This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft File: TK0YVBTBauXSKaiqK_oV_vxxoiI.mft (raw, json) Hash identifier: m1T9X/KrOv1rmCpXFuR2ZSF8iCs7KAt4WPLeTwJtUIo= Subject key identifier: E8:85:B4:48:3A:E8:16:83:47:F0:04:8A:65:69:DF:C7:F5:24:2E:80 Authority key identifier: 4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22 Certificate issuer: /CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222 Certificate serial: 019B1EAAE5B708E159DEE44B0998902209AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft Manifest number: 170C Signing time: Sun 14 Dec 2025 21:01:14 +0000 Manifest this update: Sun 14 Dec 2025 21:01:14 +0000 Manifest next update: Mon 15 Dec 2025 21:01:14 +0000 Files and hashes: 1: TK0YVBTBauXSKaiqK_oV_vxxoiI.crl (hash: grjSXK4P9fSnMWBsEhu3C/wm7E3CIAJygmESjvc7C1A=) 2: dxfaqcbOBYRpYzoiD3a-nfzNgyI.roa (hash: 9S4UtPoorxm2Y5jeo5Ht7EgjOkb+pCS05uOlyENLKPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:aa:e5:b7:08:e1:59:de:e4:4b:09:98:90:22:09:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222 Validity Not Before: Dec 14 21:01:14 2025 GMT Not After : Dec 15 21:01:14 2025 GMT Subject: CN=e885b4483ae8168347f0048a6569dfc7f5242e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7f:57:83:a4:50:83:82:46:d0:b3:15:92:e0: e1:d0:de:a0:f5:00:36:fd:00:a6:10:79:61:64:82: cb:5a:ce:5e:c7:50:8d:91:c4:ab:ae:35:41:bb:4e: ea:7a:4a:3e:b7:0e:b9:9c:f1:0e:de:96:7f:c8:f7: 68:e5:d3:72:1b:3c:c9:bc:4a:72:78:9c:54:b0:c4: fb:12:16:6f:02:71:74:50:6f:ec:e1:4b:ef:a3:bb: 84:99:24:5c:0e:d1:d3:ed:d2:94:43:65:c5:5e:00: 91:1c:0a:9e:ac:84:e7:a8:85:9d:e4:34:53:61:20: e5:4e:72:35:8b:82:16:ac:e7:77:cb:94:7e:ea:38: 24:ff:ca:2d:a6:82:b4:dd:45:aa:a7:01:d3:1b:76: 5c:5e:16:f2:ce:1f:b1:06:a6:da:3a:5a:68:20:a7: bd:ee:56:1a:df:1f:7f:75:40:e7:5e:b4:48:35:62: 0d:c5:9b:85:26:4d:f5:76:b0:29:3b:94:e0:00:4e: df:a4:9f:5e:81:4e:19:4f:b2:a2:69:f6:bd:17:62: 44:41:11:7c:51:4e:de:ea:24:c4:d9:52:0e:32:66: 51:ab:79:70:4e:96:84:ae:55:a5:e7:8f:22:cb:d3: c0:b5:4c:6f:6a:8f:5c:ed:9e:c5:d1:09:31:e4:17: ad:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:85:B4:48:3A:E8:16:83:47:F0:04:8A:65:69:DF:C7:F5:24:2E:80 X509v3 Authority Key Identifier: keyid:4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e5:84:52:58:b2:4f:4a:42:1b:81:db:ed:a7:e9:c8:aa:50: c2:36:9a:59:f4:ef:30:96:ad:95:be:25:e1:37:b4:41:93:cc: da:7a:b7:a4:3f:3d:9b:62:ac:17:de:32:c6:8c:18:25:19:13: 69:41:be:61:34:be:e1:c4:f6:80:d7:60:4e:e1:7f:40:ea:6c: be:9f:0f:ae:69:e7:ce:d1:76:74:75:90:2d:d9:58:6a:cc:b4: 13:0f:dc:0e:ea:e6:1e:d3:29:6a:9d:c6:fe:e6:3d:be:09:f8: 64:0d:b6:fa:6c:7d:a9:53:e3:cb:d5:83:50:07:e4:96:4d:0d: 17:4e:22:94:b0:80:70:2b:a8:f9:be:84:83:87:ca:a2:96:e4: c2:3d:80:2a:52:76:2a:dc:3d:5e:c7:f8:6f:c9:9f:51:63:a3: d6:4a:17:f9:59:9b:02:17:8e:c4:96:f3:f4:cc:11:37:f6:42: 6e:be:8d:4f:41:3f:45:36:18:15:cf:04:00:ec:00:5b:bb:b8: a5:3f:ab:43:c4:d6:0d:14:1d:cb:3f:e6:a5:6d:c7:11:05:1c: 78:bc:05:b8:8f:87:c1:0a:41:76:8d:f7:17:c4:5a:cb:54:8f: df:a0:7f:41:7b:13:c0:c0:fe:a9:3a:48:5b:e4:39:c1:c9:02: 70:36:ad:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsequW3COFZ3uRLCZiQIgmsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYWQxODU0MTRjMTZhZTVkMjI5YThhYTJiZmExNWZlZmM3 MWEyMjIwHhcNMjUxMjE0MjEwMTE0WhcNMjUxMjE1MjEwMTE0WjAzMTEwLwYDVQQD EyhlODg1YjQ0ODNhZTgxNjgzNDdmMDA0OGE2NTY5ZGZjN2Y1MjQyZTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq39Xg6RQg4JG0LMVkuDh0N6g9QA2 /QCmEHlhZILLWs5ex1CNkcSrrjVBu07qeko+tw65nPEO3pZ/yPdo5dNyGzzJvEpy eJxUsMT7EhZvAnF0UG/s4Uvvo7uEmSRcDtHT7dKUQ2XFXgCRHAqerITnqIWd5DRT YSDlTnI1i4IWrOd3y5R+6jgk/8otpoK03UWqpwHTG3ZcXhbyzh+xBqbaOlpoIKe9 7lYa3x9/dUDnXrRINWINxZuFJk31drApO5TgAE7fpJ9egU4ZT7Kiafa9F2JEQRF8 UU7e6iTE2VIOMmZRq3lwTpaErlWl548iy9PAtUxvao9c7Z7F0Qkx5BettQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOiFtEg66BaDR/AEimVp38f1JC6AMB8GA1UdIwQY MBaAFEytGFQUwWrl0imoqiv6Ff78caIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEswWVZCVEJhdVhTS2FpcUtfb1Zfdnh4b2lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81Yjc4OGUtZjg0Ny00ZGY5LTkzMzQt OTY0Y2NhNzIyZjczLzEvVEswWVZCVEJhdVhTS2FpcUtfb1Zfdnh4b2lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS81Yjc4OGUtZjg0Ny00ZGY5LTkzMzQtOTY0Y2NhNzIyZjcz LzEvVEswWVZCVEJhdVhTS2FpcUtfb1Zfdnh4b2lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOWEUliy T0pCG4Hb7afpyKpQwjaaWfTvMJatlb4l4Te0QZPM2nq3pD89m2KsF94yxowYJRkT aUG+YTS+4cT2gNdgTuF/QOpsvp8PrmnnztF2dHWQLdlYasy0Ew/cDurmHtMpap3G /uY9vgn4ZA22+mx9qVPjy9WDUAfklk0NF04ilLCAcCuo+b6Eg4fKopbkwj2AKlJ2 Ktw9Xsf4b8mfUWOj1koX+VmbAheOxJbz9MwRN/ZCbr6NT0E/RTYYFc8EAOwAW7u4 pT+rQ8TWDRQdyz/mpW3HEQUceLwFuI+HwQpBdo33F8Ray1SP36B/QXsTwMD+qTpI W+Q5wckCcDat6g== -----END CERTIFICATE-----Generated at Mon Dec 15 01:03:11 2025 by rpki-client