This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft File: tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft (raw, json) Hash identifier: 1ofRTwceh0flEFGtd4MMA5n0AO9PumuN4kXZ76O33Pk= Subject key identifier: 89:C5:E6:68:46:B0:A8:1F:8B:E4:E6:09:81:29:F0:E5:70:19:DA:E9 Authority key identifier: B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F Certificate issuer: /CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f Certificate serial: 019AF19AE6C2F13D6C71E22954F7959A9BFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft Manifest number: 03FF Signing time: Sat 06 Dec 2025 03:00:51 +0000 Manifest this update: Sat 06 Dec 2025 03:00:51 +0000 Manifest next update: Sun 07 Dec 2025 03:00:51 +0000 Files and hashes: 1: ZmF3lPkl3dsARIFpHN7vz5QHbFs.roa (hash: ukfiioKav9S2J4a6qVoPDRL9RQGgYfvHu1FXDGi1Nzg=) 2: tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl (hash: FhsMenKlK3y1iyV/fjYdZW99emg8QcxGoMD7rm4o9oc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e6:c2:f1:3d:6c:71:e2:29:54:f7:95:9a:9b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f Validity Not Before: Dec 6 03:00:51 2025 GMT Not After : Dec 7 03:00:51 2025 GMT Subject: CN=89c5e66846b0a81f8be4e6098129f0e57019dae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ea:e8:92:cb:7e:ea:f9:8c:8b:be:f0:b3:ad: f8:e7:9a:da:6e:b7:04:92:d3:dc:25:fa:e7:36:32: a5:5a:ef:cb:58:bb:14:4c:46:50:ec:a4:ec:29:6b: 3c:6e:4e:9a:5c:91:fd:b1:5d:78:38:a8:66:fd:4c: ee:fe:df:ff:0f:50:00:00:af:28:5f:01:b9:d4:9d: 04:f2:7e:eb:5e:0c:c1:c3:64:bc:19:a0:cd:b7:df: 27:1e:79:f8:fb:94:8e:31:95:98:0c:8d:b1:2c:93: 5f:ea:8b:59:5c:44:59:96:6f:93:f0:7b:0b:94:5b: a8:d8:2d:f8:e0:7d:96:d5:27:be:20:48:53:92:34: 4b:38:ff:e5:78:2e:b6:08:38:11:50:aa:d9:2a:e2: 4a:76:d4:8b:52:19:3a:39:d1:39:26:cf:8a:b8:9d: 81:7d:5f:19:0e:e4:91:ce:1b:0d:26:5c:6b:59:4c: 3d:8b:de:3d:82:76:6a:c1:2a:1f:dd:ae:26:de:6d: c5:13:3a:47:2e:df:0a:98:d5:ff:f0:27:66:38:92: a9:1e:e1:e7:d5:d3:0f:2c:61:e1:0c:e0:55:7f:7a: a7:b2:3b:3b:eb:5b:54:3a:f4:6c:29:d2:88:36:0f: 55:0f:6b:f8:ac:6d:71:da:75:f2:9e:6d:42:2a:d9: 96:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C5:E6:68:46:B0:A8:1F:8B:E4:E6:09:81:29:F0:E5:70:19:DA:E9 X509v3 Authority Key Identifier: keyid:B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:63:5e:05:6b:f5:73:e4:1e:ac:aa:7f:49:97:f7:39:e9:47: 2b:bf:3d:d7:eb:8e:66:9e:f4:8c:37:34:63:16:5f:c7:42:53: 2c:2b:89:7a:a7:70:15:14:14:e1:79:f3:5d:4e:75:7f:c6:cf: 68:f7:63:62:6d:4e:7a:e3:2f:39:2b:4a:ee:f6:2a:02:37:3b: 72:61:25:87:b6:10:e6:8c:1a:4e:5d:e8:37:57:e6:62:86:d9: c7:a2:56:47:98:31:6a:34:ae:ca:64:35:3a:dd:c4:b6:c6:09: e5:d4:f8:8d:2f:3f:f1:8f:36:3c:41:5c:5b:f5:1a:d6:3c:08: 8b:29:a6:88:64:3f:bb:01:d5:0a:8d:a9:91:6e:3e:0b:24:f0: 4e:83:91:d0:29:2b:3b:be:63:cb:c9:9b:81:f0:29:4d:75:f6: 3a:70:56:9a:65:f6:8e:50:69:39:68:32:f7:a9:00:61:a3:9e: d6:74:0c:de:a3:92:ca:76:11:36:3c:f1:4a:c5:71:b2:7f:18: ca:d6:ca:df:2b:ae:07:27:f1:e1:a9:aa:41:96:63:f9:7d:cb: 28:bc:09:45:70:c0:e1:6b:75:77:82:bd:35:84:b7:15:47:94: 40:5c:0f:20:33:8e:02:48:f3:6e:db:0d:ba:ea:4f:ec:ea:59: 15:0c:f0:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmubC8T1sceIpVPeVmpv8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YzI4OGU5NjNlMGU5ZjgyZDFjNmE3ZmQ4NGVjNWFhMzQw YWJhOGYwHhcNMjUxMjA2MDMwMDUxWhcNMjUxMjA3MDMwMDUxWjAzMTEwLwYDVQQD Eyg4OWM1ZTY2ODQ2YjBhODFmOGJlNGU2MDk4MTI5ZjBlNTcwMTlkYWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOrokst+6vmMi77ws63455rabrcE ktPcJfrnNjKlWu/LWLsUTEZQ7KTsKWs8bk6aXJH9sV14OKhm/Uzu/t//D1AAAK8o XwG51J0E8n7rXgzBw2S8GaDNt98nHnn4+5SOMZWYDI2xLJNf6otZXERZlm+T8HsL lFuo2C344H2W1Se+IEhTkjRLOP/leC62CDgRUKrZKuJKdtSLUhk6OdE5Js+KuJ2B fV8ZDuSRzhsNJlxrWUw9i949gnZqwSof3a4m3m3FEzpHLt8KmNX/8CdmOJKpHuHn 1dMPLGHhDOBVf3qnsjs761tUOvRsKdKINg9VD2v4rG1x2nXynm1CKtmW5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInF5mhGsKgfi+TmCYEp8OVwGdrpMB8GA1UdIwQY MBaAFLXCiOlj4On4LRxqf9hOxao0CrqPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGNLSTZXUGc2Zmd0SEdwXzJFN0ZxalFLdW84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kYzM0OTEtYzY5OS00MmI1LTkwYTct Y2M3ZTlhYjA5ZmI4LzEvdGNLSTZXUGc2Zmd0SEdwXzJFN0ZxalFLdW84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kYzM0OTEtYzY5OS00MmI1LTkwYTctY2M3ZTlhYjA5ZmI4 LzEvdGNLSTZXUGc2Zmd0SEdwXzJFN0ZxalFLdW84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmNeBWv1 c+QerKp/SZf3OelHK7891+uOZp70jDc0YxZfx0JTLCuJeqdwFRQU4XnzXU51f8bP aPdjYm1OeuMvOStK7vYqAjc7cmElh7YQ5owaTl3oN1fmYobZx6JWR5gxajSuymQ1 Ot3EtsYJ5dT4jS8/8Y82PEFcW/Ua1jwIiymmiGQ/uwHVCo2pkW4+CyTwToOR0Ckr O75jy8mbgfApTXX2OnBWmmX2jlBpOWgy96kAYaOe1nQM3qOSynYRNjzxSsVxsn8Y ytbK3yuuByfx4amqQZZj+X3LKLwJRXDA4Wt1d4K9NYS3FUeUQFwPIDOOAkjzbtsN uupP7OpZFQzwIg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:55 2025 by rpki-client