This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft File: TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json) Hash identifier: 4ay0pX1KROOIhT0Yfojiha0UFyamCegTV9xi1tMsg/A= Subject key identifier: DA:DC:8A:6B:59:7D:4A:99:7A:F5:24:13:4B:ED:EC:BD:17:B3:24:3D Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49 Certificate issuer: /CN=4c51636fde905f8521f411479e81321cdcf49049 Certificate serial: 019B59761E2443018F21FFC62A470844E040 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft Manifest number: 0A27 Signing time: Fri 26 Dec 2025 07:01:11 +0000 Manifest this update: Fri 26 Dec 2025 07:01:11 +0000 Manifest next update: Sat 27 Dec 2025 07:01:11 +0000 Files and hashes: 1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: 5okjqA7SwdqnusxsT+LgtKxmA7JhNegyhxf2OKtJmwU=) 2: k88eKZ3ggVkstFfz6v9jAollFdM.roa (hash: RToXutf5Qdv2Y+G73kPgZr6gfiGthSFW8G2eqnaoH64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:1e:24:43:01:8f:21:ff:c6:2a:47:08:44:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049 Validity Not Before: Dec 26 07:01:11 2025 GMT Not After : Dec 27 07:01:11 2025 GMT Subject: CN=dadc8a6b597d4a997af524134bedecbd17b3243d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:54:28:4c:bc:dc:d4:31:b2:8b:20:9d:f3:50: 7a:9e:fa:e8:aa:8b:b0:b8:ad:1e:88:23:79:79:d5: 62:e7:4a:9e:05:63:50:cc:8c:3d:ae:18:11:0d:d5: d4:78:f3:64:1a:36:b7:bd:74:19:75:ec:7b:37:e2: 08:d2:a4:c0:00:8e:c0:dd:29:53:c4:13:61:e7:1c: 56:a9:ba:d2:df:36:a3:73:52:a5:59:d8:21:7c:5e: 19:de:17:b4:bb:09:10:f8:eb:39:94:a3:c3:e4:72: fa:4f:18:46:9f:f9:a8:dd:8f:6b:35:2a:f7:a4:51: 3e:2d:22:6c:6d:ca:38:4f:af:c6:7c:8e:ed:13:51: 56:1f:b5:d9:9b:af:cd:f0:b1:30:16:d8:80:0b:70: 16:46:82:9f:08:d7:47:9b:dd:f2:a4:e2:a9:8a:54: f0:03:85:66:9d:13:b0:f3:43:c3:f6:bb:dc:6e:fc: 88:3b:67:f3:9f:d1:be:14:c7:fd:df:d3:29:53:08: 9d:cf:99:df:2d:e4:a4:7f:a9:c3:be:c2:93:86:e0: 9c:6b:88:11:aa:6a:78:36:69:a8:11:48:5e:61:59: 06:f6:3e:1a:57:a1:a7:63:a8:58:d9:eb:de:f3:31: b7:a6:68:a6:f2:cc:6c:8f:7e:6d:4e:bf:14:62:bd: 0a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DC:8A:6B:59:7D:4A:99:7A:F5:24:13:4B:ED:EC:BD:17:B3:24:3D X509v3 Authority Key Identifier: keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:ef:47:4e:f3:9b:83:0f:ff:d6:60:63:c8:c8:f3:4d:46:b2: e0:e8:c1:ec:f1:22:32:92:99:80:00:62:25:34:a0:d6:28:e7: 7a:c8:fe:d4:ab:fd:92:4c:2c:fd:ee:84:08:07:ca:c8:a8:64: 89:f6:88:b0:dc:12:2a:10:97:66:b0:b5:9e:0b:a7:9a:e0:8e: 20:86:81:51:23:36:ac:fb:a9:3d:98:f5:62:af:ec:6a:f2:16: ba:f3:52:22:ba:a3:5c:d0:b7:cd:85:9b:e2:76:dc:42:09:cf: 4b:f3:e0:b7:16:6c:11:91:eb:5e:0c:ec:de:b9:1c:d1:fc:59: 33:66:58:d8:9d:25:75:49:fe:73:55:cc:41:40:e4:ef:8f:41: a4:d7:08:d7:96:4f:d1:7f:cd:c5:55:7e:ad:8a:ca:b0:d4:67: 04:67:3b:a4:d0:79:13:a6:0e:71:6d:1c:67:9e:91:98:aa:a8: 08:f1:9f:52:f0:6a:81:2f:3d:6c:d7:30:d7:da:de:06:89:96: b4:99:85:b5:bc:ac:f2:2c:11:f7:e2:e6:2c:9d:1f:44:c1:15: 10:6f:1b:f6:5a:cc:01:09:df:7f:f6:fa:17:a6:7c:40:d3:21: 2b:5d:91:80:44:0d:8e:96:39:5d:70:86:36:69:17:68:3a:d3: 63:ea:87:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdh4kQwGPIf/GKkcIROBAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNTE2MzZmZGU5MDVmODUyMWY0MTE0NzllODEzMjFjZGNm NDkwNDkwHhcNMjUxMjI2MDcwMTExWhcNMjUxMjI3MDcwMTExWjAzMTEwLwYDVQQD EyhkYWRjOGE2YjU5N2Q0YTk5N2FmNTI0MTM0YmVkZWNiZDE3YjMyNDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61QoTLzc1DGyiyCd81B6nvroqouw uK0eiCN5edVi50qeBWNQzIw9rhgRDdXUePNkGja3vXQZdex7N+II0qTAAI7A3SlT xBNh5xxWqbrS3zajc1KlWdghfF4Z3he0uwkQ+Os5lKPD5HL6TxhGn/mo3Y9rNSr3 pFE+LSJsbco4T6/GfI7tE1FWH7XZm6/N8LEwFtiAC3AWRoKfCNdHm93ypOKpilTw A4VmnROw80PD9rvcbvyIO2fzn9G+FMf939MpUwidz5nfLeSkf6nDvsKThuCca4gR qmp4NmmoEUheYVkG9j4aV6GnY6hY2eve8zG3pmim8sxsj35tTr8UYr0KDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrcimtZfUqZevUkE0vt7L0XsyQ9MB8GA1UdIwQY MBaAFExRY2/ekF+FIfQRR56BMhzc9JBJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84MDA4ZmUtMTc1Yi00MWJmLWIxZDYt MmNlMGViNDU4Nzg4LzEvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84MDA4ZmUtMTc1Yi00MWJmLWIxZDYtMmNlMGViNDU4Nzg4 LzEvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxe9HTvOb gw//1mBjyMjzTUay4OjB7PEiMpKZgABiJTSg1ijnesj+1Kv9kkws/e6ECAfKyKhk ifaIsNwSKhCXZrC1ngunmuCOIIaBUSM2rPupPZj1Yq/savIWuvNSIrqjXNC3zYWb 4nbcQgnPS/PgtxZsEZHrXgzs3rkc0fxZM2ZY2J0ldUn+c1XMQUDk749BpNcI15ZP 0X/NxVV+rYrKsNRnBGc7pNB5E6YOcW0cZ56RmKqoCPGfUvBqgS89bNcw19reBomW tJmFtbys8iwR9+LmLJ0fRMEVEG8b9lrMAQnff/b6F6Z8QNMhK12RgEQNjpY5XXCG NmkXaDrTY+qH1A== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:28 2025 by rpki-client