This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json) Hash identifier: W0f/1ejJndgC4CFaDjTAziQtnXZzuYutRt6AydUY8z4= Subject key identifier: 68:BF:BC:E4:2C:B5:99:C3:FA:B4:2B:CD:E7:1D:53:B8:A9:70:6C:70 Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0 Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0 Certificate serial: 019B10EF6C956F720074B88D13C5D5FCD339 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft Manifest number: 0803 Signing time: Fri 12 Dec 2025 05:01:24 +0000 Manifest this update: Fri 12 Dec 2025 05:01:24 +0000 Manifest next update: Sat 13 Dec 2025 05:01:24 +0000 Files and hashes: 1: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: z67cLW1kUOosiR/UFYRHt6Wg+67qtwcXsDyLjTWW85U=) 2: fIoweheWq1JqzVdLBCrrD-x4kK4.roa (hash: yoQba86aaUs4p2P/E/UoxSeIL5NEm/wDobQOVMT4e5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 05:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ef:6c:95:6f:72:00:74:b8:8d:13:c5:d5:fc:d3:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0 Validity Not Before: Dec 12 05:01:24 2025 GMT Not After : Dec 13 05:01:24 2025 GMT Subject: CN=68bfbce42cb599c3fab42bcde71d53b8a9706c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a7:15:cf:e5:a4:29:0e:31:a4:c1:c6:a1:88: b0:b6:74:a4:d4:68:b7:10:a4:30:3b:6b:16:38:01: 5e:6a:12:ee:cf:31:4d:73:95:d0:27:4c:65:32:f6: f1:95:e1:a5:75:f5:44:c9:9f:ec:90:d7:40:49:18: 86:79:3b:9c:6e:7b:b3:ae:9b:58:0d:49:f2:54:75: 33:9f:96:d5:00:60:bb:74:5f:2b:64:5e:d8:c8:49: 2c:1c:98:a9:fb:7b:fa:66:1e:4a:bd:49:70:b0:41: 72:93:e4:2c:ff:1c:27:1f:fd:71:6e:dd:8b:76:9b: 1c:a8:16:33:72:9e:fb:f8:af:5b:78:56:55:f1:56: 41:ea:04:16:c1:7e:54:ea:f0:98:e4:c6:4d:17:a3: ec:1f:c5:cf:45:17:5b:fc:7e:10:c0:63:68:b0:58: ca:7a:f9:9d:e8:c7:b0:fe:07:68:60:17:40:16:b6: 33:91:23:fd:6b:9d:42:7e:f0:55:1b:d9:0b:c8:15: ac:31:59:93:d7:6e:da:a7:67:b1:27:ae:29:4f:16: f3:6b:ac:de:41:7a:b8:78:34:f0:61:ce:8a:09:fd: fd:18:37:74:85:76:34:3b:a0:35:f0:0d:85:94:76: 97:af:68:3f:63:5a:cb:cb:ec:44:d1:07:ec:92:2f: 51:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BF:BC:E4:2C:B5:99:C3:FA:B4:2B:CD:E7:1D:53:B8:A9:70:6C:70 X509v3 Authority Key Identifier: keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:dc:7a:b5:54:76:f8:b8:ad:8f:32:0b:d6:9d:53:ec:d2:a7: 4c:ca:14:16:18:81:ab:1c:e8:97:2a:38:6d:1e:02:02:23:b1: 92:dd:6e:67:00:78:43:44:03:a9:1d:29:df:b3:56:60:b4:c7: 9f:74:4a:e7:6d:52:e3:1b:2c:d4:d6:29:09:36:24:87:7c:02: e1:00:db:8d:31:70:a8:dc:20:df:99:a3:6f:ca:d4:6b:16:f4: 3a:91:8b:a1:4d:b4:6a:f3:01:57:fb:66:3a:41:a0:14:6e:7f: 3e:82:50:1c:df:74:53:a1:52:74:2b:94:05:a7:a1:5c:92:e6: 5b:40:c3:04:e5:7c:71:f3:b5:6f:ed:de:3e:4a:6f:8b:9f:05: c8:42:25:ec:01:21:af:ee:96:6f:57:3b:32:3d:51:52:39:11: 0d:ba:5c:6a:b7:45:78:61:43:28:8f:57:36:25:65:73:35:a4: 1f:cf:cd:ca:ee:a9:c0:c5:84:f6:8c:ac:c1:55:28:a1:85:34: b5:c1:58:e8:65:cf:26:06:ff:8e:70:b3:6a:22:28:f4:7e:ba: f9:f2:48:22:9c:8b:2f:fb:b8:c4:47:c6:14:7d:11:84:db:a6: ee:f1:97:97:3e:28:39:57:6d:23:94:a8:4f:eb:36:2a:45:e4: b4:65:89:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ72yVb3IAdLiNE8XV/NM5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTQ0N2Y3YjNhNzc2ZjcyNGQ4YmM4MTQwYmUzMTc2NjYy YzI0ZDAwHhcNMjUxMjEyMDUwMTI0WhcNMjUxMjEzMDUwMTI0WjAzMTEwLwYDVQQD Eyg2OGJmYmNlNDJjYjU5OWMzZmFiNDJiY2RlNzFkNTNiOGE5NzA2YzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqcVz+WkKQ4xpMHGoYiwtnSk1Gi3 EKQwO2sWOAFeahLuzzFNc5XQJ0xlMvbxleGldfVEyZ/skNdASRiGeTucbnuzrptY DUnyVHUzn5bVAGC7dF8rZF7YyEksHJip+3v6Zh5KvUlwsEFyk+Qs/xwnH/1xbt2L dpscqBYzcp77+K9beFZV8VZB6gQWwX5U6vCY5MZNF6PsH8XPRRdb/H4QwGNosFjK evmd6Mew/gdoYBdAFrYzkSP9a51CfvBVG9kLyBWsMVmT127ap2exJ64pTxbza6ze QXq4eDTwYc6KCf39GDd0hXY0O6A18A2FlHaXr2g/Y1rLy+xE0Qfski9RCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGi/vOQstZnD+rQrzecdU7ipcGxwMB8GA1UdIwQY MBaAFEykR/ezp3b3JNi8gUC+MXZmLCTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZjNlMGItMjZjMy00Y2Y5LTgwNTYt MjlhZjMzYmM2Yjk4LzEvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZjNlMGItMjZjMy00Y2Y5LTgwNTYtMjlhZjMzYmM2Yjk4 LzEvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNx6tVR2 +LitjzIL1p1T7NKnTMoUFhiBqxzolyo4bR4CAiOxkt1uZwB4Q0QDqR0p37NWYLTH n3RK521S4xss1NYpCTYkh3wC4QDbjTFwqNwg35mjb8rUaxb0OpGLoU20avMBV/tm OkGgFG5/PoJQHN90U6FSdCuUBaehXJLmW0DDBOV8cfO1b+3ePkpvi58FyEIl7AEh r+6Wb1c7Mj1RUjkRDbpcardFeGFDKI9XNiVlczWkH8/Nyu6pwMWE9oyswVUooYU0 tcFY6GXPJgb/jnCzaiIo9H66+fJIIpyLL/u4xEfGFH0RhNum7vGXlz4oOVdtI5So T+s2KkXktGWJyQ== -----END CERTIFICATE-----Generated at Fri Dec 12 09:26:15 2025 by rpki-client