This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft File: TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json) Hash identifier: fkHXPx+feKquvdO0ITx8rLWF+X1IJnnHweCJAja2sm8= Subject key identifier: A2:46:EE:A7:3E:EE:86:C7:1D:41:2C:63:0D:AA:8F:7B:87:3A:2D:78 Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62 Certificate issuer: /CN=4de70403c9d2d7962cf113d93c462f9493d87362 Certificate serial: 019AF49C25481A6B59EB925ECC439814A05A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 17:01:04 +0000 Manifest this update: Sat 06 Dec 2025 17:01:04 +0000 Manifest next update: Sun 07 Dec 2025 17:01:04 +0000 Files and hashes: 1: GbfL1ZrfRVmwsoIJhPo9qm8dkFU.roa (hash: 5rCvc90C0u6LOlrowQ6t9CQlQZi5SGZg6tgn8PV2EF4=) 2: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: lvKWy5t4NW+CO+1aEbhsblr1rv68dQVBhVjlticvU0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:25:48:1a:6b:59:eb:92:5e:cc:43:98:14:a0:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362 Validity Not Before: Dec 6 17:01:04 2025 GMT Not After : Dec 7 17:01:04 2025 GMT Subject: CN=a246eea73eee86c71d412c630daa8f7b873a2d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a8:5f:8b:6a:90:be:22:a0:ec:b8:c5:73:56: 66:74:0e:e3:d3:84:10:3e:ad:ee:b8:67:08:2f:09: 73:30:a6:e5:9f:4a:41:69:00:c8:5c:26:bf:47:c5: 1d:5f:0d:83:ed:e7:c3:83:cf:69:b0:5c:66:0c:32: f3:51:fb:0a:a3:93:f9:bb:40:1c:94:79:ee:7f:89: bb:7c:5d:1f:07:5a:ff:46:69:ca:81:71:bf:78:1d: 44:14:bf:bf:28:5b:b9:7a:a0:85:09:04:53:55:28: 26:d4:e8:a6:7b:7e:f0:d2:ef:40:09:26:d0:ec:c1: 61:8f:70:b1:4f:95:84:34:00:fc:76:b4:6f:3f:b7: 03:62:7f:93:d0:fb:e6:f6:a5:99:65:7b:46:35:de: 9a:ea:25:2f:b4:06:70:93:05:b6:e0:f5:55:f3:87: 59:ef:4e:d5:67:44:46:b9:89:9f:51:71:d2:9f:cc: 68:6b:e9:23:18:2e:f8:b3:91:6c:e3:7c:af:41:d9: a2:e8:6f:94:3e:9e:43:e7:86:a2:d4:0b:04:1a:ce: 51:52:3b:01:fa:8e:35:6b:f7:98:a2:1f:34:9c:26: 6f:9a:64:19:39:7a:82:81:07:ec:52:c3:90:af:b5: 49:e2:f2:0a:3c:1e:92:68:42:dd:40:d9:04:0e:cf: 61:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:46:EE:A7:3E:EE:86:C7:1D:41:2C:63:0D:AA:8F:7B:87:3A:2D:78 X509v3 Authority Key Identifier: keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:4b:30:25:4a:9e:e6:c4:14:be:41:ea:1e:15:8d:84:04:00: 94:78:35:4f:58:9d:af:ba:ef:a9:6e:3d:6e:fa:0f:70:9b:d7: 84:88:13:12:22:86:f4:7c:07:21:82:f1:4e:c2:fb:66:03:97: 4a:d9:2b:15:0b:b1:14:99:84:b1:52:d5:6c:73:08:c1:17:a5: 6e:5b:97:b0:df:bb:eb:7b:e6:00:76:b6:79:be:2f:b5:b1:94: 08:d7:96:8f:fe:f7:be:12:e6:59:a4:f4:92:68:20:62:1a:aa: 18:ec:95:a5:b9:05:ab:52:8d:10:36:6f:fe:f4:38:3b:1c:95: c5:48:db:e7:41:cb:9f:9d:04:4b:af:86:62:12:3c:75:df:bf: f9:00:33:af:d4:3b:b1:4f:b7:7f:47:36:c3:70:19:86:59:1a: 0a:57:cc:44:02:07:47:4c:dc:e6:1b:da:c1:f0:8d:8e:44:cc: 82:91:ae:bc:c6:ed:35:fc:d5:6a:3d:3b:8e:9f:ae:ca:2c:a6: db:4a:9a:29:89:43:e1:44:23:b7:b2:35:a9:ca:80:3a:35:6a: 51:39:dc:fc:1b:5c:7d:f8:3b:92:c2:ba:06:ee:ee:cc:22:5d: 43:34:3a:bb:d0:1e:6b:ea:68:5b:f9:65:b6:a3:5f:55:f3:81: 6b:39:be:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nCVIGmtZ65JezEOYFKBaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZTcwNDAzYzlkMmQ3OTYyY2YxMTNkOTNjNDYyZjk0OTNk ODczNjIwHhcNMjUxMjA2MTcwMTA0WhcNMjUxMjA3MTcwMTA0WjAzMTEwLwYDVQQD EyhhMjQ2ZWVhNzNlZWU4NmM3MWQ0MTJjNjMwZGFhOGY3Yjg3M2EyZDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuahfi2qQviKg7LjFc1ZmdA7j04QQ Pq3uuGcILwlzMKbln0pBaQDIXCa/R8UdXw2D7efDg89psFxmDDLzUfsKo5P5u0Ac lHnuf4m7fF0fB1r/RmnKgXG/eB1EFL+/KFu5eqCFCQRTVSgm1Oime37w0u9ACSbQ 7MFhj3CxT5WENAD8drRvP7cDYn+T0Pvm9qWZZXtGNd6a6iUvtAZwkwW24PVV84dZ 707VZ0RGuYmfUXHSn8xoa+kjGC74s5Fs43yvQdmi6G+UPp5D54ai1AsEGs5RUjsB +o41a/eYoh80nCZvmmQZOXqCgQfsUsOQr7VJ4vIKPB6SaELdQNkEDs9h1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJG7qc+7obHHUEsYw2qj3uHOi14MB8GA1UdIwQY MBaAFE3nBAPJ0teWLPET2TxGL5ST2HNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGVjRUE4blMxNVlzOFJQWlBFWXZsSlBZYzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yNTAxMjctODVkNy00NmI0LTg4NjUt YmYwZGE1ZThjZTdmLzEvVGVjRUE4blMxNVlzOFJQWlBFWXZsSlBZYzJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yNTAxMjctODVkNy00NmI0LTg4NjUtYmYwZGE1ZThjZTdm LzEvVGVjRUE4blMxNVlzOFJQWlBFWXZsSlBZYzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkswJUqe 5sQUvkHqHhWNhAQAlHg1T1idr7rvqW49bvoPcJvXhIgTEiKG9HwHIYLxTsL7ZgOX StkrFQuxFJmEsVLVbHMIwRelbluXsN+763vmAHa2eb4vtbGUCNeWj/73vhLmWaT0 kmggYhqqGOyVpbkFq1KNEDZv/vQ4OxyVxUjb50HLn50ES6+GYhI8dd+/+QAzr9Q7 sU+3f0c2w3AZhlkaClfMRAIHR0zc5hvawfCNjkTMgpGuvMbtNfzVaj07jp+uyiym 20qaKYlD4UQjt7I1qcqAOjVqUTnc/Btcffg7ksK6Bu7uzCJdQzQ6u9Aea+poW/ll tqNfVfOBazm+FQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:35:00 2025 by rpki-client