This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json) Hash identifier: je5/Eq3HD65urI7MWBiqhya41xSmS/VyxJpckOnmuGc= Subject key identifier: A2:1A:3B:91:9C:3C:A0:34:EA:F4:E7:85:B3:05:12:B5:FB:90:E8:9A Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46 Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546 Certificate serial: 019AAD275EE2BCAAEDF343155339501D40FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft Manifest number: 173E Signing time: Sat 22 Nov 2025 20:00:29 +0000 Manifest this update: Sat 22 Nov 2025 20:00:29 +0000 Manifest next update: Sun 23 Nov 2025 20:00:29 +0000 Files and hashes: 1: dMyCW0_TBkO1nYNBL_n11IKNaBI.roa (hash: WTKaBFp1QPSs1ROafjR4WJfZR1PRtcVHfjnPURoJWEQ=) 2: iWujOO5h_XVMHY2nSFxBko0o46E.roa (hash: hfZ0O6pRdbOdpr8hVRCYtXgEcI0jSP4lHjfs8kAt2hk=) 3: qrrQR7WuIleyYS2sO7I0VvjROUo.roa (hash: 4JE74Aq/xmpPqZIRbZrMja/xvjU3RSpM11pAC7vf4sE=) 4: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: aiv44IJVMA9NRiTrUIsf90IQttRSEQ7txxsE3yhEj9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ad:27:5e:e2:bc:aa:ed:f3:43:15:53:39:50:1d:40:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546 Validity Not Before: Nov 22 20:00:29 2025 GMT Not After : Nov 23 20:00:29 2025 GMT Subject: CN=a21a3b919c3ca034eaf4e785b30512b5fb90e89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:31:d2:9a:21:24:4e:9e:18:d9:5e:61:15:3a: 22:02:e6:3b:57:3b:f2:a2:b4:ee:22:8a:90:f2:00: 0d:4b:ed:60:10:7e:9c:0c:c6:50:22:30:d5:1b:a9: 28:91:ff:d5:ff:5a:c6:41:be:d9:f5:de:aa:6f:d5: c3:75:e8:79:c2:43:a9:23:6b:41:01:02:27:78:63: 58:ac:df:20:c4:c1:6f:26:c4:80:86:3c:22:ae:82: bd:08:06:2c:a3:ea:91:63:92:aa:52:a4:de:c1:af: 46:43:e6:8c:c5:1e:7c:f9:4c:b5:2e:5b:59:bf:5c: f1:9a:e5:23:b3:33:fe:ee:73:5f:f2:eb:65:0b:51: 77:21:37:47:c2:aa:15:97:7d:d4:32:c3:1f:e9:3c: bc:47:e1:b6:b5:76:ee:0e:a8:80:c6:cf:30:78:fb: 3b:5b:d7:94:b5:55:90:92:13:dd:76:5d:52:f4:a7: 39:27:7e:a8:64:9d:6e:6f:98:44:ae:be:4d:fa:ac: 0e:1d:07:28:69:a6:bc:b0:66:aa:e6:1a:f6:91:72: 72:7b:62:ef:8f:f1:fb:5b:d8:00:a2:66:30:89:3a: 6d:d4:6a:e1:82:1c:2a:ca:bb:25:dd:d5:1e:14:6a: 2d:f8:b5:8e:c6:67:28:59:e4:4b:2f:e3:32:6a:ab: 19:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1A:3B:91:9C:3C:A0:34:EA:F4:E7:85:B3:05:12:B5:FB:90:E8:9A X509v3 Authority Key Identifier: keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e3:e8:37:5b:c4:cb:e7:2c:71:b1:2f:86:2e:78:39:b3:01: 27:a0:89:ad:f7:55:79:4e:b0:a6:68:d2:40:51:07:26:0f:17: de:59:2d:d9:ae:fc:f7:b7:51:88:ba:e6:18:63:0f:09:7c:f6: 45:65:79:65:6e:a7:43:51:4e:dc:af:ff:45:fa:b2:06:e3:1b: a4:89:aa:55:84:f3:e1:1a:0d:5d:59:66:e1:c9:16:61:64:a3: e6:a2:73:f4:96:60:ac:01:9f:e7:18:29:78:de:89:c0:77:96: 32:06:e9:56:cd:08:7c:ff:0f:0f:b4:6b:4f:d2:38:84:37:96: 90:7b:e4:55:3b:b7:f8:4a:14:34:8c:c1:7a:b1:94:e8:b4:1e: 67:4c:40:70:46:d6:92:ea:e9:d2:b7:3c:3c:00:5b:c4:61:81: e8:2a:3f:42:58:e8:69:05:63:ea:36:7c:f1:73:66:62:5d:61: ba:ca:7f:89:8a:3d:46:16:86:50:d9:d3:62:37:b9:e8:61:16: dc:b2:8a:4e:18:75:da:ee:9c:92:c9:60:71:10:a0:24:0d:4d: 9f:9c:10:69:ea:87:f7:0c:21:82:12:c3:85:5c:d0:d2:17:c4: 7f:6c:ab:1a:e7:66:e8:4b:fc:ac:a0:61:cc:94:21:2a:a3:ef: f4:ad:e6:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqtJ17ivKrt80MVUzlQHUD9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZjE5ZWIwZGQ0OGUxYjI0OTI0OTA4YmI1YjY4NDhjYzE2 Nzg1NDYwHhcNMjUxMTIyMjAwMDI5WhcNMjUxMTIzMjAwMDI5WjAzMTEwLwYDVQQD EyhhMjFhM2I5MTljM2NhMDM0ZWFmNGU3ODViMzA1MTJiNWZiOTBlODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzHSmiEkTp4Y2V5hFToiAuY7Vzvy orTuIoqQ8gANS+1gEH6cDMZQIjDVG6kokf/V/1rGQb7Z9d6qb9XDdeh5wkOpI2tB AQIneGNYrN8gxMFvJsSAhjwiroK9CAYso+qRY5KqUqTewa9GQ+aMxR58+Uy1LltZ v1zxmuUjszP+7nNf8utlC1F3ITdHwqoVl33UMsMf6Ty8R+G2tXbuDqiAxs8wePs7 W9eUtVWQkhPddl1S9Kc5J36oZJ1ub5hErr5N+qwOHQcoaaa8sGaq5hr2kXJye2Lv j/H7W9gAomYwiTpt1Grhghwqyrsl3dUeFGot+LWOxmcoWeRLL+MyaqsZ1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIaO5GcPKA06vTnhbMFErX7kOiaMB8GA1UdIwQY MBaAFLXxnrDdSOGySSSQi7W2hIzBZ4VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jZTAwMWItYTRkOC00ZjBlLTgzMWQt MzVjNjZkN2M1MjYwLzEvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9jZTAwMWItYTRkOC00ZjBlLTgzMWQtMzVjNjZkN2M1MjYw LzEvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiuPoN1vE y+cscbEvhi54ObMBJ6CJrfdVeU6wpmjSQFEHJg8X3lkt2a7897dRiLrmGGMPCXz2 RWV5ZW6nQ1FO3K//RfqyBuMbpImqVYTz4RoNXVlm4ckWYWSj5qJz9JZgrAGf5xgp eN6JwHeWMgbpVs0IfP8PD7RrT9I4hDeWkHvkVTu3+EoUNIzBerGU6LQeZ0xAcEbW kurp0rc8PABbxGGB6Co/QljoaQVj6jZ88XNmYl1husp/iYo9RhaGUNnTYje56GEW 3LKKThh12u6ckslgcRCgJA1Nn5wQaeqH9wwhghLDhVzQ0hfEf2yrGudm6Ev8rKBh zJQhKqPv9K3mbQ== -----END CERTIFICATE-----Generated at Sat Nov 22 21:43:54 2025 by rpki-client