This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft File: tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft (raw, json) Hash identifier: vzeCXWzQHFlTEfpbbIaVHPX71cgLcDf/vLMe/4nyvT4= Subject key identifier: 35:5D:7D:43:A9:2C:B2:6C:76:9F:5C:71:A6:73:F3:8D:AE:D0:09:FC Authority key identifier: B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F Certificate issuer: /CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f Certificate serial: 019B25BFD79B885BD650C4D2FD28524516B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft Manifest number: 041A Signing time: Tue 16 Dec 2025 06:01:28 +0000 Manifest this update: Tue 16 Dec 2025 06:01:28 +0000 Manifest next update: Wed 17 Dec 2025 06:01:28 +0000 Files and hashes: 1: ZmF3lPkl3dsARIFpHN7vz5QHbFs.roa (hash: ukfiioKav9S2J4a6qVoPDRL9RQGgYfvHu1FXDGi1Nzg=) 2: tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl (hash: /8XSnxjCnmjEyn24J9jUupaW0Iq+n7DuVjyBHfUWDF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:d7:9b:88:5b:d6:50:c4:d2:fd:28:52:45:16:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f Validity Not Before: Dec 16 06:01:28 2025 GMT Not After : Dec 17 06:01:28 2025 GMT Subject: CN=355d7d43a92cb26c769f5c71a673f38daed009fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:98:32:1d:12:22:c3:7b:01:ae:df:09:9b:e4: 9b:3e:7d:4f:29:4d:54:54:b5:54:24:88:b8:0e:7a: cc:f7:e2:79:30:20:6a:fa:7a:1c:c0:dd:99:b7:6c: bd:da:3d:d1:c0:a0:7c:6d:5f:21:dc:f5:e0:81:6e: d3:a7:31:80:17:69:9b:6b:70:ec:52:59:cd:80:6f: a3:6e:f4:a5:e0:a5:d7:c9:47:61:03:03:4c:6d:f6: f3:84:03:63:bd:91:dd:42:c2:a2:8a:ca:78:ae:e7: c4:22:8f:60:27:d1:9e:d6:5f:79:29:3a:d2:37:39: a0:59:8e:5e:5b:e4:0a:6c:4f:ab:8c:b2:9f:18:25: 9f:1f:6f:23:83:9b:74:f5:91:e2:f5:3b:b1:f2:a9: b1:4c:1c:55:45:ca:3d:3a:7d:36:f4:76:9c:4a:ba: e2:10:72:16:87:37:3e:3d:fa:a8:c3:2f:26:cb:1a: 98:75:0b:33:ff:68:21:21:dc:c2:df:b0:32:b3:da: 21:b1:5c:a1:35:bd:f7:ea:80:21:4b:69:9f:5f:83: 04:53:54:20:0b:48:cb:5f:c7:c5:00:92:af:8a:ca: b8:3c:16:f1:70:6e:f2:4e:cd:a6:b5:dd:13:58:f1: 86:cb:18:77:af:e2:7d:38:c6:38:06:b1:b4:31:63: 02:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5D:7D:43:A9:2C:B2:6C:76:9F:5C:71:A6:73:F3:8D:AE:D0:09:FC X509v3 Authority Key Identifier: keyid:B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:2c:0e:66:1a:9a:a0:e8:0d:34:3d:82:49:27:5b:85:bb:77: c0:e9:66:df:2d:91:cc:9b:77:cb:07:49:91:09:1f:f7:9c:b6: 59:6e:2a:bb:74:99:8f:3b:40:12:5f:c2:98:bd:16:81:b2:5f: 71:47:b9:d2:59:13:4f:d7:2f:e9:4a:96:e7:4d:2b:6e:af:cb: 5b:38:3f:bb:c3:af:a4:e5:6f:25:56:ea:c2:88:6c:fb:af:27: 1e:3e:11:8d:5d:ac:c3:79:e4:ab:1b:97:89:98:1f:50:b7:9a: 30:c9:f6:c2:50:59:93:aa:42:ac:0d:e8:c4:b4:6a:fe:b1:ce: f2:43:fd:bd:81:b2:e9:c3:d0:43:a8:92:af:27:b9:6d:6e:38: 0d:b7:01:80:9c:c1:bf:52:be:c6:35:3a:1c:e7:32:3c:3d:d0: 1a:78:f9:7c:d5:cb:b2:81:28:56:24:39:91:7d:ee:82:ce:61: d2:68:4b:29:2f:ae:94:6b:e0:44:cc:e1:ef:8a:bf:83:ed:0c: 66:79:70:37:a6:50:ac:e8:b4:e8:f8:90:5d:3c:5b:0b:92:41: 07:39:c2:08:aa:59:87:53:34:b5:09:c5:22:6d:55:54:0a:50: 42:56:d1:c6:3f:1b:e7:7b:c1:75:46:0e:78:dd:53:6b:a7:22: 51:f7:fa:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv9ebiFvWUMTS/ShSRRa2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YzI4OGU5NjNlMGU5ZjgyZDFjNmE3ZmQ4NGVjNWFhMzQw YWJhOGYwHhcNMjUxMjE2MDYwMTI4WhcNMjUxMjE3MDYwMTI4WjAzMTEwLwYDVQQD EygzNTVkN2Q0M2E5MmNiMjZjNzY5ZjVjNzFhNjczZjM4ZGFlZDAwOWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJgyHRIiw3sBrt8Jm+SbPn1PKU1U VLVUJIi4DnrM9+J5MCBq+nocwN2Zt2y92j3RwKB8bV8h3PXggW7TpzGAF2mba3Ds UlnNgG+jbvSl4KXXyUdhAwNMbfbzhANjvZHdQsKiisp4rufEIo9gJ9Ge1l95KTrS NzmgWY5eW+QKbE+rjLKfGCWfH28jg5t09ZHi9Tux8qmxTBxVRco9On029HacSrri EHIWhzc+Pfqowy8myxqYdQsz/2ghIdzC37Ays9ohsVyhNb336oAhS2mfX4MEU1Qg C0jLX8fFAJKvisq4PBbxcG7yTs2mtd0TWPGGyxh3r+J9OMY4BrG0MWMC7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVdfUOpLLJsdp9ccaZz842u0An8MB8GA1UdIwQY MBaAFLXCiOlj4On4LRxqf9hOxao0CrqPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGNLSTZXUGc2Zmd0SEdwXzJFN0ZxalFLdW84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kYzM0OTEtYzY5OS00MmI1LTkwYTct Y2M3ZTlhYjA5ZmI4LzEvdGNLSTZXUGc2Zmd0SEdwXzJFN0ZxalFLdW84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kYzM0OTEtYzY5OS00MmI1LTkwYTctY2M3ZTlhYjA5ZmI4 LzEvdGNLSTZXUGc2Zmd0SEdwXzJFN0ZxalFLdW84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCwOZhqa oOgNND2CSSdbhbt3wOlm3y2RzJt3ywdJkQkf95y2WW4qu3SZjztAEl/CmL0WgbJf cUe50lkTT9cv6UqW500rbq/LWzg/u8OvpOVvJVbqwohs+68nHj4RjV2sw3nkqxuX iZgfULeaMMn2wlBZk6pCrA3oxLRq/rHO8kP9vYGy6cPQQ6iSrye5bW44DbcBgJzB v1K+xjU6HOcyPD3QGnj5fNXLsoEoViQ5kX3ugs5h0mhLKS+ulGvgRMzh74q/g+0M ZnlwN6ZQrOi06PiQXTxbC5JBBznCCKpZh1M0tQnFIm1VVApQQlbRxj8b53vBdUYO eN1Ta6ciUff6BQ== -----END CERTIFICATE-----Generated at Tue Dec 16 11:05:08 2025 by rpki-client