This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft File: TK0YVBTBauXSKaiqK_oV_vxxoiI.mft (raw, json) Hash identifier: OENpWmc5Sr+IVidU3Hza1EwfceBSB1aUiONtM9tYmiE= Subject key identifier: 67:14:D4:80:1E:06:04:15:AA:B9:77:1A:8F:F8:D6:0E:C0:35:AB:97 Authority key identifier: 4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22 Certificate issuer: /CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222 Certificate serial: 019AF61C93F267FDF1805A55E472D991AD36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft Manifest number: 16F7 Signing time: Sun 07 Dec 2025 00:00:59 +0000 Manifest this update: Sun 07 Dec 2025 00:00:59 +0000 Manifest next update: Mon 08 Dec 2025 00:00:59 +0000 Files and hashes: 1: TK0YVBTBauXSKaiqK_oV_vxxoiI.crl (hash: pCNkFoI/DhMLu1tHPAxxfhDxfWYykNSsp5AZBMiRwkE=) 2: dxfaqcbOBYRpYzoiD3a-nfzNgyI.roa (hash: 9S4UtPoorxm2Y5jeo5Ht7EgjOkb+pCS05uOlyENLKPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:93:f2:67:fd:f1:80:5a:55:e4:72:d9:91:ad:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222 Validity Not Before: Dec 7 00:00:59 2025 GMT Not After : Dec 8 00:00:59 2025 GMT Subject: CN=6714d4801e060415aab9771a8ff8d60ec035ab97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d3:63:77:d0:e2:99:a1:41:34:a7:29:76:a4: ff:2d:55:10:98:5f:9a:fd:e9:7c:82:80:b6:79:1c: f2:78:da:f9:21:c9:ea:43:f0:42:a0:e0:1f:34:6d: f7:c7:de:c4:c6:02:66:4f:36:ef:2b:23:ff:1a:b3: d2:25:b9:21:84:80:13:87:1a:ba:2d:45:b2:15:7a: aa:28:ee:8c:78:e0:69:ec:dc:be:c9:f1:40:7a:85: e1:f7:f6:64:75:06:da:97:41:a6:15:d8:75:b7:3b: fd:fa:00:c0:18:e9:90:f1:bc:78:06:d4:70:a0:98: 76:10:e8:e0:87:8a:35:d8:91:8b:e0:5d:c7:0d:10: b6:7b:2e:4c:d5:a0:d5:c7:32:30:ee:3a:c6:a0:3e: 22:6a:b3:15:6f:e8:56:d6:83:7c:1c:72:44:d0:75: 74:58:86:e7:8f:ce:bd:0a:b5:af:a5:a0:1d:53:70: b0:e6:96:f8:b9:31:09:d4:d4:f9:c0:fd:62:0b:5f: 60:9e:94:1b:42:82:5b:4a:99:46:97:0d:37:d5:13: b6:73:0b:82:08:83:03:1c:37:17:90:73:4d:d0:fa: e2:58:4d:4f:77:64:e4:4d:88:04:dc:0e:94:0d:19: 23:5e:d4:9f:63:67:84:8c:c9:38:3a:db:f8:dc:4a: 9b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:14:D4:80:1E:06:04:15:AA:B9:77:1A:8F:F8:D6:0E:C0:35:AB:97 X509v3 Authority Key Identifier: keyid:4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:8c:6b:44:98:75:3e:84:af:d6:b0:9f:db:ee:36:89:b6:a1: 27:5d:9b:68:7a:df:94:f6:73:8b:f3:ab:03:19:67:fa:cd:c2: 35:92:c4:e4:73:95:73:97:8c:6f:4a:ce:cf:99:cd:3f:2a:82: e6:57:d3:31:f6:75:86:ab:8e:93:8b:1e:a6:0e:58:cc:f1:25: 49:a2:c4:65:76:71:42:d1:f5:e4:40:2e:7d:33:d8:d4:f2:8b: 23:f6:2a:55:71:76:25:85:13:8b:0e:4a:07:97:81:2e:53:d6: 85:0e:cc:f4:90:59:61:45:9e:b9:84:f7:2d:36:02:fb:32:e0: 1e:a4:89:5d:d4:ab:c5:c2:3e:10:a4:67:78:6d:6e:7c:10:aa: 4f:14:f9:ad:d7:60:d2:97:55:87:4f:a9:54:c2:00:9a:90:d9: 7b:27:0e:46:93:fd:7c:ee:31:42:17:14:df:48:91:85:62:16: 50:67:db:cb:3c:14:3a:4d:b3:f7:22:b9:ae:3c:1d:29:ad:0a: 52:77:60:8f:dd:56:59:47:f7:df:83:cb:1e:f3:ae:47:a6:fe: 94:58:a6:17:04:04:72:49:aa:14:8a:ee:5f:31:58:9b:52:3e: 70:e8:9e:0a:dd:ee:a3:a7:32:c9:57:5d:b8:1e:48:7c:1b:17: dd:c2:4c:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HJPyZ/3xgFpV5HLZka02MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYWQxODU0MTRjMTZhZTVkMjI5YThhYTJiZmExNWZlZmM3 MWEyMjIwHhcNMjUxMjA3MDAwMDU5WhcNMjUxMjA4MDAwMDU5WjAzMTEwLwYDVQQD Eyg2NzE0ZDQ4MDFlMDYwNDE1YWFiOTc3MWE4ZmY4ZDYwZWMwMzVhYjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdNjd9DimaFBNKcpdqT/LVUQmF+a /el8goC2eRzyeNr5IcnqQ/BCoOAfNG33x97ExgJmTzbvKyP/GrPSJbkhhIAThxq6 LUWyFXqqKO6MeOBp7Ny+yfFAeoXh9/ZkdQbal0GmFdh1tzv9+gDAGOmQ8bx4BtRw oJh2EOjgh4o12JGL4F3HDRC2ey5M1aDVxzIw7jrGoD4iarMVb+hW1oN8HHJE0HV0 WIbnj869CrWvpaAdU3Cw5pb4uTEJ1NT5wP1iC19gnpQbQoJbSplGlw031RO2cwuC CIMDHDcXkHNN0PriWE1Pd2TkTYgE3A6UDRkjXtSfY2eEjMk4Otv43EqbTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcU1IAeBgQVqrl3Go/41g7ANauXMB8GA1UdIwQY MBaAFEytGFQUwWrl0imoqiv6Ff78caIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEswWVZCVEJhdVhTS2FpcUtfb1Zfdnh4b2lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81Yjc4OGUtZjg0Ny00ZGY5LTkzMzQt OTY0Y2NhNzIyZjczLzEvVEswWVZCVEJhdVhTS2FpcUtfb1Zfdnh4b2lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS81Yjc4OGUtZjg0Ny00ZGY5LTkzMzQtOTY0Y2NhNzIyZjcz LzEvVEswWVZCVEJhdVhTS2FpcUtfb1Zfdnh4b2lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYxrRJh1 PoSv1rCf2+42ibahJ12baHrflPZzi/OrAxln+s3CNZLE5HOVc5eMb0rOz5nNPyqC 5lfTMfZ1hquOk4sepg5YzPElSaLEZXZxQtH15EAufTPY1PKLI/YqVXF2JYUTiw5K B5eBLlPWhQ7M9JBZYUWeuYT3LTYC+zLgHqSJXdSrxcI+EKRneG1ufBCqTxT5rddg 0pdVh0+pVMIAmpDZeycORpP9fO4xQhcU30iRhWIWUGfbyzwUOk2z9yK5rjwdKa0K Undgj91WWUf334PLHvOuR6b+lFimFwQEckmqFIruXzFYm1I+cOieCt3uo6cyyVdd uB5IfBsX3cJMqg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:16:36 2025 by rpki-client