This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json) Hash identifier: ZHkkvXojy073/JAkSe5dx6EQx1S1wqS5A4hSGtHlS9Y= Subject key identifier: 68:92:A4:FE:A5:DC:DA:BD:20:10:33:24:0C:FD:64:08:4F:7C:EE:BA Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc Certificate serial: 019AFCC47BE4CB5CABE9BB2B695C0952891E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft Manifest number: 1455 Signing time: Mon 08 Dec 2025 07:02:06 +0000 Manifest this update: Mon 08 Dec 2025 07:02:06 +0000 Manifest next update: Tue 09 Dec 2025 07:02:06 +0000 Files and hashes: 1: H36xXwuB9FJ3ESjpo_XmH_KZ2R4.roa (hash: CUtTMRPtfP9rNsMoQeZ2J44Z+jwTnsWRsKW5k/0LKug=) 2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: 383psfIP3AieX1BaW4CHlT+oGpY3o5oeRdkEVuTgBKE=) 3: tpqvdlW8wuSttlFQd80uk4F5YQY.roa (hash: yDvp+gGPiyhARcManoLZEVb02KcZ7k4JkC3clhGu75w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c4:7b:e4:cb:5c:ab:e9:bb:2b:69:5c:09:52:89:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc Validity Not Before: Dec 8 07:02:06 2025 GMT Not After : Dec 9 07:02:06 2025 GMT Subject: CN=6892a4fea5dcdabd201033240cfd64084f7ceeba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d6:cf:6c:69:fa:5e:ff:50:9f:1e:9d:51:c6: 95:5d:ca:6b:d0:08:91:5f:7c:d4:76:2d:8e:12:5b: 1e:ff:88:6e:32:09:65:cb:ca:37:a5:32:2d:6f:b0: 1e:ad:ce:60:7a:9d:d6:08:d0:e3:69:fe:ed:66:f8: fe:4a:d5:a0:bc:6f:24:94:37:42:d8:ac:3b:54:7b: 5d:33:9b:4f:ef:07:a6:39:eb:bd:bc:58:d8:74:43: 5f:2c:bf:bc:04:ba:61:82:03:f4:30:40:bf:c2:a8: 26:79:8b:13:3a:f6:54:79:7f:14:39:d3:8b:81:86: 29:30:a1:1d:1e:7f:c4:8c:09:b5:23:2c:f3:43:a9: 95:d1:ea:dd:9f:fa:e9:db:84:ef:5b:2c:54:0c:23: 83:01:ba:b2:d9:f3:39:d2:65:2d:cc:b9:99:c1:89: 7f:a1:f3:c9:79:6d:cb:81:60:8d:19:16:69:df:47: 5f:04:3b:bf:f0:a3:b1:e6:e8:7c:ad:b9:14:a9:d9: 54:61:6d:53:4e:c8:a4:d9:0d:ec:4e:c1:92:76:14: cd:74:52:67:32:99:23:26:ee:6e:72:36:89:06:94: 48:b4:eb:f2:2b:27:e2:52:df:b9:01:27:27:c8:65: bb:50:6e:64:71:0f:e1:0a:83:a1:f3:d2:f9:d7:4d: 7b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:92:A4:FE:A5:DC:DA:BD:20:10:33:24:0C:FD:64:08:4F:7C:EE:BA X509v3 Authority Key Identifier: keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:17:bf:41:b2:ce:93:9a:f5:f3:ac:5c:70:67:7b:ec:57:1b: 2f:ae:53:74:59:07:0e:fd:e8:91:b2:86:a5:2b:32:80:ea:55: de:c0:77:3b:ee:78:d1:e4:a5:28:ba:de:35:ed:75:83:86:e6: b2:9c:8f:ad:29:3e:38:70:6c:75:28:f8:4e:5d:27:4e:4e:03: 77:6a:25:4a:ce:be:88:3a:39:de:eb:25:c8:19:29:61:98:6f: a8:50:d3:62:bd:67:d4:33:e0:50:14:fe:0d:78:8d:34:9c:5a: e7:14:ad:52:6b:0b:fd:64:06:87:1d:dc:2c:1b:ae:62:8f:e9: 57:3b:99:df:9e:76:d1:78:a2:e3:cd:35:eb:97:f0:b6:a3:ca: 6d:b9:4d:3e:e8:b0:81:c2:7f:c9:f1:55:ef:7c:ab:b2:f9:9a: 44:62:5d:3b:5e:b8:b9:d4:c9:0f:57:33:14:da:08:6c:1f:7f: 27:a4:5c:0a:5b:8b:28:bd:6a:f3:12:54:2d:c1:86:cb:ce:98: 37:51:fa:6e:90:44:73:51:af:12:28:3b:c1:dd:60:7f:e8:f1: 9e:01:7b:2b:c2:1f:a4:31:86:fa:09:19:02:aa:92:bd:7f:b3: 46:19:3e:f2:9a:a6:94:4d:1a:bc:53:32:1d:ee:cb:30:ea:63: 3b:d9:12:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8xHvky1yr6bsraVwJUokeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMWIwYzQwOTY5MDgwOTU3ZmNjZWUxZmI4YTNmYjRiYjM4 YmY1ZGMwHhcNMjUxMjA4MDcwMjA2WhcNMjUxMjA5MDcwMjA2WjAzMTEwLwYDVQQD Eyg2ODkyYTRmZWE1ZGNkYWJkMjAxMDMzMjQwY2ZkNjQwODRmN2NlZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9bPbGn6Xv9Qnx6dUcaVXcpr0AiR X3zUdi2OElse/4huMglly8o3pTItb7Aerc5gep3WCNDjaf7tZvj+StWgvG8klDdC 2Kw7VHtdM5tP7wemOeu9vFjYdENfLL+8BLphggP0MEC/wqgmeYsTOvZUeX8UOdOL gYYpMKEdHn/EjAm1IyzzQ6mV0erdn/rp24TvWyxUDCODAbqy2fM50mUtzLmZwYl/ ofPJeW3LgWCNGRZp30dfBDu/8KOx5uh8rbkUqdlUYW1TTsik2Q3sTsGSdhTNdFJn MpkjJu5ucjaJBpRItOvyKyfiUt+5AScnyGW7UG5kcQ/hCoOh89L51017xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiSpP6l3Nq9IBAzJAz9ZAhPfO66MB8GA1UdIwQY MBaAFEwbDECWkICVf8zuH7ij+0uzi/XcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMt OTRjODI1NGJkM2I3LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMtOTRjODI1NGJkM2I3 LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahe/QbLO k5r186xccGd77FcbL65TdFkHDv3okbKGpSsygOpV3sB3O+540eSlKLreNe11g4bm spyPrSk+OHBsdSj4Tl0nTk4Dd2olSs6+iDo53uslyBkpYZhvqFDTYr1n1DPgUBT+ DXiNNJxa5xStUmsL/WQGhx3cLBuuYo/pVzuZ35520Xii480165fwtqPKbblNPuiw gcJ/yfFV73yrsvmaRGJdO164udTJD1czFNoIbB9/J6RcCluLKL1q8xJULcGGy86Y N1H6bpBEc1GvEig7wd1gf+jxngF7K8IfpDGG+gkZAqqSvX+zRhk+8pqmlE0avFMy He7LMOpjO9kSbQ== -----END CERTIFICATE-----Generated at Mon Dec 8 08:44:58 2025 by rpki-client