This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft File: tcR4e4CrSAGrYrG9v7KOBtMM32o.mft (raw, json) Hash identifier: cnks32wmHcG5oyQcX9oBlzudTL6r9nG44mf4mS1p3fs= Subject key identifier: 1D:89:3E:D8:2D:6A:0E:0D:DC:84:15:84:59:80:24:72:72:28:CB:55 Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A Certificate issuer: /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a Certificate serial: 019B5A1AF5D45D1A01616EFE8531E4FCA1A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft Manifest number: 05F3 Signing time: Fri 26 Dec 2025 10:01:14 +0000 Manifest this update: Fri 26 Dec 2025 10:01:14 +0000 Manifest next update: Sat 27 Dec 2025 10:01:14 +0000 Files and hashes: 1: ktAbm-eMqyUysDj5Rz0ozhsQgoU.roa (hash: sOoFB/V0u6n0JOO4WrnOrE08EvrJyrBKeqUzyGdoIfI=) 2: tcR4e4CrSAGrYrG9v7KOBtMM32o.crl (hash: lB15Dbu/zkV33VNgfLjc1avbqaDbG9W9aKpDMdFxMN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:f5:d4:5d:1a:01:61:6e:fe:85:31:e4:fc:a1:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a Validity Not Before: Dec 26 10:01:14 2025 GMT Not After : Dec 27 10:01:14 2025 GMT Subject: CN=1d893ed82d6a0e0ddc841584598024727228cb55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:35:f3:ff:49:9c:f6:0c:eb:bb:8d:f0:22: c3:f9:7f:7b:e0:de:8c:90:9a:ab:91:9e:e1:2c:9e: 17:90:48:c6:3f:3a:e1:bc:89:37:70:9b:7a:af:97: 52:02:1c:f8:70:74:28:55:3a:2a:78:7f:dd:cd:20: 9f:6a:e3:9d:24:dc:14:e9:ea:a7:df:eb:43:67:9b: 57:ea:f0:9e:0b:4b:fb:23:25:64:e8:a4:73:cd:5e: 84:b3:5d:4f:19:67:cf:ac:0c:bc:8b:4c:14:68:a0: 06:e3:98:4d:29:d5:58:f9:c2:ba:f4:dd:40:2a:e8: bf:de:fa:36:27:5d:c4:98:ae:7d:4d:0f:ef:e2:d7: 0d:84:48:f1:75:7f:a4:e0:87:ab:f0:e0:96:52:ce: 95:90:da:84:73:9c:3c:a6:86:c6:b3:2f:d0:47:d2: 90:34:ad:f1:87:ef:bd:06:3e:91:ab:e2:59:db:63: 73:c3:b1:40:55:33:b3:68:3c:72:9d:09:bb:b7:07: b0:d3:78:0a:47:3c:4e:af:40:55:2e:a7:a6:78:8c: 12:85:6f:3d:39:9b:e8:5e:26:cd:b2:45:b1:c6:ae: 78:00:fc:0a:e3:ed:2d:c4:ff:c6:f8:30:8c:03:10: b4:ad:5a:be:99:ad:a7:76:74:12:0f:9a:61:b9:aa: 16:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:89:3E:D8:2D:6A:0E:0D:DC:84:15:84:59:80:24:72:72:28:CB:55 X509v3 Authority Key Identifier: keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:49:57:29:71:0f:c5:b4:c3:cd:3d:f3:9c:fe:62:33:e3:49: 48:c5:cc:70:1e:64:fe:d3:54:da:cc:22:30:d0:6c:3d:cf:fd: fc:fd:96:29:de:e8:d9:d0:a0:9a:25:01:11:d0:6c:7e:26:bd: d1:26:7b:1f:fa:a0:77:6e:a9:e2:4f:ba:d2:25:20:a9:8d:05: 88:1b:f7:97:70:14:09:db:6b:f7:77:01:6f:a3:f0:e0:37:a4: cf:32:a0:d9:72:d6:06:ec:d7:54:fb:3a:fe:0a:7d:cc:5d:42: 72:4f:93:23:a2:ea:57:17:ad:3b:3a:48:84:65:1b:c1:2d:0e: 12:0d:9c:f0:e7:69:87:37:d8:a6:27:b6:04:07:ff:1b:95:ca: 32:23:6c:57:97:98:8a:eb:47:59:b2:70:b1:7d:0d:10:93:92: cd:da:14:09:e4:8e:55:ef:fb:31:9d:e8:aa:35:4d:82:bc:b2: 00:a7:a4:db:e8:54:de:fe:44:a2:82:e5:7e:ac:77:49:25:a5: 2d:a7:6d:73:79:ce:38:51:b2:51:a4:a9:af:b2:6e:51:ca:2d: ed:da:66:56:34:83:5f:25:fa:62:99:51:2e:ce:03:64:2d:48: 1b:06:92:e8:d4:8b:8b:c4:3a:d7:bc:8e:0d:9c:b2:89:88:e3: 4f:58:1a:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGvXUXRoBYW7+hTHk/KGmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YzQ3ODdiODBhYjQ4MDFhYjYyYjFiZGJmYjI4ZTA2ZDMw Y2RmNmEwHhcNMjUxMjI2MTAwMTE0WhcNMjUxMjI3MTAwMTE0WjAzMTEwLwYDVQQD EygxZDg5M2VkODJkNmEwZTBkZGM4NDE1ODQ1OTgwMjQ3MjcyMjhjYjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthE18/9JnPYM67uN8CLD+X974N6M kJqrkZ7hLJ4XkEjGPzrhvIk3cJt6r5dSAhz4cHQoVToqeH/dzSCfauOdJNwU6eqn 3+tDZ5tX6vCeC0v7IyVk6KRzzV6Es11PGWfPrAy8i0wUaKAG45hNKdVY+cK69N1A Kui/3vo2J13EmK59TQ/v4tcNhEjxdX+k4Ier8OCWUs6VkNqEc5w8pobGsy/QR9KQ NK3xh++9Bj6Rq+JZ22Nzw7FAVTOzaDxynQm7twew03gKRzxOr0BVLqemeIwShW89 OZvoXibNskWxxq54APwK4+0txP/G+DCMAxC0rVq+ma2ndnQSD5phuaoWxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2JPtgtag4N3IQVhFmAJHJyKMtVMB8GA1UdIwQY MBaAFLXEeHuAq0gBq2Kxvb+yjgbTDN9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kOWQzYzktZjE5NC00YjI2LThmMTAt ZmY2YTljZGU2MzM1LzEvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kOWQzYzktZjE5NC00YjI2LThmMTAtZmY2YTljZGU2MzM1 LzEvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0lXKXEP xbTDzT3znP5iM+NJSMXMcB5k/tNU2swiMNBsPc/9/P2WKd7o2dCgmiUBEdBsfia9 0SZ7H/qgd26p4k+60iUgqY0FiBv3l3AUCdtr93cBb6Pw4DekzzKg2XLWBuzXVPs6 /gp9zF1Cck+TI6LqVxetOzpIhGUbwS0OEg2c8OdphzfYpie2BAf/G5XKMiNsV5eY iutHWbJwsX0NEJOSzdoUCeSOVe/7MZ3oqjVNgryyAKek2+hU3v5EooLlfqx3SSWl Ladtc3nOOFGyUaSpr7JuUcot7dpmVjSDXyX6YplRLs4DZC1IGwaS6NSLi8Q617yO DZyyiYjjT1gasw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:35 2025 by rpki-client