This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft File: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft (raw, json) Hash identifier: azMeDQVjm7u9A/mOawpZ+7WPvG8ro/gm840gJgeXUdg= Subject key identifier: 2A:F6:3F:CE:2A:B0:99:E3:78:C9:51:60:46:62:5F:EE:30:CF:50:49 Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19 Certificate issuer: /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19 Certificate serial: 019B2551AED610E6C67944C8FF4032335420 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft Manifest number: 0E09 Signing time: Tue 16 Dec 2025 04:01:08 +0000 Manifest this update: Tue 16 Dec 2025 04:01:08 +0000 Manifest next update: Wed 17 Dec 2025 04:01:08 +0000 Files and hashes: 1: E7on5Vfvg98I2xAlaMeiutbcdZQ.roa (hash: 52cCubbGQVWlaOLXukS3Zd4+5KnclvBfBahudlSwT/s=) 2: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl (hash: iMbyNQ6fi791Utc123Rkj8k3IixRF585AwdcZI/Z4sw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:ae:d6:10:e6:c6:79:44:c8:ff:40:32:33:54:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19 Validity Not Before: Dec 16 04:01:08 2025 GMT Not After : Dec 17 04:01:08 2025 GMT Subject: CN=2af63fce2ab099e378c9516046625fee30cf5049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d2:77:89:ca:c9:13:92:a1:95:72:ed:73:43: d5:16:27:71:ac:a1:49:2b:03:a8:65:dc:36:47:43: 31:aa:87:a1:c8:28:dc:37:1f:49:21:cf:1b:4c:70: 4b:38:19:87:b9:0a:70:93:25:56:ac:23:6c:b3:6d: 9b:db:ca:f9:cb:ce:41:45:ef:74:2b:24:53:a0:bd: b0:06:b4:ba:b7:c0:dd:ff:6a:4a:5e:1e:94:9a:fa: cf:3a:70:35:1f:30:8e:cf:e2:e9:16:83:83:2f:32: 20:ef:67:2d:7f:27:7f:7b:8a:96:fc:ea:c5:bf:9f: e5:95:47:94:61:66:d4:18:74:d7:0f:c4:d5:3a:62: 39:81:71:78:22:25:f6:ed:2e:49:40:77:ad:d4:cd: dc:d7:79:cc:fb:5c:21:d3:cb:ae:f2:7c:b6:71:e0: bd:52:83:b0:31:38:c1:52:78:ac:63:a3:8a:0b:fa: 43:1a:bd:8f:a7:b5:05:10:c7:ee:80:2f:cf:83:40: 86:c3:fd:c9:b4:c0:6c:5b:2f:ac:e7:4a:f2:1e:98: e9:f4:76:88:88:27:e1:c2:83:78:3f:61:82:61:cd: 29:26:b6:a0:11:74:b4:3b:25:bf:3b:45:2a:c3:63: f2:b3:f6:c9:e6:66:36:d1:9b:f0:7b:e8:6d:f1:fe: d7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F6:3F:CE:2A:B0:99:E3:78:C9:51:60:46:62:5F:EE:30:CF:50:49 X509v3 Authority Key Identifier: keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:40:6d:52:c7:27:5a:f2:0c:a6:06:d3:81:b8:a2:c4:03:4c: a1:13:b5:f4:65:42:90:11:2d:3d:2d:04:bd:69:79:85:d3:0e: 93:5a:df:df:70:3e:74:12:f1:3f:a7:8d:2b:03:01:9a:87:26: bd:53:b6:77:5b:4d:d8:e7:f9:b0:0e:56:35:c4:79:a1:89:1a: 23:83:33:7c:9a:95:10:23:1c:05:0c:d4:89:45:a4:fd:61:8d: 87:29:d0:d7:17:8a:a1:7a:62:ed:06:b1:91:c6:6c:66:94:ca: 14:20:75:f7:b7:9b:dc:59:de:83:71:67:3a:86:5e:4d:ea:e4: 72:04:89:1b:3f:fd:73:dc:3d:e8:7a:d7:58:e7:5e:94:e4:df: fb:0d:6a:ab:3a:da:63:4f:1e:96:f7:6e:9d:23:61:52:b4:34: 56:17:1c:54:5a:39:e9:7c:8f:6c:18:a8:b1:a8:c8:b9:85:7e: 30:12:54:7b:02:4c:ce:c6:a6:4d:0e:49:54:69:2a:bf:59:e4: d1:08:fb:c5:6e:18:e1:8d:28:96:6f:3e:80:06:e2:ee:a9:61: 11:67:dd:ed:c9:86:ed:48:43:a2:76:7c:d8:40:7d:69:be:51: 0d:12:f5:68:48:ec:74:24:41:87:9d:5e:0e:8c:4d:72:9c:ff: be:84:63:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUa7WEObGeUTI/0AyM1QgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMGExOWQ0OGMzNTQ3YzJhZGI5ZjhlZmZkZWFjNmFkOWU0 ZjlkMTkwHhcNMjUxMjE2MDQwMTA4WhcNMjUxMjE3MDQwMTA4WjAzMTEwLwYDVQQD EygyYWY2M2ZjZTJhYjA5OWUzNzhjOTUxNjA0NjYyNWZlZTMwY2Y1MDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtJ3icrJE5KhlXLtc0PVFidxrKFJ KwOoZdw2R0MxqoehyCjcNx9JIc8bTHBLOBmHuQpwkyVWrCNss22b28r5y85BRe90 KyRToL2wBrS6t8Dd/2pKXh6UmvrPOnA1HzCOz+LpFoODLzIg72ctfyd/e4qW/OrF v5/llUeUYWbUGHTXD8TVOmI5gXF4IiX27S5JQHet1M3c13nM+1wh08uu8ny2ceC9 UoOwMTjBUnisY6OKC/pDGr2Pp7UFEMfugC/Pg0CGw/3JtMBsWy+s50ryHpjp9HaI iCfhwoN4P2GCYc0pJragEXS0OyW/O0Uqw2Pys/bJ5mY20Zvwe+ht8f7XZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCr2P84qsJnjeMlRYEZiX+4wz1BJMB8GA1UdIwQY MBaAFE4KGdSMNUfCrbn47/3qxq2eT50ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGdvWjFJdzFSOEt0dWZqdl9lckdyWjVQblJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jYjNlNmItYTQ0NC00OWRkLTlmNjQt MTdjMTIyNzNjNTRhLzEvVGdvWjFJdzFSOEt0dWZqdl9lckdyWjVQblJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9jYjNlNmItYTQ0NC00OWRkLTlmNjQtMTdjMTIyNzNjNTRh LzEvVGdvWjFJdzFSOEt0dWZqdl9lckdyWjVQblJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuEBtUscn WvIMpgbTgbiixANMoRO19GVCkBEtPS0EvWl5hdMOk1rf33A+dBLxP6eNKwMBmocm vVO2d1tN2Of5sA5WNcR5oYkaI4MzfJqVECMcBQzUiUWk/WGNhynQ1xeKoXpi7Qax kcZsZpTKFCB197eb3Fneg3FnOoZeTerkcgSJGz/9c9w96HrXWOdelOTf+w1qqzra Y08elvdunSNhUrQ0VhccVFo56XyPbBiosajIuYV+MBJUewJMzsamTQ5JVGkqv1nk 0Qj7xW4Y4Y0olm8+gAbi7qlhEWfd7cmG7UhDonZ82EB9ab5RDRL1aEjsdCRBh51e DoxNcpz/voRjfA== -----END CERTIFICATE-----Generated at Tue Dec 16 12:23:34 2025 by rpki-client