This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft File: tIENfJv8WLngoeWRacPdMi3p9zc.mft (raw, json) Hash identifier: 4hZfpBf/+KAppe3W/xvV5sNXStFeYncQbplkQERyfrc= Subject key identifier: 84:0B:9B:22:62:12:17:8E:90:1B:DD:0A:D8:F3:DE:59:32:4D:74:01 Authority key identifier: B4:81:0D:7C:9B:FC:58:B9:E0:A1:E5:91:69:C3:DD:32:2D:E9:F7:37 Certificate issuer: /CN=b4810d7c9bfc58b9e0a1e59169c3dd322de9f737 Certificate serial: 019AF76704AC5F8E75391743C16F3D0C1ED2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 06:01:54 +0000 Manifest this update: Sun 07 Dec 2025 06:01:54 +0000 Manifest next update: Mon 08 Dec 2025 06:01:54 +0000 Files and hashes: 1: jHERjwHQQByovrguIT9kNAenUlw.roa (hash: fC13Nqgu9Ca7tsn1KpGgJ5T6X5W9BeqrdrYm3SZE1Rs=) 2: tIENfJv8WLngoeWRacPdMi3p9zc.crl (hash: sZ3CfPuWbbycvquJHDMfmfF+YI7vIRofi4l4Aao/pzA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:67:04:ac:5f:8e:75:39:17:43:c1:6f:3d:0c:1e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4810d7c9bfc58b9e0a1e59169c3dd322de9f737 Validity Not Before: Dec 7 06:01:54 2025 GMT Not After : Dec 8 06:01:54 2025 GMT Subject: CN=840b9b226212178e901bdd0ad8f3de59324d7401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3b:00:3d:67:0f:20:46:81:c8:6a:b1:e9:ba: 09:49:27:fb:19:74:0b:82:07:85:75:c1:22:59:9a: 91:f4:0c:a8:19:43:b5:e5:b8:74:b5:ff:6d:fc:f8: ef:51:cd:97:c8:d3:8b:13:9d:00:b4:8b:36:5f:e2: 71:30:64:e9:98:10:6c:72:68:95:ab:5a:3f:92:d0: 02:4d:3c:e0:3a:98:d3:1a:3b:59:ef:fd:0c:29:66: f6:83:0b:9c:a1:63:da:f0:eb:12:07:62:e3:73:11: 01:cb:9e:9f:57:30:13:ee:5c:43:74:ed:d8:9d:62: 5e:f0:6a:68:3d:b3:68:a2:c9:82:18:5e:e5:46:66: 15:b0:4b:fc:f1:a9:0f:cb:9f:58:f1:c1:c7:a3:83: cb:e8:22:0b:f2:2c:16:f0:0b:9d:3b:97:0c:43:9f: 37:91:6c:e5:3e:b8:6c:41:4a:97:16:d8:d1:3f:0b: b1:fa:ce:0f:85:02:e7:d2:f4:61:b5:da:9b:54:69: 2f:7b:b8:7b:2c:59:27:ee:47:36:43:13:0f:fe:2d: 3f:4b:8d:d6:8f:72:f3:7b:bf:f0:18:ed:6a:3e:43: 4e:ed:19:d1:49:40:b8:4a:de:59:61:d7:59:f2:31: 9f:37:11:54:c5:45:8a:5c:e1:9d:e8:68:6d:05:3b: 0e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0B:9B:22:62:12:17:8E:90:1B:DD:0A:D8:F3:DE:59:32:4D:74:01 X509v3 Authority Key Identifier: keyid:B4:81:0D:7C:9B:FC:58:B9:E0:A1:E5:91:69:C3:DD:32:2D:E9:F7:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:34:96:08:14:bb:72:73:b9:a5:be:74:28:18:dc:31:7d:6f: ac:44:60:87:c0:c6:6a:d8:47:73:8c:03:e4:99:cf:fe:77:70: 97:98:c7:10:bd:5f:6a:49:8a:f9:47:4b:f1:3f:24:4d:28:72: d4:67:85:45:01:e4:fe:8a:68:7e:91:4f:b1:7b:04:97:9e:ee: 98:2d:ef:20:b5:f4:82:cd:c2:9f:1b:94:cc:a6:2e:32:42:28: d3:06:77:83:48:68:e1:e9:bb:40:65:c4:65:8b:47:ec:7e:fc: 51:2d:49:19:02:19:17:74:e4:c1:1c:98:1c:fe:4f:31:e2:d7: a0:c5:9f:29:4b:f3:d8:42:7b:d4:f2:88:91:bf:5f:60:05:b1: 14:85:db:d7:24:f7:bb:8c:5d:e3:54:56:da:be:f2:8f:b5:7a: 27:9c:b0:40:c9:a0:e6:ee:a6:71:0b:97:e6:cf:ea:a0:d8:27: b5:a1:b2:7d:5c:96:e8:71:c3:91:c1:fe:73:94:d3:5f:97:c5: bc:08:7c:1a:fe:6f:c4:7c:90:04:7b:07:70:77:6d:cc:02:95: 38:e3:21:de:67:b8:30:82:8b:6d:10:9b:18:ef:26:7d:0e:fa: 6b:37:c3:44:a7:e6:6e:f0:ac:c8:7a:fa:c1:e5:e0:04:6b:88: 87:12:54:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3ZwSsX451ORdDwW89DB7SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODEwZDdjOWJmYzU4YjllMGExZTU5MTY5YzNkZDMyMmRl OWY3MzcwHhcNMjUxMjA3MDYwMTU0WhcNMjUxMjA4MDYwMTU0WjAzMTEwLwYDVQQD Eyg4NDBiOWIyMjYyMTIxNzhlOTAxYmRkMGFkOGYzZGU1OTMyNGQ3NDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjsAPWcPIEaByGqx6boJSSf7GXQL ggeFdcEiWZqR9AyoGUO15bh0tf9t/PjvUc2XyNOLE50AtIs2X+JxMGTpmBBscmiV q1o/ktACTTzgOpjTGjtZ7/0MKWb2gwucoWPa8OsSB2LjcxEBy56fVzAT7lxDdO3Y nWJe8GpoPbNoosmCGF7lRmYVsEv88akPy59Y8cHHo4PL6CIL8iwW8AudO5cMQ583 kWzlPrhsQUqXFtjRPwux+s4PhQLn0vRhtdqbVGkve7h7LFkn7kc2QxMP/i0/S43W j3Lze7/wGO1qPkNO7RnRSUC4St5ZYddZ8jGfNxFUxUWKXOGd6GhtBTsOWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQLmyJiEheOkBvdCtjz3lkyTXQBMB8GA1UdIwQY MBaAFLSBDXyb/Fi54KHlkWnD3TIt6fc3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElFTmZKdjhXTG5nb2VXUmFjUGRNaTNwOXpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zZDRjNDYtNzU0NS00YjNkLThmMWMt MmE2MzQwMmJlYzY2LzEvdElFTmZKdjhXTG5nb2VXUmFjUGRNaTNwOXpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zZDRjNDYtNzU0NS00YjNkLThmMWMtMmE2MzQwMmJlYzY2 LzEvdElFTmZKdjhXTG5nb2VXUmFjUGRNaTNwOXpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDSWCBS7 cnO5pb50KBjcMX1vrERgh8DGathHc4wD5JnP/ndwl5jHEL1fakmK+UdL8T8kTShy 1GeFRQHk/opofpFPsXsEl57umC3vILX0gs3CnxuUzKYuMkIo0wZ3g0ho4em7QGXE ZYtH7H78US1JGQIZF3TkwRyYHP5PMeLXoMWfKUvz2EJ71PKIkb9fYAWxFIXb1yT3 u4xd41RW2r7yj7V6J5ywQMmg5u6mcQuX5s/qoNgntaGyfVyW6HHDkcH+c5TTX5fF vAh8Gv5vxHyQBHsHcHdtzAKVOOMh3me4MIKLbRCbGO8mfQ76azfDRKfmbvCsyHr6 weXgBGuIhxJUfQ== -----END CERTIFICATE-----Generated at Sun Dec 7 14:37:49 2025 by rpki-client