This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft File: Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft (raw, json) Hash identifier: pjDRON63sZDAGNl7aCu5OmLdKTDe25COPJGY90HELbY= Subject key identifier: 11:A8:46:54:A8:6E:B6:92:DE:C1:55:05:37:DC:23:B9:9E:25:06:44 Authority key identifier: 4E:BF:6B:37:B9:4F:95:B4:90:5C:F8:C6:A2:1D:88:03:EA:BF:A7:7E Certificate issuer: /CN=4ebf6b37b94f95b4905cf8c6a21d8803eabfa77e Certificate serial: 019B2287830AE108D7C7567A7E5523A10A09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft Manifest number: 0365 Signing time: Mon 15 Dec 2025 15:01:04 +0000 Manifest this update: Mon 15 Dec 2025 15:01:04 +0000 Manifest next update: Tue 16 Dec 2025 15:01:04 +0000 Files and hashes: 1: 2YHBxyZ_z4Fcrt68TQqMf0wkwmM.roa (hash: KMD/ALL2N2LqU8y7+1f9YpFqy5OsmhRXi+hfcZ2aIxY=) 2: Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl (hash: X+AzJJFeZNVf73cKd5wYLCiIE0ikOYf4GptUsM6pEUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:83:0a:e1:08:d7:c7:56:7a:7e:55:23:a1:0a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ebf6b37b94f95b4905cf8c6a21d8803eabfa77e Validity Not Before: Dec 15 15:01:04 2025 GMT Not After : Dec 16 15:01:04 2025 GMT Subject: CN=11a84654a86eb692dec1550537dc23b99e250644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:05:d6:22:00:9a:40:d2:ac:79:65:5f:c9:60: 2a:08:ad:a0:44:b2:00:51:34:b4:b6:68:f6:67:9e: 97:46:d9:0b:28:59:6e:52:fb:df:fa:9d:2b:6c:42: c9:98:a4:40:db:26:12:01:d4:ce:04:4c:a8:b1:bb: a3:32:ee:ea:fe:9c:c8:6b:92:5b:ca:3c:e5:38:bf: c8:2c:8f:83:89:76:d3:5e:ec:54:de:66:e6:02:d5: 67:31:82:96:fe:31:14:58:1a:40:19:53:6d:ad:4a: c4:23:10:e3:8a:6a:0f:91:60:0c:4f:64:53:2c:35: d8:c6:e6:15:44:01:6a:9d:67:8e:fa:46:dd:7c:27: a8:3a:b4:f8:e0:a6:88:96:38:29:71:e7:3f:29:9a: 81:39:73:b1:43:ed:00:39:66:99:15:04:26:c3:f2: 86:51:21:22:35:95:0a:c2:eb:04:61:8d:22:b9:1c: cc:b4:64:ef:67:3e:a3:74:3a:cd:6d:b1:1a:ff:6a: bd:4f:4b:4d:a7:69:8d:76:7a:9d:8e:64:9d:95:1b: f0:1a:0e:25:76:2d:6c:0e:76:ab:82:eb:ea:0e:ca: 9c:0c:b0:23:3f:9b:d5:4c:8b:a5:6b:34:b2:49:f6: fb:de:61:6a:de:9c:05:5b:a1:14:2b:da:10:1e:0a: b0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A8:46:54:A8:6E:B6:92:DE:C1:55:05:37:DC:23:B9:9E:25:06:44 X509v3 Authority Key Identifier: keyid:4E:BF:6B:37:B9:4F:95:B4:90:5C:F8:C6:A2:1D:88:03:EA:BF:A7:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:fb:0a:3c:15:98:5e:4b:6a:b4:e8:19:31:2c:ad:68:6f:fa: 10:15:e3:e7:b4:3a:d0:75:20:17:78:f1:2b:a3:5f:7f:87:4f: 3c:83:d9:33:cf:c0:8a:23:5e:a2:03:10:4b:30:7f:99:3c:b6: 47:23:64:be:e8:e7:c8:04:35:87:3f:0c:99:e3:c7:73:1e:f7: aa:c6:40:c6:d4:e0:52:d1:66:60:ef:61:5e:af:cd:c4:6b:17: 52:8c:be:c1:18:22:94:a1:42:28:df:a8:61:29:25:f2:9f:b1: 81:82:e2:d4:e0:2a:91:fc:69:da:3e:da:d1:28:95:97:6d:14: 37:84:8e:29:74:70:02:88:65:4a:2c:a9:be:cc:05:81:ac:29: 8b:9a:92:5a:53:9c:a1:31:77:61:38:af:12:d8:43:23:d6:74: 67:49:aa:00:5c:94:46:b6:27:7f:49:a6:44:11:9b:b5:22:b5: 6d:4b:3a:3e:8a:3e:5e:2f:df:03:2d:c9:5b:a0:64:65:46:36: a1:c8:c1:a6:c4:9a:e7:86:50:2e:70:bb:7e:0e:58:b7:e1:d6: 93:0a:89:86:45:0d:27:68:f1:38:11:e5:0a:4d:a3:d7:ac:38: 15:8e:e5:53:36:36:cc:9d:4f:ab:9b:36:51:12:98:8a:bd:eb: 4b:a9:90:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih4MK4QjXx1Z6flUjoQoJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYmY2YjM3Yjk0Zjk1YjQ5MDVjZjhjNmEyMWQ4ODAzZWFi ZmE3N2UwHhcNMjUxMjE1MTUwMTA0WhcNMjUxMjE2MTUwMTA0WjAzMTEwLwYDVQQD EygxMWE4NDY1NGE4NmViNjkyZGVjMTU1MDUzN2RjMjNiOTllMjUwNjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gXWIgCaQNKseWVfyWAqCK2gRLIA UTS0tmj2Z56XRtkLKFluUvvf+p0rbELJmKRA2yYSAdTOBEyosbujMu7q/pzIa5Jb yjzlOL/ILI+DiXbTXuxU3mbmAtVnMYKW/jEUWBpAGVNtrUrEIxDjimoPkWAMT2RT LDXYxuYVRAFqnWeO+kbdfCeoOrT44KaIljgpcec/KZqBOXOxQ+0AOWaZFQQmw/KG USEiNZUKwusEYY0iuRzMtGTvZz6jdDrNbbEa/2q9T0tNp2mNdnqdjmSdlRvwGg4l di1sDnarguvqDsqcDLAjP5vVTIulazSySfb73mFq3pwFW6EUK9oQHgqwIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGoRlSobraS3sFVBTfcI7meJQZEMB8GA1UdIwQY MBaAFE6/aze5T5W0kFz4xqIdiAPqv6d+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHI5ck43bFBsYlNRWFBqR29oMklBLXFfcDM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hMjE3MmQtYjY1MS00M2RhLThhY2Yt ZTdlNzRkYjcyMWQyLzEvVHI5ck43bFBsYlNRWFBqR29oMklBLXFfcDM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hMjE3MmQtYjY1MS00M2RhLThhY2YtZTdlNzRkYjcyMWQy LzEvVHI5ck43bFBsYlNRWFBqR29oMklBLXFfcDM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq/sKPBWY XktqtOgZMSytaG/6EBXj57Q60HUgF3jxK6Nff4dPPIPZM8/AiiNeogMQSzB/mTy2 RyNkvujnyAQ1hz8MmePHcx73qsZAxtTgUtFmYO9hXq/NxGsXUoy+wRgilKFCKN+o YSkl8p+xgYLi1OAqkfxp2j7a0SiVl20UN4SOKXRwAohlSiypvswFgawpi5qSWlOc oTF3YTivEthDI9Z0Z0mqAFyURrYnf0mmRBGbtSK1bUs6Poo+Xi/fAy3JW6BkZUY2 ocjBpsSa54ZQLnC7fg5Yt+HWkwqJhkUNJ2jxOBHlCk2j16w4FY7lUzY2zJ1Pq5s2 URKYir3rS6mQwg== -----END CERTIFICATE-----Generated at Mon Dec 15 16:53:47 2025 by rpki-client