This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft File: TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft (raw, json) Hash identifier: AFvq8lLx6mva+1gTwNus3zHI4GPuCL/NOZVrM8cLgq0= Subject key identifier: CF:B8:BF:86:BB:38:58:E9:1B:50:0E:F1:B6:E1:70:16:97:0A:1A:71 Authority key identifier: 4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19 Certificate issuer: /CN=4cd71f5a0050f8ae6444c638769ba375fddbce19 Certificate serial: 019B269B32B003C3794B9DCF2828BA3849A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft Manifest number: 1468 Signing time: Tue 16 Dec 2025 10:01:03 +0000 Manifest this update: Tue 16 Dec 2025 10:01:03 +0000 Manifest next update: Wed 17 Dec 2025 10:01:03 +0000 Files and hashes: 1: R8OfYueHd1P1AWWtdGiixwllIMs.roa (hash: ZKzgreBUlCJXbuPQDDLtfbqfZaf5YaZJohzFfYmemPA=) 2: TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl (hash: 7QfQJmfA6TxH86L4l56ZOzQEoJHLeU8oVjdaBt9a9c0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:32:b0:03:c3:79:4b:9d:cf:28:28:ba:38:49:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cd71f5a0050f8ae6444c638769ba375fddbce19 Validity Not Before: Dec 16 10:01:03 2025 GMT Not After : Dec 17 10:01:03 2025 GMT Subject: CN=cfb8bf86bb3858e91b500ef1b6e17016970a1a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:fb:fa:6e:0a:7d:3c:60:04:3e:7e:2e:75: 69:87:8d:ed:d2:b6:4c:3d:e7:52:c4:60:75:0d:4a: e0:6c:9d:08:3b:18:df:50:72:cb:df:eb:59:b8:d9: 78:81:43:e7:fd:7f:ee:96:d2:0c:46:9c:c2:46:1c: 01:79:0c:b1:2d:03:b8:57:4c:0c:c8:6a:2d:09:0d: 93:8f:fc:c9:d7:0d:48:84:e9:77:4d:76:8b:59:1b: 9f:d7:da:9d:d4:5f:78:d1:8e:32:73:aa:8f:86:a7: 30:b6:0b:5a:39:04:99:6c:47:d8:8d:b1:d5:e8:13: 9a:ed:76:08:de:99:42:95:3f:f0:40:4e:7d:b8:ea: 0f:76:0e:fa:24:45:d1:d1:11:ba:77:7d:8b:23:9c: d1:79:2a:ee:a4:a9:3f:e4:77:2b:64:30:72:5b:e2: e8:7c:23:b1:da:58:42:18:4e:92:47:cc:42:2a:fb: ff:22:e7:da:ac:fc:a0:4b:3d:51:62:8a:e1:e5:35: c3:6c:50:45:01:d6:20:03:9d:ad:13:07:a9:ce:e0: 29:31:d0:c6:55:13:83:ce:8a:8c:24:d2:33:88:50: d2:c8:69:83:80:69:0b:14:ea:a4:d7:3f:91:be:20: c2:89:cc:d8:7a:24:d3:e2:26:12:9f:8d:9f:1e:87: 1c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B8:BF:86:BB:38:58:E9:1B:50:0E:F1:B6:E1:70:16:97:0A:1A:71 X509v3 Authority Key Identifier: keyid:4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:af:07:75:22:14:43:6b:ca:92:fd:fa:41:1d:4c:b8:ce:46: e4:0a:51:fc:8f:68:8b:1e:2b:1b:15:c7:3a:b0:fc:43:d3:be: 4e:3b:91:a6:86:02:50:ed:f9:d1:ee:18:2a:a1:33:f3:ca:88: 4f:7f:ab:6b:13:43:71:3a:e0:7a:20:54:35:2d:2e:ef:35:00: 81:3e:8b:ff:7a:d9:00:a9:4b:74:10:c8:2d:80:a8:04:7f:11: d2:00:9a:e0:29:9c:bf:49:6e:7d:14:e9:98:f7:68:d4:4e:29: 89:d0:bf:b7:c4:fa:17:65:ca:5b:ff:66:8b:12:27:b8:74:59: 47:25:68:b1:ad:8a:0b:d8:46:32:46:d6:d3:08:b8:e4:06:c4: ed:13:00:c4:82:98:78:5d:a0:f1:be:0f:d3:af:ff:11:75:a6: f8:44:14:17:90:79:24:9b:1d:21:bf:0e:1c:25:63:18:61:3c: 67:bb:d6:5e:4d:6b:31:83:12:1c:78:ce:e5:2b:31:90:f7:e4: 47:9c:c3:8a:ff:a4:db:73:bc:4d:e1:03:1b:a7:16:5b:9d:5e: cd:d9:08:72:67:8a:0b:74:ab:27:c7:94:f6:6a:ec:3f:06:0f: 3f:cf:d0:d1:25:ca:38:36:6e:3c:14:2b:ef:e1:5a:c7:86:c2: d2:b3:b9:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmmzKwA8N5S53PKCi6OEmiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZDcxZjVhMDA1MGY4YWU2NDQ0YzYzODc2OWJhMzc1ZmRk YmNlMTkwHhcNMjUxMjE2MTAwMTAzWhcNMjUxMjE3MTAwMTAzWjAzMTEwLwYDVQQD EyhjZmI4YmY4NmJiMzg1OGU5MWI1MDBlZjFiNmUxNzAxNjk3MGExYTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1D7+m4KfTxgBD5+LnVph43t0rZM PedSxGB1DUrgbJ0IOxjfUHLL3+tZuNl4gUPn/X/ultIMRpzCRhwBeQyxLQO4V0wM yGotCQ2Tj/zJ1w1IhOl3TXaLWRuf19qd1F940Y4yc6qPhqcwtgtaOQSZbEfYjbHV 6BOa7XYI3plClT/wQE59uOoPdg76JEXR0RG6d32LI5zReSrupKk/5HcrZDByW+Lo fCOx2lhCGE6SR8xCKvv/IufarPygSz1RYorh5TXDbFBFAdYgA52tEwepzuApMdDG VRODzoqMJNIziFDSyGmDgGkLFOqk1z+RviDCiczYeiTT4iYSn42fHoccnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+4v4a7OFjpG1AO8bbhcBaXChpxMB8GA1UdIwQY MBaAFEzXH1oAUPiuZETGOHabo3X9284ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE5jZldnQlEtSzVrUk1ZNGRwdWpkZjNiemhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yNzgzOTgtNzMzOS00NGIyLWIwYjAt NzNhMDFhZTVkZThmLzEvVE5jZldnQlEtSzVrUk1ZNGRwdWpkZjNiemhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8yNzgzOTgtNzMzOS00NGIyLWIwYjAtNzNhMDFhZTVkZThm LzEvVE5jZldnQlEtSzVrUk1ZNGRwdWpkZjNiemhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmq8HdSIU Q2vKkv36QR1MuM5G5ApR/I9oix4rGxXHOrD8Q9O+TjuRpoYCUO350e4YKqEz88qI T3+raxNDcTrgeiBUNS0u7zUAgT6L/3rZAKlLdBDILYCoBH8R0gCa4Cmcv0lufRTp mPdo1E4pidC/t8T6F2XKW/9mixInuHRZRyVosa2KC9hGMkbW0wi45AbE7RMAxIKY eF2g8b4P06//EXWm+EQUF5B5JJsdIb8OHCVjGGE8Z7vWXk1rMYMSHHjO5SsxkPfk R5zDiv+k23O8TeEDG6cWW51ezdkIcmeKC3SrJ8eU9mrsPwYPP8/Q0SXKODZuPBQr 7+Fax4bC0rO5MA== -----END CERTIFICATE-----Generated at Tue Dec 16 13:44:39 2025 by rpki-client