This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft File: TnKscetFB6wKZSpUWY2uRR_jP0c.mft (raw, json) Hash identifier: aU6i8PCe/n5G6cGtZBLt85g5T5garIYJp9Wk0DWl1Ic= Subject key identifier: E3:5F:B0:E3:CC:9D:1A:1B:D3:59:67:FC:74:24:3B:64:42:38:12:EF Authority key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47 Certificate issuer: /CN=4e72ac71eb4507ac0a652a54598dae451fe33f47 Certificate serial: 019B330D4AA9941BAD4D5BD0C473C4DFAF7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft Manifest number: 14AE Signing time: Thu 18 Dec 2025 20:01:07 +0000 Manifest this update: Thu 18 Dec 2025 20:01:07 +0000 Manifest next update: Fri 19 Dec 2025 20:01:07 +0000 Files and hashes: 1: 4zuoqc0Glu6ApY4rQHmNAlxxavo.roa (hash: qDD4JCBpI34S2Q624/ndlMxJa6qHAv5moxaFgFJvL3I=) 2: TnKscetFB6wKZSpUWY2uRR_jP0c.crl (hash: FmsPe6qcE4LA1j2XaA8UVI5fKMlU+Oi1sPJcBuxWtVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:4a:a9:94:1b:ad:4d:5b:d0:c4:73:c4:df:af:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47 Validity Not Before: Dec 18 20:01:07 2025 GMT Not After : Dec 19 20:01:07 2025 GMT Subject: CN=e35fb0e3cc9d1a1bd35967fc74243b64423812ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c9:fb:c4:20:29:ac:2e:19:8c:f7:db:20:cb: f7:83:5d:9b:b3:dc:19:99:ed:a4:e6:a8:99:38:48: 26:43:22:72:c1:eb:f2:a0:5e:36:66:00:a3:1a:e5: b2:cf:b1:50:ea:75:b5:32:93:a2:4b:17:6b:63:9b: 06:bb:dc:cf:b3:22:86:a4:3d:9f:77:d3:0c:26:02: c5:f5:4a:69:1a:64:68:fc:07:95:b4:6b:52:12:c5: 5a:a2:38:5c:2d:92:a2:fd:65:30:6b:12:b8:3e:d6: 21:5c:80:dd:ee:fa:3d:c6:ff:b7:8c:b8:6c:04:3c: 5d:0b:5b:7f:5e:74:71:bf:9f:28:00:df:4d:b2:63: fa:58:34:29:0d:bd:0a:e2:86:b1:c2:db:4e:90:52: a4:18:9d:97:46:d0:cd:02:2f:5f:1d:2a:ce:7a:5a: 7e:5d:99:e8:91:9a:82:2f:47:a9:9a:4d:92:db:19: 01:ed:69:8d:ab:fc:36:c1:f3:d0:8c:18:5f:66:3b: 54:67:f4:49:1a:c0:e6:bd:6b:07:82:16:3d:47:be: 4c:c7:4e:32:6e:51:b4:5b:9d:77:0e:f6:2d:8c:8d: 13:db:f2:79:f8:ac:2e:fb:f4:70:11:60:e9:cf:27: 43:61:52:88:94:82:60:86:69:e6:d0:69:12:16:8c: e9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5F:B0:E3:CC:9D:1A:1B:D3:59:67:FC:74:24:3B:64:42:38:12:EF X509v3 Authority Key Identifier: keyid:4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:05:14:e3:28:84:6d:d6:2e:7a:02:e7:11:55:17:1f:e9:52: 9b:d4:ca:5e:6f:e6:dd:52:8b:47:61:7d:81:b8:07:ed:6d:db: bd:40:e0:43:e9:e3:5b:f3:79:09:b0:48:62:fa:cb:80:b8:56: 52:94:78:4f:c7:07:a2:aa:51:79:c1:07:45:0a:1c:f5:2e:96: a6:80:0d:92:3a:1a:c6:b0:b9:fa:d4:fa:d9:19:f0:b7:78:45: c6:02:d3:58:4d:05:04:76:11:cc:79:98:aa:43:34:1a:37:75: cf:42:29:78:f1:37:63:2f:10:52:1d:b9:58:0d:d1:c1:75:8f: ed:a2:ee:c2:d8:f0:64:54:0b:42:93:07:5a:72:0f:53:d4:7e: fb:35:1a:a8:48:99:87:fd:fd:8c:98:e0:ac:06:63:1d:ee:2f: 63:2c:dc:a3:fc:65:a2:ba:f6:23:d7:5e:66:d9:7c:3f:12:b8: c4:8b:1c:74:c7:00:45:83:1a:f8:62:0d:01:71:ba:e7:4e:ce: b2:4f:f2:27:a6:59:40:20:97:41:01:c7:be:11:14:07:59:02: 4d:ec:ea:2c:a7:21:7b:f3:3a:fa:49:8c:28:51:a2:c2:18:56: d5:19:97:bd:65:2c:f4:19:dd:af:aa:02:c8:9b:a2:4a:a4:7d: 9b:63:b6:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDUqplButTVvQxHPE369/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNzJhYzcxZWI0NTA3YWMwYTY1MmE1NDU5OGRhZTQ1MWZl MzNmNDcwHhcNMjUxMjE4MjAwMTA3WhcNMjUxMjE5MjAwMTA3WjAzMTEwLwYDVQQD EyhlMzVmYjBlM2NjOWQxYTFiZDM1OTY3ZmM3NDI0M2I2NDQyMzgxMmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMn7xCAprC4ZjPfbIMv3g12bs9wZ me2k5qiZOEgmQyJywevyoF42ZgCjGuWyz7FQ6nW1MpOiSxdrY5sGu9zPsyKGpD2f d9MMJgLF9UppGmRo/AeVtGtSEsVaojhcLZKi/WUwaxK4PtYhXIDd7vo9xv+3jLhs BDxdC1t/XnRxv58oAN9NsmP6WDQpDb0K4oaxwttOkFKkGJ2XRtDNAi9fHSrOelp+ XZnokZqCL0epmk2S2xkB7WmNq/w2wfPQjBhfZjtUZ/RJGsDmvWsHghY9R75Mx04y blG0W513DvYtjI0T2/J5+Kwu+/RwEWDpzydDYVKIlIJghmnm0GkSFozpDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONfsOPMnRob01ln/HQkO2RCOBLvMB8GA1UdIwQY MBaAFE5yrHHrRQesCmUqVFmNrkUf4z9HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG5Lc2NldEZCNndLWlNwVVdZMnVSUl9qUDBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMDc1MjMtODM5Mi00N2Y1LTgyYjMt MzBjNDMwYTM5OGU2LzEvVG5Lc2NldEZCNndLWlNwVVdZMnVSUl9qUDBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hMDc1MjMtODM5Mi00N2Y1LTgyYjMtMzBjNDMwYTM5OGU2 LzEvVG5Lc2NldEZCNndLWlNwVVdZMnVSUl9qUDBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwUU4yiE bdYuegLnEVUXH+lSm9TKXm/m3VKLR2F9gbgH7W3bvUDgQ+njW/N5CbBIYvrLgLhW UpR4T8cHoqpRecEHRQoc9S6WpoANkjoaxrC5+tT62Rnwt3hFxgLTWE0FBHYRzHmY qkM0Gjd1z0IpePE3Yy8QUh25WA3RwXWP7aLuwtjwZFQLQpMHWnIPU9R++zUaqEiZ h/39jJjgrAZjHe4vYyzco/xlorr2I9deZtl8PxK4xIscdMcARYMa+GINAXG6507O sk/yJ6ZZQCCXQQHHvhEUB1kCTezqLKche/M6+kmMKFGiwhhW1RmXvWUs9Bndr6oC yJuiSqR9m2O2Kg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:47:26 2025 by rpki-client