This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json) Hash identifier: s/ep89HqX4IJn1r5Cl+4wa7VNiqByf/P8bnnhIUs1iA= Subject key identifier: F4:C3:14:8D:8B:CD:10:43:5B:16:7D:1A:DA:9E:F9:73:37:5F:53:FF Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7 Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7 Certificate serial: 019AF0BF83079308CF0A9A1F6E1127618C07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft Manifest number: 03E9 Signing time: Fri 05 Dec 2025 23:01:14 +0000 Manifest this update: Fri 05 Dec 2025 23:01:14 +0000 Manifest next update: Sat 06 Dec 2025 23:01:14 +0000 Files and hashes: 1: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: GQNXpVu4yWDF+8bQmb2sZ/ixA5IjbdVhN/K36orx7ag=) 2: iTC7AIloz6nQaL3mT_rFGYZ-wig.roa (hash: fesaTZGLmhO2WzwSQegYz6bFqw2Ey8O4XUX49y7XEFA=) 3: uAJKiTWW3Ub4f2F2pRQzTM4uTxQ.roa (hash: QYC9wZJDQP4jalSd59izpnWdNPoZL5WfK7FyvYaliJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:83:07:93:08:cf:0a:9a:1f:6e:11:27:61:8c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7 Validity Not Before: Dec 5 23:01:14 2025 GMT Not After : Dec 6 23:01:14 2025 GMT Subject: CN=f4c3148d8bcd10435b167d1ada9ef973375f53ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:55:c1:3e:ed:a0:8c:66:ac:6d:80:cc:10:fe: 23:48:ef:44:7a:30:a4:91:0b:fa:72:50:3b:a9:60: 05:57:61:59:ed:0a:68:39:bb:c6:4f:fc:63:9e:69: 49:3b:f6:db:32:31:3c:0a:5d:22:4a:42:b1:98:0c: 96:8c:0d:60:ae:c7:42:d6:16:ba:11:ed:5d:80:52: 91:c4:7c:6c:50:78:52:71:59:9b:a8:cb:ef:65:c6: fd:60:90:97:05:f7:8b:17:15:f3:e0:2a:bf:b3:05: ff:22:1c:48:f3:4c:08:57:ee:08:ab:3e:2b:6c:77: c1:0a:23:b4:26:3a:37:89:3a:65:80:ce:37:ef:5f: 5b:2b:5a:9d:42:09:d1:54:bf:ee:70:0b:de:4a:48: fd:0f:34:d9:91:8c:2b:b5:cd:a9:e9:e2:2c:2c:84: 75:9e:0d:b8:c1:a1:05:91:54:3e:59:80:c6:5f:c5: 2d:42:b1:db:f2:81:84:ee:b6:fc:92:59:34:9b:75: 5f:cb:56:9b:79:51:6b:74:37:9d:7a:37:f3:f1:09: 46:ff:ad:40:2c:48:12:cf:06:52:2b:6b:f5:a9:b5: c3:67:db:2b:ff:8a:d7:3e:93:03:dd:b9:ad:72:27: ea:c5:31:0b:19:fa:56:cb:9d:ed:c4:fe:a9:26:d5: e9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C3:14:8D:8B:CD:10:43:5B:16:7D:1A:DA:9E:F9:73:37:5F:53:FF X509v3 Authority Key Identifier: keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:2e:7b:38:bc:3e:54:40:93:98:e2:08:e3:cb:55:a0:86:5b: d0:99:a8:ee:be:91:53:b3:4b:1c:a1:79:a2:c9:54:8e:4a:32: a1:6e:0f:93:07:87:c2:d2:3a:e3:60:02:d2:f9:34:9d:0b:2b: 56:19:04:f4:c6:50:31:36:a3:6d:ab:30:fa:cb:cd:dc:00:df: e6:b8:99:20:a9:4f:ac:10:0c:1c:a7:7d:54:5f:b3:3b:98:90: 16:91:0d:bd:93:d0:75:c8:b0:85:d9:29:5e:47:7a:40:91:ee: 71:91:b3:bf:d6:e6:f9:8a:a9:ba:fa:1c:8e:5c:b6:7b:74:cb: e2:1d:d0:fd:26:3e:31:ab:dc:59:08:7c:41:38:d1:9d:2c:98: 45:f0:52:53:50:aa:22:c5:e6:b0:15:d8:ab:92:60:db:90:3d: 7d:94:32:dd:a9:05:2f:29:8c:c2:4d:fc:29:ce:eb:1e:64:64: 39:e8:1c:88:08:6d:10:22:41:8a:4b:28:62:be:17:d5:45:d5: 56:a7:af:37:ed:d0:5e:2a:5f:71:55:20:ab:90:5a:b1:af:56: a3:3c:f2:df:82:60:86:6d:eb:d2:a0:82:8a:56:44:22:06:b4: 5a:16:17:e3:df:63:95:ea:7c:70:61:a5:20:ff:fe:01:e4:95: c4:47:56:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4MHkwjPCpofbhEnYYwHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZGQ2OTczNDkzY2UwYzM4NDliOGI5MTliNzUwMmJhNWZh MDEzZDcwHhcNMjUxMjA1MjMwMTE0WhcNMjUxMjA2MjMwMTE0WjAzMTEwLwYDVQQD EyhmNGMzMTQ4ZDhiY2QxMDQzNWIxNjdkMWFkYTllZjk3MzM3NWY1M2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+FXBPu2gjGasbYDMEP4jSO9EejCk kQv6clA7qWAFV2FZ7QpoObvGT/xjnmlJO/bbMjE8Cl0iSkKxmAyWjA1grsdC1ha6 Ee1dgFKRxHxsUHhScVmbqMvvZcb9YJCXBfeLFxXz4Cq/swX/IhxI80wIV+4Iqz4r bHfBCiO0Jjo3iTplgM43719bK1qdQgnRVL/ucAveSkj9DzTZkYwrtc2p6eIsLIR1 ng24waEFkVQ+WYDGX8UtQrHb8oGE7rb8klk0m3Vfy1abeVFrdDedejfz8QlG/61A LEgSzwZSK2v1qbXDZ9sr/4rXPpMD3bmtcifqxTELGfpWy53txP6pJtXp4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTDFI2LzRBDWxZ9Gtqe+XM3X1P/MB8GA1UdIwQY MBaAFEzdaXNJPODDhJuLkZt1ArpfoBPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hMzVmN2YtMjE5NC00NmQzLTkxYmQt Y2MwZjUwYmRhMTU5LzEvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hMzVmN2YtMjE5NC00NmQzLTkxYmQtY2MwZjUwYmRhMTU5 LzEvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASi57OLw+ VECTmOII48tVoIZb0Jmo7r6RU7NLHKF5oslUjkoyoW4PkweHwtI642AC0vk0nQsr VhkE9MZQMTajbasw+svN3ADf5riZIKlPrBAMHKd9VF+zO5iQFpENvZPQdciwhdkp Xkd6QJHucZGzv9bm+Yqpuvocjly2e3TL4h3Q/SY+MavcWQh8QTjRnSyYRfBSU1Cq IsXmsBXYq5Jg25A9fZQy3akFLymMwk38Kc7rHmRkOegciAhtECJBiksoYr4X1UXV VqevN+3QXipfcVUgq5Basa9Wozzy34Jghm3r0qCCilZEIga0WhYX499jlep8cGGl IP/+AeSVxEdWbw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:48 2025 by rpki-client