This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft File: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft (raw, json) Hash identifier: XBVZrAQI1F6fyQDrc1wMjucK8+kc5LGIVUrePsBrkqc= Subject key identifier: 40:C9:27:7C:F4:E5:59:39:4D:5F:B6:8E:83:FC:14:EB:87:FF:0F:D5 Authority key identifier: 4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00 Certificate issuer: /CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000 Certificate serial: 019B040EBFF6230DB01A82EE15B0294AEB3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft Manifest number: 0186 Signing time: Tue 09 Dec 2025 17:00:34 +0000 Manifest this update: Tue 09 Dec 2025 17:00:34 +0000 Manifest next update: Wed 10 Dec 2025 17:00:34 +0000 Files and hashes: 1: 1-U8-4zu6FwPD_h-JBtHqluBUugc.roa (hash: B3V6UvPy+Yv+8toI+28gvW2unDO4YgNU77Me0s0gt9U=) 2: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl (hash: h+F3TpOFWC8x/hdfbba1+7JfweFbsCg9Hnunk+S5fs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:0e:bf:f6:23:0d:b0:1a:82:ee:15:b0:29:4a:eb:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000 Validity Not Before: Dec 9 17:00:34 2025 GMT Not After : Dec 10 17:00:34 2025 GMT Subject: CN=40c9277cf4e559394d5fb68e83fc14eb87ff0fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3a:ed:fb:0a:77:b0:81:3e:3a:69:0f:3a:42: 5e:52:72:7c:df:00:f6:99:6f:a4:9c:71:11:8c:1b: 65:5b:a9:b2:b3:a9:5b:5f:86:73:bf:1b:c2:21:b9: 76:51:b1:65:d9:a2:85:25:90:3c:ba:ee:f5:fd:0d: bf:d9:30:50:14:4a:f1:70:42:10:ab:19:d5:38:f5: f1:56:f6:a5:d6:cd:bd:7b:62:61:ef:45:0c:8d:9b: bc:d6:d7:d7:79:ed:07:56:1b:54:84:5e:2d:f7:e8: 65:ac:3e:44:b6:b0:17:87:f5:fc:d3:35:0d:73:d5: 63:c3:49:83:71:4b:2f:40:98:62:59:69:30:f2:15: e2:fb:e7:50:cb:c0:db:19:77:44:ab:a2:f9:be:8a: 9e:92:4d:95:6d:eb:da:58:75:cf:69:d8:a2:d7:a0: c2:40:f7:ac:aa:57:7f:10:58:8b:ea:65:09:30:98: 6f:2a:f5:48:b9:80:cd:9f:db:5a:39:f0:92:48:3e: 89:42:a9:10:a0:c9:82:f8:dc:15:50:9a:08:2b:7f: 8d:b3:18:c7:dd:54:23:65:02:7e:8d:34:8d:cd:73: 9a:b2:81:4a:51:c4:20:8b:d8:50:05:77:d9:01:75: 64:02:fb:8b:c0:8a:e6:f4:46:8c:51:73:71:7e:1f: 24:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C9:27:7C:F4:E5:59:39:4D:5F:B6:8E:83:FC:14:EB:87:FF:0F:D5 X509v3 Authority Key Identifier: keyid:4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:23:24:83:ce:70:0a:6f:e4:71:53:ca:ff:d0:20:93:7a:62: 2b:59:48:af:60:0f:5f:07:1b:0d:43:bb:5d:f9:fb:af:b1:0c: df:f0:7d:96:10:a0:72:ca:47:b4:41:c0:52:12:a9:d3:13:5d: 09:b5:d4:e3:e0:ef:03:6b:3d:c6:b4:0b:87:84:6a:dd:3c:83: 0f:42:2e:4c:da:5c:11:9d:a3:45:3f:3b:5f:c9:c2:88:b2:77: 7c:83:50:5e:d3:59:37:a1:7a:9c:48:ea:0b:ab:2b:06:62:b6: 9d:d1:b3:40:49:11:4d:11:8a:c3:9c:c3:56:29:91:af:11:a1: da:1c:6b:c0:8a:a8:2f:63:a0:b9:3f:33:51:f4:a8:fe:3f:02: 8a:7c:49:55:e6:b6:da:93:e7:da:56:77:35:cc:ba:77:ef:3b: 04:a1:ac:07:18:28:ac:19:0f:3d:2e:92:b4:ec:ee:e5:5c:b1: 76:d9:65:7c:1c:4a:66:84:f8:ba:3f:6a:6d:4e:b6:d2:40:a1: 1f:7a:8b:56:ec:66:f5:56:f0:0e:fb:d0:f1:95:0a:05:86:98: e5:97:e3:c8:b8:24:7f:6c:a9:29:19:b7:48:61:37:d8:c0:fc: ab:dd:f0:4e:8c:8e:9b:64:1d:a7:38:39:fe:12:67:96:d6:80: 57:b3:ac:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsEDr/2Iw2wGoLuFbApSus+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMGYzMWM2ZWZkYjlhNDQ1YjhmMTcyZjBiZTBkZmQ1MTQy YmUwMDAwHhcNMjUxMjA5MTcwMDM0WhcNMjUxMjEwMTcwMDM0WjAzMTEwLwYDVQQD Eyg0MGM5Mjc3Y2Y0ZTU1OTM5NGQ1ZmI2OGU4M2ZjMTRlYjg3ZmYwZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojrt+wp3sIE+OmkPOkJeUnJ83wD2 mW+knHERjBtlW6mys6lbX4ZzvxvCIbl2UbFl2aKFJZA8uu71/Q2/2TBQFErxcEIQ qxnVOPXxVval1s29e2Jh70UMjZu81tfXee0HVhtUhF4t9+hlrD5EtrAXh/X80zUN c9Vjw0mDcUsvQJhiWWkw8hXi++dQy8DbGXdEq6L5voqekk2VbevaWHXPadii16DC QPesqld/EFiL6mUJMJhvKvVIuYDNn9taOfCSSD6JQqkQoMmC+NwVUJoIK3+NsxjH 3VQjZQJ+jTSNzXOasoFKUcQgi9hQBXfZAXVkAvuLwIrm9EaMUXNxfh8kJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDJJ3z05Vk5TV+2joP8FOuH/w/VMB8GA1UdIwQY MBaAFE4PMcbv25pEW48XLwvg39UUK+AAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGc4eHh1X2Jta1JianhjdkMtRGYxUlFyNEFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hY2E3OTAtNjMyOS00MTRhLWJlZDUt YmFkMmNiNDgwOTEyLzEvVGc4eHh1X2Jta1JianhjdkMtRGYxUlFyNEFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9hY2E3OTAtNjMyOS00MTRhLWJlZDUtYmFkMmNiNDgwOTEy LzEvVGc4eHh1X2Jta1JianhjdkMtRGYxUlFyNEFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALyMkg85w Cm/kcVPK/9Agk3piK1lIr2APXwcbDUO7Xfn7r7EM3/B9lhCgcspHtEHAUhKp0xNd CbXU4+DvA2s9xrQLh4Rq3TyDD0IuTNpcEZ2jRT87X8nCiLJ3fINQXtNZN6F6nEjq C6srBmK2ndGzQEkRTRGKw5zDVimRrxGh2hxrwIqoL2OguT8zUfSo/j8CinxJVea2 2pPn2lZ3Ncy6d+87BKGsBxgorBkPPS6StOzu5VyxdtllfBxKZoT4uj9qbU620kCh H3qLVuxm9VbwDvvQ8ZUKBYaY5ZfjyLgkf2ypKRm3SGE32MD8q93wToyOm2Qdpzg5 /hJnltaAV7OsWg== -----END CERTIFICATE-----Generated at Wed Dec 10 01:25:35 2025 by rpki-client