This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft File: TCuJw8V6PilqpAYelihAvnro8Bg.mft (raw, json) Hash identifier: nQJ9Lry42ZOysO4ttipp61Ue4lrJW90NzKV/3zpXSus= Subject key identifier: 4D:94:7B:0E:96:3D:5C:D6:A2:E7:3D:DD:41:26:70:12:49:65:DC:42 Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18 Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018 Certificate serial: 019B2DE70815215AAEEAC5BEE7394DC0A589 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft Manifest number: 1796 Signing time: Wed 17 Dec 2025 20:01:14 +0000 Manifest this update: Wed 17 Dec 2025 20:01:14 +0000 Manifest next update: Thu 18 Dec 2025 20:01:14 +0000 Files and hashes: 1: 1-dPM2O3Cq9rlPw_b3Bu58i_7ZQ.roa (hash: XqoYwMiUKjvv4+p3alYpBpdcCSNGWvnPPZeCLArAN1Y=) 2: AW8f1Sghrh8luWoSov2j0EZGy_0.roa (hash: U2vLNq7NQxJcwwJPbea0BifLKX9AZzxjKL7mEvlEow4=) 3: K1YVJlHcPkrvyly_yWAdk3Dvnxo.roa (hash: MPnb9N7UkomJ9P+V+pIw5n5BQ/plMrrPkuECb2IegXo=) 4: TCuJw8V6PilqpAYelihAvnro8Bg.crl (hash: DCMA+Bc6KY1Gmkp71hi7N4HBoi5m/Lz4S/0BGLybRmU=) 5: Vr7IufA3C9NGikBSGaXPWfPn02s.roa (hash: X+swUdsmsoD9I6W5uD/P9WRwAMBsf3kXls0seEffEoQ=) 6: Y09DAS9bLh1xAHqahYhLrCah7Do.roa (hash: KsGpd22HLjZmnPLG6DA0cJZZzK6h+S5QA/ADl1ffSag=) 7: mYNoys889JEKo9j4oNdbRCLL9Zk.roa (hash: ZoVXON/ZR01LA7q9fnPxWvUyfhqGTxcjz/v5GxIUwf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e7:08:15:21:5a:ae:ea:c5:be:e7:39:4d:c0:a5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018 Validity Not Before: Dec 17 20:01:14 2025 GMT Not After : Dec 18 20:01:14 2025 GMT Subject: CN=4d947b0e963d5cd6a2e73ddd412670124965dc42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:07:b5:e4:d9:fb:09:37:74:f6:21:2a:92:94: 51:58:b8:5e:e2:05:a8:45:c8:57:ad:18:54:e8:19: 06:7d:e2:c2:40:d4:b7:74:96:89:54:71:91:66:c2: ea:37:89:33:7b:b8:f3:84:f8:70:62:96:8d:96:86: b9:50:8f:f6:42:e3:6f:6e:47:44:f8:fc:10:d1:e1: 5b:4e:be:78:f0:7d:80:80:bd:ab:ec:d6:3d:69:96: 4b:0a:d0:93:b8:dd:b1:cb:5e:25:5a:00:d6:73:80: fd:17:82:94:89:35:5c:35:65:c2:b4:14:f0:79:07: 63:35:a2:11:ea:2c:8b:a9:ca:22:00:b1:d1:66:3c: 97:cc:25:2f:15:72:f9:b1:3b:c2:32:ac:2a:d2:70: ea:ad:d7:89:cc:9d:f1:6c:ca:0b:6d:fc:fa:d7:ed: 27:7e:ba:a4:ec:26:db:1e:cd:d3:58:f1:68:84:66: 29:68:b2:b2:d2:19:f5:c4:0d:fd:da:91:61:30:a0: 9f:fc:99:ba:40:7e:41:22:79:d3:21:18:0f:70:ba: d7:93:53:5c:45:75:1b:7e:bf:cb:2b:b8:b9:75:45: 6c:44:6e:68:94:54:68:ec:2a:64:cf:12:99:5f:0e: 3b:b0:b6:c6:61:e1:3b:3c:4a:82:29:5a:4f:95:5e: 86:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:94:7B:0E:96:3D:5C:D6:A2:E7:3D:DD:41:26:70:12:49:65:DC:42 X509v3 Authority Key Identifier: keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:43:94:15:32:c9:e6:f3:e0:db:0f:ae:ae:f6:94:44:aa:5d: 6c:fe:fe:25:3d:c6:d5:12:62:05:ff:6c:62:de:30:87:18:7b: 78:12:2b:e0:f6:c9:3b:5a:74:7a:02:d0:c5:05:a1:0d:4c:07: bf:95:e9:da:c5:aa:be:0a:34:d5:74:89:e4:9a:a2:7d:c7:f3: bd:ae:63:c9:9e:34:78:4d:37:31:f0:5d:27:16:1c:a9:c4:6b: 5e:7b:6d:ea:b8:26:ae:0a:d9:d0:dd:f2:84:85:4c:db:48:e5: 66:5e:3c:f3:af:d4:83:2a:5b:14:08:c6:0a:0d:86:03:db:db: 9c:7d:e2:ee:c6:72:1c:e4:2e:86:c2:22:b9:77:62:97:43:6d: 54:f4:c4:98:66:b9:22:fc:f9:b4:fc:91:56:97:62:37:e9:8b: 25:d1:be:66:d9:e2:ac:2a:86:e3:2e:ae:45:a5:f4:09:59:70: d3:2d:45:00:3d:09:0c:42:ca:b9:50:84:4d:3b:39:72:b8:4e: df:de:6f:d2:a7:ca:c5:f4:fa:81:aa:c1:55:bf:7c:9d:15:09: 47:7f:43:ee:41:ab:9e:45:89:8b:b6:9a:6b:7c:23:4b:63:39: b7:47:0c:ef:aa:0b:aa:99:cb:c9:86:d7:89:78:d9:13:37:10: a9:e7:ec:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZst5wgVIVqu6sW+5zlNwKWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMmI4OWMzYzU3YTNlMjk2YWE0MDYxZTk2Mjg0MGJlN2Fl OGYwMTgwHhcNMjUxMjE3MjAwMTE0WhcNMjUxMjE4MjAwMTE0WjAzMTEwLwYDVQQD Eyg0ZDk0N2IwZTk2M2Q1Y2Q2YTJlNzNkZGQ0MTI2NzAxMjQ5NjVkYzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywe15Nn7CTd09iEqkpRRWLhe4gWo RchXrRhU6BkGfeLCQNS3dJaJVHGRZsLqN4kze7jzhPhwYpaNloa5UI/2QuNvbkdE +PwQ0eFbTr548H2AgL2r7NY9aZZLCtCTuN2xy14lWgDWc4D9F4KUiTVcNWXCtBTw eQdjNaIR6iyLqcoiALHRZjyXzCUvFXL5sTvCMqwq0nDqrdeJzJ3xbMoLbfz61+0n frqk7CbbHs3TWPFohGYpaLKy0hn1xA392pFhMKCf/Jm6QH5BInnTIRgPcLrXk1Nc RXUbfr/LK7i5dUVsRG5olFRo7CpkzxKZXw47sLbGYeE7PEqCKVpPlV6GAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2Uew6WPVzWouc93UEmcBJJZdxCMB8GA1UdIwQY MBaAFEwricPFej4paqQGHpYoQL566PAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQt MTEyOGU1Y2U2YTViLzEvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQtMTEyOGU1Y2U2YTVi LzEvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0OUFTLJ 5vPg2w+urvaURKpdbP7+JT3G1RJiBf9sYt4whxh7eBIr4PbJO1p0egLQxQWhDUwH v5Xp2sWqvgo01XSJ5Jqifcfzva5jyZ40eE03MfBdJxYcqcRrXntt6rgmrgrZ0N3y hIVM20jlZl4886/UgypbFAjGCg2GA9vbnH3i7sZyHOQuhsIiuXdil0NtVPTEmGa5 Ivz5tPyRVpdiN+mLJdG+ZtnirCqG4y6uRaX0CVlw0y1FAD0JDELKuVCETTs5crhO 395v0qfKxfT6garBVb98nRUJR39D7kGrnkWJi7aaa3wjS2M5t0cM76oLqpnLyYbX iXjZEzcQqefsRQ== -----END CERTIFICATE-----Generated at Thu Dec 18 06:09:23 2025 by rpki-client