This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft File: TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft (raw, json) Hash identifier: skd9RGXrRiQv1l2y3R23tWEbtT710UTztULooHrKupc= Subject key identifier: F8:4F:42:49:6C:DC:7B:81:A2:61:15:B2:F6:E5:41:1F:29:2B:96:5E Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91 Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891 Certificate serial: 019B0D80D46AE0F8B03A24689351E2CADB2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft Manifest number: 1774 Signing time: Thu 11 Dec 2025 13:01:45 +0000 Manifest this update: Thu 11 Dec 2025 13:01:45 +0000 Manifest next update: Fri 12 Dec 2025 13:01:45 +0000 Files and hashes: 1: 3hSBBEtakLk1jIWXi3hchM-uTBM.roa (hash: NhWJmyJNB4sc9UZdlJ419SqvZ3IVwqNXUyuWTH42r1U=) 2: Nw3ho7K3RV-vaDuny1zip661zS4.asa (hash: P4SjyepxeX3j+uWH4ALkuKSueIIAfuBwF9JZEw1OVrE=) 3: TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl (hash: UW4Ww6d6vxOpW8Du1ByK947bwqnOLfo6QMudkMrzSvs=) 4: fziBQYI5VQChSmnvHhKXUMLYNKw.roa (hash: NEQyAGhhDS5WgZXodzUc9okNLj3B3fbMtY+K4TNZzLs=) 5: n7v5YOrSFGoXqVJ0PeytCrFgOLg.roa (hash: +oN44CijE7GRp64D6SkmoV+lAs+Tba+IrPKezC+0CLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:d4:6a:e0:f8:b0:3a:24:68:93:51:e2:ca:db:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891 Validity Not Before: Dec 11 13:01:45 2025 GMT Not After : Dec 12 13:01:45 2025 GMT Subject: CN=f84f42496cdc7b81a26115b2f6e5411f292b965e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c5:ce:41:af:93:3a:df:15:e0:6c:11:aa:6d: f8:62:74:17:b9:56:6b:03:ee:c5:35:6f:ea:36:b8: 8f:36:ef:4d:b7:85:1a:c1:4a:0f:43:fc:9e:8e:0f: eb:24:47:32:67:d0:95:40:8b:d9:b7:ae:91:66:10: 9f:4e:c0:04:5a:b0:46:a4:2d:41:27:e6:82:0e:02: 69:69:b4:94:2f:ff:4f:65:e6:6d:46:ae:b7:fb:49: 99:9e:91:97:dc:78:5c:8f:65:ac:1e:37:8e:91:f1: 65:ec:29:5a:af:74:41:ed:c9:ae:d3:8e:4f:c6:88: d3:42:76:2d:47:4f:52:f3:0d:b8:2e:52:31:85:ae: 9f:b2:d6:37:22:49:ae:fa:38:a5:6d:3b:0f:89:67: de:48:5d:ef:cc:c7:c6:36:21:52:84:21:da:05:01: e2:af:de:1a:6d:17:7c:e6:d2:c2:ae:e7:e7:27:d1: 43:b6:b3:7b:6c:ee:5f:f4:7d:97:b8:ee:0b:bd:53: fb:df:0e:d5:c8:f8:ac:a0:7a:f2:99:37:81:da:23: bb:3d:d0:52:33:44:17:a9:49:4d:e8:64:59:03:e7: b0:06:0d:20:0d:71:b1:01:03:9d:a1:65:e9:f9:91: 27:aa:70:53:d3:cd:de:34:d3:16:b7:0c:c7:e7:5e: 4d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4F:42:49:6C:DC:7B:81:A2:61:15:B2:F6:E5:41:1F:29:2B:96:5E X509v3 Authority Key Identifier: keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:d3:c2:33:d3:96:10:27:ff:01:1b:34:38:3e:b9:fa:f4:6b: 28:3e:09:16:84:f2:76:a7:c9:f1:c4:74:0a:1d:47:64:8e:75: 2e:c6:d9:21:6a:c8:c2:42:0c:72:9d:43:96:29:17:62:f7:d1: 85:4c:2c:88:03:73:cc:a1:3c:02:a9:af:ba:89:6c:d1:11:d5: 0b:89:17:3e:84:8f:d9:fc:92:bb:90:d2:8e:b4:b0:ce:da:b1: d6:17:c9:81:a0:05:1a:4f:1f:22:82:9c:29:3a:ff:57:6f:c2: 82:b8:f7:c8:7d:d5:03:92:d7:e7:b5:55:e2:36:ee:03:81:0f: 9c:89:20:01:d4:b5:7a:85:1c:79:7b:1f:c3:c9:8b:ea:7c:5c: c8:09:0b:95:54:30:af:e4:c8:d4:32:f9:93:f6:0f:2a:4a:da: 07:22:3a:79:07:33:78:e0:84:f9:08:26:12:57:49:10:3e:6f: 19:1d:68:dd:92:e7:bc:0a:d0:88:c7:ee:be:17:87:8b:c8:47: 8a:64:5f:08:42:b9:a2:6b:2e:65:04:be:1e:31:30:7b:06:f9: 54:45:97:68:93:e9:49:d5:ea:f8:2a:d6:6d:68:ec:a3:d4:00: 39:7c:f3:67:b0:7f:30:82:8c:93:03:73:4b:64:dc:a7:dd:e6: b7:d6:69:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgNRq4PiwOiRok1HiytsqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYWQwMzk3NDg3Nzk5ZTIxMThmZjRjYmNmOGYxNTk3NDdm MzU4OTEwHhcNMjUxMjExMTMwMTQ1WhcNMjUxMjEyMTMwMTQ1WjAzMTEwLwYDVQQD EyhmODRmNDI0OTZjZGM3YjgxYTI2MTE1YjJmNmU1NDExZjI5MmI5NjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8XOQa+TOt8V4GwRqm34YnQXuVZr A+7FNW/qNriPNu9Nt4UawUoPQ/yejg/rJEcyZ9CVQIvZt66RZhCfTsAEWrBGpC1B J+aCDgJpabSUL/9PZeZtRq63+0mZnpGX3Hhcj2WsHjeOkfFl7Clar3RB7cmu045P xojTQnYtR09S8w24LlIxha6fstY3Ikmu+jilbTsPiWfeSF3vzMfGNiFShCHaBQHi r94abRd85tLCrufnJ9FDtrN7bO5f9H2XuO4LvVP73w7VyPisoHrymTeB2iO7PdBS M0QXqUlN6GRZA+ewBg0gDXGxAQOdoWXp+ZEnqnBT083eNNMWtwzH515NuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhPQkls3HuBomEVsvblQR8pK5ZeMB8GA1UdIwQY MBaAFEytA5dId5niEY/0y8+PFZdH81iRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEswRGwwaDNtZUlSal9UTHo0OFZsMGZ6V0pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lYTAxOTYtYWI3OS00MmNmLWFiMmIt ZmM0YjAzNzEwYWUwLzEvVEswRGwwaDNtZUlSal9UTHo0OFZsMGZ6V0pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lYTAxOTYtYWI3OS00MmNmLWFiMmItZmM0YjAzNzEwYWUw LzEvVEswRGwwaDNtZUlSal9UTHo0OFZsMGZ6V0pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedPCM9OW ECf/ARs0OD65+vRrKD4JFoTydqfJ8cR0Ch1HZI51LsbZIWrIwkIMcp1DlikXYvfR hUwsiANzzKE8Aqmvuols0RHVC4kXPoSP2fySu5DSjrSwztqx1hfJgaAFGk8fIoKc KTr/V2/Cgrj3yH3VA5LX57VV4jbuA4EPnIkgAdS1eoUceXsfw8mL6nxcyAkLlVQw r+TI1DL5k/YPKkraByI6eQczeOCE+QgmEldJED5vGR1o3ZLnvArQiMfuvheHi8hH imRfCEK5omsuZQS+HjEwewb5VEWXaJPpSdXq+CrWbWjso9QAOXzzZ7B/MIKMkwNz S2Tcp93mt9Zp6Q== -----END CERTIFICATE-----Generated at Thu Dec 11 23:53:54 2025 by rpki-client