This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft File: TS-f1cihTNyfMcRYXNYNtXz_tMI.mft (raw, json) Hash identifier: 5fWflsnXHcWW65Jpup5NG3y9vU0fknrt+a6yWGFzuxo= Subject key identifier: 98:48:02:65:A5:0C:53:39:87:EB:D6:0D:D8:7A:3E:5D:F4:3C:CC:2B Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2 Certificate issuer: /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2 Certificate serial: 019B3C7F7E75464D7EAB7164A8DFE7C24215 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft Manifest number: 0E4B Signing time: Sat 20 Dec 2025 16:02:26 +0000 Manifest this update: Sat 20 Dec 2025 16:02:26 +0000 Manifest next update: Sun 21 Dec 2025 16:02:26 +0000 Files and hashes: 1: 1-QMPtoomm6W5CX-SS0fyQ5AS734.roa (hash: hcd0LKLxrMub9hVDF7pi719s+IDTrzb/8hX4yl7gw2w=) 2: 8-JB4jMg3_rMGJjuIMVCBLnxwQ8.roa (hash: buBER4odhou/4TCkZQ3UeIhbfaoQJUXmTZ3cmJ4K9k8=) 3: TS-f1cihTNyfMcRYXNYNtXz_tMI.crl (hash: sLwxon5QNDAjvbSu/4LwFoaaqGE6N6zEktlxo1TgspI=) 4: pSmbhIOz_v9DcZ6BjkBTv88tPZ4.roa (hash: 1vOAxGM5C9HFgFv3tm1lOiYWc4bRDbFQtmaO7PV8kkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:7e:75:46:4d:7e:ab:71:64:a8:df:e7:c2:42:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2 Validity Not Before: Dec 20 16:02:26 2025 GMT Not After : Dec 21 16:02:26 2025 GMT Subject: CN=98480265a50c533987ebd60dd87a3e5df43ccc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2d:e0:4b:be:1e:6f:50:04:79:5e:56:09:44: 44:13:7d:6a:93:a3:85:69:f5:66:e4:00:25:c1:c6: 7e:66:0b:a5:be:6f:ad:97:0e:d6:02:93:3c:ed:a2: 1e:e1:4a:a0:5d:9a:c4:78:03:d6:d8:f4:41:fd:d8: 3c:25:c7:b0:1f:af:9f:ba:a4:33:ed:8b:ff:94:da: 99:81:d8:62:be:06:27:8c:bd:b4:00:90:8c:fb:9b: 74:fa:23:ee:18:28:73:8e:00:4b:02:fc:03:c6:5b: c2:78:81:b9:fc:0d:41:0b:d0:c9:2e:df:cd:f9:4c: 0c:67:e2:27:9b:94:f6:42:8b:f5:a6:8e:27:bb:cb: cc:f4:a3:5b:09:d2:b2:b0:43:76:af:e5:4f:e9:17: ce:e8:97:e2:d1:70:9d:3b:08:b7:42:01:4b:d6:98: d0:88:bb:ea:1e:98:91:4a:88:38:3c:4e:7b:6f:6a: 43:8c:5f:87:3d:03:25:10:4e:f7:2f:9d:25:22:5d: 68:33:0c:cd:0f:ae:24:6f:06:e3:94:fd:be:c4:11: b0:9a:60:af:52:f5:0b:27:af:14:40:9f:1e:9f:2d: 8b:cf:46:45:15:6a:bc:e5:47:78:05:b3:28:63:5d: e1:ff:0f:66:eb:98:e5:93:41:5a:46:63:7c:20:84: ce:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:48:02:65:A5:0C:53:39:87:EB:D6:0D:D8:7A:3E:5D:F4:3C:CC:2B X509v3 Authority Key Identifier: keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:c7:22:c8:28:64:9b:60:69:dd:57:ed:b1:e3:a8:a1:9c:5c: 2f:88:de:82:a0:a7:ee:44:a0:20:cc:a0:38:86:ae:7f:c3:34: 8c:6f:1d:91:c8:31:05:56:bb:1a:d8:71:51:d9:05:8c:0b:d5: af:f3:51:67:81:f0:08:7c:13:fc:41:ac:95:20:80:f9:3b:5a: c7:34:68:8a:9c:72:c2:6f:8c:d3:6c:62:1c:65:44:63:d6:d1: cd:8f:54:69:40:b9:bc:22:84:ad:39:ef:6b:2e:3b:f5:9f:4b: c6:44:0a:e0:7b:7a:4e:0d:6f:38:91:22:ca:79:65:aa:f0:c4: 37:59:d8:95:e7:b2:d7:55:dd:48:9b:69:a1:20:3e:4f:09:a8: 14:55:9f:c1:07:e6:6e:25:7b:bd:df:e6:57:fc:61:9a:63:11: 9e:64:b4:10:9d:1c:67:bf:80:55:54:46:52:d0:4e:1d:78:df: 8a:ef:aa:cf:88:37:de:9c:19:e6:b8:43:c6:42:a2:24:32:1f: bb:34:dd:ee:79:7b:77:8f:11:cf:4a:97:3b:a0:0d:f8:4d:ac: d0:d1:85:2c:ae:48:61:4e:0a:08:27:20:ed:13:76:c6:82:79: 33:40:06:41:be:a5:61:a7:06:20:27:12:ed:8c:f3:e9:49:e8: 17:fd:97:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f351Rk1+q3FkqN/nwkIVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMmY5ZmQ1YzhhMTRjZGM5ZjMxYzQ1ODVjZDYwZGI1N2Nm ZmI0YzIwHhcNMjUxMjIwMTYwMjI2WhcNMjUxMjIxMTYwMjI2WjAzMTEwLwYDVQQD Eyg5ODQ4MDI2NWE1MGM1MzM5ODdlYmQ2MGRkODdhM2U1ZGY0M2NjYzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy3gS74eb1AEeV5WCUREE31qk6OF afVm5AAlwcZ+Zgulvm+tlw7WApM87aIe4UqgXZrEeAPW2PRB/dg8JcewH6+fuqQz 7Yv/lNqZgdhivgYnjL20AJCM+5t0+iPuGChzjgBLAvwDxlvCeIG5/A1BC9DJLt/N +UwMZ+Inm5T2Qov1po4nu8vM9KNbCdKysEN2r+VP6RfO6Jfi0XCdOwi3QgFL1pjQ iLvqHpiRSog4PE57b2pDjF+HPQMlEE73L50lIl1oMwzND64kbwbjlP2+xBGwmmCv UvULJ68UQJ8eny2Lz0ZFFWq85Ud4BbMoY13h/w9m65jlk0FaRmN8IITOCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhIAmWlDFM5h+vWDdh6Pl30PMwrMB8GA1UdIwQY MBaAFE0vn9XIoUzcnzHEWFzWDbV8/7TCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kYTRlNDYtMmE5My00NGE0LWI4ZTMt YzIxMzNkZDgxYjU2LzEvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9kYTRlNDYtMmE5My00NGE0LWI4ZTMtYzIxMzNkZDgxYjU2 LzEvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssciyChk m2Bp3VftseOooZxcL4jegqCn7kSgIMygOIauf8M0jG8dkcgxBVa7GthxUdkFjAvV r/NRZ4HwCHwT/EGslSCA+TtaxzRoipxywm+M02xiHGVEY9bRzY9UaUC5vCKErTnv ay479Z9LxkQK4Ht6Tg1vOJEiynllqvDEN1nYleey11XdSJtpoSA+TwmoFFWfwQfm biV7vd/mV/xhmmMRnmS0EJ0cZ7+AVVRGUtBOHXjfiu+qz4g33pwZ5rhDxkKiJDIf uzTd7nl7d48Rz0qXO6AN+E2s0NGFLK5IYU4KCCcg7RN2xoJ5M0AGQb6lYacGICcS 7Yzz6UnoF/2X8A== -----END CERTIFICATE-----Generated at Sat Dec 20 23:38:32 2025 by rpki-client