This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft File: tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft (raw, json) Hash identifier: px4Ua4RSQIbWqYclMzac2VB5YngDo0ST8OFvZUQ+VKk= Subject key identifier: 9A:2A:0E:66:DD:8B:6A:D1:36:A0:81:35:60:E1:41:10:7C:AD:E2:9F Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c Certificate serial: 019B0E92CF0AE2FB60E2621CC8B2A8EFBFBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft Manifest number: 14F3 Signing time: Thu 11 Dec 2025 18:01:00 +0000 Manifest this update: Thu 11 Dec 2025 18:01:00 +0000 Manifest next update: Fri 12 Dec 2025 18:01:00 +0000 Files and hashes: 1: HqctvWxlrIEslD4ELNpmV-XhZkU.roa (hash: CGfhQ4fck7gcAxsslFd0Q8T9jYmDIbHyBLNxPR9Qais=) 2: bKSpPE5-kXmlbnT7r_1atj4jQSY.roa (hash: L3QXcpXiam9j36oZrcZebMrghkDu87SD2DJXHj63ivw=) 3: tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl (hash: Op83qFa4NE/FtNuCLlsMPnxGiXpEsatUDPRvjiTp8iM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:cf:0a:e2:fb:60:e2:62:1c:c8:b2:a8:ef:bf:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c Validity Not Before: Dec 11 18:01:00 2025 GMT Not After : Dec 12 18:01:00 2025 GMT Subject: CN=9a2a0e66dd8b6ad136a0813560e141107cade29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b4:a8:70:e3:63:e9:eb:ac:c9:cc:82:58:71: fd:87:92:d5:68:4f:5b:ea:20:85:3a:41:c7:14:23: be:6d:56:76:0f:ae:4b:55:17:c4:15:4d:2e:d2:6c: c1:4c:5c:50:9a:2e:7a:0a:3e:f6:e1:6d:07:15:26: bd:f3:5a:27:e2:ea:7c:88:92:fe:ba:c3:a6:03:49: 58:ce:c4:34:87:b2:ec:04:56:97:cd:0d:2b:d8:a0: 8f:15:93:0f:e4:36:bf:62:46:91:d2:df:31:6d:a1: 26:34:55:da:2b:f3:9b:fa:9a:3c:14:59:88:55:46: 7a:b0:77:01:50:0d:2c:78:de:b0:fd:f4:16:d3:3d: 3b:82:55:63:ae:74:b8:27:67:06:c1:db:2d:2d:3e: 92:22:bf:9e:90:df:b4:8d:44:08:9d:19:f9:f0:0d: cb:93:b6:18:1b:99:93:d3:6f:35:2a:e5:74:4b:45: 45:75:f4:14:52:34:6a:b7:16:cd:86:9e:f8:f5:55: c9:38:fe:b8:7b:0b:ff:f2:5b:b2:b8:50:7a:df:4a: 58:fd:b8:aa:56:47:27:97:c7:dd:89:47:52:62:33: b1:69:d0:db:9c:a6:41:df:8b:68:bc:5b:55:f9:00: 81:84:52:39:39:27:7d:28:3b:cc:1a:b3:5e:8a:39: 7b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2A:0E:66:DD:8B:6A:D1:36:A0:81:35:60:E1:41:10:7C:AD:E2:9F X509v3 Authority Key Identifier: keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3a:47:07:ec:87:50:ae:e2:a0:e2:07:3b:be:74:0c:69:27: c0:bc:a5:bc:bd:5a:8c:72:7b:ab:f4:7e:3b:bd:35:73:33:ca: 4b:c8:f4:cc:c1:cb:40:7b:2f:d0:52:99:6e:10:bd:47:a9:15: 94:54:42:ca:6f:cf:3c:a4:cf:cc:e3:f2:cb:7a:ed:db:be:3c: c3:4b:9c:d8:a4:d6:9d:89:fd:66:30:ab:ac:87:77:53:08:65: d5:c6:64:cc:53:e6:06:e0:42:24:8c:6d:2e:3d:48:b8:ef:83: cf:f2:d4:33:bd:82:95:60:a0:6d:28:9e:e4:3b:d0:8a:ca:68: 95:8b:be:1f:84:ff:87:79:21:d0:43:69:56:31:65:48:07:5e: cb:1d:b1:30:93:10:6b:59:af:ec:ab:9f:a0:28:19:49:ba:b2: 08:15:a4:e3:19:12:1b:4e:e1:0e:d4:af:0c:c0:3c:08:56:b1: 85:8a:e6:89:ba:78:fc:9e:ee:e2:99:cc:da:cf:fa:47:cb:5d: 7c:12:6b:c8:76:d8:c4:f9:c2:35:c4:ba:14:bc:b0:54:56:5a: a5:eb:70:5c:98:d3:3d:0c:b6:3c:9e:27:25:67:01:1e:59:ba: ec:6f:f9:ac:08:03:72:79:b4:0d:a0:28:79:35:43:97:9f:97: ed:b5:03:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOks8K4vtg4mIcyLKo77+6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZjU3ZTQ5ZWJmMDk4YmM1M2U4ZGIzODg4ODFjOTIzNjlk OWJmOGMwHhcNMjUxMjExMTgwMTAwWhcNMjUxMjEyMTgwMTAwWjAzMTEwLwYDVQQD Eyg5YTJhMGU2NmRkOGI2YWQxMzZhMDgxMzU2MGUxNDExMDdjYWRlMjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7SocONj6eusycyCWHH9h5LVaE9b 6iCFOkHHFCO+bVZ2D65LVRfEFU0u0mzBTFxQmi56Cj724W0HFSa981on4up8iJL+ usOmA0lYzsQ0h7LsBFaXzQ0r2KCPFZMP5Da/YkaR0t8xbaEmNFXaK/Ob+po8FFmI VUZ6sHcBUA0seN6w/fQW0z07glVjrnS4J2cGwdstLT6SIr+ekN+0jUQInRn58A3L k7YYG5mT0281KuV0S0VFdfQUUjRqtxbNhp749VXJOP64ewv/8luyuFB630pY/biq Vkcnl8fdiUdSYjOxadDbnKZB34tovFtV+QCBhFI5OSd9KDvMGrNeijl73QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJoqDmbdi2rRNqCBNWDhQRB8reKfMB8GA1UdIwQY MBaAFLX1fknr8Ji8U+jbOIiBySNp2b+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGZWLVNldndtTHhUNk5zNGlJSEpJMm5adjR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85ZTkxMjItYmJmZi00OGQ5LTk4YzYt MGE0Mjg2ZjNjZmJlLzEvdGZWLVNldndtTHhUNk5zNGlJSEpJMm5adjR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS85ZTkxMjItYmJmZi00OGQ5LTk4YzYtMGE0Mjg2ZjNjZmJl LzEvdGZWLVNldndtTHhUNk5zNGlJSEpJMm5adjR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjpHB+yH UK7ioOIHO750DGknwLylvL1ajHJ7q/R+O701czPKS8j0zMHLQHsv0FKZbhC9R6kV lFRCym/PPKTPzOPyy3rt2748w0uc2KTWnYn9ZjCrrId3Uwhl1cZkzFPmBuBCJIxt Lj1IuO+Dz/LUM72ClWCgbSie5DvQispolYu+H4T/h3kh0ENpVjFlSAdeyx2xMJMQ a1mv7KufoCgZSbqyCBWk4xkSG07hDtSvDMA8CFaxhYrmibp4/J7u4pnM2s/6R8td fBJryHbYxPnCNcS6FLywVFZapetwXJjTPQy2PJ4nJWcBHlm67G/5rAgDcnm0DaAo eTVDl5+X7bUDwg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:21:23 2025 by rpki-client