This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft File: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft (raw, json) Hash identifier: 2bJrGMssV95yRRaNmJ8j+rKzZu6eiJptZCJMD1NwyOs= Subject key identifier: 39:AB:20:64:26:6B:9E:DB:66:54:4E:61:93:6C:18:E7:DD:6F:A5:18 Authority key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97 Certificate issuer: /CN=4d1527d1839bf830360d71590134354e6d904697 Certificate serial: 019B07EC449D804A95108F42C8E2D58979DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft Manifest number: 176E Signing time: Wed 10 Dec 2025 11:01:23 +0000 Manifest this update: Wed 10 Dec 2025 11:01:23 +0000 Manifest next update: Thu 11 Dec 2025 11:01:23 +0000 Files and hashes: 1: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl (hash: QbT5tWmS2jfqfDWhboMihrQ40aSJNW45B6+GdIvM/KI=) 2: a6Whh1qMHaCLz9si7bMkIx4xg1Y.roa (hash: R/Syehgq2eEOSio/8bhqr2YXvz+4Ke3qpd0G80XikQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:ec:44:9d:80:4a:95:10:8f:42:c8:e2:d5:89:79:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d1527d1839bf830360d71590134354e6d904697 Validity Not Before: Dec 10 11:01:23 2025 GMT Not After : Dec 11 11:01:23 2025 GMT Subject: CN=39ab2064266b9edb66544e61936c18e7dd6fa518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4e:08:a1:6a:bb:8d:94:9d:9a:c7:3b:df:76: 15:9e:d9:34:b7:3c:5c:85:f2:20:a4:95:a3:b1:70: 1e:75:eb:90:0d:d8:7a:6e:e3:56:09:dd:a1:34:fc: ff:6d:08:ac:25:f3:63:cb:de:83:5f:02:df:ed:f8: 66:db:ca:ff:2d:75:c8:31:6a:f3:d1:db:66:87:a9: 56:eb:0f:03:14:b1:39:bf:10:36:58:4a:27:d0:ae: 70:c6:59:17:88:6f:1c:f7:9e:ee:8d:a5:83:d7:fa: c8:79:9c:1d:55:73:0f:c5:ac:cb:47:c6:ad:4c:82: 3c:8a:ce:ff:56:95:19:7b:71:c0:62:ae:fe:0a:1d: 1e:67:4f:ca:c0:bc:c3:90:e9:26:70:3e:82:4b:cc: 52:44:c3:d4:07:e3:d4:d0:7f:25:55:f5:d2:01:0e: 96:a4:bd:9d:76:58:76:4f:04:9c:93:02:40:8c:40: 27:31:76:55:b6:99:0a:6d:d1:7e:07:4a:63:0a:0d: 4a:77:fd:69:eb:e0:ff:1c:e6:07:6b:06:92:26:80: 2a:9c:be:4d:91:1f:cb:3e:e7:11:7a:7a:15:aa:11: 12:f1:18:5f:3c:fe:ec:48:bf:2f:7a:df:6c:36:04: b9:3c:fb:72:f0:af:be:71:b3:45:60:18:60:21:6f: fe:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AB:20:64:26:6B:9E:DB:66:54:4E:61:93:6C:18:E7:DD:6F:A5:18 X509v3 Authority Key Identifier: keyid:4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:92:4f:20:e3:98:15:59:01:74:de:71:b1:ec:a3:4b:ae:bb: 2c:2e:46:39:af:5a:e8:8e:7c:b1:a3:1d:4f:c7:8a:23:cc:e3: 37:69:07:3a:15:8b:9e:7a:47:3f:25:7b:b1:e9:e2:92:32:5c: 6f:89:d3:89:94:fe:7b:16:6d:fc:f5:4c:87:af:1c:6c:22:0c: 8b:21:53:97:c8:51:9c:94:85:86:fa:ce:65:eb:69:17:47:1c: e9:ca:90:7a:20:0b:11:16:3e:b1:10:d4:71:89:67:79:74:30: 74:56:eb:5f:5d:21:70:a4:ea:5b:2a:90:3d:c6:8c:30:4f:c0: e5:1b:34:34:5e:14:f2:27:c8:22:8d:c8:e5:71:db:b8:04:0b: 8c:dc:56:0a:30:db:6d:1f:79:d5:a9:de:6f:dc:46:de:0e:12: ce:04:39:a8:80:66:a4:b1:c8:d2:b6:86:23:44:43:67:d6:13: a2:8f:7a:0b:28:17:b6:2b:32:2f:f6:29:5c:a9:a1:31:9c:50: 19:bd:07:9e:95:25:f4:ac:a5:ee:7b:83:0b:f0:64:60:b2:ae: 76:eb:b1:af:8d:19:e6:c1:b4:ee:2d:42:57:8e:3b:49:07:b5: 7c:04:ba:3f:44:6c:0f:66:74:58:85:46:73:fb:03:73:e0:f2: d8:8d:7e:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsH7ESdgEqVEI9CyOLViXndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMTUyN2QxODM5YmY4MzAzNjBkNzE1OTAxMzQzNTRlNmQ5 MDQ2OTcwHhcNMjUxMjEwMTEwMTIzWhcNMjUxMjExMTEwMTIzWjAzMTEwLwYDVQQD EygzOWFiMjA2NDI2NmI5ZWRiNjY1NDRlNjE5MzZjMThlN2RkNmZhNTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4E4IoWq7jZSdmsc733YVntk0tzxc hfIgpJWjsXAedeuQDdh6buNWCd2hNPz/bQisJfNjy96DXwLf7fhm28r/LXXIMWrz 0dtmh6lW6w8DFLE5vxA2WEon0K5wxlkXiG8c957ujaWD1/rIeZwdVXMPxazLR8at TII8is7/VpUZe3HAYq7+Ch0eZ0/KwLzDkOkmcD6CS8xSRMPUB+PU0H8lVfXSAQ6W pL2ddlh2TwSckwJAjEAnMXZVtpkKbdF+B0pjCg1Kd/1p6+D/HOYHawaSJoAqnL5N kR/LPucRenoVqhES8RhfPP7sSL8vet9sNgS5PPty8K++cbNFYBhgIW/+1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmrIGQma57bZlROYZNsGOfdb6UYMB8GA1UdIwQY MBaAFE0VJ9GDm/gwNg1xWQE0NU5tkEaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFJVbjBZT2ItREEyRFhGWkFUUTFUbTJRUnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zMDlkMzYtYzQyMC00MzIxLTk1NDAt ZjNkZjY3M2VhNThjLzEvVFJVbjBZT2ItREEyRFhGWkFUUTFUbTJRUnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8zMDlkMzYtYzQyMC00MzIxLTk1NDAtZjNkZjY3M2VhNThj LzEvVFJVbjBZT2ItREEyRFhGWkFUUTFUbTJRUnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpJPIOOY FVkBdN5xseyjS667LC5GOa9a6I58saMdT8eKI8zjN2kHOhWLnnpHPyV7senikjJc b4nTiZT+exZt/PVMh68cbCIMiyFTl8hRnJSFhvrOZetpF0cc6cqQeiALERY+sRDU cYlneXQwdFbrX10hcKTqWyqQPcaMME/A5Rs0NF4U8ifIIo3I5XHbuAQLjNxWCjDb bR951aneb9xG3g4SzgQ5qIBmpLHI0raGI0RDZ9YToo96CygXtisyL/YpXKmhMZxQ Gb0HnpUl9Kyl7nuDC/BkYLKuduuxr40Z5sG07i1CV447SQe1fAS6P0RsD2Z0WIVG c/sDc+Dy2I1+/g== -----END CERTIFICATE-----Generated at Wed Dec 10 18:22:18 2025 by rpki-client