This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json) Hash identifier: qMT3wcMpbtbnleAAULbgBckLULYuVg4opjbpc5+4wZk= Subject key identifier: EC:FC:B4:1F:1A:0B:4D:37:DC:73:4B:E9:2D:93:0D:34:1B:1A:7B:E1 Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e Certificate serial: 019B41DBCE927AFF8F6775428247B6958FBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft Manifest number: 0AE5 Signing time: Sun 21 Dec 2025 17:01:22 +0000 Manifest this update: Sun 21 Dec 2025 17:01:22 +0000 Manifest next update: Mon 22 Dec 2025 17:01:22 +0000 Files and hashes: 1: ZFlE4CwGV5oXv28o6nsvolZlI_Y.roa (hash: S5Q4DAjjTKxkiafJ6he6yLpO30RXNUCaXjGnLWKadCQ=) 2: a3EraYk05VPEffLc6KjCZtg0uOM.roa (hash: MkXr1kaZ6Jwr9qIlXjAkJ2Xml1hQyvkyv9rct4pH8co=) 3: fJY20OuQ1IuJYeyVIHU1EBJ0rFM.roa (hash: +X81MlM0oUdVo08v6gDJj1EWTtIWJ/ia51w5FCk6+3U=) 4: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: yqTVHyrvOWtuExyZwAZqdsRcjT+SAFU7aSh+Vf4mEno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:ce:92:7a:ff:8f:67:75:42:82:47:b6:95:8f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e Validity Not Before: Dec 21 17:01:22 2025 GMT Not After : Dec 22 17:01:22 2025 GMT Subject: CN=ecfcb41f1a0b4d37dc734be92d930d341b1a7be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:40:61:2c:35:03:41:66:f9:82:d6:93:6a:b6: 2a:cc:7f:b5:95:d8:38:58:48:81:c9:9c:c1:9c:3a: 83:da:67:91:15:b7:5e:27:c7:91:d9:ee:ac:f7:c1: 96:d8:51:ce:c5:22:a5:d1:5e:98:35:bc:1e:32:d5: 57:ba:ca:ef:5c:90:e4:c1:e5:06:9b:64:89:54:54: 5f:ef:d9:08:6b:e1:3a:e4:5a:01:62:6d:17:24:b2: 2b:5a:a1:58:c2:d3:5c:2d:9b:4f:f9:c4:38:b3:97: 4a:76:cf:9a:bf:2d:a0:7f:d8:7f:d5:fe:8d:c7:ab: 0b:9f:d7:e1:54:16:a4:d0:bd:d3:ac:1d:f6:29:59: f4:3c:48:f4:e6:e0:30:c0:4d:85:9a:57:78:d8:ce: 99:68:28:16:c0:0c:0a:95:73:d8:ef:57:4f:34:6d: b6:94:2c:4c:ba:8f:6c:1b:df:ea:88:ea:24:2f:70: 51:cc:36:9b:63:a0:96:b9:9f:32:0c:41:0c:4f:eb: fb:50:bf:88:70:96:73:e1:be:d5:63:3b:7d:67:29: 51:45:84:6d:ac:8c:aa:6b:e8:e7:c0:d8:e6:f8:d9: c3:e7:de:59:2b:51:9d:c0:b2:85:df:92:b7:8e:44: 6b:c6:87:2c:4d:21:0c:22:97:69:84:e8:41:d4:e2: 9b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FC:B4:1F:1A:0B:4D:37:DC:73:4B:E9:2D:93:0D:34:1B:1A:7B:E1 X509v3 Authority Key Identifier: keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:67:a9:69:ab:12:e5:47:10:e4:26:7e:ec:f9:8b:61:a6:99: ea:2e:5f:74:f6:94:dc:2f:b7:bf:19:46:ea:06:39:9b:ff:ef: 37:1f:c7:ab:1f:13:0f:a3:1d:17:3e:f1:21:4e:41:3d:3f:82: 5d:49:fc:66:56:28:15:00:ac:c4:1a:18:d9:cb:31:67:d4:a7: 7d:40:84:ef:5b:dd:58:b5:7d:b1:c0:35:30:1a:89:63:81:f1: 5f:4a:96:65:1e:62:c3:c9:c9:11:a1:f5:88:b1:67:18:1e:cf: f9:1f:75:b8:5c:fb:f4:38:78:2f:a8:1d:92:08:5c:a4:cd:4a: 02:10:fb:75:e9:0d:1e:f6:90:d3:81:7a:72:53:3c:34:39:4b: e1:79:a0:ce:67:b9:dd:cb:9b:e5:8e:35:e4:11:e9:ce:73:e9: 6d:c0:67:94:69:ef:02:18:50:20:22:31:b7:c5:c9:3d:47:de: e3:3f:27:3b:7e:3f:ee:ac:34:9b:e7:95:cf:4a:6f:ce:13:f5: 4f:19:74:60:03:b8:0e:0b:9f:38:37:a0:ec:04:e3:9c:23:f8: bd:04:f8:79:5a:11:d3:f4:aa:37:4f:c5:2e:31:31:87:b8:15: 50:fe:dd:dc:03:64:11:9b:73:1d:87:7f:74:13:54:27:22:00: 69:2d:23:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB286Sev+PZ3VCgke2lY++MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YzdkODFlYzRjNDA1NWM2NzNmZjU3MWNjYWQwN2MzYTY5 OTEwNWUwHhcNMjUxMjIxMTcwMTIyWhcNMjUxMjIyMTcwMTIyWjAzMTEwLwYDVQQD EyhlY2ZjYjQxZjFhMGI0ZDM3ZGM3MzRiZTkyZDkzMGQzNDFiMWE3YmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUBhLDUDQWb5gtaTarYqzH+1ldg4 WEiByZzBnDqD2meRFbdeJ8eR2e6s98GW2FHOxSKl0V6YNbweMtVXusrvXJDkweUG m2SJVFRf79kIa+E65FoBYm0XJLIrWqFYwtNcLZtP+cQ4s5dKds+avy2gf9h/1f6N x6sLn9fhVBak0L3TrB32KVn0PEj05uAwwE2Fmld42M6ZaCgWwAwKlXPY71dPNG22 lCxMuo9sG9/qiOokL3BRzDabY6CWuZ8yDEEMT+v7UL+IcJZz4b7VYzt9ZylRRYRt rIyqa+jnwNjm+NnD595ZK1GdwLKF35K3jkRrxocsTSEMIpdphOhB1OKbxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOz8tB8aC0033HNL6S2TDTQbGnvhMB8GA1UdIwQY MBaAFLXH2B7ExAVcZz/1ccytB8OmmRBeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82NzJhMmYtYWMyYi00NjMxLWFiM2Qt YzJiYzE0NTFmMjcxLzEvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi82NzJhMmYtYWMyYi00NjMxLWFiM2QtYzJiYzE0NTFmMjcx LzEvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWepaasS 5UcQ5CZ+7PmLYaaZ6i5fdPaU3C+3vxlG6gY5m//vNx/Hqx8TD6MdFz7xIU5BPT+C XUn8ZlYoFQCsxBoY2csxZ9SnfUCE71vdWLV9scA1MBqJY4HxX0qWZR5iw8nJEaH1 iLFnGB7P+R91uFz79Dh4L6gdkghcpM1KAhD7dekNHvaQ04F6clM8NDlL4Xmgzme5 3cub5Y415BHpznPpbcBnlGnvAhhQICIxt8XJPUfe4z8nO34/7qw0m+eVz0pvzhP1 Txl0YAO4DgufODeg7ATjnCP4vQT4eVoR0/SqN0/FLjExh7gVUP7d3ANkEZtzHYd/ dBNUJyIAaS0j/A== -----END CERTIFICATE-----Generated at Mon Dec 22 02:34:51 2025 by rpki-client