This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft File: TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft (raw, json) Hash identifier: 1p5vtIP5tu2u4EymnY/3e6i5mPMePrnfLDJcMs/bn/o= Subject key identifier: C2:A3:52:82:56:94:24:3A:31:0C:45:7F:E1:98:0F:4C:BC:F3:33:3B Authority key identifier: 4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83 Certificate issuer: /CN=4e7545eee66daa39443ff9f88f522447f7863783 Certificate serial: 019B5B65802456C08E27394CA7CAC37FD230 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft Manifest number: 12EF Signing time: Fri 26 Dec 2025 16:02:17 +0000 Manifest this update: Fri 26 Dec 2025 16:02:17 +0000 Manifest next update: Sat 27 Dec 2025 16:02:17 +0000 Files and hashes: 1: NRxH6LDQFnqwlvTIsGf-f3zdgZM.roa (hash: 45q8sJ0aVkz5DnC4TEh7gH+UDuL3EgyXgzbbWcDZotI=) 2: TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl (hash: nXARR7vRXeZHM676PneT+pAzTFEysJyb2qUDxuvBonE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:65:80:24:56:c0:8e:27:39:4c:a7:ca:c3:7f:d2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e7545eee66daa39443ff9f88f522447f7863783 Validity Not Before: Dec 26 16:02:17 2025 GMT Not After : Dec 27 16:02:17 2025 GMT Subject: CN=c2a352825694243a310c457fe1980f4cbcf3333b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1e:cd:fe:dd:7e:a5:19:7c:ea:30:59:ed:6f: f3:c7:56:30:c1:46:da:a5:33:57:7c:17:2a:76:46: 5e:b8:d3:93:cd:29:c8:d4:4e:27:bd:dd:7b:1e:91: 50:3b:3a:51:8f:97:b2:b8:0a:59:62:2d:89:35:9e: 72:97:1e:81:2d:4b:3f:8d:92:e8:fb:9e:e9:f2:9d: 36:14:f6:e3:7c:e4:73:89:cf:f6:bb:38:73:61:9b: d0:19:26:26:83:a0:91:a8:23:19:8e:8a:60:b8:18: d6:c7:1e:19:48:58:cd:02:4b:33:88:26:fe:5d:3d: 21:2b:d6:c8:e0:fe:6e:a2:04:28:6a:e9:2b:a0:08: 7d:4d:6f:c6:dd:d1:e0:db:93:2a:bc:a7:de:5c:77: 42:a4:02:2f:48:cd:57:01:6e:2b:a5:af:b0:33:55: d9:8f:0c:9c:ce:a5:87:48:f2:4e:87:cd:51:9c:3e: cd:e6:4c:7c:f0:8f:92:4a:56:99:9f:a1:51:5d:64: 1e:19:6d:1f:4f:2b:53:7f:9e:b6:ee:10:5d:06:87: 3e:1b:58:35:62:7b:8d:42:0c:d1:03:13:6c:dd:6a: 84:81:5f:3b:cd:54:c9:63:19:54:97:5f:0d:22:45: 95:f6:0c:06:cc:ba:b0:d7:35:80:7e:63:a9:fa:34: 92:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A3:52:82:56:94:24:3A:31:0C:45:7F:E1:98:0F:4C:BC:F3:33:3B X509v3 Authority Key Identifier: keyid:4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:37:75:06:15:57:5f:a7:2d:31:90:06:9e:a6:27:3c:1b:e5: b6:2f:16:33:89:b6:29:be:a4:25:04:2c:f3:f3:94:36:9f:16: 68:c7:cc:9f:af:61:a6:0a:0e:2b:5e:54:45:96:06:40:6a:ab: 0c:56:21:a4:0d:ae:b8:2a:29:e8:6c:a6:16:4e:b3:1e:7f:5c: e0:a6:03:6a:3a:a7:d8:df:f4:77:be:f6:29:bb:9f:45:e7:2d: 5c:73:f1:11:25:8b:f8:0f:61:1e:3f:43:da:c4:16:74:32:20: bf:a5:3f:ba:6b:1f:1b:2b:7c:af:60:5b:4c:ae:bf:24:cb:8e: 38:be:87:f6:f1:37:15:38:97:a8:ad:06:5b:cd:d9:cd:d8:41: 8e:ff:5c:c5:a7:9f:6e:6f:2a:51:32:18:8b:61:97:b2:ce:0e: 8d:bd:2a:0b:f8:e4:b7:73:42:05:b9:c2:b5:d2:6c:1e:3e:a2: 26:e9:92:6e:0c:63:2f:c1:6c:cf:d6:ec:f8:d9:b0:db:07:07: 07:4a:36:3a:5e:06:83:86:09:80:bb:7b:0d:51:0b:19:8d:56: dc:98:f6:1c:be:73:72:a3:bf:87:93:a3:e4:2e:2f:1e:0d:68: e7:56:5d:a3:63:f6:c0:ed:df:db:ae:57:e4:8e:45:b5:69:8f: e4:af:1b:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZYAkVsCOJzlMp8rDf9IwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNzU0NWVlZTY2ZGFhMzk0NDNmZjlmODhmNTIyNDQ3Zjc4 NjM3ODMwHhcNMjUxMjI2MTYwMjE3WhcNMjUxMjI3MTYwMjE3WjAzMTEwLwYDVQQD EyhjMmEzNTI4MjU2OTQyNDNhMzEwYzQ1N2ZlMTk4MGY0Y2JjZjMzMzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R7N/t1+pRl86jBZ7W/zx1YwwUba pTNXfBcqdkZeuNOTzSnI1E4nvd17HpFQOzpRj5eyuApZYi2JNZ5ylx6BLUs/jZLo +57p8p02FPbjfORzic/2uzhzYZvQGSYmg6CRqCMZjopguBjWxx4ZSFjNAksziCb+ XT0hK9bI4P5uogQoaukroAh9TW/G3dHg25MqvKfeXHdCpAIvSM1XAW4rpa+wM1XZ jwyczqWHSPJOh81RnD7N5kx88I+SSlaZn6FRXWQeGW0fTytTf5627hBdBoc+G1g1 YnuNQgzRAxNs3WqEgV87zVTJYxlUl18NIkWV9gwGzLqw1zWAfmOp+jSSGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKjUoJWlCQ6MQxFf+GYD0y88zM7MB8GA1UdIwQY MBaAFE51Re7mbao5RD/5+I9SJEf3hjeDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG5WRjd1WnRxamxFUF9uNGoxSWtSX2VHTjRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9hNTM2NDQtOWRhNi00ZDI5LWI5YjYt ZTc4Y2ZhNzllZmYxLzEvVG5WRjd1WnRxamxFUF9uNGoxSWtSX2VHTjRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9hNTM2NDQtOWRhNi00ZDI5LWI5YjYtZTc4Y2ZhNzllZmYx LzEvVG5WRjd1WnRxamxFUF9uNGoxSWtSX2VHTjRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjd1BhVX X6ctMZAGnqYnPBvlti8WM4m2Kb6kJQQs8/OUNp8WaMfMn69hpgoOK15URZYGQGqr DFYhpA2uuCop6GymFk6zHn9c4KYDajqn2N/0d772KbufRectXHPxESWL+A9hHj9D 2sQWdDIgv6U/umsfGyt8r2BbTK6/JMuOOL6H9vE3FTiXqK0GW83ZzdhBjv9cxaef bm8qUTIYi2GXss4Ojb0qC/jkt3NCBbnCtdJsHj6iJumSbgxjL8Fsz9bs+Nmw2wcH B0o2Ol4Gg4YJgLt7DVELGY1W3Jj2HL5zcqO/h5Oj5C4vHg1o51Zdo2P2wO3f265X 5I5FtWmP5K8buA== -----END CERTIFICATE-----Generated at Fri Dec 26 17:40:55 2025 by rpki-client