This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft File: TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft (raw, json) Hash identifier: NYEu+1Y6wemhFHAgAOdR7ptFyvs3dYdDnCrPpEy/pjw= Subject key identifier: AA:21:48:43:AE:B6:37:85:54:83:59:84:8F:E9:97:C4:96:54:A9:B3 Authority key identifier: 4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F Certificate issuer: /CN=4c6af986b241d9d27ec724adfabf06d5d231793f Certificate serial: 019B2C66479BF8F2865BA254FF733BB1A654 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft Manifest number: 1433 Signing time: Wed 17 Dec 2025 13:00:59 +0000 Manifest this update: Wed 17 Dec 2025 13:00:59 +0000 Manifest next update: Thu 18 Dec 2025 13:00:59 +0000 Files and hashes: 1: 7mVZwCskyJUQ7gPBL_F_4nbKWrk.roa (hash: Spe2b/mS1SAvEHCJH7XwFJrcW3b1Bvz1bY1SvDC0yz8=) 2: TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl (hash: BgW7q3yNpVlyCaTJgKWW53BSzFii0gXqxKg3bu3QTeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:47:9b:f8:f2:86:5b:a2:54:ff:73:3b:b1:a6:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c6af986b241d9d27ec724adfabf06d5d231793f Validity Not Before: Dec 17 13:00:59 2025 GMT Not After : Dec 18 13:00:59 2025 GMT Subject: CN=aa214843aeb63785548359848fe997c49654a9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9e:93:7d:40:f1:e9:92:2c:4c:29:a3:5c:63: d3:67:b0:e8:59:fa:ad:04:b5:b4:67:de:47:26:85: 4e:0f:cc:22:dd:ee:a5:39:4f:ed:60:cc:a2:78:10: 9f:fa:6d:a7:64:44:bd:25:6c:9d:37:fa:bc:c5:4b: 76:09:30:d0:92:60:9e:c4:98:50:0c:b0:60:b7:ed: a1:dc:4e:62:e3:92:22:ba:75:ac:f6:2f:20:cd:83: a3:1d:08:40:b0:c3:cf:c2:e8:6e:f3:36:d0:91:9a: e4:76:42:e0:1b:5f:2c:6c:89:69:45:5a:e4:e0:4b: 28:32:3e:b4:04:86:75:5a:57:70:b4:5c:b3:b0:9f: 04:c5:5c:29:82:b6:72:1d:d5:15:ce:67:94:e6:38: cf:f3:3c:97:78:11:e2:d0:05:f2:99:40:74:e9:c4: f4:4e:2a:f0:86:d0:db:f7:6f:c7:83:a2:df:42:cc: 9a:35:6d:03:bd:2b:6f:bc:82:ab:2f:b1:8a:f6:ea: 89:18:49:e9:e4:d1:9e:5a:aa:11:a0:11:f5:69:81: a5:04:fb:00:3f:fb:45:80:92:76:db:65:14:06:d5: 32:c2:a4:0d:e3:70:38:2e:cc:7e:7a:18:9b:3f:51: 79:a8:e5:86:00:03:9b:70:9f:5e:c0:86:5f:b0:2c: 1d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:21:48:43:AE:B6:37:85:54:83:59:84:8F:E9:97:C4:96:54:A9:B3 X509v3 Authority Key Identifier: keyid:4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:19:aa:38:72:08:a2:5c:33:5c:75:c7:44:2b:ec:a2:98:8a: 3b:44:14:a0:5b:75:da:5c:e6:9b:09:e6:db:f8:d5:d9:99:d0: ea:0d:19:e1:b7:7e:b2:0f:c5:08:7d:07:f7:f1:4e:0d:bd:d1: a5:55:07:a1:87:37:1e:81:7b:13:6a:da:ac:8a:c7:c0:b7:ac: ee:a9:2c:3a:4b:31:56:89:69:40:78:2a:e2:6a:ac:45:6a:09: 08:53:95:2b:73:a2:88:2d:55:ee:96:cc:c3:73:a5:b6:73:c3: d8:68:b8:f2:98:c0:7e:71:8f:b0:02:b1:2a:88:02:08:a0:1b: 19:70:33:4d:ad:83:38:3a:e3:9a:84:c4:cb:32:b3:fd:90:2b: f3:1d:9b:5c:c6:6e:a1:18:88:30:db:9c:60:b3:c1:84:12:d2: df:76:cc:b4:5d:a3:73:30:f7:4e:30:ab:84:c0:be:f3:8c:48: f8:c4:5e:b1:e4:7b:20:7c:62:55:9f:d9:30:83:54:e6:fd:f4: 37:43:b2:c9:74:a6:6c:52:8f:a1:6c:6f:ab:d1:ff:0a:86:48: 1c:04:a2:7f:f1:aa:70:97:93:e4:cb:9c:a7:8c:80:55:f4:f7: 83:51:3b:42:55:05:a2:ac:54:ee:a4:38:b4:51:6d:29:2c:6c: 26:17:b4:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZkeb+PKGW6JU/3M7saZUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNmFmOTg2YjI0MWQ5ZDI3ZWM3MjRhZGZhYmYwNmQ1ZDIz MTc5M2YwHhcNMjUxMjE3MTMwMDU5WhcNMjUxMjE4MTMwMDU5WjAzMTEwLwYDVQQD EyhhYTIxNDg0M2FlYjYzNzg1NTQ4MzU5ODQ4ZmU5OTdjNDk2NTRhOWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ6TfUDx6ZIsTCmjXGPTZ7DoWfqt BLW0Z95HJoVOD8wi3e6lOU/tYMyieBCf+m2nZES9JWydN/q8xUt2CTDQkmCexJhQ DLBgt+2h3E5i45IiunWs9i8gzYOjHQhAsMPPwuhu8zbQkZrkdkLgG18sbIlpRVrk 4EsoMj60BIZ1WldwtFyzsJ8ExVwpgrZyHdUVzmeU5jjP8zyXeBHi0AXymUB06cT0 TirwhtDb92/Hg6LfQsyaNW0DvStvvIKrL7GK9uqJGEnp5NGeWqoRoBH1aYGlBPsA P/tFgJJ222UUBtUywqQN43A4Lsx+ehibP1F5qOWGAAObcJ9ewIZfsCwdtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKohSEOutjeFVINZhI/pl8SWVKmzMB8GA1UdIwQY MBaAFExq+YayQdnSfsckrfq/BtXSMXk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEdyNWhySkIyZEoteHlTdC1yOEcxZEl4ZVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kYmM0NzItNmUwYS00MTFjLWFmOGYt MDg4OGViNDI3NDRjLzEvVEdyNWhySkIyZEoteHlTdC1yOEcxZEl4ZVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9kYmM0NzItNmUwYS00MTFjLWFmOGYtMDg4OGViNDI3NDRj LzEvVEdyNWhySkIyZEoteHlTdC1yOEcxZEl4ZVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxmqOHII olwzXHXHRCvsopiKO0QUoFt12lzmmwnm2/jV2ZnQ6g0Z4bd+sg/FCH0H9/FODb3R pVUHoYc3HoF7E2rarIrHwLes7qksOksxVolpQHgq4mqsRWoJCFOVK3OiiC1V7pbM w3OltnPD2Gi48pjAfnGPsAKxKogCCKAbGXAzTa2DODrjmoTEyzKz/ZAr8x2bXMZu oRiIMNucYLPBhBLS33bMtF2jczD3TjCrhMC+84xI+MReseR7IHxiVZ/ZMINU5v30 N0OyyXSmbFKPoWxvq9H/CoZIHASif/GqcJeT5Mucp4yAVfT3g1E7QlUFoqxU7qQ4 tFFtKSxsJhe0Zw== -----END CERTIFICATE-----Generated at Wed Dec 17 21:04:07 2025 by rpki-client