This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft File: TnKscetFB6wKZSpUWY2uRR_jP0c.mft (raw, json) Hash identifier: U8sygjiVXMfC4mB8XNh14HeM+FsXr6sJt+IX2cklBvw= Subject key identifier: 42:06:1D:33:3A:D3:7D:68:C8:A8:C3:7E:71:19:E5:54:87:9E:59:C1 Authority key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47 Certificate issuer: /CN=4e72ac71eb4507ac0a652a54598dae451fe33f47 Certificate serial: 019AF1646D6FF31D963A383B39C13AD51642 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft Manifest number: 148C Signing time: Sat 06 Dec 2025 02:01:21 +0000 Manifest this update: Sat 06 Dec 2025 02:01:21 +0000 Manifest next update: Sun 07 Dec 2025 02:01:21 +0000 Files and hashes: 1: 4zuoqc0Glu6ApY4rQHmNAlxxavo.roa (hash: qDD4JCBpI34S2Q624/ndlMxJa6qHAv5moxaFgFJvL3I=) 2: TnKscetFB6wKZSpUWY2uRR_jP0c.crl (hash: AFdmIhgOWlrxrqmHiQ35lSPOUip9+DGq3d+dhLViKcg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:6d:6f:f3:1d:96:3a:38:3b:39:c1:3a:d5:16:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47 Validity Not Before: Dec 6 02:01:21 2025 GMT Not After : Dec 7 02:01:21 2025 GMT Subject: CN=42061d333ad37d68c8a8c37e7119e554879e59c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2f:8c:1f:49:71:c2:ea:73:e8:69:4a:9f:e5: 0d:19:25:b1:c9:28:36:51:13:2c:0a:32:06:c5:56: 0b:ae:13:6f:3d:75:73:af:33:af:26:b0:f9:60:6d: bd:6d:d6:f9:1b:04:67:e8:32:ce:15:6b:f4:57:e7: 4f:60:08:64:90:ba:fc:c0:f3:98:5b:83:ea:87:f3: ff:19:bb:26:0f:0a:4a:48:a1:f9:6c:9d:f3:6b:e8: fc:fc:bd:e7:d6:b8:f0:30:95:bc:e7:e9:4c:b2:8e: 40:5c:8b:b3:03:36:04:94:2f:64:d6:2d:5a:fe:fc: d3:93:be:2a:f0:20:1f:08:b2:d4:ac:c7:15:2e:58: 39:8c:1d:ef:1a:01:1b:7d:db:ad:60:1a:30:6d:b3: 07:0f:41:53:cb:dc:29:d5:9c:73:30:4d:fc:6c:1d: 83:39:49:7b:f0:49:62:68:18:20:ab:a3:94:eb:ab: 1a:fa:51:15:9d:4d:c2:9e:ec:d1:fd:47:44:77:e7: 65:f7:15:15:59:c0:4e:31:ff:c4:9b:80:d2:3d:e6: 7f:0b:cb:5e:1d:39:1b:f7:af:ea:cb:91:7b:0d:74: 63:48:18:02:3e:74:be:3f:62:f5:84:58:34:2e:6d: e1:07:f5:d3:1f:10:e7:c1:ba:00:68:65:99:7b:7c: ac:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:06:1D:33:3A:D3:7D:68:C8:A8:C3:7E:71:19:E5:54:87:9E:59:C1 X509v3 Authority Key Identifier: keyid:4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:49:d2:eb:31:11:b8:12:e3:0e:e0:10:d5:96:cb:60:6d:21: f1:63:36:79:6a:35:da:de:bf:0e:e6:db:75:42:69:b5:b2:87: 7d:59:8e:1c:ec:65:a5:4a:da:7e:f8:c1:7a:e9:31:61:0b:6c: cd:5f:76:69:61:a7:3a:ee:bf:f0:50:9c:9c:d6:48:52:13:cc: c0:c2:bf:4c:fe:d8:6c:5b:aa:08:6a:ed:83:fb:c1:8b:95:f4: dc:58:c1:0c:ad:e2:56:44:60:ad:d8:b0:c8:6b:da:e1:60:fb: 69:f6:5b:ca:00:08:8d:a0:a1:18:d4:a2:b6:f4:57:42:f8:1c: 21:d2:fe:1e:8d:63:24:d6:0a:37:6a:e9:74:fa:ae:4f:5e:20: 08:e3:55:55:d0:79:f0:f1:04:1b:58:01:5e:bd:b5:67:97:0a: a3:d1:91:c3:1a:40:44:f4:ed:2c:9f:9c:46:d8:ce:01:39:d6: a9:a9:21:cf:4a:5b:00:4d:23:1a:93:b7:1c:07:32:f5:ed:76: 28:61:99:11:cd:a0:ca:b7:cd:98:0b:71:a1:a0:c0:8d:11:0c: d8:69:4e:d6:33:ce:04:d0:0d:bf:c9:db:f3:50:d8:23:fb:6f: 26:0b:b7:8a:69:ab:55:6f:a9:4f:31:e3:8c:c1:66:8b:be:c2: 5d:93:c1:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZG1v8x2WOjg7OcE61RZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNzJhYzcxZWI0NTA3YWMwYTY1MmE1NDU5OGRhZTQ1MWZl MzNmNDcwHhcNMjUxMjA2MDIwMTIxWhcNMjUxMjA3MDIwMTIxWjAzMTEwLwYDVQQD Eyg0MjA2MWQzMzNhZDM3ZDY4YzhhOGMzN2U3MTE5ZTU1NDg3OWU1OWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi+MH0lxwupz6GlKn+UNGSWxySg2 URMsCjIGxVYLrhNvPXVzrzOvJrD5YG29bdb5GwRn6DLOFWv0V+dPYAhkkLr8wPOY W4Pqh/P/GbsmDwpKSKH5bJ3za+j8/L3n1rjwMJW85+lMso5AXIuzAzYElC9k1i1a /vzTk74q8CAfCLLUrMcVLlg5jB3vGgEbfdutYBowbbMHD0FTy9wp1ZxzME38bB2D OUl78EliaBggq6OU66sa+lEVnU3CnuzR/UdEd+dl9xUVWcBOMf/Em4DSPeZ/C8te HTkb96/qy5F7DXRjSBgCPnS+P2L1hFg0Lm3hB/XTHxDnwboAaGWZe3yseQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIGHTM6031oyKjDfnEZ5VSHnlnBMB8GA1UdIwQY MBaAFE5yrHHrRQesCmUqVFmNrkUf4z9HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG5Lc2NldEZCNndLWlNwVVdZMnVSUl9qUDBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMDc1MjMtODM5Mi00N2Y1LTgyYjMt MzBjNDMwYTM5OGU2LzEvVG5Lc2NldEZCNndLWlNwVVdZMnVSUl9qUDBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hMDc1MjMtODM5Mi00N2Y1LTgyYjMtMzBjNDMwYTM5OGU2 LzEvVG5Lc2NldEZCNndLWlNwVVdZMnVSUl9qUDBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWknS6zER uBLjDuAQ1ZbLYG0h8WM2eWo12t6/DubbdUJptbKHfVmOHOxlpUrafvjBeukxYQts zV92aWGnOu6/8FCcnNZIUhPMwMK/TP7YbFuqCGrtg/vBi5X03FjBDK3iVkRgrdiw yGva4WD7afZbygAIjaChGNSitvRXQvgcIdL+Ho1jJNYKN2rpdPquT14gCONVVdB5 8PEEG1gBXr21Z5cKo9GRwxpARPTtLJ+cRtjOATnWqakhz0pbAE0jGpO3HAcy9e12 KGGZEc2gyrfNmAtxoaDAjREM2GlO1jPOBNANv8nb81DYI/tvJgu3immrVW+pTzHj jMFmi77CXZPBfA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:41 2025 by rpki-client