This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft File: TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft (raw, json) Hash identifier: BKFyPUoMgfF7gXnEJeeMxofOKUFdV4S68lnwBFv/G7k= Subject key identifier: 71:C8:96:DD:7D:4F:A7:C1:CB:71:A2:FB:63:C0:FE:07:D1:99:79:67 Authority key identifier: 4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11 Certificate issuer: /CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011 Certificate serial: 019B2407CEE47C940CC7F1C9969BA15CC422 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft Manifest number: 0D1D Signing time: Mon 15 Dec 2025 22:00:49 +0000 Manifest this update: Mon 15 Dec 2025 22:00:49 +0000 Manifest next update: Tue 16 Dec 2025 22:00:49 +0000 Files and hashes: 1: 8bYh9KTQNyhUoZK5Xa3Zu-_BqQk.roa (hash: Ckdj62IcP39fMv9cL87VgjiYlT1GoMjuC5C5dI+N2jA=) 2: MR-TaWWn4lHnPBNNw4lTIvLNpqc.roa (hash: Y9aYFZU2HCNzQnAyTtx7dtrBQZRdTDSp9t076Yfi8ac=) 3: TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl (hash: ATJPz21sP2ou5n6B8Hi2L4qoHWr3JRbRBq9NcCZ/xfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:07:ce:e4:7c:94:0c:c7:f1:c9:96:9b:a1:5c:c4:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011 Validity Not Before: Dec 15 22:00:49 2025 GMT Not After : Dec 16 22:00:49 2025 GMT Subject: CN=71c896dd7d4fa7c1cb71a2fb63c0fe07d1997967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4f:c2:63:4b:0c:87:dc:ee:96:87:bb:9e:63: a0:fa:9c:75:0b:78:d8:eb:eb:73:f4:10:81:6c:fd: 42:0e:5c:9f:89:19:d5:ab:eb:6c:41:54:d8:1a:95: 23:cd:00:08:8b:1e:20:21:05:56:26:bc:66:81:47: 42:88:e7:8c:10:4c:2d:c3:c0:ba:98:da:08:2e:3a: b3:99:a1:e1:3c:fa:2e:65:88:51:96:d1:e8:10:1b: 1f:fd:6a:8b:92:0c:6f:b8:75:ea:21:c1:d5:eb:92: ce:38:48:01:e4:97:b6:4c:16:71:94:70:c4:a8:5d: 65:c2:94:13:53:87:47:37:f7:70:a4:32:da:5c:f2: 1e:a3:a7:d8:f6:88:b5:5f:b4:b4:0a:e1:74:e2:6a: 8c:2e:36:1a:31:52:2f:fa:da:31:95:6c:c1:05:47: 7c:61:51:8e:68:d0:64:e6:d2:ed:bf:51:0f:79:9f: 4a:a3:9b:b8:84:6c:db:10:cb:ca:10:7e:85:65:8d: 25:b7:92:a5:cd:40:4e:07:36:81:31:e6:c0:b4:2e: 52:7e:db:ff:68:61:a2:d8:fd:14:59:eb:e7:21:e1: 6e:d8:d3:f8:a6:e1:06:5b:c5:fd:6e:52:6e:a8:16: 8d:65:ed:a3:28:4d:34:09:5d:75:72:dd:1d:0c:fc: 9d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C8:96:DD:7D:4F:A7:C1:CB:71:A2:FB:63:C0:FE:07:D1:99:79:67 X509v3 Authority Key Identifier: keyid:4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:4a:a5:c5:dd:21:3a:7a:5c:3e:52:1e:14:74:d4:74:03:1f: b0:f8:00:47:32:21:91:a6:95:41:27:8f:b5:12:1b:9c:fb:0a: 22:37:d9:23:22:88:8c:3c:25:5c:d0:c1:b9:81:95:c6:94:a7: 27:03:fb:01:3e:0f:a5:db:3b:98:ce:35:50:8a:cb:87:da:cc: 70:a6:bd:8b:e7:42:f4:bb:06:3f:ee:6b:2a:1f:23:2e:58:b3: 10:4f:15:b4:51:d5:37:1a:4b:ae:12:d8:be:e0:ec:75:62:92: 50:82:31:1a:e6:c7:10:ea:5b:6c:b4:22:b1:42:9c:29:f0:eb: e9:e8:4c:45:1f:ea:35:f2:08:ea:2f:3f:0a:1c:1b:d0:cc:18: 31:87:74:d4:04:95:f7:18:90:e3:51:2e:57:85:72:c6:ad:83: 73:c9:17:6c:c1:c6:c3:40:9e:3b:5f:37:9b:41:c1:f1:44:ad: c0:60:41:fd:97:12:7d:9e:61:f5:31:2a:f7:aa:ec:44:79:02: 0c:44:3b:52:ba:8a:1e:16:bc:75:4d:87:3b:5d:96:64:f6:b1: 5b:50:17:b2:81:66:b0:fa:df:73:d3:1c:08:aa:b1:66:6a:de: 00:70:4b:c8:f2:df:b4:70:16:1e:33:47:90:97:42:34:ca:de: 94:76:ad:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskB87kfJQMx/HJlpuhXMQiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZjA5NzA0ODRlYjI2YmM1OWZkOGZhOGQ1YmY3YzNjNzIx MmQwMTEwHhcNMjUxMjE1MjIwMDQ5WhcNMjUxMjE2MjIwMDQ5WjAzMTEwLwYDVQQD Eyg3MWM4OTZkZDdkNGZhN2MxY2I3MWEyZmI2M2MwZmUwN2QxOTk3OTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU/CY0sMh9zuloe7nmOg+px1C3jY 6+tz9BCBbP1CDlyfiRnVq+tsQVTYGpUjzQAIix4gIQVWJrxmgUdCiOeMEEwtw8C6 mNoILjqzmaHhPPouZYhRltHoEBsf/WqLkgxvuHXqIcHV65LOOEgB5Je2TBZxlHDE qF1lwpQTU4dHN/dwpDLaXPIeo6fY9oi1X7S0CuF04mqMLjYaMVIv+toxlWzBBUd8 YVGOaNBk5tLtv1EPeZ9Ko5u4hGzbEMvKEH6FZY0lt5KlzUBOBzaBMebAtC5Sftv/ aGGi2P0UWevnIeFu2NP4puEGW8X9blJuqBaNZe2jKE00CV11ct0dDPydFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHIlt19T6fBy3Gi+2PA/gfRmXlnMB8GA1UdIwQY MBaAFE3wlwSE6ya8Wf2PqNW/fDxyEtARMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84ZTExOTgtZTUwZi00MTZmLTlkNmIt MWU5YmZmNWU0MDIxLzEvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC84ZTExOTgtZTUwZi00MTZmLTlkNmItMWU5YmZmNWU0MDIx LzEvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmUqlxd0h OnpcPlIeFHTUdAMfsPgARzIhkaaVQSePtRIbnPsKIjfZIyKIjDwlXNDBuYGVxpSn JwP7AT4Ppds7mM41UIrLh9rMcKa9i+dC9LsGP+5rKh8jLlizEE8VtFHVNxpLrhLY vuDsdWKSUIIxGubHEOpbbLQisUKcKfDr6ehMRR/qNfII6i8/Chwb0MwYMYd01ASV 9xiQ41EuV4Vyxq2Dc8kXbMHGw0CeO183m0HB8UStwGBB/ZcSfZ5h9TEq96rsRHkC DEQ7UrqKHha8dU2HO12WZPaxW1AXsoFmsPrfc9McCKqxZmreAHBLyPLftHAWHjNH kJdCNMrelHatuw== -----END CERTIFICATE-----Generated at Tue Dec 16 03:45:38 2025 by rpki-client