This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft File: tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft (raw, json) Hash identifier: mEcni6ziO7iyvkv3ZpGTzz51giCPcjUVYXUQ1s/aeQ0= Subject key identifier: 3C:CE:57:B4:DC:B3:B0:59:BD:A8:D4:65:85:F3:41:4D:6E:9A:D1:0D Authority key identifier: B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F Certificate issuer: /CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f Certificate serial: 019B23D1367335360ED18DE766CD155F3817 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft Manifest number: 0419 Signing time: Mon 15 Dec 2025 21:01:12 +0000 Manifest this update: Mon 15 Dec 2025 21:01:12 +0000 Manifest next update: Tue 16 Dec 2025 21:01:12 +0000 Files and hashes: 1: ZmF3lPkl3dsARIFpHN7vz5QHbFs.roa (hash: ukfiioKav9S2J4a6qVoPDRL9RQGgYfvHu1FXDGi1Nzg=) 2: tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl (hash: kU4NbXl8yVLD0VnJP/ZhBjwoJfmqO6qLhqKsGFVp+ME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d1:36:73:35:36:0e:d1:8d:e7:66:cd:15:5f:38:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f Validity Not Before: Dec 15 21:01:12 2025 GMT Not After : Dec 16 21:01:12 2025 GMT Subject: CN=3cce57b4dcb3b059bda8d46585f3414d6e9ad10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:11:d6:41:10:9d:a8:0e:85:ab:9b:2a:81: db:97:31:d4:e3:b8:04:67:f7:50:b6:7a:9f:49:1c: 36:55:4d:3b:8f:33:0c:22:93:fd:73:bb:9d:63:07: 65:96:bb:97:e6:87:8e:3c:6a:03:29:54:47:e1:4f: eb:20:2b:75:a5:de:25:a8:81:24:96:5b:40:a2:df: 4c:8f:71:4a:aa:af:87:43:b6:db:5c:b3:d8:c7:00: 09:8e:82:e8:7c:00:4d:90:f3:bf:51:5e:53:a2:e3: ed:34:8d:46:52:5c:29:b6:15:b5:cf:97:ba:1f:c8: 0b:39:b4:c2:34:e7:51:18:40:f1:ca:72:75:a2:81: 56:dd:c5:38:f5:dc:80:1a:fa:21:f4:6e:66:4d:d2: 07:d7:6a:b0:e5:74:c2:55:3d:62:84:ce:6c:77:68: 1d:56:c2:20:54:08:51:e4:81:1e:b5:11:5b:d8:37: 1f:76:00:c5:51:91:2a:a4:7b:41:5d:d6:71:a2:92: 6d:ce:cb:ce:9d:e0:66:45:62:33:14:de:8c:d4:fa: bf:83:df:48:fb:b2:9f:a4:45:a7:a0:78:0e:b5:70: 57:fa:f3:51:2c:bb:dd:17:46:c1:9a:56:8e:a4:00: 17:65:ba:65:7b:66:89:23:f9:77:16:9f:ff:bc:de: 83:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CE:57:B4:DC:B3:B0:59:BD:A8:D4:65:85:F3:41:4D:6E:9A:D1:0D X509v3 Authority Key Identifier: keyid:B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:68:b4:a9:0c:6d:2a:ee:f4:b9:fa:ba:17:4e:3c:ab:6b:f5: 12:19:85:ad:1f:f3:e2:79:85:2f:a2:b2:31:27:99:e1:c4:62: 27:ff:db:51:43:63:e3:c5:2a:28:1a:12:ff:f6:3d:88:34:4a: 9b:aa:9f:cc:76:35:ba:e4:b3:73:21:80:b2:b5:65:0f:24:1b: 83:3c:65:7e:e2:e0:5c:42:90:5f:3e:f9:9c:33:cd:f6:ac:8d: 4f:31:83:ba:3b:c2:24:5c:fe:e6:26:dd:3d:6f:08:f0:5f:21: 63:f7:f1:fe:8b:80:96:00:90:ca:c6:c0:f7:19:d4:61:8b:ca: 7d:de:e9:fb:90:c7:d3:29:09:8d:34:4f:1e:76:cd:20:f2:99: f4:f6:df:a4:c5:32:6c:fe:20:42:57:9a:66:76:b8:07:76:2f: 0e:03:02:b9:e1:78:a1:6c:9b:ec:42:fd:45:af:81:06:e7:52: ec:67:80:88:85:11:d6:4d:69:fb:5e:f9:8b:9a:2c:09:60:bf: 63:59:e5:db:ab:9d:88:af:56:f6:9b:f1:c6:c3:3d:8c:25:85: 2c:af:b4:92:21:42:09:e4:4a:a8:0c:b6:99:91:e2:ad:b6:bc: 1c:98:a6:b4:f3:e1:f6:59:c0:ef:e7:6c:52:df:d8:bc:b0:dc: 49:79:dc:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0TZzNTYO0Y3nZs0VXzgXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YzI4OGU5NjNlMGU5ZjgyZDFjNmE3ZmQ4NGVjNWFhMzQw YWJhOGYwHhcNMjUxMjE1MjEwMTEyWhcNMjUxMjE2MjEwMTEyWjAzMTEwLwYDVQQD EygzY2NlNTdiNGRjYjNiMDU5YmRhOGQ0NjU4NWYzNDE0ZDZlOWFkMTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus4R1kEQnagOhaubKoHblzHU47gE Z/dQtnqfSRw2VU07jzMMIpP9c7udYwdllruX5oeOPGoDKVRH4U/rICt1pd4lqIEk lltAot9Mj3FKqq+HQ7bbXLPYxwAJjoLofABNkPO/UV5TouPtNI1GUlwpthW1z5e6 H8gLObTCNOdRGEDxynJ1ooFW3cU49dyAGvoh9G5mTdIH12qw5XTCVT1ihM5sd2gd VsIgVAhR5IEetRFb2DcfdgDFUZEqpHtBXdZxopJtzsvOneBmRWIzFN6M1Pq/g99I +7KfpEWnoHgOtXBX+vNRLLvdF0bBmlaOpAAXZbple2aJI/l3Fp//vN6DBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzOV7Tcs7BZvajUZYXzQU1umtENMB8GA1UdIwQY MBaAFLXCiOlj4On4LRxqf9hOxao0CrqPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGNLSTZXUGc2Zmd0SEdwXzJFN0ZxalFLdW84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kYzM0OTEtYzY5OS00MmI1LTkwYTct Y2M3ZTlhYjA5ZmI4LzEvdGNLSTZXUGc2Zmd0SEdwXzJFN0ZxalFLdW84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kYzM0OTEtYzY5OS00MmI1LTkwYTctY2M3ZTlhYjA5ZmI4 LzEvdGNLSTZXUGc2Zmd0SEdwXzJFN0ZxalFLdW84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGi0qQxt Ku70ufq6F048q2v1EhmFrR/z4nmFL6KyMSeZ4cRiJ//bUUNj48UqKBoS//Y9iDRK m6qfzHY1uuSzcyGAsrVlDyQbgzxlfuLgXEKQXz75nDPN9qyNTzGDujvCJFz+5ibd PW8I8F8hY/fx/ouAlgCQysbA9xnUYYvKfd7p+5DH0ykJjTRPHnbNIPKZ9PbfpMUy bP4gQleaZna4B3YvDgMCueF4oWyb7EL9Ra+BBudS7GeAiIUR1k1p+175i5osCWC/ Y1nl26udiK9W9pvxxsM9jCWFLK+0kiFCCeRKqAy2mZHirba8HJimtPPh9lnA7+ds Ut/YvLDcSXncjg== -----END CERTIFICATE-----Generated at Mon Dec 15 23:34:35 2025 by rpki-client