This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft File: TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft (raw, json) Hash identifier: uQssOcYwQtAHYF26LSEc5DG5IS6Zkh7A7SqWD1zJqSc= Subject key identifier: 36:04:13:F8:88:17:D9:1D:7C:D5:52:D9:BF:DF:0D:A1:64:F7:FC:DB Authority key identifier: 4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F Certificate issuer: /CN=4c6af986b241d9d27ec724adfabf06d5d231793f Certificate serial: 019AF2769E90EC050FEF75DB95354668887F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft Manifest number: 1415 Signing time: Sat 06 Dec 2025 07:00:51 +0000 Manifest this update: Sat 06 Dec 2025 07:00:51 +0000 Manifest next update: Sun 07 Dec 2025 07:00:51 +0000 Files and hashes: 1: 7mVZwCskyJUQ7gPBL_F_4nbKWrk.roa (hash: Spe2b/mS1SAvEHCJH7XwFJrcW3b1Bvz1bY1SvDC0yz8=) 2: TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl (hash: rVZEcqt9/R8aJIgXVlNUxiH9798IIBF67tgc2fRHnE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9e:90:ec:05:0f:ef:75:db:95:35:46:68:88:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c6af986b241d9d27ec724adfabf06d5d231793f Validity Not Before: Dec 6 07:00:51 2025 GMT Not After : Dec 7 07:00:51 2025 GMT Subject: CN=360413f88817d91d7cd552d9bfdf0da164f7fcdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:29:dd:fe:84:ed:f3:85:2f:34:54:4a:51:0a: 6e:b2:67:6d:e1:60:a8:49:ea:6a:74:f9:98:5e:dc: bb:55:48:55:f1:c1:a1:0d:0f:fb:ec:7a:ca:8b:3b: 4c:b8:16:4c:b7:f5:77:99:d5:62:c4:46:c2:32:94: c4:ab:83:2d:55:da:ff:c0:48:1c:cb:b3:6a:de:02: b2:db:93:23:81:9e:a9:ef:bf:81:e4:55:c2:dc:93: c9:e7:1b:20:43:d5:a5:b9:e4:b4:ca:b5:0d:36:79: df:e6:eb:7b:ea:b8:a3:32:1e:23:8c:2e:4e:bf:84: 36:f1:da:61:6d:37:c1:3a:ce:0e:b3:1d:71:74:bf: 82:ec:b6:f2:00:19:a6:5f:a9:fa:aa:93:12:52:e9: 88:98:3e:7b:d1:64:61:98:ae:d5:f1:9e:5c:a7:7e: e2:90:b2:4d:f4:25:a4:13:c1:9c:81:ee:fa:0c:70: 52:77:81:65:73:8b:69:a2:09:06:67:13:93:85:51: 5a:ea:c4:68:a9:36:59:a6:8a:e5:b0:2e:d2:1d:0e: 8c:4c:c1:d8:ec:92:a6:8c:9a:e8:37:5c:eb:0e:c5: 2d:44:ab:f6:97:5b:bd:8f:2d:59:3f:00:cb:69:e9: b8:65:21:bf:49:ef:16:77:43:19:4b:f3:fa:f8:b6: 8f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:04:13:F8:88:17:D9:1D:7C:D5:52:D9:BF:DF:0D:A1:64:F7:FC:DB X509v3 Authority Key Identifier: keyid:4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:95:a1:77:e2:60:06:1d:4e:40:c8:b5:6a:34:c6:8b:d0:89: 55:d6:52:7a:bc:1a:56:5c:bf:97:d1:03:78:d4:cd:39:25:45: 8a:95:14:1a:d8:d8:37:25:71:67:3e:8f:3b:18:47:28:63:46: d5:15:15:de:c7:22:7e:8a:78:5d:06:ef:b2:55:9d:e1:44:8f: 64:8f:e2:07:79:cb:5d:d4:7a:f1:d4:f7:ab:fe:30:9d:db:0a: b8:00:3e:36:42:ac:8c:f9:31:df:d9:74:48:d1:21:d3:96:ce: 04:56:df:41:30:4f:46:5f:2b:f0:fc:02:07:5e:a3:5f:59:1b: ed:6f:dc:4d:2a:04:40:81:77:f9:45:62:5c:c3:95:4a:61:40: c9:3d:2e:f0:57:e7:fb:69:64:09:e8:89:29:2e:1b:9f:5c:e5: ff:66:5a:16:8f:7e:a1:2b:cf:30:69:67:ee:21:62:5d:be:a0: c2:c7:c0:73:18:0d:e2:ac:7f:78:80:a7:ac:30:ce:63:42:02: 81:62:05:a5:c1:7a:a6:b6:f8:97:aa:43:c3:89:f8:d5:6b:30: 9b:e5:c9:5f:a3:16:0b:b4:57:3e:6c:64:8e:77:26:ef:75:31: 88:40:6b:ed:e4:5d:74:30:7a:d5:65:91:43:c6:65:da:ea:a3: 93:2f:02:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydp6Q7AUP73XblTVGaIh/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNmFmOTg2YjI0MWQ5ZDI3ZWM3MjRhZGZhYmYwNmQ1ZDIz MTc5M2YwHhcNMjUxMjA2MDcwMDUxWhcNMjUxMjA3MDcwMDUxWjAzMTEwLwYDVQQD EygzNjA0MTNmODg4MTdkOTFkN2NkNTUyZDliZmRmMGRhMTY0ZjdmY2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCnd/oTt84UvNFRKUQpusmdt4WCo SepqdPmYXty7VUhV8cGhDQ/77HrKiztMuBZMt/V3mdVixEbCMpTEq4MtVdr/wEgc y7Nq3gKy25MjgZ6p77+B5FXC3JPJ5xsgQ9WlueS0yrUNNnnf5ut76rijMh4jjC5O v4Q28dphbTfBOs4Osx1xdL+C7LbyABmmX6n6qpMSUumImD570WRhmK7V8Z5cp37i kLJN9CWkE8Gcge76DHBSd4Flc4tpogkGZxOThVFa6sRoqTZZporlsC7SHQ6MTMHY 7JKmjJroN1zrDsUtRKv2l1u9jy1ZPwDLaem4ZSG/Se8Wd0MZS/P6+LaPQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYEE/iIF9kdfNVS2b/fDaFk9/zbMB8GA1UdIwQY MBaAFExq+YayQdnSfsckrfq/BtXSMXk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEdyNWhySkIyZEoteHlTdC1yOEcxZEl4ZVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kYmM0NzItNmUwYS00MTFjLWFmOGYt MDg4OGViNDI3NDRjLzEvVEdyNWhySkIyZEoteHlTdC1yOEcxZEl4ZVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9kYmM0NzItNmUwYS00MTFjLWFmOGYtMDg4OGViNDI3NDRj LzEvVEdyNWhySkIyZEoteHlTdC1yOEcxZEl4ZVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5Whd+Jg Bh1OQMi1ajTGi9CJVdZSerwaVly/l9EDeNTNOSVFipUUGtjYNyVxZz6POxhHKGNG 1RUV3scifop4XQbvslWd4USPZI/iB3nLXdR68dT3q/4wndsKuAA+NkKsjPkx39l0 SNEh05bOBFbfQTBPRl8r8PwCB16jX1kb7W/cTSoEQIF3+UViXMOVSmFAyT0u8Ffn +2lkCeiJKS4bn1zl/2ZaFo9+oSvPMGln7iFiXb6gwsfAcxgN4qx/eICnrDDOY0IC gWIFpcF6prb4l6pDw4n41Wswm+XJX6MWC7RXPmxkjncm73UxiEBr7eRddDB61WWR Q8Zl2uqjky8CWw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:38 2025 by rpki-client