This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft File: tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft (raw, json) Hash identifier: EzqLk7DE4PkVMm0jDdOLun6o5qbbxqAN2kukWFq97rw= Subject key identifier: 1C:41:D0:F0:37:91:19:3F:8A:AB:3F:4B:2B:3B:CE:53:BD:90:FE:E2 Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90 Certificate issuer: /CN=b467367967dc763349fd0b50e31f75b823028590 Certificate serial: 019B0E263C2DD10755C53358873F63CF207A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft Manifest number: 1781 Signing time: Thu 11 Dec 2025 16:02:25 +0000 Manifest this update: Thu 11 Dec 2025 16:02:25 +0000 Manifest next update: Fri 12 Dec 2025 16:02:25 +0000 Files and hashes: 1: bng6ShOgaVE2_vQYMevfFJYJ8Sk.roa (hash: o+G2M7dgXmN23PorkdRSIqlVi011U/iuS/RS0v10mJg=) 2: fyxM_h2WX6rYIy5hg25YZB5O2CM.roa (hash: 9Ti3G/owzw7kR0D0MPQYXnuvUJArE0MI+SK12KJz4Yg=) 3: tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl (hash: PBgI0LP6qQESZ782BRrV4jnD8oXl6SSAlCmyyM4ZeMU=) 4: zIQrtixaP8FSodiktmvc2r9jLQ0.roa (hash: TQFktjGswL7qarOYLhb3l7yDbaMo37GtBSGaVvZU4Bw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:3c:2d:d1:07:55:c5:33:58:87:3f:63:cf:20:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b467367967dc763349fd0b50e31f75b823028590 Validity Not Before: Dec 11 16:02:25 2025 GMT Not After : Dec 12 16:02:25 2025 GMT Subject: CN=1c41d0f03791193f8aab3f4b2b3bce53bd90fee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:14:4f:fe:2c:01:35:b0:37:e1:77:e1:54:75: c6:1d:db:53:82:f7:c6:93:31:bf:87:15:3b:2a:dd: 47:46:9d:47:47:61:15:dd:37:dc:ab:a4:61:42:ad: c5:7c:43:69:47:65:56:b3:24:34:4c:7b:8f:c3:2a: 6b:81:b9:fe:93:67:4d:6c:ae:e0:91:17:09:bf:dc: 58:5d:b1:ef:61:ad:72:54:cd:a3:32:7c:08:8a:91: 9b:8f:57:8c:48:4c:ab:5f:0c:d1:71:db:90:4f:bd: 7f:c6:32:f0:a6:9e:c6:f9:2b:5c:50:c7:5b:f0:f3: e8:67:03:43:e2:c1:c2:c7:c6:c5:e1:6c:18:d8:38: bf:70:62:5e:ee:7e:ea:ef:95:ad:b3:52:02:3a:52: b1:87:65:4b:0c:64:7b:74:2a:fd:68:e2:85:68:3a: ba:2f:56:f1:00:34:c2:5a:fd:c2:e8:d9:be:d1:0d: 87:d4:10:25:1c:a9:af:09:4a:12:84:b9:de:fb:58: d9:d4:3b:7b:fb:3c:d1:51:a5:89:32:4b:84:70:01: c4:9e:b1:dc:1d:d5:d1:53:19:54:75:35:3b:e2:89: 41:cb:ca:91:9e:97:e5:d7:3e:f4:45:66:a4:e3:e9: db:27:1c:2c:92:ae:e9:a2:5e:e0:df:b0:40:8f:e8: d0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:41:D0:F0:37:91:19:3F:8A:AB:3F:4B:2B:3B:CE:53:BD:90:FE:E2 X509v3 Authority Key Identifier: keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:40:de:3a:f7:e6:33:1e:04:24:15:11:88:53:0c:c7:ce:fe: 15:49:f4:86:dd:ad:f8:82:02:bb:09:77:87:be:b8:9a:73:e1: ff:76:06:44:9c:d0:11:2e:3e:73:38:b2:5a:29:58:5f:8b:88: 18:16:13:e1:e5:a4:8a:91:a7:54:8c:6b:0e:bf:21:33:6e:e7: 32:19:aa:b5:37:31:31:23:a2:17:62:fd:1d:ab:32:74:58:34: 43:a6:6c:29:ed:d1:65:eb:38:46:df:70:5d:82:e6:fb:d3:01: 5f:f7:89:67:4b:3d:ac:fe:e2:89:f4:c7:0b:c1:b3:df:d1:a3: 16:3f:7d:04:cc:c7:40:ac:2e:56:03:51:79:10:16:a7:e2:dd: 90:99:95:92:36:20:58:25:5c:7f:59:f4:11:56:15:9a:61:9a: 6e:3d:91:a2:82:fa:3f:84:d1:46:19:27:50:6b:82:12:79:fd: fb:ab:e0:a6:62:9c:fc:e1:86:6b:9a:20:46:24:2d:e6:ba:e6: d1:58:ed:ee:09:d2:2c:a1:b6:38:13:c3:ba:41:3c:c6:09:2a: e2:53:cc:7c:a9:a1:bb:ac:7e:79:f8:e1:b9:33:0c:cd:06:f3: 3f:eb:75:6c:92:0a:0b:91:f9:1c:c4:c6:5e:97:c2:ad:92:09: 6f:95:d9:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJjwt0QdVxTNYhz9jzyB6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NjczNjc5NjdkYzc2MzM0OWZkMGI1MGUzMWY3NWI4MjMw Mjg1OTAwHhcNMjUxMjExMTYwMjI1WhcNMjUxMjEyMTYwMjI1WjAzMTEwLwYDVQQD EygxYzQxZDBmMDM3OTExOTNmOGFhYjNmNGIyYjNiY2U1M2JkOTBmZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBRP/iwBNbA34XfhVHXGHdtTgvfG kzG/hxU7Kt1HRp1HR2EV3Tfcq6RhQq3FfENpR2VWsyQ0THuPwyprgbn+k2dNbK7g kRcJv9xYXbHvYa1yVM2jMnwIipGbj1eMSEyrXwzRcduQT71/xjLwpp7G+StcUMdb 8PPoZwND4sHCx8bF4WwY2Di/cGJe7n7q75Wts1ICOlKxh2VLDGR7dCr9aOKFaDq6 L1bxADTCWv3C6Nm+0Q2H1BAlHKmvCUoShLne+1jZ1Dt7+zzRUaWJMkuEcAHEnrHc HdXRUxlUdTU74olBy8qRnpfl1z70RWak4+nbJxwskq7pol7g37BAj+jQMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxB0PA3kRk/iqs/Sys7zlO9kP7iMB8GA1UdIwQY MBaAFLRnNnln3HYzSf0LUOMfdbgjAoWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEdjMmVXZmNkak5KX1F0UTR4OTF1Q01DaFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kZmM0ZjItZWQ3ZC00NjEwLTg2MGMt YjgxMzczYzQwZGM5LzEvdEdjMmVXZmNkak5KX1F0UTR4OTF1Q01DaFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9kZmM0ZjItZWQ3ZC00NjEwLTg2MGMtYjgxMzczYzQwZGM5 LzEvdEdjMmVXZmNkak5KX1F0UTR4OTF1Q01DaFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0DeOvfm Mx4EJBURiFMMx87+FUn0ht2t+IICuwl3h764mnPh/3YGRJzQES4+cziyWilYX4uI GBYT4eWkipGnVIxrDr8hM27nMhmqtTcxMSOiF2L9HasydFg0Q6ZsKe3RZes4Rt9w XYLm+9MBX/eJZ0s9rP7iifTHC8Gz39GjFj99BMzHQKwuVgNReRAWp+LdkJmVkjYg WCVcf1n0EVYVmmGabj2RooL6P4TRRhknUGuCEnn9+6vgpmKc/OGGa5ogRiQt5rrm 0Vjt7gnSLKG2OBPDukE8xgkq4lPMfKmhu6x+efjhuTMMzQbzP+t1bJIKC5H5HMTG XpfCrZIJb5XZ2w== -----END CERTIFICATE-----Generated at Thu Dec 11 23:25:30 2025 by rpki-client