This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft File: Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft (raw, json) Hash identifier: UPRWwmlfNkJPtIhTtqE25uRpxLlM0CdOSUjfzZtRHf8= Subject key identifier: C8:28:BF:24:DA:8A:89:80:7F:EC:79:C6:D3:0D:5C:3B:0E:5D:70:64 Authority key identifier: 4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71 Certificate issuer: /CN=4eae6f524eed0f73c849b0643827b80e37c46c71 Certificate serial: 019AF5AE784D568D0A96AA8C0F591069826F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 22:00:43 +0000 Manifest this update: Sat 06 Dec 2025 22:00:43 +0000 Manifest next update: Sun 07 Dec 2025 22:00:43 +0000 Files and hashes: 1: Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl (hash: TAg6I0kJ18WRlXCB1T3ThPcvqJxU6NVj4cYbbbxo3+c=) 2: ZPx2mzUkeOD00cVnYPqjI9aytDo.roa (hash: 9BSbx2wnbDuYyWn09oP3MayodoEwoQbrU6xTUmUCOR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:78:4d:56:8d:0a:96:aa:8c:0f:59:10:69:82:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eae6f524eed0f73c849b0643827b80e37c46c71 Validity Not Before: Dec 6 22:00:43 2025 GMT Not After : Dec 7 22:00:43 2025 GMT Subject: CN=c828bf24da8a89807fec79c6d30d5c3b0e5d7064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6b:73:b5:29:d4:67:af:0f:48:57:74:fd:b7: 67:a2:2a:d3:54:0e:24:ae:97:f7:af:53:3b:ff:44: da:b3:c8:7d:e8:18:15:52:54:b6:11:4a:8d:3e:79: 79:31:61:11:11:2d:6f:de:ab:ea:b1:6f:5d:f0:dd: 85:f2:ea:76:8f:56:f7:7b:e1:6e:51:b6:d0:a1:b4: 10:f0:bf:19:65:cb:0b:ab:9b:a9:79:fd:45:71:b4: 1d:77:45:e2:0b:71:94:7a:a3:d4:70:ae:e2:ca:cb: d2:4b:75:d9:2b:38:37:be:73:90:93:e9:30:ac:0b: 53:af:42:8d:e0:2c:a3:31:be:4a:5a:db:12:24:a1: 06:73:ac:0c:76:0c:99:48:20:03:40:e8:39:cd:56: 5e:10:db:14:5e:1f:21:10:0e:9a:8c:46:0a:1c:8e: a2:b2:e9:aa:db:8d:a6:5d:e1:ce:27:f3:f4:d0:4d: 35:4c:b5:2e:f9:85:a1:40:c7:61:8b:47:6a:e4:dd: 2d:38:81:3a:e7:c3:d4:7d:72:9d:94:00:c8:0c:49: 10:b0:af:a0:f0:8b:11:ef:e7:79:27:ec:e4:36:ab: 62:e7:58:46:d4:d6:85:53:cb:98:94:21:94:09:88: dc:30:ef:94:25:e4:34:a3:9e:4a:6d:c2:1b:60:f8: 8b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:28:BF:24:DA:8A:89:80:7F:EC:79:C6:D3:0D:5C:3B:0E:5D:70:64 X509v3 Authority Key Identifier: keyid:4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:bf:77:fa:cc:4e:07:f6:2f:a5:3d:31:96:9c:55:a7:b4:08: 58:54:db:b5:6f:c5:66:f3:1e:5c:10:a7:80:cd:be:c3:dd:6d: 59:40:46:c1:4f:83:84:64:73:03:16:f4:b8:3f:8f:eb:b5:3e: f3:40:e6:36:21:a1:45:7b:70:fb:e8:c4:d6:2d:69:dd:32:3d: b1:b3:52:bf:f0:bf:c4:42:0d:e8:df:fe:b7:cd:3e:13:04:de: d8:3d:72:5b:ae:88:01:95:c3:09:3c:46:d0:fb:55:07:f3:e9: 89:d3:35:43:1b:3f:7e:da:6d:7d:9f:d4:49:95:0a:ab:70:41: 28:5d:9f:95:3a:c7:e7:ad:5d:d3:1f:3c:83:82:89:20:2a:1a: a7:f9:96:f2:7a:a5:10:9b:fd:0c:e6:c7:07:fd:91:28:f5:03: de:92:79:c9:97:7d:da:d1:27:86:04:f9:bc:56:81:a6:2c:8d: 4f:96:da:c3:95:ea:aa:7b:1a:71:26:46:43:9f:5c:a3:4c:39: 6c:17:cd:2a:41:12:14:11:ca:67:e1:12:27:4c:12:a4:73:f2: 63:26:43:19:1a:38:3d:55:61:d3:62:f4:ba:1e:dd:66:a1:13: 7b:4f:ba:22:d3:ed:8f:3d:23:65:61:95:4d:8c:0e:3a:d2:ff: ac:d6:0e:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rnhNVo0KlqqMD1kQaYJvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYWU2ZjUyNGVlZDBmNzNjODQ5YjA2NDM4MjdiODBlMzdj NDZjNzEwHhcNMjUxMjA2MjIwMDQzWhcNMjUxMjA3MjIwMDQzWjAzMTEwLwYDVQQD EyhjODI4YmYyNGRhOGE4OTgwN2ZlYzc5YzZkMzBkNWMzYjBlNWQ3MDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGtztSnUZ68PSFd0/bdnoirTVA4k rpf3r1M7/0Tas8h96BgVUlS2EUqNPnl5MWERES1v3qvqsW9d8N2F8up2j1b3e+Fu UbbQobQQ8L8ZZcsLq5upef1FcbQdd0XiC3GUeqPUcK7iysvSS3XZKzg3vnOQk+kw rAtTr0KN4CyjMb5KWtsSJKEGc6wMdgyZSCADQOg5zVZeENsUXh8hEA6ajEYKHI6i sumq242mXeHOJ/P00E01TLUu+YWhQMdhi0dq5N0tOIE658PUfXKdlADIDEkQsK+g 8IsR7+d5J+zkNqti51hG1NaFU8uYlCGUCYjcMO+UJeQ0o55KbcIbYPiLKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgovyTaiomAf+x5xtMNXDsOXXBkMB8GA1UdIwQY MBaAFE6ub1JO7Q9zyEmwZDgnuA43xGxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHE1dlVrN3REM1BJU2JCa09DZTREamZFYkhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lZDM4NGUtOTk0OS00Y2MwLThhMzct M2JiMmNkODBhMmM5LzEvVHE1dlVrN3REM1BJU2JCa09DZTREamZFYkhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lZDM4NGUtOTk0OS00Y2MwLThhMzctM2JiMmNkODBhMmM5 LzEvVHE1dlVrN3REM1BJU2JCa09DZTREamZFYkhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEr93+sxO B/YvpT0xlpxVp7QIWFTbtW/FZvMeXBCngM2+w91tWUBGwU+DhGRzAxb0uD+P67U+ 80DmNiGhRXtw++jE1i1p3TI9sbNSv/C/xEIN6N/+t80+EwTe2D1yW66IAZXDCTxG 0PtVB/PpidM1Qxs/ftptfZ/USZUKq3BBKF2flTrH561d0x88g4KJICoap/mW8nql EJv9DObHB/2RKPUD3pJ5yZd92tEnhgT5vFaBpiyNT5baw5XqqnsacSZGQ59co0w5 bBfNKkESFBHKZ+ESJ0wSpHPyYyZDGRo4PVVh02L0uh7dZqETe0+6ItPtjz0jZWGV TYwOOtL/rNYOYA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:26 2025 by rpki-client