This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft File: TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json) Hash identifier: qq9uJW03V/7uFIQEcgZfpCY+Ehjh87IRJB31lY/OyxI= Subject key identifier: 01:AB:52:9F:04:73:E2:6B:40:CF:2B:2A:B8:8B:7E:54:D3:8A:E0:0D Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69 Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069 Certificate serial: 019B0EC95E07544B7CD04F03A540205CDA4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft Manifest number: 1226 Signing time: Thu 11 Dec 2025 19:00:36 +0000 Manifest this update: Thu 11 Dec 2025 19:00:36 +0000 Manifest next update: Fri 12 Dec 2025 19:00:36 +0000 Files and hashes: 1: NETt5LyS--lV9_ycDBmp9TmpxP4.roa (hash: rz60bepxWIT7kbaafyZ48rHU8Vmg6Vvtzt7Ebp5hgDU=) 2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: Jwb44RDUEC9C/6uf8C8xZiGeQMXyZHlsxeZtaupMIT0=) 3: YU0ymXaczDxniPQtB_xa4RTEU2Q.roa (hash: +3YrNwFP0+tuTgevzTw2FGRwOLOaLfupz3GSxL5OXLE=) 4: e99v7pEfrFm4Dg1SnIaNO39I8Ws.roa (hash: GWy1k4OaIi0pC/Ap0hgLnIy0Gp664zirmOTGWdfBTaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:5e:07:54:4b:7c:d0:4f:03:a5:40:20:5c:da:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069 Validity Not Before: Dec 11 19:00:36 2025 GMT Not After : Dec 12 19:00:36 2025 GMT Subject: CN=01ab529f0473e26b40cf2b2ab88b7e54d38ae00d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0f:35:84:4c:0d:15:68:db:e5:b1:5d:73:37: a9:db:88:31:da:8e:05:87:31:24:c9:0b:a5:57:a2: 08:69:f5:77:bf:d5:f2:8a:9c:43:5a:4c:77:6e:a2: bf:df:f7:f5:52:28:ee:1e:7c:98:2d:12:fe:a1:94: 03:b1:c8:5e:ff:47:bd:42:e1:75:d4:15:2c:da:7e: bf:cc:b3:1b:95:f3:bf:84:79:9c:8e:cb:81:89:6d: 43:fa:b6:41:8d:97:17:98:83:11:17:8e:d7:f7:4f: 00:ea:32:c9:24:52:65:cc:c9:2c:75:e8:6c:6e:7f: 35:78:96:c2:19:d8:44:71:2b:1a:b0:ac:f0:b6:9a: b6:dc:f5:ca:4c:6e:d4:11:26:af:d1:04:82:25:86: 51:96:ef:82:0e:3d:19:33:ff:2d:b2:cd:94:f8:e4: 19:e3:2f:60:77:23:32:2b:99:2e:08:2e:aa:f6:43: 9a:b9:05:bc:93:0d:21:07:78:28:6e:a8:f3:72:e4: 4c:7b:c4:81:13:e3:d6:b8:29:9b:ff:90:3a:4c:a8: 31:3a:dc:e2:5b:d0:76:98:b6:02:7b:b0:d9:1f:4c: 9e:c9:aa:1f:a9:d9:18:6a:3d:09:06:78:51:51:86: 1d:3d:82:5e:d6:2a:44:23:21:c7:d0:28:56:c5:ba: 0e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AB:52:9F:04:73:E2:6B:40:CF:2B:2A:B8:8B:7E:54:D3:8A:E0:0D X509v3 Authority Key Identifier: keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:33:57:9e:60:09:f5:e5:a4:f0:92:a8:3a:43:64:8f:8f:ba: 4d:34:8a:13:61:af:ab:7d:31:12:d3:72:0b:ad:e8:a1:e0:4c: 60:3c:d4:90:46:9c:cb:05:4e:f8:52:3f:ff:1b:2a:5a:d6:97: eb:58:59:ff:7d:b8:6c:99:49:02:ba:b0:37:cb:9d:a9:19:8a: e6:03:e7:f8:6d:c3:14:41:5a:95:c6:e2:16:2f:cd:38:3e:bf: d9:1e:f4:45:5d:5b:b4:ad:e7:c7:68:45:b6:63:30:56:a3:e0: 6f:81:63:5e:c4:6d:4f:83:b7:8e:d8:47:43:00:65:7b:e5:87: 35:1d:6b:b9:80:23:77:50:fd:8f:8d:33:d0:af:91:01:e9:d8: fa:3f:e8:03:65:37:d7:46:4d:fc:71:78:e3:69:64:85:fd:27: 4a:ec:bc:82:f4:0f:17:ec:67:8f:f5:61:b2:8e:6f:e0:1c:54: e5:b8:cf:6f:c2:ba:b2:14:38:27:95:a3:28:e8:a0:91:53:aa: 24:42:b4:16:68:26:76:fc:e2:0b:b2:6a:dc:1e:33:69:e6:8c: b5:1f:bc:51:a8:ad:e6:37:a3:75:3e:8f:4a:12:16:72:b0:5c: b0:fb:08:25:64:97:f7:fd:09:23:16:46:ac:42:f8:e4:ce:2b: f5:da:81:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyV4HVEt80E8DpUAgXNpKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNmI2MzcxYjk0NWEzNWU5ZGYzMDhmZjQzODAzZTI2MTc4 NTEwNjkwHhcNMjUxMjExMTkwMDM2WhcNMjUxMjEyMTkwMDM2WjAzMTEwLwYDVQQD EygwMWFiNTI5ZjA0NzNlMjZiNDBjZjJiMmFiODhiN2U1NGQzOGFlMDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg81hEwNFWjb5bFdczep24gx2o4F hzEkyQulV6IIafV3v9XyipxDWkx3bqK/3/f1UijuHnyYLRL+oZQDsche/0e9QuF1 1BUs2n6/zLMblfO/hHmcjsuBiW1D+rZBjZcXmIMRF47X908A6jLJJFJlzMksdehs bn81eJbCGdhEcSsasKzwtpq23PXKTG7UESav0QSCJYZRlu+CDj0ZM/8tss2U+OQZ 4y9gdyMyK5kuCC6q9kOauQW8kw0hB3gobqjzcuRMe8SBE+PWuCmb/5A6TKgxOtzi W9B2mLYCe7DZH0yeyaofqdkYaj0JBnhRUYYdPYJe1ipEIyHH0ChWxboO3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGrUp8Ec+JrQM8rKriLflTTiuANMB8GA1UdIwQY MBaAFExrY3G5RaNenfMI/0OAPiYXhRBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS80NDQ4YTctMWFjMS00NmFkLWE3Mjct ZDk2MzkzYWYyZjIwLzEvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS80NDQ4YTctMWFjMS00NmFkLWE3MjctZDk2MzkzYWYyZjIw LzEvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjNXnmAJ 9eWk8JKoOkNkj4+6TTSKE2Gvq30xEtNyC63ooeBMYDzUkEacywVO+FI//xsqWtaX 61hZ/324bJlJArqwN8udqRmK5gPn+G3DFEFalcbiFi/NOD6/2R70RV1btK3nx2hF tmMwVqPgb4FjXsRtT4O3jthHQwBle+WHNR1ruYAjd1D9j40z0K+RAenY+j/oA2U3 10ZN/HF442lkhf0nSuy8gvQPF+xnj/Vhso5v4BxU5bjPb8K6shQ4J5WjKOigkVOq JEK0FmgmdvziC7Jq3B4zaeaMtR+8Uait5jejdT6PShIWcrBcsPsIJWSX9/0JIxZG rEL45M4r9dqB6Q== -----END CERTIFICATE-----Generated at Thu Dec 11 23:18:57 2025 by rpki-client