSGHxhQZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMjRjMzA4YjAyNDFjM2JjYzE0Y2Y2Nzc3NTkxZDI3MjM3 ZmZhZjEwHhcNMjUxMjA2MDEwMTIzWhcNMjUxMjA3MDEwMTIzWjAzMTEwLwYDVQQD EygzZTQzN2I0ZTAxYThlZWU2YjhmZGU4OWJmYjFkOWMzYTRjM2ZhNTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11dA1cAkUlpQUaUVOfTGoqNK7dRO B+fsL5ke4Ekz0WBdQ4DLdLrERZxaHq0jM5sofGE/IvfmC/O/VS2JOkV7vjY9fCoV lGI/7EvsmyGA6RZgVK1THqk6PbGaDU+IZfNIsG76UkPjSMp7u8raPGUm2ZfH20pl c12gz44D2aE0vb+vPm1X2Bwn94+1AeNevtp+m8wa2NlDBKFn2T4+KDBQd+iTL8zP jJ3KB9YAuNnmxgiGlNzBfWE2Q6pfjkjHST0y9jmuvcx2s7OmuqtwMlYHftnoDJ7E cJTpjgn7iM+hOyaOCCsnMqNxCE99miqv7xR6nxwr7ppq1CPFk26mafGriwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5De04BqO7muP3om/sdnDpMP6VDMB8GA1UdIwQY MBaAFEwkwwiwJBw7zBTPZ3dZHScjf/rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVENURENMQWtIRHZNRk05bmQxa2RKeU5fLXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85MmQ3MTktMGJjMi00YTFlLThiOTQt NjYxYmIwZTllNmVjLzEvVENURENMQWtIRHZNRk05bmQxa2RKeU5fLXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85MmQ3MTktMGJjMi00YTFlLThiOTQtNjYxYmIwZTllNmVj LzEvVENURENMQWtIRHZNRk05bmQxa2RKeU5fLXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcy2iEqh kXUEvegDpZBWF6wf5hQJIxpI6kp74rUuobkqygl4DCycV6olm/Vlk5Hq2J8v9iM1 e+Ow9zOtLwTHBCmUH70ZgEuhsnF+zitJBLkZwVN0TStkUBt2q4u+3A5yPtq8mkzq rWr0BLm19tR9T2XVTbO1hGDHMqyaF76VLVNa49gfdfLYTLu+aGIrzwy6MNPlg0H/ RN1P8Hk//ywQsICXyaF/pH7KBRKBHo0jJReyBd/XeQKHrbecsHs5hCdZE3VARFCQ SB/Gt3YMjY51WngOfmejdwM4yiBYX9xeTr7uzInhQpeudanh+PzkPPvJJzaKcjec wNSxas2zPKFNRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:24 2025 by rpki-client