This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft File: TNR7i4qp-8zP89UHgU_HRGSiq_A.mft (raw, json) Hash identifier: 975xNFEnMuucCv7sewmkxiNR8y3E5QkY5t5a+DHmuD0= Subject key identifier: B4:A9:A4:2E:C2:D4:28:CB:4E:69:7A:A9:67:CD:A8:31:CC:70:9E:0D Authority key identifier: 4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0 Certificate issuer: /CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0 Certificate serial: 019B0E926EC9B417D67EB5C6541FEF972642 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft Manifest number: 0E65 Signing time: Thu 11 Dec 2025 18:00:36 +0000 Manifest this update: Thu 11 Dec 2025 18:00:36 +0000 Manifest next update: Fri 12 Dec 2025 18:00:36 +0000 Files and hashes: 1: TNR7i4qp-8zP89UHgU_HRGSiq_A.crl (hash: PbUIFF/8R7xKklVju+gyW9ajBwykntE59Q5AkPgKrlo=) 2: zYBlb8-4iJi2Xsk5poztWDw6ukY.roa (hash: veXHQ0WmE+2KQkfYtO+EXvFrciAIGT+yWdclt50BTQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:6e:c9:b4:17:d6:7e:b5:c6:54:1f:ef:97:26:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0 Validity Not Before: Dec 11 18:00:36 2025 GMT Not After : Dec 12 18:00:36 2025 GMT Subject: CN=b4a9a42ec2d428cb4e697aa967cda831cc709e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f0:ee:3b:7d:1b:cb:00:a3:67:1d:77:1a:b2: 12:19:86:3a:54:0a:df:fe:25:24:06:c7:5f:9b:15: 86:4a:53:b6:20:c9:5e:85:fd:b5:9b:4e:1a:e9:d1: e2:c3:f9:eb:16:1e:51:81:f8:1f:40:71:81:cc:e2: 0d:10:4d:d0:3e:8b:20:2f:5b:ae:e7:fb:34:ff:f7: 53:bc:15:8e:27:e1:55:90:5e:1a:38:c9:f4:32:cb: ed:d0:a2:da:9c:00:4e:97:0c:f6:0e:14:d3:70:17: 9c:b9:62:a4:67:b5:c0:12:35:d2:a0:7a:65:47:a8: 46:69:dc:a2:98:a0:d3:02:a2:98:c1:b0:37:b2:2f: 71:c4:28:0e:cc:9b:a5:85:e1:a1:60:a2:54:9a:0e: f0:e6:88:2d:5c:fa:42:40:32:7a:2d:74:7e:f7:43: ef:1c:e7:e1:b0:97:07:48:ae:81:e0:74:e7:c2:e6: 8d:08:7f:90:1b:04:fb:04:c4:91:ad:29:5b:69:dd: f6:53:83:57:29:44:5a:0f:f8:4e:dd:f4:83:92:3a: cd:d1:1a:3b:c3:d4:c6:32:00:32:f6:75:3a:d9:8b: 1e:40:fa:7d:c3:39:00:51:56:d2:d8:07:31:53:13: e5:90:ea:25:d0:c7:71:0a:fb:b9:71:52:ef:87:21: 11:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A9:A4:2E:C2:D4:28:CB:4E:69:7A:A9:67:CD:A8:31:CC:70:9E:0D X509v3 Authority Key Identifier: keyid:4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b2:a4:06:83:fb:a8:30:2b:25:7f:1d:a1:b4:b8:21:91:fe: cb:4a:6e:ae:14:fa:84:c9:95:4c:ea:4c:45:34:ef:b3:0f:09: 7d:f3:33:89:10:a1:f5:7d:88:07:d6:51:26:4c:23:92:c5:8f: 54:14:96:cb:71:78:27:d1:e2:44:c1:e4:62:e0:1b:3d:66:8c: e0:ec:b9:f1:04:b1:11:74:75:56:3d:f4:c7:af:cf:66:13:19: 82:41:cd:79:95:e0:8c:ef:26:9a:10:a6:49:78:3c:cb:3d:ea: c6:98:7a:c3:d6:72:c2:82:a2:0e:4b:01:0a:f3:07:94:ca:e0: bb:22:f3:15:88:53:5b:73:78:a3:37:89:cf:75:23:2f:f3:40: 1b:22:7b:be:c5:e3:e4:91:15:58:b1:cd:f8:16:57:7e:38:1e: 53:41:f8:c7:e0:2a:cd:cb:f0:3c:cb:5e:4e:7f:8c:b1:24:62: 32:8c:7b:13:62:63:1d:32:79:3d:01:40:34:c5:3d:33:a3:21: 77:26:d5:b6:df:1c:46:66:5f:7b:6f:02:09:c4:53:63:22:30: 92:b3:7e:22:2a:97:3a:72:1f:c7:04:3f:fe:f1:42:a8:5e:d1: e9:4c:36:3f:92:79:39:a2:0d:72:c0:60:09:26:17:99:14:d5: 1e:60:48:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkm7JtBfWfrXGVB/vlyZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZDQ3YjhiOGFhOWZiY2NjZmYzZDUwNzgxNGZjNzQ0NjRh MmFiZjAwHhcNMjUxMjExMTgwMDM2WhcNMjUxMjEyMTgwMDM2WjAzMTEwLwYDVQQD EyhiNGE5YTQyZWMyZDQyOGNiNGU2OTdhYTk2N2NkYTgzMWNjNzA5ZTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvDuO30bywCjZx13GrISGYY6VArf /iUkBsdfmxWGSlO2IMlehf21m04a6dHiw/nrFh5RgfgfQHGBzOINEE3QPosgL1uu 5/s0//dTvBWOJ+FVkF4aOMn0Msvt0KLanABOlwz2DhTTcBecuWKkZ7XAEjXSoHpl R6hGadyimKDTAqKYwbA3si9xxCgOzJulheGhYKJUmg7w5ogtXPpCQDJ6LXR+90Pv HOfhsJcHSK6B4HTnwuaNCH+QGwT7BMSRrSlbad32U4NXKURaD/hO3fSDkjrN0Ro7 w9TGMgAy9nU62YseQPp9wzkAUVbS2AcxUxPlkOol0MdxCvu5cVLvhyERMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSppC7C1CjLTml6qWfNqDHMcJ4NMB8GA1UdIwQY MBaAFEzUe4uKqfvMz/PVB4FPx0RkoqvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE5SN2k0cXAtOHpQODlVSGdVX0hSR1NpcV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81Y2EyOTQtODk3Yi00ZTQ5LWE5Yzct YmM0OGI0MWY0OThiLzEvVE5SN2k0cXAtOHpQODlVSGdVX0hSR1NpcV9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC81Y2EyOTQtODk3Yi00ZTQ5LWE5YzctYmM0OGI0MWY0OThi LzEvVE5SN2k0cXAtOHpQODlVSGdVX0hSR1NpcV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrKkBoP7 qDArJX8dobS4IZH+y0purhT6hMmVTOpMRTTvsw8JffMziRCh9X2IB9ZRJkwjksWP VBSWy3F4J9HiRMHkYuAbPWaM4Oy58QSxEXR1Vj30x6/PZhMZgkHNeZXgjO8mmhCm SXg8yz3qxph6w9ZywoKiDksBCvMHlMrguyLzFYhTW3N4ozeJz3UjL/NAGyJ7vsXj 5JEVWLHN+BZXfjgeU0H4x+AqzcvwPMteTn+MsSRiMox7E2JjHTJ5PQFANMU9M6Mh dybVtt8cRmZfe28CCcRTYyIwkrN+IiqXOnIfxwQ//vFCqF7R6Uw2P5J5OaINcsBg CSYXmRTVHmBIgQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:32:59 2025 by rpki-client