This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft File: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft (raw, json) Hash identifier: 8fVlhakaDgaOCxIFgU8y1dtIB6JLGd4EnNS+tFAhEo4= Subject key identifier: F4:27:8A:12:B1:6A:83:7D:4A:79:38:EA:38:6C:B6:8B:4A:03:6A:73 Authority key identifier: B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60 Certificate issuer: /CN=b48184549e12e9934bffb7615bca3d0c25681360 Certificate serial: 019AF465580525ADB9CB85A235233BCF5621 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 16:01:13 +0000 Manifest this update: Sat 06 Dec 2025 16:01:13 +0000 Manifest next update: Sun 07 Dec 2025 16:01:13 +0000 Files and hashes: 1: Pmrx9HZexDjQdROL1xOD1S-BjzQ.roa (hash: aBRM8zJUU2ZF0wAF5h20OpU3VGQ3W++oIRE8v06cZXM=) 2: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl (hash: UBQ6E9SWbK5ELE+eKdIBIkk912LW2tlbkyKGZlIwagA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:58:05:25:ad:b9:cb:85:a2:35:23:3b:cf:56:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b48184549e12e9934bffb7615bca3d0c25681360 Validity Not Before: Dec 6 16:01:13 2025 GMT Not After : Dec 7 16:01:13 2025 GMT Subject: CN=f4278a12b16a837d4a7938ea386cb68b4a036a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ed:2e:bf:a8:91:25:79:f2:52:5b:82:86:b2: 13:ab:20:0d:db:8b:25:9c:ae:3f:f7:6b:45:1d:41: 24:0e:1b:39:05:64:99:69:5b:d6:27:96:9a:ba:64: e8:0b:d3:57:66:96:70:d3:2f:3c:1e:33:ae:44:aa: 4d:38:40:f9:72:68:87:4c:33:fd:8a:01:22:50:cb: 0f:4a:64:9b:fb:74:7f:39:b3:d9:d4:4e:1a:d9:63: 3c:39:18:6d:33:aa:3a:69:06:15:cc:93:52:98:27: 0e:36:e4:44:d2:cf:cc:b1:7f:7e:6f:c8:8f:62:7b: 04:e8:01:47:45:14:73:5c:8c:11:f3:fd:c5:23:c3: 72:28:5c:7e:58:bb:bf:29:c8:b3:0a:48:70:11:52: 13:a0:94:e1:ea:ac:70:ad:d2:77:b8:36:7f:e9:b5: d8:e1:7e:d8:b6:5a:6d:7f:31:47:28:79:b5:90:ce: 8b:c9:e5:63:1f:db:50:d0:73:59:83:ce:d8:4b:58: 42:76:2e:f8:71:0d:2f:38:94:ba:dc:25:e6:37:9d: ff:f7:9e:86:55:72:f4:d1:7a:6b:16:d4:7f:8c:4d: 29:64:67:9b:6e:d5:94:8d:43:aa:56:93:5e:e6:fb: 98:f8:92:2a:54:d0:05:c7:5f:1c:40:e2:7f:28:a0: 17:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:27:8A:12:B1:6A:83:7D:4A:79:38:EA:38:6C:B6:8B:4A:03:6A:73 X509v3 Authority Key Identifier: keyid:B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:2b:5e:65:e7:ae:97:20:3a:87:16:0b:e0:b7:3b:50:f2:6b: 57:74:ce:1b:9a:17:19:9f:55:e1:67:40:b8:ce:ae:6b:e6:e5: d3:2a:66:e5:2b:9e:1b:92:c4:a6:fe:e7:18:0a:b6:97:4f:2e: fa:15:e6:e7:c3:83:07:2a:bf:8f:2e:a8:97:2e:90:ee:ff:04: e5:39:36:ce:70:54:90:20:1c:73:90:2e:b9:a7:b1:20:a4:37: 97:95:d7:7f:9f:6b:ce:a2:96:65:b8:c0:44:48:a3:f8:86:6b: e5:36:50:c2:88:7e:4a:7a:ad:41:65:88:c7:db:96:2d:7d:8b: 73:74:97:ee:12:29:91:77:5d:84:00:60:36:d9:29:c8:d2:79: 8a:bf:b0:a4:27:9e:64:21:3f:32:fd:2b:e5:e4:ab:dc:7f:a1: 00:66:4f:56:7c:5c:27:25:3a:d4:2d:a1:73:2a:ca:59:6e:42: e7:63:8b:7d:ec:f3:d6:e4:83:7e:32:bc:a4:6b:c4:ea:97:fc: 36:d7:7d:f5:a7:e1:54:a3:f8:c3:7d:37:2f:07:0e:e0:74:11: 44:09:fe:77:fa:d6:cc:3e:d9:08:e4:81:d6:37:ea:5b:ae:e0: 38:26:0e:66:ad:2b:ee:51:cf:14:10:90:95:16:74:bc:b7:33: d4:a1:45:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZVgFJa25y4WiNSM7z1YhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODE4NDU0OWUxMmU5OTM0YmZmYjc2MTViY2EzZDBjMjU2 ODEzNjAwHhcNMjUxMjA2MTYwMTEzWhcNMjUxMjA3MTYwMTEzWjAzMTEwLwYDVQQD EyhmNDI3OGExMmIxNmE4MzdkNGE3OTM4ZWEzODZjYjY4YjRhMDM2YTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+0uv6iRJXnyUluChrITqyAN24sl nK4/92tFHUEkDhs5BWSZaVvWJ5aaumToC9NXZpZw0y88HjOuRKpNOED5cmiHTDP9 igEiUMsPSmSb+3R/ObPZ1E4a2WM8ORhtM6o6aQYVzJNSmCcONuRE0s/MsX9+b8iP YnsE6AFHRRRzXIwR8/3FI8NyKFx+WLu/KcizCkhwEVIToJTh6qxwrdJ3uDZ/6bXY 4X7YtlptfzFHKHm1kM6LyeVjH9tQ0HNZg87YS1hCdi74cQ0vOJS63CXmN53/956G VXL00XprFtR/jE0pZGebbtWUjUOqVpNe5vuY+JIqVNAFx18cQOJ/KKAXpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQnihKxaoN9Snk46jhstotKA2pzMB8GA1UdIwQY MBaAFLSBhFSeEumTS/+3YVvKPQwlaBNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElHRVZKNFM2Wk5MXzdkaFc4bzlEQ1ZvRTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mNjcxNzctNzhkNS00Mzg4LWEyMWEt MjgyNjM2NTZjNmRlLzEvdElHRVZKNFM2Wk5MXzdkaFc4bzlEQ1ZvRTJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mNjcxNzctNzhkNS00Mzg4LWEyMWEtMjgyNjM2NTZjNmRl LzEvdElHRVZKNFM2Wk5MXzdkaFc4bzlEQ1ZvRTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSteZeeu lyA6hxYL4Lc7UPJrV3TOG5oXGZ9V4WdAuM6ua+bl0ypm5SueG5LEpv7nGAq2l08u +hXm58ODByq/jy6oly6Q7v8E5Tk2znBUkCAcc5AuuaexIKQ3l5XXf59rzqKWZbjA REij+IZr5TZQwoh+SnqtQWWIx9uWLX2Lc3SX7hIpkXddhABgNtkpyNJ5ir+wpCee ZCE/Mv0r5eSr3H+hAGZPVnxcJyU61C2hcyrKWW5C52OLfezz1uSDfjK8pGvE6pf8 Ntd99afhVKP4w303LwcO4HQRRAn+d/rWzD7ZCOSB1jfqW67gOCYOZq0r7lHPFBCQ lRZ0vLcz1KFF+g== -----END CERTIFICATE-----Generated at Sun Dec 7 02:13:35 2025 by rpki-client