This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/TCo9adv570f1kQnH9rIwKq8tsLw.mft File: TCo9adv570f1kQnH9rIwKq8tsLw.mft (raw, json) Hash identifier: iiSOEbvyhBSdmq/2L4WfjjiVGOn/SQrZa5aUD586buQ= Subject key identifier: 04:88:D4:8A:35:6F:A5:9B:17:9A:0C:4F:54:FC:96:89:8F:77:51:6F Authority key identifier: 4C:2A:3D:69:DB:F9:EF:47:F5:91:09:C7:F6:B2:30:2A:AF:2D:B0:BC Certificate issuer: /CN=4c2a3d69dbf9ef47f59109c7f6b2302aaf2db0bc Certificate serial: 019AF0BF8D1270AD0D2FB2CEA6D06D2E96E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCo9adv570f1kQnH9rIwKq8tsLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/TCo9adv570f1kQnH9rIwKq8tsLw.mft Manifest number: 3B Signing time: Fri 05 Dec 2025 23:01:16 +0000 Manifest this update: Fri 05 Dec 2025 23:01:16 +0000 Manifest next update: Sat 06 Dec 2025 23:01:16 +0000 Files and hashes: 1: TCo9adv570f1kQnH9rIwKq8tsLw.crl (hash: WK+JcDS2lK3FeN5x7aS6pFYT9QB/vc3nfixQqMTwfbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/TCo9adv570f1kQnH9rIwKq8tsLw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/TCo9adv570f1kQnH9rIwKq8tsLw.mft rsync://rpki.ripe.net/repository/DEFAULT/TCo9adv570f1kQnH9rIwKq8tsLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:8d:12:70:ad:0d:2f:b2:ce:a6:d0:6d:2e:96:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c2a3d69dbf9ef47f59109c7f6b2302aaf2db0bc Validity Not Before: Dec 5 23:01:16 2025 GMT Not After : Dec 6 23:01:16 2025 GMT Subject: CN=0488d48a356fa59b179a0c4f54fc96898f77516f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cb:58:8d:d0:1a:59:9e:eb:90:f0:35:30:0b: c3:d5:98:2c:fa:d8:b5:23:7a:33:a3:b9:cc:2c:65: 9a:b5:8a:61:ee:3d:ea:29:dd:84:5e:8a:1d:2b:4a: 09:0b:45:7f:d0:dd:76:18:40:a1:76:70:9e:d6:3b: f9:c2:61:7e:19:c6:49:f1:ab:55:97:5f:b0:9d:4d: 32:e2:31:9f:11:48:b6:c0:83:7a:81:b3:fa:6d:1f: e4:88:f7:ba:82:4f:28:6c:8d:bd:25:96:5e:cf:95: f5:09:74:69:be:a0:1e:12:1a:ef:c0:0b:bf:f3:49: 70:8d:24:bc:dc:1a:90:45:8a:ef:86:f9:88:ed:38: 3c:11:37:5d:2f:eb:a2:fc:eb:26:7d:67:fe:eb:df: a7:b8:db:df:07:81:80:b4:4e:ab:85:a5:00:f2:49: 05:d4:26:e8:81:65:04:c3:94:c4:8c:37:c2:26:c0: d7:eb:0c:5c:e6:23:a4:1e:c8:0c:d8:2d:e5:ee:79: 1e:5f:9f:93:7f:e4:71:d9:c3:2a:80:0d:a3:81:40: fa:6c:1e:aa:ef:3d:41:d7:9f:ca:09:e3:08:33:54: 51:9b:fe:11:01:da:7e:4a:4c:bf:1c:7b:d0:61:aa: 5c:3e:db:ec:5c:fd:b6:e0:f9:26:05:cd:b2:4d:33: 84:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:88:D4:8A:35:6F:A5:9B:17:9A:0C:4F:54:FC:96:89:8F:77:51:6F X509v3 Authority Key Identifier: keyid:4C:2A:3D:69:DB:F9:EF:47:F5:91:09:C7:F6:B2:30:2A:AF:2D:B0:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCo9adv570f1kQnH9rIwKq8tsLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/TCo9adv570f1kQnH9rIwKq8tsLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/TCo9adv570f1kQnH9rIwKq8tsLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:11:6b:ac:6d:df:46:f5:ee:93:a6:36:ab:46:1e:46:d4:7c: db:de:6f:55:e7:0c:69:dc:ce:45:16:4a:b2:31:1f:f0:6a:13: 95:cf:6f:43:c6:f1:8d:cb:dd:77:46:6f:f3:07:fd:70:f9:3f: fa:b5:38:c5:ad:15:b6:c0:e4:ac:80:34:3e:47:8f:ef:ba:39: 42:66:42:d1:71:95:ec:d0:87:ad:21:f5:ad:6f:7b:12:2b:11: b4:82:4a:38:27:64:87:7f:f5:89:7a:c5:fe:ba:ce:1d:ad:4c: 63:2a:18:ad:74:94:57:a6:6c:91:9a:e7:b5:66:da:ce:09:57: 91:dd:fa:4a:54:b9:15:aa:03:25:2c:73:4c:a4:df:72:33:0d: 8b:c9:7b:3b:7d:ef:ea:58:05:89:74:20:d4:04:7f:8d:17:a2: 0d:4a:e3:0c:a8:53:96:a4:e3:c7:d6:a6:ad:21:51:10:24:ec: 20:89:32:ea:c9:c3:6f:ab:f3:7a:2a:6c:81:9a:45:2e:03:3a: 3a:69:66:00:02:9e:3d:87:4e:e9:b0:b1:d1:19:88:c6:82:c5: 79:d1:aa:79:e1:bc:05:88:39:e4:f0:1e:6b:8d:f1:9c:29:18: e6:f4:43:c2:11:59:4f:64:e4:c4:b4:e8:ff:1a:f2:4f:bf:3b: ef:8c:62:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv40ScK0NL7LOptBtLpbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMmEzZDY5ZGJmOWVmNDdmNTkxMDljN2Y2YjIzMDJhYWYy ZGIwYmMwHhcNMjUxMjA1MjMwMTE2WhcNMjUxMjA2MjMwMTE2WjAzMTEwLwYDVQQD EygwNDg4ZDQ4YTM1NmZhNTliMTc5YTBjNGY1NGZjOTY4OThmNzc1MTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzstYjdAaWZ7rkPA1MAvD1Zgs+ti1 I3ozo7nMLGWatYph7j3qKd2EXoodK0oJC0V/0N12GEChdnCe1jv5wmF+GcZJ8atV l1+wnU0y4jGfEUi2wIN6gbP6bR/kiPe6gk8obI29JZZez5X1CXRpvqAeEhrvwAu/ 80lwjSS83BqQRYrvhvmI7Tg8ETddL+ui/OsmfWf+69+nuNvfB4GAtE6rhaUA8kkF 1CbogWUEw5TEjDfCJsDX6wxc5iOkHsgM2C3l7nkeX5+Tf+Rx2cMqgA2jgUD6bB6q 7z1B15/KCeMIM1RRm/4RAdp+Sky/HHvQYapcPtvsXP224PkmBc2yTTOEdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASI1Io1b6WbF5oMT1T8lomPd1FvMB8GA1UdIwQY MBaAFEwqPWnb+e9H9ZEJx/ayMCqvLbC8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVENvOWFkdjU3MGYxa1FuSDlySXdLcTh0c0x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84ZTliZWQtYjhlZi00NDg0LTgxNjAt MjZhOTUwOTdmYjdlLzEvVENvOWFkdjU3MGYxa1FuSDlySXdLcTh0c0x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi84ZTliZWQtYjhlZi00NDg0LTgxNjAtMjZhOTUwOTdmYjdl LzEvVENvOWFkdjU3MGYxa1FuSDlySXdLcTh0c0x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRFrrG3f RvXuk6Y2q0YeRtR8295vVecMadzORRZKsjEf8GoTlc9vQ8bxjcvdd0Zv8wf9cPk/ +rU4xa0VtsDkrIA0PkeP77o5QmZC0XGV7NCHrSH1rW97EisRtIJKOCdkh3/1iXrF /rrOHa1MYyoYrXSUV6ZskZrntWbazglXkd36SlS5FaoDJSxzTKTfcjMNi8l7O33v 6lgFiXQg1AR/jReiDUrjDKhTlqTjx9amrSFRECTsIIky6snDb6vzeipsgZpFLgM6 OmlmAAKePYdO6bCx0RmIxoLFedGqeeG8BYg55PAea43xnCkY5vRDwhFZT2TkxLTo /xryT78774xiUg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:09 2025 by rpki-client