This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json) Hash identifier: 35gtAWjydU5ujTieyw8EXaOvVRMrLv1xP4GvaZIzegk= Subject key identifier: 23:DB:B5:42:FE:D6:96:08:35:B3:72:88:FA:08:6F:8D:93:88:FE:1C Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc Certificate serial: 019AEF3FCD2FB33BD223D182EAB800682620 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft Manifest number: 144E Signing time: Fri 05 Dec 2025 16:02:07 +0000 Manifest this update: Fri 05 Dec 2025 16:02:07 +0000 Manifest next update: Sat 06 Dec 2025 16:02:07 +0000 Files and hashes: 1: H36xXwuB9FJ3ESjpo_XmH_KZ2R4.roa (hash: CUtTMRPtfP9rNsMoQeZ2J44Z+jwTnsWRsKW5k/0LKug=) 2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: dZ+5d7iIhO+lTtPrwyUwLVAUzX7vHichmdPVNPZ7CRw=) 3: tpqvdlW8wuSttlFQd80uk4F5YQY.roa (hash: yDvp+gGPiyhARcManoLZEVb02KcZ7k4JkC3clhGu75w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 16:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:3f:cd:2f:b3:3b:d2:23:d1:82:ea:b8:00:68:26:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc Validity Not Before: Dec 5 16:02:07 2025 GMT Not After : Dec 6 16:02:07 2025 GMT Subject: CN=23dbb542fed6960835b37288fa086f8d9388fe1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b3:3c:f0:44:e6:f6:00:66:d0:0c:21:f8:a4: 20:b2:e0:41:c0:f7:26:f0:a0:42:da:84:41:83:d3: 8f:7e:74:02:40:d5:e1:2e:f8:df:53:ae:57:14:2d: a3:79:d6:8c:70:c3:9b:33:27:25:42:c7:ac:28:e5: 76:1a:98:32:c9:ba:b0:0a:b9:96:15:75:9d:22:c5: 6b:ac:3a:89:b3:18:80:e1:77:56:e0:ed:c9:a4:8f: 9d:de:0f:79:65:43:35:d4:90:b4:dd:f1:02:c7:66: 6b:2d:39:6e:ce:53:ca:3a:84:26:c3:73:da:2c:16: 5d:14:0c:23:99:15:b2:ea:8b:dc:c7:41:ab:68:9e: a6:61:ea:09:be:08:56:24:16:06:94:8f:5d:8d:e4: 4a:e0:71:66:00:9e:06:ef:50:18:eb:bf:74:53:60: d8:8d:50:64:d0:5c:c4:b5:d2:e5:2c:a7:0c:07:ad: 57:50:0e:ae:71:3d:0d:f5:96:de:d1:f6:64:94:3e: c9:85:d4:32:35:40:be:6a:40:77:6f:c9:df:9c:67: 72:5d:d1:24:dc:d2:03:d7:a9:ad:be:a0:d1:3f:3c: d5:29:a9:3c:09:21:b2:a4:fc:5c:d7:54:6b:9c:0d: d6:49:35:8f:8e:e4:d9:99:07:f2:87:ab:07:dd:d4: b6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DB:B5:42:FE:D6:96:08:35:B3:72:88:FA:08:6F:8D:93:88:FE:1C X509v3 Authority Key Identifier: keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:cb:d5:f8:cb:46:b1:c0:1f:12:08:75:83:be:dc:87:ac:b9: 7e:4e:fc:44:74:c2:e6:d9:96:05:c3:68:a5:0c:b9:81:38:56: 0d:97:94:a3:d5:a4:eb:63:ee:78:54:3a:10:c4:43:1e:ca:10: b7:24:d3:5c:23:44:86:b2:ad:d3:73:29:fe:a6:f3:66:93:93: 42:90:d3:0d:f8:53:15:16:e5:3d:66:42:da:78:d7:a2:d4:e2: e2:d9:04:74:af:8d:3e:10:8c:7f:8a:87:7a:98:0e:51:a6:0c: e1:33:26:29:1e:e3:63:71:0c:06:02:ae:0e:1a:84:99:c7:49: ac:8a:b7:d3:16:1e:bd:a3:a6:18:f5:31:21:98:15:2a:73:2e: 25:5c:f5:8d:a4:7e:0c:25:63:31:90:92:9b:77:34:e1:30:99: 49:37:20:b2:bf:7c:94:3d:a2:cf:51:dc:25:50:5e:a5:e1:c6: 34:fb:56:75:b4:af:83:e2:29:c0:ae:26:c9:2c:0c:57:de:c9: 2f:f1:75:8f:5b:b1:7e:f7:74:17:90:6a:5b:ac:42:ca:21:8e: 5b:67:74:d9:8b:5b:12:34:77:7a:e2:34:49:c4:3c:b8:5f:29: 1c:1d:6e:26:c1:73:7f:03:8a:74:79:93:64:b8:93:78:d8:82: 45:41:57:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrvP80vszvSI9GC6rgAaCYgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMWIwYzQwOTY5MDgwOTU3ZmNjZWUxZmI4YTNmYjRiYjM4 YmY1ZGMwHhcNMjUxMjA1MTYwMjA3WhcNMjUxMjA2MTYwMjA3WjAzMTEwLwYDVQQD EygyM2RiYjU0MmZlZDY5NjA4MzViMzcyODhmYTA4NmY4ZDkzODhmZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7M88ETm9gBm0Awh+KQgsuBBwPcm 8KBC2oRBg9OPfnQCQNXhLvjfU65XFC2jedaMcMObMyclQsesKOV2GpgyybqwCrmW FXWdIsVrrDqJsxiA4XdW4O3JpI+d3g95ZUM11JC03fECx2ZrLTluzlPKOoQmw3Pa LBZdFAwjmRWy6ovcx0GraJ6mYeoJvghWJBYGlI9djeRK4HFmAJ4G71AY6790U2DY jVBk0FzEtdLlLKcMB61XUA6ucT0N9Zbe0fZklD7JhdQyNUC+akB3b8nfnGdyXdEk 3NID16mtvqDRPzzVKak8CSGypPxc11RrnA3WSTWPjuTZmQfyh6sH3dS2jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPbtUL+1pYINbNyiPoIb42TiP4cMB8GA1UdIwQY MBaAFEwbDECWkICVf8zuH7ij+0uzi/XcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMt OTRjODI1NGJkM2I3LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMtOTRjODI1NGJkM2I3 LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMvV+MtG scAfEgh1g77ch6y5fk78RHTC5tmWBcNopQy5gThWDZeUo9Wk62PueFQ6EMRDHsoQ tyTTXCNEhrKt03Mp/qbzZpOTQpDTDfhTFRblPWZC2njXotTi4tkEdK+NPhCMf4qH epgOUaYM4TMmKR7jY3EMBgKuDhqEmcdJrIq30xYevaOmGPUxIZgVKnMuJVz1jaR+ DCVjMZCSm3c04TCZSTcgsr98lD2iz1HcJVBepeHGNPtWdbSvg+IpwK4mySwMV97J L/F1j1uxfvd0F5BqW6xCyiGOW2d02YtbEjR3euI0ScQ8uF8pHB1uJsFzfwOKdHmT ZLiTeNiCRUFXWQ== -----END CERTIFICATE-----Generated at Fri Dec 5 22:58:49 2025 by rpki-client