This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft File: TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json) Hash identifier: Rrlg1eHTqKUSPdYk1SRb2mh/4dFbo735hJ60Aaj0nEs= Subject key identifier: 66:34:A2:E9:4C:4C:36:88:48:23:11:4C:04:8E:30:5A:70:A5:AF:62 Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62 Certificate issuer: /CN=4de70403c9d2d7962cf113d93c462f9493d87362 Certificate serial: 019B3A220B6186A636F5C3EF8AE06192F2F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 05:01:08 +0000 Manifest this update: Sat 20 Dec 2025 05:01:08 +0000 Manifest next update: Sun 21 Dec 2025 05:01:08 +0000 Files and hashes: 1: GbfL1ZrfRVmwsoIJhPo9qm8dkFU.roa (hash: 5rCvc90C0u6LOlrowQ6t9CQlQZi5SGZg6tgn8PV2EF4=) 2: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: yN3CKVxSYYTsmCKJ6vKUvGIQbN3+mU6Cl2PBAgHc0Zo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:0b:61:86:a6:36:f5:c3:ef:8a:e0:61:92:f2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362 Validity Not Before: Dec 20 05:01:08 2025 GMT Not After : Dec 21 05:01:08 2025 GMT Subject: CN=6634a2e94c4c36884823114c048e305a70a5af62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5e:5d:93:76:f4:a6:95:b5:df:f8:88:50:57: 01:ca:2c:1c:95:e5:73:d3:05:27:f5:09:05:76:f6: ba:3a:ce:c9:93:bd:e9:27:90:eb:ed:e3:cb:94:2a: 50:34:f1:28:90:b7:aa:af:9a:83:15:7e:2f:e9:ad: dc:4b:d9:36:60:4b:c7:97:7f:97:cf:5c:ac:b5:d1: 7c:a7:c0:a2:ab:af:e7:25:9b:50:82:be:1b:fd:a7: 40:e7:c2:dd:47:6f:96:de:a8:b2:3c:95:bf:39:6e: 48:57:41:d3:94:b3:83:28:80:39:28:83:f3:6f:15: b2:a0:1b:a1:cf:73:39:24:82:65:db:31:80:85:3c: b1:8f:6d:30:95:4f:bf:e2:15:62:46:19:8d:61:4f: e1:93:a9:90:95:2c:12:7d:f4:ea:a2:ff:fc:ae:b0: 4e:91:87:22:80:96:13:ba:1d:9c:f8:dd:0b:fa:06: ff:5d:b7:ab:7a:b4:ee:ff:7b:99:e9:11:f5:5f:ec: 46:8d:b0:a3:71:25:1e:09:e4:7c:2e:b0:e8:c2:b7: 85:be:5a:fb:da:2a:4c:4e:a4:3a:60:29:9e:01:eb: 72:93:a1:95:cf:2d:86:2a:82:83:dc:e6:b2:2e:53: 6a:69:e2:21:68:cd:18:98:c4:14:57:ee:02:ed:dd: 1e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:34:A2:E9:4C:4C:36:88:48:23:11:4C:04:8E:30:5A:70:A5:AF:62 X509v3 Authority Key Identifier: keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:33:f3:30:02:7e:d5:cc:b5:eb:8f:48:9c:5c:ce:f7:c0:4a: 6b:e6:a3:ce:24:5d:31:95:0b:1d:65:68:85:af:ce:53:4f:d0: b4:93:18:c1:79:7e:be:da:4f:6b:fb:0c:97:17:40:2a:68:92: a0:16:67:ac:f1:7d:4c:7c:c3:7f:c4:84:d5:49:b1:50:b5:a3: 6c:dc:b7:a4:a1:43:2d:d6:92:fc:b3:4f:07:24:09:ce:49:5e: fc:93:04:2f:34:df:2f:fd:35:53:40:a6:08:d7:66:9e:7b:5e: 64:d6:b6:19:2e:eb:e1:fd:1d:a9:34:b7:33:68:a1:b9:33:5a: ef:b2:5a:c9:b3:c8:9e:54:2b:b9:d5:52:56:e6:4c:99:32:4a: 7f:77:97:27:a8:80:ad:68:e3:dd:c3:47:93:a9:1d:d5:0c:ee: 1e:b1:91:04:10:0c:48:10:82:6b:34:37:79:8d:c2:91:e7:6a: a1:55:1c:73:49:ed:ca:4c:55:56:7e:45:75:3e:73:82:bb:3a: 10:c5:10:64:8c:2d:be:ee:f8:64:82:95:c8:76:ed:0c:a0:78: cd:92:5a:1c:44:2d:36:03:1e:35:e5:b8:a3:8d:a7:93:79:9a: 6d:83:4d:4c:12:f8:9c:de:f7:b7:eb:95:2e:9a:7d:83:ba:41: 30:5c:59:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IgthhqY29cPviuBhkvL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZTcwNDAzYzlkMmQ3OTYyY2YxMTNkOTNjNDYyZjk0OTNk ODczNjIwHhcNMjUxMjIwMDUwMTA4WhcNMjUxMjIxMDUwMTA4WjAzMTEwLwYDVQQD Eyg2NjM0YTJlOTRjNGMzNjg4NDgyMzExNGMwNDhlMzA1YTcwYTVhZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV5dk3b0ppW13/iIUFcByiwcleVz 0wUn9QkFdva6Os7Jk73pJ5Dr7ePLlCpQNPEokLeqr5qDFX4v6a3cS9k2YEvHl3+X z1ystdF8p8Ciq6/nJZtQgr4b/adA58LdR2+W3qiyPJW/OW5IV0HTlLODKIA5KIPz bxWyoBuhz3M5JIJl2zGAhTyxj20wlU+/4hViRhmNYU/hk6mQlSwSffTqov/8rrBO kYcigJYTuh2c+N0L+gb/XbererTu/3uZ6RH1X+xGjbCjcSUeCeR8LrDowreFvlr7 2ipMTqQ6YCmeAetyk6GVzy2GKoKD3OayLlNqaeIhaM0YmMQUV+4C7d0ejQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGY0oulMTDaISCMRTASOMFpwpa9iMB8GA1UdIwQY MBaAFE3nBAPJ0teWLPET2TxGL5ST2HNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGVjRUE4blMxNVlzOFJQWlBFWXZsSlBZYzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yNTAxMjctODVkNy00NmI0LTg4NjUt YmYwZGE1ZThjZTdmLzEvVGVjRUE4blMxNVlzOFJQWlBFWXZsSlBZYzJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yNTAxMjctODVkNy00NmI0LTg4NjUtYmYwZGE1ZThjZTdm LzEvVGVjRUE4blMxNVlzOFJQWlBFWXZsSlBZYzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDPzMAJ+ 1cy1649InFzO98BKa+ajziRdMZULHWVoha/OU0/QtJMYwXl+vtpPa/sMlxdAKmiS oBZnrPF9THzDf8SE1UmxULWjbNy3pKFDLdaS/LNPByQJzkle/JMELzTfL/01U0Cm CNdmnnteZNa2GS7r4f0dqTS3M2ihuTNa77JaybPInlQrudVSVuZMmTJKf3eXJ6iA rWjj3cNHk6kd1QzuHrGRBBAMSBCCazQ3eY3CkedqoVUcc0ntykxVVn5FdT5zgrs6 EMUQZIwtvu74ZIKVyHbtDKB4zZJaHEQtNgMeNeW4o42nk3mabYNNTBL4nN73t+uV Lpp9g7pBMFxZTw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:37:11 2025 by rpki-client