This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft File: TjQBh8D85f_wN87ZplCCQ-QE2nE.mft (raw, json) Hash identifier: JFGitIAP562xq/6qz8YiYrDeYEYe7+gi7v/koW5nW58= Subject key identifier: 0A:E6:D2:A3:30:36:52:03:2D:0C:CB:DD:63:C9:D0:62:05:B6:31:62 Authority key identifier: 4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71 Certificate issuer: /CN=4e340187c0fce5fff037ced9a6508243e404da71 Certificate serial: 019B353228B7E0D72E70AB016405BC943573 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft Manifest number: 0AB0 Signing time: Fri 19 Dec 2025 06:00:38 +0000 Manifest this update: Fri 19 Dec 2025 06:00:38 +0000 Manifest next update: Sat 20 Dec 2025 06:00:38 +0000 Files and hashes: 1: CpuMVh4uJ1tcoj_OkQygaUN_hh8.roa (hash: yhnMpFW3oI3a8/KGPX3tjlLUQZvGsHrg1LJyUrjeFm8=) 2: TjQBh8D85f_wN87ZplCCQ-QE2nE.crl (hash: yS/z/sI2EpsB3oXQnCQU8fVT80H0UmViflL037O+LiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:28:b7:e0:d7:2e:70:ab:01:64:05:bc:94:35:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e340187c0fce5fff037ced9a6508243e404da71 Validity Not Before: Dec 19 06:00:38 2025 GMT Not After : Dec 20 06:00:38 2025 GMT Subject: CN=0ae6d2a3303652032d0ccbdd63c9d06205b63162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:18:a1:e7:30:e1:1b:7a:7f:2b:1b:ce:ac:ed: 73:bf:15:27:1c:cb:81:e8:82:59:5f:07:5f:3c:95: c5:ca:ba:1d:59:dd:39:4d:2e:4a:7f:fa:a0:59:1f: 71:e7:2a:8a:56:a9:a6:c9:8a:fe:1d:73:85:c2:67: 1d:cb:34:0d:91:00:c0:ea:45:05:b1:cd:46:0c:b6: 16:e8:c3:06:76:64:d7:cd:86:47:47:07:90:69:22: 0d:51:96:8d:49:3f:fe:97:a9:36:90:fe:04:b1:7e: f5:77:17:1a:30:d9:8f:75:c9:50:1d:cc:18:d4:80: 34:61:c4:bc:fa:f1:6e:42:a1:17:59:4f:b0:11:75: dc:cb:48:d5:9e:54:f7:e8:9d:1e:69:95:03:91:99: 38:c0:e0:31:98:72:20:8d:5c:28:6a:3a:d1:02:7e: d7:8a:84:2c:a7:06:21:53:45:3a:03:e2:fc:60:2e: dd:3a:4c:98:f8:25:e2:aa:d3:64:58:bb:3d:cd:a7: a4:43:2d:88:7e:e7:64:51:0d:02:27:63:5d:ec:8b: 74:2c:5b:c1:f4:4d:38:24:02:2b:3f:47:59:f5:8c: 14:d8:2e:73:cf:72:f0:35:20:c7:6b:25:1e:1c:1e: ff:5c:89:f5:f4:fa:82:ee:e3:00:cd:68:12:f2:b8: 57:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E6:D2:A3:30:36:52:03:2D:0C:CB:DD:63:C9:D0:62:05:B6:31:62 X509v3 Authority Key Identifier: keyid:4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:9a:98:7c:e8:27:e1:a4:ce:89:5a:40:f0:00:20:e7:de:6e: 06:fe:c4:fb:f2:15:55:dc:c0:2e:3b:47:66:ee:da:5e:4f:fb: 8c:d0:d2:08:24:00:31:48:76:8f:14:ac:6b:2a:fd:c4:bc:78: 14:0e:5d:cb:49:65:11:7b:70:76:53:4e:e4:66:b8:6b:24:07: b4:20:ad:55:31:15:0d:30:de:42:c7:f4:77:4b:39:94:05:70: de:63:40:05:b8:c6:c6:98:93:bf:35:b7:64:ca:f8:e8:03:9e: 02:d7:67:dd:27:fd:5f:12:be:fe:72:4d:22:97:43:0d:5d:bf: ff:1e:d3:d6:1f:fd:e1:02:9d:03:bd:c8:6d:74:f4:73:43:57: 40:17:85:61:ab:53:56:ab:21:6d:fb:a4:ca:0a:c2:60:71:36: 93:66:ec:22:96:c1:b4:5f:4a:54:38:31:96:ab:18:b0:d3:b5: 5c:d5:9d:d6:16:3d:4c:82:5b:dc:01:96:a5:b3:1f:d8:13:a8: 7c:39:67:59:e1:d0:16:b7:12:fd:b2:63:bf:37:d6:53:00:6d: 31:41:da:bf:15:1d:d8:9f:fb:9c:44:09:e0:0e:a4:50:d3:26: ee:d8:bc:dd:78:f6:e3:5d:8b:cd:a7:7c:e8:b5:81:67:6b:a9: 0e:91:8b:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mii34NcucKsBZAW8lDVzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMzQwMTg3YzBmY2U1ZmZmMDM3Y2VkOWE2NTA4MjQzZTQw NGRhNzEwHhcNMjUxMjE5MDYwMDM4WhcNMjUxMjIwMDYwMDM4WjAzMTEwLwYDVQQD EygwYWU2ZDJhMzMwMzY1MjAzMmQwY2NiZGQ2M2M5ZDA2MjA1YjYzMTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Rih5zDhG3p/KxvOrO1zvxUnHMuB 6IJZXwdfPJXFyrodWd05TS5Kf/qgWR9x5yqKVqmmyYr+HXOFwmcdyzQNkQDA6kUF sc1GDLYW6MMGdmTXzYZHRweQaSINUZaNST/+l6k2kP4EsX71dxcaMNmPdclQHcwY 1IA0YcS8+vFuQqEXWU+wEXXcy0jVnlT36J0eaZUDkZk4wOAxmHIgjVwoajrRAn7X ioQspwYhU0U6A+L8YC7dOkyY+CXiqtNkWLs9zaekQy2IfudkUQ0CJ2Nd7It0LFvB 9E04JAIrP0dZ9YwU2C5zz3LwNSDHayUeHB7/XIn19PqC7uMAzWgS8rhXwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArm0qMwNlIDLQzL3WPJ0GIFtjFiMB8GA1UdIwQY MBaAFE40AYfA/OX/8DfO2aZQgkPkBNpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGpRQmg4RDg1Zl93Tjg3WnBsQ0NRLVFFMm5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85NjFmNjQtODM3Yy00ODExLWFhNDIt NThmMjE1YmNhNTNhLzEvVGpRQmg4RDg1Zl93Tjg3WnBsQ0NRLVFFMm5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC85NjFmNjQtODM3Yy00ODExLWFhNDItNThmMjE1YmNhNTNh LzEvVGpRQmg4RDg1Zl93Tjg3WnBsQ0NRLVFFMm5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZqYfOgn 4aTOiVpA8AAg595uBv7E+/IVVdzALjtHZu7aXk/7jNDSCCQAMUh2jxSsayr9xLx4 FA5dy0llEXtwdlNO5Ga4ayQHtCCtVTEVDTDeQsf0d0s5lAVw3mNABbjGxpiTvzW3 ZMr46AOeAtdn3Sf9XxK+/nJNIpdDDV2//x7T1h/94QKdA73IbXT0c0NXQBeFYatT VqshbfukygrCYHE2k2bsIpbBtF9KVDgxlqsYsNO1XNWd1hY9TIJb3AGWpbMf2BOo fDlnWeHQFrcS/bJjvzfWUwBtMUHavxUd2J/7nEQJ4A6kUNMm7ti83Xj2412Lzad8 6LWBZ2upDpGL0A== -----END CERTIFICATE-----Generated at Fri Dec 19 10:42:25 2025 by rpki-client