This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft File: TpisyG9BxHFbEMHdUmMcMqgZSjA.mft (raw, json) Hash identifier: tVhGKJEFAZ5XL/6Em/9EuA0sBZRYktCwn1bVrfnckpk= Subject key identifier: 7C:83:15:F2:91:A3:AE:2D:BC:A1:1E:70:89:C0:9F:95:2A:16:C7:F5 Authority key identifier: 4E:98:AC:C8:6F:41:C4:71:5B:10:C1:DD:52:63:1C:32:A8:19:4A:30 Certificate issuer: /CN=4e98acc86f41c4715b10c1dd52631c32a8194a30 Certificate serial: 019B34C56BCDDABDA0D96411691A5B4A0FA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TpisyG9BxHFbEMHdUmMcMqgZSjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft Manifest number: 126D Signing time: Fri 19 Dec 2025 04:01:51 +0000 Manifest this update: Fri 19 Dec 2025 04:01:51 +0000 Manifest next update: Sat 20 Dec 2025 04:01:51 +0000 Files and hashes: 1: TpisyG9BxHFbEMHdUmMcMqgZSjA.crl (hash: Od116jQT9tqEfh9yf8n68idCH3pe5Fr6E56IY5Z6vxg=) 2: ohqKuhVASRrB9T2VKGm2oxF8gPE.roa (hash: BAH92y9b1xJW2sbjfw7QOsduF26YD433wmBfFvaPMSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft rsync://rpki.ripe.net/repository/DEFAULT/TpisyG9BxHFbEMHdUmMcMqgZSjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:6b:cd:da:bd:a0:d9:64:11:69:1a:5b:4a:0f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e98acc86f41c4715b10c1dd52631c32a8194a30 Validity Not Before: Dec 19 04:01:51 2025 GMT Not After : Dec 20 04:01:51 2025 GMT Subject: CN=7c8315f291a3ae2dbca11e7089c09f952a16c7f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e6:85:96:9a:45:d0:9a:a5:58:80:9a:35:26: ee:3f:f6:70:16:59:1f:eb:bf:e9:2c:25:a3:0d:eb: 72:18:70:b4:1e:23:61:ff:9b:e9:67:89:89:cd:b6: ef:34:8b:dc:7c:8c:86:e8:c8:67:b9:1b:4b:a0:aa: 4c:36:3d:3b:c5:34:aa:5e:1b:1e:cd:63:db:7b:26: a5:a9:57:71:0c:33:03:1e:6a:c2:0f:e8:f1:9c:f4: 0f:f1:21:7f:eb:33:f6:fb:e0:09:33:93:94:0b:8a: d2:7b:0a:3a:61:90:08:7b:65:54:f9:b4:ce:91:3a: 00:0e:16:82:0a:b8:99:99:bd:73:05:13:93:90:8b: b4:95:56:95:29:ad:3a:af:d4:13:3a:55:6d:d4:ce: 19:a3:fc:04:84:f3:2b:17:d3:da:c8:5f:ab:a9:7b: 0d:c3:5e:18:c5:69:fc:c2:2b:94:07:1a:c4:4e:f6: 22:71:65:b1:c3:31:c4:e7:19:bf:89:26:d0:00:8f: ce:1a:4a:7d:d8:9e:d8:9c:9a:da:ba:1c:2a:00:15: 21:1f:8b:09:0f:18:56:e4:8c:b1:77:1a:65:35:f9: 6b:40:d2:df:23:56:dc:c8:79:be:b6:62:0d:19:f4: ed:f8:0b:e5:ce:35:aa:42:9c:c1:91:b3:dc:91:75: f6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:83:15:F2:91:A3:AE:2D:BC:A1:1E:70:89:C0:9F:95:2A:16:C7:F5 X509v3 Authority Key Identifier: keyid:4E:98:AC:C8:6F:41:C4:71:5B:10:C1:DD:52:63:1C:32:A8:19:4A:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TpisyG9BxHFbEMHdUmMcMqgZSjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:92:c9:8d:16:2e:03:10:c3:b4:44:49:d0:2d:36:ba:fb:a8: be:50:ec:27:36:da:13:cd:c7:49:15:29:8a:f1:c6:bd:4c:35: 56:f0:25:97:4a:0f:1d:f8:c1:ad:13:54:43:03:06:59:66:77: 00:04:8d:a3:63:0e:02:c3:79:88:f3:0d:47:f6:06:52:f3:02: af:1c:dd:34:6e:6a:fa:ec:61:d0:4b:32:f9:fd:ea:da:8e:fe: f2:b2:78:c0:de:f1:00:b1:7a:9a:28:3b:d5:67:2e:4c:67:f8: 0b:15:d2:70:12:de:40:7c:8d:07:28:25:93:a5:6e:a8:0f:b6: 12:2b:81:8e:aa:16:62:6a:fa:69:ff:04:59:b1:fb:66:e5:eb: dd:e1:25:92:66:b0:d0:ce:f5:8d:b2:b4:b6:cf:3f:a7:f9:bb: 48:26:05:83:34:e4:0a:3f:6b:73:6c:2d:c7:b5:44:0d:11:ae: bc:d9:d5:4c:c2:05:fd:6c:db:12:0e:e4:47:16:54:a8:66:32: 2c:bf:f2:cf:2b:42:92:20:a3:17:ed:e3:41:e2:b0:89:2f:5b: ac:ac:5e:58:e9:2c:d7:0e:7f:34:82:84:a1:6a:19:67:b6:86: 4c:54:7a:71:de:e4:16:cf:69:67:9c:da:b2:8b:41:37:db:30: 06:df:2d:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xWvN2r2g2WQRaRpbSg+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlOThhY2M4NmY0MWM0NzE1YjEwYzFkZDUyNjMxYzMyYTgx OTRhMzAwHhcNMjUxMjE5MDQwMTUxWhcNMjUxMjIwMDQwMTUxWjAzMTEwLwYDVQQD Eyg3YzgzMTVmMjkxYTNhZTJkYmNhMTFlNzA4OWMwOWY5NTJhMTZjN2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eaFlppF0JqlWICaNSbuP/ZwFlkf 67/pLCWjDetyGHC0HiNh/5vpZ4mJzbbvNIvcfIyG6MhnuRtLoKpMNj07xTSqXhse zWPbeyalqVdxDDMDHmrCD+jxnPQP8SF/6zP2++AJM5OUC4rSewo6YZAIe2VU+bTO kToADhaCCriZmb1zBROTkIu0lVaVKa06r9QTOlVt1M4Zo/wEhPMrF9PayF+rqXsN w14YxWn8wiuUBxrETvYicWWxwzHE5xm/iSbQAI/OGkp92J7YnJrauhwqABUhH4sJ DxhW5IyxdxplNflrQNLfI1bcyHm+tmINGfTt+AvlzjWqQpzBkbPckXX2gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyDFfKRo64tvKEecInAn5UqFsf1MB8GA1UdIwQY MBaAFE6YrMhvQcRxWxDB3VJjHDKoGUowMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHBpc3lHOUJ4SEZiRU1IZFVtTWNNcWdaU2pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mODcwYzQtYmRjOS00NTNiLWIzYzgt NDkxZDMwZjRhMmM4LzEvVHBpc3lHOUJ4SEZiRU1IZFVtTWNNcWdaU2pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9mODcwYzQtYmRjOS00NTNiLWIzYzgtNDkxZDMwZjRhMmM4 LzEvVHBpc3lHOUJ4SEZiRU1IZFVtTWNNcWdaU2pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJLJjRYu AxDDtERJ0C02uvuovlDsJzbaE83HSRUpivHGvUw1VvAll0oPHfjBrRNUQwMGWWZ3 AASNo2MOAsN5iPMNR/YGUvMCrxzdNG5q+uxh0Esy+f3q2o7+8rJ4wN7xALF6mig7 1WcuTGf4CxXScBLeQHyNByglk6VuqA+2EiuBjqoWYmr6af8EWbH7ZuXr3eElkmaw 0M71jbK0ts8/p/m7SCYFgzTkCj9rc2wtx7VEDRGuvNnVTMIF/WzbEg7kRxZUqGYy LL/yzytCkiCjF+3jQeKwiS9brKxeWOks1w5/NIKEoWoZZ7aGTFR6cd7kFs9pZ5za sotBN9swBt8tpA== -----END CERTIFICATE-----Generated at Fri Dec 19 07:49:34 2025 by rpki-client