This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.mft File: TU0qfS8eqI_7WgMlnLP06o0vVfs.mft (raw, json) Hash identifier: 50ULFbdJmJUkf+q5IjCd1TC7bNJnU7tjWcgZsXtlPeM= Subject key identifier: D8:73:D9:C9:6E:FE:08:F7:0A:47:5F:67:09:AB:ED:C6:77:BD:BE:CC Authority key identifier: 4D:4D:2A:7D:2F:1E:A8:8F:FB:5A:03:25:9C:B3:F4:EA:8D:2F:55:FB Certificate issuer: /CN=4d4d2a7d2f1ea88ffb5a03259cb3f4ea8d2f55fb Certificate serial: 019B33B266516AF24F4ABF9FE29B6696D3BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TU0qfS8eqI_7WgMlnLP06o0vVfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.mft Manifest number: 2E Signing time: Thu 18 Dec 2025 23:01:28 +0000 Manifest this update: Thu 18 Dec 2025 23:01:28 +0000 Manifest next update: Fri 19 Dec 2025 23:01:28 +0000 Files and hashes: 1: 5m1b01hL5BcjzP8FrpknmUKlQbs.roa (hash: T3XZKupiy6iYEpA63mlPw7Ubl9igvLOEfmR+hPcujQk=) 2: TU0qfS8eqI_7WgMlnLP06o0vVfs.crl (hash: zMJcNE+5LHmdw/r37scBE5Qx3/l4uov2xPP/7ppNA8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.mft rsync://rpki.ripe.net/repository/DEFAULT/TU0qfS8eqI_7WgMlnLP06o0vVfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 23:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:66:51:6a:f2:4f:4a:bf:9f:e2:9b:66:96:d3:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d4d2a7d2f1ea88ffb5a03259cb3f4ea8d2f55fb Validity Not Before: Dec 18 23:01:28 2025 GMT Not After : Dec 19 23:01:28 2025 GMT Subject: CN=d873d9c96efe08f70a475f6709abedc677bdbecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a6:64:0e:f4:b3:1c:42:76:9a:c7:9a:0e:a1: e7:93:44:9a:65:8f:ff:92:cd:5d:2d:1a:50:8a:a4: ae:2a:07:e4:4b:ec:86:4a:be:7c:7d:ce:40:49:37: c4:aa:b1:03:83:29:a9:3c:9d:ef:61:61:24:51:96: c5:b5:ee:c9:0f:52:5b:90:ee:db:ed:ae:f7:35:1a: 79:1a:cd:18:99:49:01:47:4b:a6:eb:6a:f4:0b:93: 81:c4:94:89:69:5b:de:f9:dd:b1:23:f2:2c:a6:9b: 8e:ff:53:cb:71:a1:58:e7:07:21:f0:7f:34:41:29: 85:fd:53:d2:c6:b7:c1:d6:33:a1:9a:20:3d:c7:3e: 04:a1:77:71:4b:eb:89:2d:c7:01:39:fe:76:b5:6f: 7c:39:e6:64:dc:5e:32:04:5d:8d:c9:69:91:78:1e: ef:34:fd:12:7f:ac:46:0f:d1:ae:d4:76:9a:22:3f: ca:10:89:a6:ea:36:9c:21:ed:31:ae:bf:03:46:7f: f5:5a:8b:2f:77:0e:c4:b0:2e:51:1d:96:a2:aa:ac: 3d:66:64:fc:9a:3a:80:66:42:2d:56:49:42:f0:3b: c8:5e:e8:e7:19:ff:2f:b5:0f:cf:30:fb:7e:45:33: 35:9d:9f:2f:b7:38:ea:fa:31:d0:38:a3:4f:a7:20: f6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:73:D9:C9:6E:FE:08:F7:0A:47:5F:67:09:AB:ED:C6:77:BD:BE:CC X509v3 Authority Key Identifier: keyid:4D:4D:2A:7D:2F:1E:A8:8F:FB:5A:03:25:9C:B3:F4:EA:8D:2F:55:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TU0qfS8eqI_7WgMlnLP06o0vVfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:9f:01:82:77:a3:38:a6:7a:18:f3:ba:28:df:29:0a:e8:10: fb:87:65:9c:a2:91:5a:4e:a8:b7:1a:9c:25:01:b1:7f:7c:8e: 2c:f5:d4:3b:b9:0c:0e:28:15:28:eb:db:c1:17:8e:fc:c0:66: a2:06:ca:f6:f7:f8:b3:4f:67:24:da:1f:d7:86:7a:ac:89:f1: f3:82:25:84:cd:79:f1:cd:c3:a9:e5:45:2b:94:eb:b7:d3:8b: 62:5b:a4:89:7c:70:e2:c0:58:a6:63:55:bd:a3:d9:5c:8f:12: ff:fa:7e:b6:37:6e:73:a6:d4:54:2b:72:9b:49:8e:1c:4c:34: fe:c4:d1:54:c6:8c:c8:47:01:bc:21:bd:26:4c:70:af:54:37: c2:d1:ff:d4:c3:ce:e6:ab:dd:c4:36:de:04:cc:c2:0f:25:02: 4b:ae:79:3e:fc:d2:3b:c1:24:e7:26:1e:65:f8:69:93:20:53: 26:52:48:85:34:8f:68:88:be:53:9d:50:e2:4f:74:ce:fc:81: c5:74:5c:1e:ae:53:8c:e9:20:fb:61:c4:92:ff:95:d2:d0:61: 50:20:dc:ac:f4:84:29:cc:25:f2:25:36:9c:ba:13:64:7b:d4: 46:01:c9:8b:d1:45:6d:77:18:a1:8f:0a:7b:18:00:a1:59:72: d2:e6:96:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsmZRavJPSr+f4ptmltO6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNGQyYTdkMmYxZWE4OGZmYjVhMDMyNTljYjNmNGVhOGQy ZjU1ZmIwHhcNMjUxMjE4MjMwMTI4WhcNMjUxMjE5MjMwMTI4WjAzMTEwLwYDVQQD EyhkODczZDljOTZlZmUwOGY3MGE0NzVmNjcwOWFiZWRjNjc3YmRiZWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaZkDvSzHEJ2mseaDqHnk0SaZY// ks1dLRpQiqSuKgfkS+yGSr58fc5ASTfEqrEDgympPJ3vYWEkUZbFte7JD1JbkO7b 7a73NRp5Gs0YmUkBR0um62r0C5OBxJSJaVve+d2xI/IsppuO/1PLcaFY5wch8H80 QSmF/VPSxrfB1jOhmiA9xz4EoXdxS+uJLccBOf52tW98OeZk3F4yBF2NyWmReB7v NP0Sf6xGD9Gu1HaaIj/KEImm6jacIe0xrr8DRn/1Wosvdw7EsC5RHZaiqqw9ZmT8 mjqAZkItVklC8DvIXujnGf8vtQ/PMPt+RTM1nZ8vtzjq+jHQOKNPpyD2twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhz2clu/gj3CkdfZwmr7cZ3vb7MMB8GA1UdIwQY MBaAFE1NKn0vHqiP+1oDJZyz9OqNL1X7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFUwcWZTOGVxSV83V2dNbG5MUDA2bzB2VmZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNzJjODAtNmFkNy00YjFmLTk4OWEt YTZiNTEzYzQ3Zjg1LzEvVFUwcWZTOGVxSV83V2dNbG5MUDA2bzB2VmZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lNzJjODAtNmFkNy00YjFmLTk4OWEtYTZiNTEzYzQ3Zjg1 LzEvVFUwcWZTOGVxSV83V2dNbG5MUDA2bzB2VmZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJ8Bgnej OKZ6GPO6KN8pCugQ+4dlnKKRWk6otxqcJQGxf3yOLPXUO7kMDigVKOvbwReO/MBm ogbK9vf4s09nJNof14Z6rInx84IlhM158c3DqeVFK5Trt9OLYlukiXxw4sBYpmNV vaPZXI8S//p+tjduc6bUVCtym0mOHEw0/sTRVMaMyEcBvCG9Jkxwr1Q3wtH/1MPO 5qvdxDbeBMzCDyUCS655PvzSO8Ek5yYeZfhpkyBTJlJIhTSPaIi+U51Q4k90zvyB xXRcHq5TjOkg+2HEkv+V0tBhUCDcrPSEKcwl8iU2nLoTZHvURgHJi9FFbXcYoY8K exgAoVly0uaWGQ== -----END CERTIFICATE-----Generated at Fri Dec 19 08:34:28 2025 by rpki-client