This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft File: TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft (raw, json) Hash identifier: jF9scPvZnmimiTjgj2Tse0I1cTI1Jw4uZ5d4usiXWGY= Subject key identifier: F0:7A:B8:5B:1C:3B:01:0B:B7:70:1E:0C:5E:C6:34:CF:A1:20:B1:AF Authority key identifier: 4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F Certificate issuer: /CN=4c6af986b241d9d27ec724adfabf06d5d231793f Certificate serial: 019AACF0C3FB58687D2BDCC2F0D8323B3B32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft Manifest number: 13F1 Signing time: Sat 22 Nov 2025 19:00:51 +0000 Manifest this update: Sat 22 Nov 2025 19:00:51 +0000 Manifest next update: Sun 23 Nov 2025 19:00:51 +0000 Files and hashes: 1: 7mVZwCskyJUQ7gPBL_F_4nbKWrk.roa (hash: Spe2b/mS1SAvEHCJH7XwFJrcW3b1Bvz1bY1SvDC0yz8=) 2: TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl (hash: k00z9kyS6Wfp9ilBsLQq5w+83eZXedMijagxkJ9Qym4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:f0:c3:fb:58:68:7d:2b:dc:c2:f0:d8:32:3b:3b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c6af986b241d9d27ec724adfabf06d5d231793f Validity Not Before: Nov 22 19:00:51 2025 GMT Not After : Nov 23 19:00:51 2025 GMT Subject: CN=f07ab85b1c3b010bb7701e0c5ec634cfa120b1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:0e:b2:29:62:7b:fa:ef:c2:41:50:df:cb: aa:a3:90:5c:32:34:6f:3a:01:16:af:b5:73:f4:09: 92:90:1b:92:7b:c8:e1:b7:51:e8:83:d5:21:24:92: 23:e6:2b:9f:39:6d:04:b3:e4:ad:62:25:23:82:81: f2:f7:a9:52:61:03:ad:eb:b5:8d:61:21:66:a2:d0: e6:dc:9e:5a:37:b3:5a:85:8b:d4:00:86:1b:a6:02: 92:0a:05:bf:07:1f:5d:bf:a3:07:33:d3:ae:4e:4a: c6:ae:6e:cb:c4:a4:35:95:d9:20:7b:57:3b:0a:38: 1b:b2:15:e1:5a:12:31:30:d4:17:16:5d:27:2a:ec: 42:83:47:11:4e:89:4b:dd:47:4f:68:60:d0:a5:2e: 8e:44:56:72:32:f1:b5:25:2c:43:eb:22:2e:94:16: 62:e0:bc:3f:42:d8:fd:be:0b:31:09:7b:50:42:09: 27:8b:76:a4:1c:52:99:93:d8:37:e8:f4:a8:fa:99: a4:e0:c6:b7:2d:31:4e:c3:b8:30:e3:23:e8:24:9b: 2a:2d:32:4f:6f:ed:01:1a:f1:4d:1c:ba:43:42:65: b6:a8:cb:8d:de:da:75:3f:15:6d:9a:f3:fe:97:51: 03:1a:e2:9d:2b:d4:9a:37:2b:e3:2f:19:de:21:5f: b8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7A:B8:5B:1C:3B:01:0B:B7:70:1E:0C:5E:C6:34:CF:A1:20:B1:AF X509v3 Authority Key Identifier: keyid:4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:0f:11:24:cf:78:aa:ce:62:ec:cf:0d:c5:c3:fa:1c:f6:d7: f2:a1:97:27:75:ff:6a:f6:b3:5c:4a:98:e5:0f:66:69:58:b7: 97:07:4c:07:5d:9a:6c:4b:88:79:68:2f:98:24:8c:d5:7e:d3: da:70:99:78:60:66:d1:08:a3:1d:d6:8c:ca:eb:bb:74:ec:12: 6b:1f:ce:fa:48:1f:cb:f4:cb:b8:ee:7f:8f:ce:fd:23:8f:bd: 4e:b0:39:9d:dd:bd:9b:60:1e:62:c9:2e:ce:59:4a:c6:26:cd: b9:8e:11:1e:db:8d:04:90:5d:31:30:64:9c:cf:84:88:f2:10: 7d:0e:15:83:ec:74:5e:88:98:9b:95:d4:4e:98:98:f1:be:cd: b2:54:15:49:2d:2e:4d:41:1d:27:d4:f2:4b:cf:65:b7:04:ac: 8d:67:bd:93:8f:24:48:92:6a:63:c3:77:5e:1a:ac:56:9c:10: 00:df:e5:d9:7c:c4:29:61:3d:ea:af:30:f5:a9:86:25:0c:2e: 56:2e:9a:bc:bf:b7:de:4b:4a:35:83:7b:ea:a7:40:39:a7:ee: d1:86:47:78:ee:3b:33:4b:13:10:3c:1b:d6:71:9c:73:16:40: 9c:f2:c7:a1:02:60:66:1a:fa:0a:86:3f:f1:45:6c:14:af:b8: 5a:44:05:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqs8MP7WGh9K9zC8NgyOzsyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNmFmOTg2YjI0MWQ5ZDI3ZWM3MjRhZGZhYmYwNmQ1ZDIz MTc5M2YwHhcNMjUxMTIyMTkwMDUxWhcNMjUxMTIzMTkwMDUxWjAzMTEwLwYDVQQD EyhmMDdhYjg1YjFjM2IwMTBiYjc3MDFlMGM1ZWM2MzRjZmExMjBiMWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwIOsilie/rvwkFQ38uqo5BcMjRv OgEWr7Vz9AmSkBuSe8jht1Hog9UhJJIj5iufOW0Es+StYiUjgoHy96lSYQOt67WN YSFmotDm3J5aN7NahYvUAIYbpgKSCgW/Bx9dv6MHM9OuTkrGrm7LxKQ1ldkge1c7 CjgbshXhWhIxMNQXFl0nKuxCg0cRTolL3UdPaGDQpS6ORFZyMvG1JSxD6yIulBZi 4Lw/Qtj9vgsxCXtQQgkni3akHFKZk9g36PSo+pmk4Ma3LTFOw7gw4yPoJJsqLTJP b+0BGvFNHLpDQmW2qMuN3tp1PxVtmvP+l1EDGuKdK9SaNyvjLxneIV+42wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPB6uFscOwELt3AeDF7GNM+hILGvMB8GA1UdIwQY MBaAFExq+YayQdnSfsckrfq/BtXSMXk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEdyNWhySkIyZEoteHlTdC1yOEcxZEl4ZVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kYmM0NzItNmUwYS00MTFjLWFmOGYt MDg4OGViNDI3NDRjLzEvVEdyNWhySkIyZEoteHlTdC1yOEcxZEl4ZVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9kYmM0NzItNmUwYS00MTFjLWFmOGYtMDg4OGViNDI3NDRj LzEvVEdyNWhySkIyZEoteHlTdC1yOEcxZEl4ZVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbw8RJM94 qs5i7M8NxcP6HPbX8qGXJ3X/avazXEqY5Q9maVi3lwdMB12abEuIeWgvmCSM1X7T 2nCZeGBm0QijHdaMyuu7dOwSax/O+kgfy/TLuO5/j879I4+9TrA5nd29m2AeYsku zllKxibNuY4RHtuNBJBdMTBknM+EiPIQfQ4Vg+x0XoiYm5XUTpiY8b7NslQVSS0u TUEdJ9TyS89ltwSsjWe9k48kSJJqY8N3XhqsVpwQAN/l2XzEKWE96q8w9amGJQwu Vi6avL+33ktKNYN76qdAOafu0YZHeO47M0sTEDwb1nGccxZAnPLHoQJgZhr6CoY/ 8UVsFK+4WkQF5g== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:58 2025 by rpki-client