This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft File: tcsrXq88wV3Us7I62LlHKlJAwDs.mft (raw, json) Hash identifier: 58m7whaJz/R9V7L8Wwwplm7e/o+n531fjehxhdf75C0= Subject key identifier: 74:DF:9B:A8:5D:AD:9F:F0:1A:9F:FD:16:21:29:58:60:68:2C:92:56 Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b Certificate serial: 019AF276F1971423A974517A036702CDE5DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft Manifest number: 0144 Signing time: Sat 06 Dec 2025 07:01:12 +0000 Manifest this update: Sat 06 Dec 2025 07:01:12 +0000 Manifest next update: Sun 07 Dec 2025 07:01:12 +0000 Files and hashes: 1: 4I0Ig-sZsSlS-ISQfhvyI-hIXNs.roa (hash: JlPqPVzZ1fRapenzkzSS/av8yhZnv6+RiIsubYAxBXc=) 2: Ay7JoslT6EAyHRaULsBRtIZWwog.roa (hash: gTv3k9NPlg2vVpHAiGMl3DtLPA9ZFxKifPWXSsGIZk8=) 3: a9i8eCPzOCR2a7g49i_eP0oTcMg.roa (hash: CLgIXtXHGLkSKlPAdABLQyRziV9nANmmCJ4xG0uixD8=) 4: tcsrXq88wV3Us7I62LlHKlJAwDs.crl (hash: srM+kcZ7EqEjRATuISiYXSobJoCcz3OlYNc0Ghk9t0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f1:97:14:23:a9:74:51:7a:03:67:02:cd:e5:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b Validity Not Before: Dec 6 07:01:12 2025 GMT Not After : Dec 7 07:01:12 2025 GMT Subject: CN=74df9ba85dad9ff01a9ffd1621295860682c9256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3d:9b:9c:9c:cb:f6:06:90:ab:db:a0:09:af: 87:48:7d:2a:3a:8f:fe:03:34:d7:2c:7b:97:20:58: 4e:3f:39:e5:9f:f2:ab:76:bb:5d:92:43:c7:9f:b4: ca:4c:55:12:fb:b6:3a:90:35:e3:09:15:14:9f:cd: 97:49:33:d0:a5:5c:fb:24:e5:1e:35:47:8d:0a:6f: 7b:da:2d:9a:8a:27:cd:cb:98:a4:a9:e6:eb:7e:20: 50:1f:b6:1d:f9:4b:1e:dc:e7:21:4f:ae:0e:b3:7a: 45:58:62:14:f5:b3:d1:ae:8b:33:3d:ae:92:9e:ed: 41:2f:43:c4:d0:3c:cf:20:65:04:2e:6e:00:9b:15: 45:c1:62:82:6c:0d:56:bd:97:03:f9:73:7b:c9:ef: 56:49:f8:87:76:63:ee:4f:a9:ae:29:bf:c0:97:da: 18:af:ac:c2:27:69:07:55:9a:36:a8:0c:e4:7b:d3: 60:6b:eb:dc:33:6e:2d:09:6b:8a:81:c4:3c:fa:18: 33:a2:5b:e7:b0:ce:80:65:cc:30:90:6f:27:68:a8: b1:a1:53:9c:9b:05:76:9a:83:25:04:4f:76:20:dd: 90:b0:bb:1b:cf:8a:74:65:00:04:78:02:ee:1c:56: e8:43:8e:c3:d6:93:1b:d3:7a:bd:c6:61:3b:6c:3f: 10:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DF:9B:A8:5D:AD:9F:F0:1A:9F:FD:16:21:29:58:60:68:2C:92:56 X509v3 Authority Key Identifier: keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8e:62:3e:42:08:c5:04:b2:6a:f7:0d:08:dd:f8:9f:6e:35: aa:12:95:47:e0:65:14:2f:96:0a:81:7c:52:b3:76:30:ed:18: f9:5c:e6:d8:92:fa:2e:60:a7:ec:35:0b:20:c3:73:42:81:bb: dc:f7:5a:40:49:6d:8b:17:e5:07:ce:f3:3c:f9:f0:48:eb:a2: 8f:23:6f:e6:f3:cd:4a:22:40:0a:f5:13:39:50:dc:64:8b:1d: 5c:91:3d:fd:c0:66:67:74:80:bc:1a:61:8b:9a:11:36:3c:30: 66:7f:b6:50:60:9d:72:da:fc:6e:34:f7:50:f9:bb:46:9a:c7: 3a:01:79:34:ca:ad:94:b0:72:98:18:71:c5:e6:bb:4b:ff:0e: c8:b7:b0:d1:bd:8e:c7:c0:99:68:66:33:c3:5f:e5:13:10:1d: 96:e3:66:07:bf:9f:ed:6a:51:15:44:cf:89:2d:22:5b:4c:b4: 8b:f8:53:85:fb:7c:c4:fe:fd:01:58:7f:cb:9e:c9:e4:d9:00: 77:c2:69:04:7a:1a:88:0d:74:c7:b1:52:e4:d6:a9:15:13:e0: ac:51:f2:89:7a:e8:05:36:e0:9a:09:e5:96:44:ca:94:b5:29: 7c:8a:1b:8e:ac:32:3f:ae:2a:27:cb:4b:68:80:e6:d5:0f:ed: 9c:84:b8:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvGXFCOpdFF6A2cCzeXaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1Y2IyYjVlYWYzY2MxNWRkNGIzYjIzYWQ4Yjk0NzJhNTI0 MGMwM2IwHhcNMjUxMjA2MDcwMTEyWhcNMjUxMjA3MDcwMTEyWjAzMTEwLwYDVQQD Eyg3NGRmOWJhODVkYWQ5ZmYwMWE5ZmZkMTYyMTI5NTg2MDY4MmM5MjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j2bnJzL9gaQq9ugCa+HSH0qOo/+ AzTXLHuXIFhOPznln/KrdrtdkkPHn7TKTFUS+7Y6kDXjCRUUn82XSTPQpVz7JOUe NUeNCm972i2aiifNy5ikqebrfiBQH7Yd+Use3OchT64Os3pFWGIU9bPRroszPa6S nu1BL0PE0DzPIGUELm4AmxVFwWKCbA1WvZcD+XN7ye9WSfiHdmPuT6muKb/Al9oY r6zCJ2kHVZo2qAzke9Nga+vcM24tCWuKgcQ8+hgzolvnsM6AZcwwkG8naKixoVOc mwV2moMlBE92IN2QsLsbz4p0ZQAEeALuHFboQ47D1pMb03q9xmE7bD8QZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTfm6hdrZ/wGp/9FiEpWGBoLJJWMB8GA1UdIwQY MBaAFLXLK16vPMFd1LOyOti5RypSQMA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83OTVlZDktOGZhZC00YzQ0LTg1ODMt MDZjYTcwOWEzYzU5LzEvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS83OTVlZDktOGZhZC00YzQ0LTg1ODMtMDZjYTcwOWEzYzU5 LzEvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG45iPkII xQSyavcNCN34n241qhKVR+BlFC+WCoF8UrN2MO0Y+Vzm2JL6LmCn7DULIMNzQoG7 3PdaQEltixflB87zPPnwSOuijyNv5vPNSiJACvUTOVDcZIsdXJE9/cBmZ3SAvBph i5oRNjwwZn+2UGCdctr8bjT3UPm7RprHOgF5NMqtlLBymBhxxea7S/8OyLew0b2O x8CZaGYzw1/lExAdluNmB7+f7WpRFUTPiS0iW0y0i/hThft8xP79AVh/y57J5NkA d8JpBHoaiA10x7FS5NapFRPgrFHyiXroBTbgmgnllkTKlLUpfIobjqwyP64qJ8tL aIDm1Q/tnIS4CA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:47:03 2025 by rpki-client