This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft File: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft (raw, json) Hash identifier: h1PQy9Wpr1oUyCBHB+nlfPao95VYBxjpcyfRXKkxJUo= Subject key identifier: 9E:51:B3:AC:71:97:DC:C4:D5:2B:7F:C8:92:13:9C:68:21:28:FD:DA Authority key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97 Certificate issuer: /CN=4d1527d1839bf830360d71590134354e6d904697 Certificate serial: 019B2C9D92BF8F90146E7D7B4279EAFC9F40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 14:01:22 +0000 Manifest this update: Wed 17 Dec 2025 14:01:22 +0000 Manifest next update: Thu 18 Dec 2025 14:01:22 +0000 Files and hashes: 1: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl (hash: XgKyLbeySpnra2IlqRmmOZA8/qSTCe0br3vZaZud/Co=) 2: a6Whh1qMHaCLz9si7bMkIx4xg1Y.roa (hash: R/Syehgq2eEOSio/8bhqr2YXvz+4Ke3qpd0G80XikQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:92:bf:8f:90:14:6e:7d:7b:42:79:ea:fc:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d1527d1839bf830360d71590134354e6d904697 Validity Not Before: Dec 17 14:01:22 2025 GMT Not After : Dec 18 14:01:22 2025 GMT Subject: CN=9e51b3ac7197dcc4d52b7fc892139c682128fdda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:ec:5a:cd:bd:90:c8:18:9c:f0:04:49:cd: ef:10:68:92:e2:87:f0:9f:0b:26:e0:01:ed:90:de: 82:f9:a0:6d:1f:38:eb:52:25:9d:e4:21:99:ef:17: 75:9d:6d:dc:a4:ba:f1:d3:dd:d7:6a:14:7a:3c:dc: 01:a9:a2:19:d4:9d:5c:e0:38:22:96:9c:8c:36:c2: f3:31:0c:28:f8:77:99:fa:75:bc:6b:74:b8:01:0b: a1:3a:32:95:52:37:ee:7f:47:60:7d:75:7b:17:87: 60:b8:ea:d2:3a:89:c7:b8:8b:ba:33:bf:89:9d:a3: 9c:0f:b5:b9:17:b4:96:b4:11:f4:f4:cb:84:15:40: 7e:5d:2e:b7:5f:86:2a:a7:f9:ac:98:fc:41:be:d4: 9c:c3:2b:45:8b:d5:1e:f3:75:49:ef:99:0f:3b:6a: ff:76:71:60:0e:09:7b:dd:4d:6b:0b:4f:ad:88:59: fb:ee:8c:62:af:b7:c8:26:41:95:fc:2b:35:06:06: 69:a8:13:be:04:07:4f:44:58:bf:9d:44:d6:06:d5: d5:09:fc:4c:f4:bc:33:76:2d:9c:a2:da:03:92:dd: 3d:74:50:32:13:d5:e1:13:85:12:19:24:e7:27:76: ca:89:e5:d6:ac:33:21:06:94:90:cc:e2:e2:61:32: 3a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:51:B3:AC:71:97:DC:C4:D5:2B:7F:C8:92:13:9C:68:21:28:FD:DA X509v3 Authority Key Identifier: keyid:4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:60:d4:8b:32:07:dd:f0:7a:0b:ff:d0:10:49:15:74:2d:43: d0:a9:f4:60:df:24:35:e9:5b:c3:bf:9b:81:6f:ad:ef:18:77: f5:f9:f0:57:37:79:5f:a3:4e:57:3b:55:f3:51:7d:6a:77:04: 0f:76:9b:39:e4:58:d5:b4:b7:bf:64:0b:84:b1:e7:9c:7b:52: 49:2a:10:1c:98:d2:e9:93:45:b5:a0:33:aa:63:02:75:2e:89: 05:ce:a3:07:02:25:f6:fb:6d:53:b2:ab:e7:08:cb:2f:31:67: e6:c7:0a:49:01:10:6a:e7:66:17:68:ff:bc:db:93:5a:cb:a9: 3b:f6:99:28:70:62:94:52:1e:0d:a9:b2:5a:99:48:fe:2d:fb: a2:71:5c:7b:80:ca:b6:f6:1f:52:84:4c:17:34:48:86:e6:cd: 05:92:1a:20:cf:54:79:39:cd:a1:b8:50:91:5a:05:74:70:34: 9f:08:77:cc:08:ad:e6:55:4c:50:12:f9:54:b4:b2:fa:72:55: 3a:24:5a:d7:e2:38:49:b4:2c:ba:96:8a:57:d5:e3:d9:57:ea: 22:32:a0:64:90:9f:d2:7f:d2:0d:fd:05:c8:d7:cf:87:0c:df: 3c:a9:f9:a1:5c:34:e0:bd:47:c6:76:ad:09:29:a2:f4:d2:16: 55:e9:e6:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnZK/j5AUbn17Qnnq/J9AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMTUyN2QxODM5YmY4MzAzNjBkNzE1OTAxMzQzNTRlNmQ5 MDQ2OTcwHhcNMjUxMjE3MTQwMTIyWhcNMjUxMjE4MTQwMTIyWjAzMTEwLwYDVQQD Eyg5ZTUxYjNhYzcxOTdkY2M0ZDUyYjdmYzg5MjEzOWM2ODIxMjhmZGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbjsWs29kMgYnPAESc3vEGiS4ofw nwsm4AHtkN6C+aBtHzjrUiWd5CGZ7xd1nW3cpLrx093XahR6PNwBqaIZ1J1c4Dgi lpyMNsLzMQwo+HeZ+nW8a3S4AQuhOjKVUjfuf0dgfXV7F4dguOrSOonHuIu6M7+J naOcD7W5F7SWtBH09MuEFUB+XS63X4Yqp/msmPxBvtScwytFi9Ue83VJ75kPO2r/ dnFgDgl73U1rC0+tiFn77oxir7fIJkGV/Cs1BgZpqBO+BAdPRFi/nUTWBtXVCfxM 9Lwzdi2cotoDkt09dFAyE9XhE4USGSTnJ3bKieXWrDMhBpSQzOLiYTI6VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5Rs6xxl9zE1St/yJITnGghKP3aMB8GA1UdIwQY MBaAFE0VJ9GDm/gwNg1xWQE0NU5tkEaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFJVbjBZT2ItREEyRFhGWkFUUTFUbTJRUnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zMDlkMzYtYzQyMC00MzIxLTk1NDAt ZjNkZjY3M2VhNThjLzEvVFJVbjBZT2ItREEyRFhGWkFUUTFUbTJRUnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8zMDlkMzYtYzQyMC00MzIxLTk1NDAtZjNkZjY3M2VhNThj LzEvVFJVbjBZT2ItREEyRFhGWkFUUTFUbTJRUnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWDUizIH 3fB6C//QEEkVdC1D0Kn0YN8kNelbw7+bgW+t7xh39fnwVzd5X6NOVztV81F9ancE D3abOeRY1bS3v2QLhLHnnHtSSSoQHJjS6ZNFtaAzqmMCdS6JBc6jBwIl9vttU7Kr 5wjLLzFn5scKSQEQaudmF2j/vNuTWsupO/aZKHBilFIeDamyWplI/i37onFce4DK tvYfUoRMFzRIhubNBZIaIM9UeTnNobhQkVoFdHA0nwh3zAit5lVMUBL5VLSy+nJV OiRa1+I4SbQsupaKV9Xj2VfqIjKgZJCf0n/SDf0FyNfPhwzfPKn5oVw04L1Hxnat CSmi9NIWVenmmA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:11:24 2025 by rpki-client