This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json) Hash identifier: jc0iXXMvw4VIQpS2gpmY07yfjfHvQ1Xe9H3DBW4EpY4= Subject key identifier: DC:28:EA:DE:C8:5D:D1:7B:42:69:63:1A:4D:EF:A4:D9:F1:4C:0F:97 Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8 Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8 Certificate serial: 019B1FF4977E3376190E2B9B41DBC106D829 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 03:01:21 +0000 Manifest this update: Mon 15 Dec 2025 03:01:21 +0000 Manifest next update: Tue 16 Dec 2025 03:01:21 +0000 Files and hashes: 1: 3NL0_43JO4ViZMUt6FOGd4wRJes.roa (hash: iMUE0vTHXLYCmLZqj0qdPBpz5FgK9qmOUf7yFoe48OI=) 2: 4pgipsDtjzVZOnA4qzWqk83-xSA.roa (hash: nd8vlth0pBWJ/Is/avNVqT3xb/Gc3yDSmhppSZMRqxM=) 3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: ZY6Ip/x3yHpfcyQse+enoeqolRONXUtiUMWWqqv4kz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f4:97:7e:33:76:19:0e:2b:9b:41:db:c1:06:d8:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8 Validity Not Before: Dec 15 03:01:21 2025 GMT Not After : Dec 16 03:01:21 2025 GMT Subject: CN=dc28eadec85dd17b4269631a4defa4d9f14c0f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f3:64:8b:f2:9c:bb:56:98:a4:fb:b4:e6:4d: 5a:96:42:b0:47:8f:3b:d0:4c:02:ce:6a:c3:73:f2: 2a:10:a9:a3:4b:32:07:ee:cf:d4:d7:62:5f:70:c5: 31:5e:2d:19:67:f6:37:7d:4a:72:6f:df:89:cf:77: f4:a7:2e:82:cc:a6:2f:65:02:82:c9:6e:e2:03:48: 62:fc:48:b7:cc:8c:a5:8f:26:e7:31:5a:8a:3d:4a: eb:c3:72:4d:fa:b7:58:71:da:1e:79:73:18:0e:27: c1:d4:a7:77:b8:b4:3e:79:8a:40:9a:fc:39:c1:3b: aa:a2:2c:bd:c2:e7:84:b2:14:19:a0:54:b2:ee:26: 50:9c:38:2f:d8:d2:af:d8:2e:86:ca:18:b3:18:f5: e7:45:cc:7b:7e:9f:ee:fc:e5:93:e1:a6:ab:e0:c0: 45:f8:42:67:ff:0b:64:78:b0:b2:f3:fd:92:89:95: 8b:00:bd:cc:5b:6d:d7:9e:45:75:2e:26:8e:8a:80: 36:a1:a8:54:4f:72:5d:20:ac:24:c0:08:8a:fb:91: 97:90:13:c2:c6:52:73:6e:c4:f2:97:20:e8:0c:64: 0f:6f:e1:c1:29:ed:03:89:e9:0b:70:7e:bf:c4:a0: f1:f6:fa:6a:ba:26:e1:fe:6f:c1:a4:60:07:4d:18: ae:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:28:EA:DE:C8:5D:D1:7B:42:69:63:1A:4D:EF:A4:D9:F1:4C:0F:97 X509v3 Authority Key Identifier: keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c2:09:33:60:a3:d6:fc:17:5c:1f:79:8a:95:31:86:c1:35: f3:65:9f:4c:3f:b6:c7:34:1e:dc:ee:99:c6:bd:4e:fa:36:01: 54:a6:92:1d:ff:8e:63:da:2e:dc:1f:59:50:2d:fc:c0:ec:7b: 51:d4:ed:61:08:4e:9e:07:ff:ba:11:a8:6e:45:0b:c9:73:72: 60:f9:63:b6:d1:06:60:ab:24:3f:85:af:31:2c:77:b5:a4:72: e7:46:5d:74:f3:5b:d5:7a:6c:fc:2b:9a:8e:e8:6c:03:ce:1c: 4e:89:b0:07:b5:4c:55:71:23:21:08:75:fa:9f:52:bd:cf:75: ae:6f:9f:e3:fa:a5:44:af:08:b2:8d:b3:ac:01:62:6b:19:84: 0e:fa:0f:8b:f5:f0:8f:1e:3f:72:f8:c8:52:11:24:db:a0:d1: 3d:0d:3a:2f:57:8a:ef:c5:5b:65:b3:d8:3b:66:05:64:6f:fe: e2:d9:82:ab:51:67:b3:10:e9:e2:7a:d0:d6:11:b6:10:f7:3f: f6:4f:36:40:c2:62:ed:d3:42:37:2a:db:4d:d3:e9:de:30:b4: 80:37:cd:d7:d0:42:8f:81:2a:b4:14:0f:b4:60:eb:0b:7a:69: 2c:3f:1c:88:16:9d:cd:81:0f:e1:74:b4:4e:98:15:7c:3d:95: 67:6e:6b:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9Jd+M3YZDiubQdvBBtgpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMGYzOWUyY2FhZThlMmNmMTRiY2M0MWIyM2YzYzg2ZTFh NzIwZjgwHhcNMjUxMjE1MDMwMTIxWhcNMjUxMjE2MDMwMTIxWjAzMTEwLwYDVQQD EyhkYzI4ZWFkZWM4NWRkMTdiNDI2OTYzMWE0ZGVmYTRkOWYxNGMwZjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvNki/Kcu1aYpPu05k1alkKwR487 0EwCzmrDc/IqEKmjSzIH7s/U12JfcMUxXi0ZZ/Y3fUpyb9+Jz3f0py6CzKYvZQKC yW7iA0hi/Ei3zIyljybnMVqKPUrrw3JN+rdYcdoeeXMYDifB1Kd3uLQ+eYpAmvw5 wTuqoiy9wueEshQZoFSy7iZQnDgv2NKv2C6GyhizGPXnRcx7fp/u/OWT4aar4MBF +EJn/wtkeLCy8/2SiZWLAL3MW23XnkV1LiaOioA2oahUT3JdIKwkwAiK+5GXkBPC xlJzbsTylyDoDGQPb+HBKe0DiekLcH6/xKDx9vpquibh/m/BpGAHTRiuiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwo6t7IXdF7QmljGk3vpNnxTA+XMB8GA1UdIwQY MBaAFE4POeLKro4s8UvMQbI/PIbhpyD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNWUzY2MtYzFjZC00ZDY4LWJlYzMt MWIwOGY3ZjUwMTVkLzEvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kNWUzY2MtYzFjZC00ZDY4LWJlYzMtMWIwOGY3ZjUwMTVk LzEvVGc4NTRzcXVqaXp4Uzh4QnNqODhodUduSVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMIJM2Cj 1vwXXB95ipUxhsE182WfTD+2xzQe3O6Zxr1O+jYBVKaSHf+OY9ou3B9ZUC38wOx7 UdTtYQhOngf/uhGobkULyXNyYPljttEGYKskP4WvMSx3taRy50ZddPNb1Xps/Cua juhsA84cTomwB7VMVXEjIQh1+p9Svc91rm+f4/qlRK8Iso2zrAFiaxmEDvoPi/Xw jx4/cvjIUhEk26DRPQ06L1eK78VbZbPYO2YFZG/+4tmCq1FnsxDp4nrQ1hG2EPc/ 9k82QMJi7dNCNyrbTdPp3jC0gDfN19BCj4EqtBQPtGDrC3ppLD8ciBadzYEP4XS0 TpgVfD2VZ25row== -----END CERTIFICATE-----Generated at Mon Dec 15 12:00:38 2025 by rpki-client