This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft File: ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft (raw, json) Hash identifier: Cfd0YX+v0J3X2rHbOxsd9UpI3tZcMgAIYUGgkpsItFQ= Subject key identifier: 0A:BB:AD:B9:4E:F7:4A:A7:F6:E2:71:E8:87:9C:60:47:00:D2:23:13 Authority key identifier: 4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0 Certificate issuer: /CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0 Certificate serial: 019B0F37A4B10A22DAC84905B5BE0A5A351A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 21:01:03 +0000 Manifest this update: Thu 11 Dec 2025 21:01:03 +0000 Manifest next update: Fri 12 Dec 2025 21:01:03 +0000 Files and hashes: 1: ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl (hash: H76drILJfIeZuNySAhiPPnrc+7z15E/+mb62sPVQtDw=) 2: zYbNNn2pDjFT8gDS_6qFcvUdYos.roa (hash: 7AsdJdwMwtIuFiP9RKf61Dpwj0s/SnQWNIRFQ6k6zXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:a4:b1:0a:22:da:c8:49:05:b5:be:0a:5a:35:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0 Validity Not Before: Dec 11 21:01:03 2025 GMT Not After : Dec 12 21:01:03 2025 GMT Subject: CN=0abbadb94ef74aa7f6e271e8879c604700d22313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:5c:75:aa:91:71:27:59:06:d1:37:ad:ca: e8:15:16:bf:6e:af:28:b0:fc:5b:e1:eb:bb:46:fb: 0a:05:df:62:07:d0:dc:4b:c8:a5:dc:9d:bb:87:63: 77:0d:80:b2:48:d9:ab:1c:df:5d:97:56:79:b8:ff: af:f5:25:de:76:d2:47:33:68:ba:5c:e8:6d:07:17: c0:a0:f0:57:b1:e1:49:a0:36:b9:cc:3d:60:21:01: 74:a7:a8:6e:99:5a:8f:1d:42:ce:1e:60:72:ca:76: 23:74:a3:49:83:ef:63:3f:23:33:e7:18:2a:0f:71: 14:f9:b0:f6:84:a9:63:72:f6:d6:00:05:ea:de:25: a6:71:78:58:6e:dc:82:ba:fa:ba:3d:8b:24:9a:0c: 4b:83:da:89:39:0a:35:d5:48:3b:40:87:3d:51:c9: f6:26:36:51:ba:5f:bd:bd:68:ad:ce:d5:19:c2:fa: 4e:5e:31:62:35:83:71:ca:3f:9b:1c:4f:1a:3d:b4: 4e:60:4c:66:04:1d:b4:f1:cf:88:3d:fb:55:9b:6a: a0:bd:67:99:cb:34:0b:da:20:18:ab:f1:1c:da:18: 67:9f:72:f9:71:b2:7f:e6:4e:a0:72:0e:f1:c6:a5: a8:f2:48:21:54:09:94:a3:bf:db:7f:53:bd:f8:c9: c0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BB:AD:B9:4E:F7:4A:A7:F6:E2:71:E8:87:9C:60:47:00:D2:23:13 X509v3 Authority Key Identifier: keyid:4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:74:3f:f0:29:3b:79:9b:76:94:a1:5b:75:7b:47:7b:21:e1: a5:f7:3c:c0:f0:5d:b7:ed:69:9b:6e:f0:f9:f4:f6:aa:9a:24: 1f:6a:c7:df:22:61:74:97:39:c7:50:af:e1:08:ae:da:d4:e3: 43:56:db:21:dc:13:6a:f5:7d:2a:6c:23:13:bf:b6:55:dd:ad: 3a:b6:45:92:bf:4d:c3:69:f5:42:1a:43:2f:23:62:b4:6d:18: 2d:62:21:9f:21:90:8c:f3:69:f4:65:51:50:c3:08:5b:a3:39: 06:ca:35:2c:9d:39:32:b7:68:8e:e4:ba:40:d0:cb:46:1a:fb: 00:2c:9b:db:67:65:36:5a:d6:58:8e:d2:5f:19:19:48:c5:2a: 92:10:39:82:16:76:42:26:24:c8:00:20:93:7b:b3:fe:fe:27: a2:9e:16:28:19:18:2f:3e:f8:db:ae:84:a7:3e:3a:0b:51:76: e0:9d:9e:a7:ab:cd:a2:5f:b6:7a:32:c8:83:57:ee:33:6b:29: cb:49:0b:0e:ed:3f:ed:a8:75:c3:72:91:53:04:e5:01:b5:c5: 96:a2:fe:d2:eb:5d:e8:ac:f5:a8:af:b6:fd:ea:5b:59:cf:f9: 3e:75:85:ba:48:27:aa:50:c2:24:f4:e0:db:cd:92:f5:3d:11: 71:9a:c8:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN6SxCiLayEkFtb4KWjUaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMTY3ZWU1ZjhkMmFjMGQ5Y2MwMTM3YjQxOTEyZjE4MWIw NDg5YjAwHhcNMjUxMjExMjEwMTAzWhcNMjUxMjEyMjEwMTAzWjAzMTEwLwYDVQQD EygwYWJiYWRiOTRlZjc0YWE3ZjZlMjcxZTg4NzljNjA0NzAwZDIyMzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI9cdaqRcSdZBtE3rcroFRa/bq8o sPxb4eu7RvsKBd9iB9DcS8il3J27h2N3DYCySNmrHN9dl1Z5uP+v9SXedtJHM2i6 XOhtBxfAoPBXseFJoDa5zD1gIQF0p6humVqPHULOHmByynYjdKNJg+9jPyMz5xgq D3EU+bD2hKljcvbWAAXq3iWmcXhYbtyCuvq6PYskmgxLg9qJOQo11Ug7QIc9Ucn2 JjZRul+9vWitztUZwvpOXjFiNYNxyj+bHE8aPbROYExmBB208c+IPftVm2qgvWeZ yzQL2iAYq/Ec2hhnn3L5cbJ/5k6gcg7xxqWo8kghVAmUo7/bf1O9+MnADQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAq7rblO90qn9uJx6IecYEcA0iMTMB8GA1UdIwQY MBaAFE4WfuX40qwNnMATe0GRLxgbBImwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGhaLTVmalNyQTJjd0JON1FaRXZHQnNFaWJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS82ZTE3OGUtOWNiZi00ODllLWFhM2Et ZjY2MmIwYTY1ZThlLzEvVGhaLTVmalNyQTJjd0JON1FaRXZHQnNFaWJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS82ZTE3OGUtOWNiZi00ODllLWFhM2EtZjY2MmIwYTY1ZThl LzEvVGhaLTVmalNyQTJjd0JON1FaRXZHQnNFaWJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3Q/8Ck7 eZt2lKFbdXtHeyHhpfc8wPBdt+1pm27w+fT2qpokH2rH3yJhdJc5x1Cv4Qiu2tTj Q1bbIdwTavV9KmwjE7+2Vd2tOrZFkr9Nw2n1QhpDLyNitG0YLWIhnyGQjPNp9GVR UMMIW6M5Bso1LJ05MrdojuS6QNDLRhr7ACyb22dlNlrWWI7SXxkZSMUqkhA5ghZ2 QiYkyAAgk3uz/v4nop4WKBkYLz74266Epz46C1F24J2ep6vNol+2ejLIg1fuM2sp y0kLDu0/7ah1w3KRUwTlAbXFlqL+0utd6Kz1qK+2/epbWc/5PnWFukgnqlDCJPTg 282S9T0RcZrI4A== -----END CERTIFICATE-----Generated at Fri Dec 12 03:42:50 2025 by rpki-client