This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft File: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft (raw, json) Hash identifier: sp8Qc6psTW9iDMq1xuRDsgHyPGuk2mlDKaSN3pPDUcE= Subject key identifier: 6F:80:8C:62:C0:16:71:6E:68:4A:AE:1B:D9:A2:EE:E7:A5:06:54:AE Authority key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97 Certificate issuer: /CN=4d1527d1839bf830360d71590134354e6d904697 Certificate serial: 019B210769B2FA355E4F408428CC834C8651 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 08:01:32 +0000 Manifest this update: Mon 15 Dec 2025 08:01:32 +0000 Manifest next update: Tue 16 Dec 2025 08:01:32 +0000 Files and hashes: 1: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl (hash: ShIOhisOLbV3vmeP/BKq7OKgtLjlmSoJTGejquu8O9c=) 2: a6Whh1qMHaCLz9si7bMkIx4xg1Y.roa (hash: R/Syehgq2eEOSio/8bhqr2YXvz+4Ke3qpd0G80XikQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:07:69:b2:fa:35:5e:4f:40:84:28:cc:83:4c:86:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d1527d1839bf830360d71590134354e6d904697 Validity Not Before: Dec 15 08:01:32 2025 GMT Not After : Dec 16 08:01:32 2025 GMT Subject: CN=6f808c62c016716e684aae1bd9a2eee7a50654ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e9:53:69:99:00:c2:66:78:e2:bf:38:1d:ef: 1b:9a:cb:e6:65:31:44:59:65:2e:85:bf:bf:1b:76: 52:bf:39:b5:99:02:ed:54:f4:dc:95:c4:fa:51:5c: 15:e5:17:9e:df:51:ac:45:02:87:9f:ae:9f:d8:7c: 82:b0:94:a9:30:b7:ee:b4:7e:fe:8b:e7:55:25:1d: b4:f3:22:b2:2d:1f:db:b5:1f:92:cb:8d:c8:bd:4d: cf:64:9c:ee:b0:9f:97:30:fe:f2:a8:0d:57:29:ef: f3:ad:a8:2b:9b:2b:94:d4:52:92:e5:60:6f:4b:82: 30:35:89:a4:c8:a1:22:fc:e7:de:b0:f6:e0:1b:07: b8:85:43:39:24:22:6f:fa:19:2a:2e:ee:b6:be:f8: f1:7a:10:df:c1:25:33:7a:2a:20:aa:8f:51:f9:a0: 72:3f:b0:3e:d4:f0:e9:9b:f3:1f:db:fa:38:e7:13: ae:5d:66:f1:91:f6:92:9d:e7:be:91:18:ff:8f:92: 19:b2:d0:8e:9e:f9:e5:e9:97:b3:57:34:35:7e:67: a8:29:ee:51:de:4f:18:1c:ed:e6:69:9b:d6:7c:f7: af:28:51:8c:a2:4c:62:8a:e9:44:cf:2e:9a:20:68: f8:23:db:43:c7:30:dd:f6:f4:e5:4c:5b:28:01:5d: 96:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:80:8C:62:C0:16:71:6E:68:4A:AE:1B:D9:A2:EE:E7:A5:06:54:AE X509v3 Authority Key Identifier: keyid:4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ff:3a:6a:32:d9:c3:a1:80:79:0c:bf:5f:63:99:86:f9:8a: b8:6d:9b:e4:ea:6d:7b:ce:fa:74:00:48:4a:14:83:6a:5d:5f: 9b:82:11:e1:ef:2d:8c:00:60:84:db:55:fd:8a:4d:d8:8f:54: 60:52:79:e2:a7:db:67:6b:b6:1d:0e:52:b1:43:bb:0c:d3:bc: f2:a2:2e:57:b1:1f:ec:f4:35:50:04:73:f7:b2:f4:ad:40:b4: bf:02:ec:5a:0c:e3:a1:bc:a2:84:5c:3c:52:49:dc:d8:05:ea: a2:f2:02:18:14:75:fd:f6:df:7d:63:02:f2:83:0a:54:45:63: b6:39:b0:0c:fc:37:58:84:50:94:a3:2f:65:0a:e5:9a:b4:7d: 1d:9f:39:63:1f:19:d3:21:ed:0c:f0:3f:86:d3:2e:60:ae:b7: a1:83:02:5c:99:84:44:11:5f:e5:10:0a:61:97:95:ea:84:4d: 54:1c:64:38:49:69:15:ec:4c:7a:ad:1d:73:0d:76:23:72:76: 89:c2:16:78:29:36:f1:a2:bf:1c:6f:44:0d:0a:fc:30:c0:8b: 91:8d:98:42:60:aa:f6:d4:75:72:d0:85:f6:fe:a5:00:51:e4: 7b:ca:0d:a4:3f:d2:ab:17:9b:4e:dc:f9:70:e1:66:12:ed:39: 8c:d8:6d:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshB2my+jVeT0CEKMyDTIZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMTUyN2QxODM5YmY4MzAzNjBkNzE1OTAxMzQzNTRlNmQ5 MDQ2OTcwHhcNMjUxMjE1MDgwMTMyWhcNMjUxMjE2MDgwMTMyWjAzMTEwLwYDVQQD Eyg2ZjgwOGM2MmMwMTY3MTZlNjg0YWFlMWJkOWEyZWVlN2E1MDY1NGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOlTaZkAwmZ44r84He8bmsvmZTFE WWUuhb+/G3ZSvzm1mQLtVPTclcT6UVwV5Ree31GsRQKHn66f2HyCsJSpMLfutH7+ i+dVJR208yKyLR/btR+Sy43IvU3PZJzusJ+XMP7yqA1XKe/zragrmyuU1FKS5WBv S4IwNYmkyKEi/OfesPbgGwe4hUM5JCJv+hkqLu62vvjxehDfwSUzeiogqo9R+aBy P7A+1PDpm/Mf2/o45xOuXWbxkfaSnee+kRj/j5IZstCOnvnl6ZezVzQ1fmeoKe5R 3k8YHO3maZvWfPevKFGMokxiiulEzy6aIGj4I9tDxzDd9vTlTFsoAV2WYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+AjGLAFnFuaEquG9mi7uelBlSuMB8GA1UdIwQY MBaAFE0VJ9GDm/gwNg1xWQE0NU5tkEaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFJVbjBZT2ItREEyRFhGWkFUUTFUbTJRUnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zMDlkMzYtYzQyMC00MzIxLTk1NDAt ZjNkZjY3M2VhNThjLzEvVFJVbjBZT2ItREEyRFhGWkFUUTFUbTJRUnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8zMDlkMzYtYzQyMC00MzIxLTk1NDAtZjNkZjY3M2VhNThj LzEvVFJVbjBZT2ItREEyRFhGWkFUUTFUbTJRUnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOf86ajLZ w6GAeQy/X2OZhvmKuG2b5Opte876dABIShSDal1fm4IR4e8tjABghNtV/YpN2I9U YFJ54qfbZ2u2HQ5SsUO7DNO88qIuV7Ef7PQ1UARz97L0rUC0vwLsWgzjobyihFw8 Uknc2AXqovICGBR1/fbffWMC8oMKVEVjtjmwDPw3WIRQlKMvZQrlmrR9HZ85Yx8Z 0yHtDPA/htMuYK63oYMCXJmERBFf5RAKYZeV6oRNVBxkOElpFexMeq0dcw12I3J2 icIWeCk28aK/HG9EDQr8MMCLkY2YQmCq9tR1ctCF9v6lAFHke8oNpD/SqxebTtz5 cOFmEu05jNhtNQ== -----END CERTIFICATE-----Generated at Mon Dec 15 12:00:17 2025 by rpki-client