This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft File: TfkmWGAQlO1kmFxkxpUr40FjAc4.mft (raw, json) Hash identifier: 5oIwa17SfsyjAuzhkRU6ZdixG4Qnm/SAFL7npF0e5hg= Subject key identifier: 07:59:7D:30:EE:DB:03:59:3A:68:2A:9B:B1:80:8D:BD:47:EB:72:61 Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE Certificate issuer: /CN=4df92658601094ed64985c64c6952be3416301ce Certificate serial: 019AF12D8E619C9AB35251C63EEB652AAD24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft Manifest number: 09CC Signing time: Sat 06 Dec 2025 01:01:25 +0000 Manifest this update: Sat 06 Dec 2025 01:01:25 +0000 Manifest next update: Sun 07 Dec 2025 01:01:25 +0000 Files and hashes: 1: 42VDtF9LMj3RUZlBTr5Tpxb7XhY.roa (hash: 06Fp4iuAbTOsazThfCr6hEmyN81BPyfi3nXeyKKT6d0=) 2: TfkmWGAQlO1kmFxkxpUr40FjAc4.crl (hash: /QW6wKXoCaTsqnZJNGv/XD7+s9bR8BwRiJxsiZ4BvmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:8e:61:9c:9a:b3:52:51:c6:3e:eb:65:2a:ad:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4df92658601094ed64985c64c6952be3416301ce Validity Not Before: Dec 6 01:01:25 2025 GMT Not After : Dec 7 01:01:25 2025 GMT Subject: CN=07597d30eedb03593a682a9bb1808dbd47eb7261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c4:80:1b:c4:5b:3a:0f:3a:04:84:d2:37:77: 0d:53:58:0a:7e:94:20:4e:92:e7:5a:2f:e2:25:3f: c1:73:ec:6b:29:70:8c:2c:61:ba:da:f2:7a:ea:e1: 61:93:5d:10:ac:35:aa:88:1a:16:1f:83:c6:d4:fc: 94:1b:56:8d:16:1e:1c:d6:94:00:a7:c9:90:aa:7a: e9:65:f2:46:ad:9e:23:46:d4:5f:8d:f6:e1:ab:47: 05:0a:c6:ed:93:ff:19:5e:7c:df:d4:8f:1e:5b:68: 9e:5b:d3:76:a7:76:c6:bd:ad:c5:40:f3:9b:03:05: ee:42:c1:6b:f3:6b:0e:c5:11:07:b4:f3:14:87:34: ee:fb:aa:de:ff:e2:30:30:46:23:c3:8a:92:8f:56: a3:b5:0b:b2:81:84:14:31:8e:29:5f:39:68:02:67: 5e:f3:00:44:a0:18:55:03:3b:43:4f:71:6d:1e:b6: 4f:f4:5a:c0:af:07:81:c6:f8:15:32:ab:38:ba:42: 7f:c3:54:e0:ec:d3:00:c1:fb:b2:01:38:93:3b:09: 5c:e6:46:47:5e:5a:2c:21:df:17:99:ba:4f:94:65: 22:50:4b:2a:ce:23:e7:da:79:3f:ac:5f:c0:93:86: 31:5a:76:f1:43:a7:2c:b0:d2:b0:64:dc:83:7e:08: 52:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:59:7D:30:EE:DB:03:59:3A:68:2A:9B:B1:80:8D:BD:47:EB:72:61 X509v3 Authority Key Identifier: keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:08:87:8e:46:20:d4:72:9e:0f:3c:c3:97:cb:75:cb:6a:5a: a6:d6:55:95:c7:5e:2c:07:5a:05:65:7e:d2:98:9e:28:50:b0: 0f:44:1d:ff:97:11:24:e2:7c:c1:61:7e:83:64:f6:c7:a9:4c: a5:08:cc:b3:f0:d1:1d:11:da:52:62:cd:41:e6:06:08:70:a6: 93:11:3b:b8:5d:88:bf:77:d6:06:12:3d:69:7b:bc:9d:49:7a: 03:e1:f5:c9:ad:e0:8c:46:92:d5:f7:b1:22:90:02:c5:02:83: bd:6a:3f:74:96:a2:98:9e:13:5e:5a:e1:3a:8f:42:76:dd:fb: c4:ee:47:05:f3:db:3a:32:89:a3:1e:54:eb:09:75:f1:e2:a2: c9:fe:15:1f:a5:be:d0:37:0b:4c:5b:17:6c:7d:e7:9f:f2:aa: 92:3b:f7:1c:cb:63:9b:d7:fb:85:7c:dd:59:71:23:11:e3:4b: d7:4f:70:08:3a:f9:bd:26:4c:7e:72:3c:ae:f3:8d:b0:32:f3: ff:1f:aa:ac:f6:55:1d:b0:7a:9e:6f:95:4b:18:fc:40:35:60: e1:59:83:dd:d0:80:1b:0a:26:db:dc:f4:e1:5c:1d:9f:fe:e0: 78:4c:80:4d:a2:3a:a4:8c:89:1d:7e:8d:09:c1:9a:34:37:a3: 03:f0:a7:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLY5hnJqzUlHGPutlKq0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZjkyNjU4NjAxMDk0ZWQ2NDk4NWM2NGM2OTUyYmUzNDE2 MzAxY2UwHhcNMjUxMjA2MDEwMTI1WhcNMjUxMjA3MDEwMTI1WjAzMTEwLwYDVQQD EygwNzU5N2QzMGVlZGIwMzU5M2E2ODJhOWJiMTgwOGRiZDQ3ZWI3MjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsSAG8RbOg86BITSN3cNU1gKfpQg TpLnWi/iJT/Bc+xrKXCMLGG62vJ66uFhk10QrDWqiBoWH4PG1PyUG1aNFh4c1pQA p8mQqnrpZfJGrZ4jRtRfjfbhq0cFCsbtk/8ZXnzf1I8eW2ieW9N2p3bGva3FQPOb AwXuQsFr82sOxREHtPMUhzTu+6re/+IwMEYjw4qSj1ajtQuygYQUMY4pXzloAmde 8wBEoBhVAztDT3FtHrZP9FrArweBxvgVMqs4ukJ/w1Tg7NMAwfuyATiTOwlc5kZH XlosId8XmbpPlGUiUEsqziPn2nk/rF/Ak4YxWnbxQ6cssNKwZNyDfghS3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdZfTDu2wNZOmgqm7GAjb1H63JhMB8GA1UdIwQY MBaAFE35JlhgEJTtZJhcZMaVK+NBYwHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGZrbVdHQVFsTzFrbUZ4a3hwVXI0MEZqQWM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hOWU1N2UtMjQ3OS00NTc2LWIyNzUt ODc0MzMxNTdhMjViLzEvVGZrbVdHQVFsTzFrbUZ4a3hwVXI0MEZqQWM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9hOWU1N2UtMjQ3OS00NTc2LWIyNzUtODc0MzMxNTdhMjVi LzEvVGZrbVdHQVFsTzFrbUZ4a3hwVXI0MEZqQWM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwiHjkYg 1HKeDzzDl8t1y2paptZVlcdeLAdaBWV+0pieKFCwD0Qd/5cRJOJ8wWF+g2T2x6lM pQjMs/DRHRHaUmLNQeYGCHCmkxE7uF2Iv3fWBhI9aXu8nUl6A+H1ya3gjEaS1fex IpACxQKDvWo/dJaimJ4TXlrhOo9Cdt37xO5HBfPbOjKJox5U6wl18eKiyf4VH6W+ 0DcLTFsXbH3nn/Kqkjv3HMtjm9f7hXzdWXEjEeNL109wCDr5vSZMfnI8rvONsDLz /x+qrPZVHbB6nm+VSxj8QDVg4VmD3dCAGwom29z04Vwdn/7geEyATaI6pIyJHX6N CcGaNDejA/CnLg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:26:03 2025 by rpki-client