This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft File: tn8bh-Z1L0VDm4UozJaLR3CloPs.mft (raw, json) Hash identifier: VWp6f27cGtn2QhR2FmnTmuYABKpUf9h9UzT3/1TP4rM= Subject key identifier: 55:27:5A:EE:29:F4:40:1D:19:D1:5C:F7:91:C6:30:36:BE:97:42:A9 Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb Certificate serial: 019B1080FE26D10F478AE4AB6FF8D8694037 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft Manifest number: 176F Signing time: Fri 12 Dec 2025 03:00:47 +0000 Manifest this update: Fri 12 Dec 2025 03:00:47 +0000 Manifest next update: Sat 13 Dec 2025 03:00:47 +0000 Files and hashes: 1: kYfhtSfEKW3P-62E9GiF_Ua9EUo.roa (hash: p1no5bz1+uk9Sv3KCtgs/QuEn0taiRhnvBxPn7m9ACY=) 2: tn8bh-Z1L0VDm4UozJaLR3CloPs.crl (hash: 2w02jIOVbUbAZRi72ikJBhS1PjpwcNxHGAfVNeH29U4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:80:fe:26:d1:0f:47:8a:e4:ab:6f:f8:d8:69:40:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb Validity Not Before: Dec 12 03:00:47 2025 GMT Not After : Dec 13 03:00:47 2025 GMT Subject: CN=55275aee29f4401d19d15cf791c63036be9742a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:69:7d:2a:d5:01:49:60:9b:73:d1:4c:17:35: e4:42:2f:a7:48:b7:8a:0d:c3:0e:9a:b8:18:47:83: 1e:f0:50:62:85:fe:76:5f:f3:20:64:ad:56:d1:6e: 02:3b:75:60:82:09:e9:7c:16:ef:0f:05:0a:5a:78: 39:a9:1f:1f:89:09:f4:0e:88:cc:24:ea:32:2f:7b: 2a:09:a5:c0:2a:db:c5:f0:0c:88:f4:be:c0:bc:0b: 90:2c:c1:48:59:cf:fb:f0:db:7d:7b:56:59:ac:f2: e1:c6:db:ec:bd:a8:01:0a:40:d7:4f:5c:d5:04:ff: cc:7a:1f:62:d2:eb:39:15:70:4f:a6:76:5b:a4:9c: fe:0b:ba:ff:8f:29:f3:16:99:3f:6f:4c:1d:53:65: 7c:35:9e:c8:35:c6:62:1c:5d:90:a5:10:fa:10:cd: 24:ed:1a:ff:f8:8a:cd:c6:3b:8a:31:ad:f6:53:3c: 63:0a:b8:23:8d:32:3c:01:d3:cf:9c:5d:b4:b7:fa: 85:c3:69:4d:28:66:35:94:1c:43:17:dc:f1:6e:76: 5c:eb:46:26:1e:c4:e6:46:d1:f7:16:61:a9:66:df: f0:01:47:61:5f:1e:13:d0:ea:82:78:b6:4b:49:a7: 35:20:8c:e9:d4:5b:fc:e5:a2:99:af:c7:de:74:e7: ae:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:27:5A:EE:29:F4:40:1D:19:D1:5C:F7:91:C6:30:36:BE:97:42:A9 X509v3 Authority Key Identifier: keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:04:fa:6d:8f:28:a8:6d:79:2a:be:48:0a:94:6d:6c:a3:ea: ec:21:b6:20:dd:c5:69:d0:0b:12:65:c9:41:ce:65:a9:64:74: a6:ba:11:a3:28:a9:a6:3a:fc:24:6a:e2:11:7a:08:e1:16:83: be:e9:d9:fe:21:1a:cf:53:12:72:d6:ab:f2:28:58:40:59:20: fd:3a:72:58:f5:4a:86:11:93:8f:d8:73:6e:e3:e9:f9:ad:3f: 5f:10:50:0a:9f:f4:bd:02:60:87:8f:74:10:5b:ee:49:65:4b: 60:b8:77:ce:c1:76:11:17:ae:49:8e:2c:c5:1b:e4:df:be:1b: 94:59:6d:bc:20:ab:7f:52:37:d1:00:ab:e4:c8:e6:79:91:39: b7:82:61:d0:32:44:06:30:65:b9:f1:51:eb:16:5e:27:5f:23: b0:1b:7e:50:5d:e8:95:e1:41:3b:53:fc:1c:a0:09:1e:13:c7: 4e:31:79:99:45:c0:6b:5f:a3:7d:a6:da:4c:b0:01:1c:06:5e: dc:87:8d:bf:34:ed:aa:7f:d0:73:27:91:93:34:16:d2:b8:a1: c0:d8:5a:29:22:98:08:64:be:ab:ab:d1:33:04:cd:e8:5a:2f: 09:76:62:9f:23:ef:11:fa:b3:b3:2d:0a:e0:80:12:be:66:d5: 8a:ca:24:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgP4m0Q9HiuSrb/jYaUA3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2N2YxYjg3ZTY3NTJmNDU0MzliODUyOGNjOTY4YjQ3NzBh NWEwZmIwHhcNMjUxMjEyMDMwMDQ3WhcNMjUxMjEzMDMwMDQ3WjAzMTEwLwYDVQQD Eyg1NTI3NWFlZTI5ZjQ0MDFkMTlkMTVjZjc5MWM2MzAzNmJlOTc0MmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWl9KtUBSWCbc9FMFzXkQi+nSLeK DcMOmrgYR4Me8FBihf52X/MgZK1W0W4CO3VgggnpfBbvDwUKWng5qR8fiQn0DojM JOoyL3sqCaXAKtvF8AyI9L7AvAuQLMFIWc/78Nt9e1ZZrPLhxtvsvagBCkDXT1zV BP/Meh9i0us5FXBPpnZbpJz+C7r/jynzFpk/b0wdU2V8NZ7INcZiHF2QpRD6EM0k 7Rr/+IrNxjuKMa32UzxjCrgjjTI8AdPPnF20t/qFw2lNKGY1lBxDF9zxbnZc60Ym HsTmRtH3FmGpZt/wAUdhXx4T0OqCeLZLSac1IIzp1Fv85aKZr8fedOeusQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUnWu4p9EAdGdFc95HGMDa+l0KpMB8GA1UdIwQY MBaAFLZ/G4fmdS9FQ5uFKMyWi0dwpaD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG44YmgtWjFMMFZEbTRVb3pKYUxSM0Nsb1BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85ZmY0M2UtZjgxNy00ZWJlLWEwZDkt N2ExODkzMWQ5ODViLzEvdG44YmgtWjFMMFZEbTRVb3pKYUxSM0Nsb1BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85ZmY0M2UtZjgxNy00ZWJlLWEwZDktN2ExODkzMWQ5ODVi LzEvdG44YmgtWjFMMFZEbTRVb3pKYUxSM0Nsb1BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwT6bY8o qG15Kr5ICpRtbKPq7CG2IN3FadALEmXJQc5lqWR0proRoyippjr8JGriEXoI4RaD vunZ/iEaz1MSctar8ihYQFkg/TpyWPVKhhGTj9hzbuPp+a0/XxBQCp/0vQJgh490 EFvuSWVLYLh3zsF2EReuSY4sxRvk374blFltvCCrf1I30QCr5MjmeZE5t4Jh0DJE BjBlufFR6xZeJ18jsBt+UF3oleFBO1P8HKAJHhPHTjF5mUXAa1+jfabaTLABHAZe 3IeNvzTtqn/QcyeRkzQW0rihwNhaKSKYCGS+q6vRMwTN6FovCXZinyPvEfqzsy0K 4IASvmbVisokhQ== -----END CERTIFICATE-----Generated at Fri Dec 12 08:06:47 2025 by rpki-client