This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/TCo9adv570f1kQnH9rIwKq8tsLw.mft File: TCo9adv570f1kQnH9rIwKq8tsLw.mft (raw, json) Hash identifier: ZIEr4GcVpdzyNkLQ8jzuQncvPpU5MwJ1aU3TLyFQl0g= Subject key identifier: 4C:54:F1:DC:5C:DB:61:4C:D2:E4:5F:41:36:7E:36:97:99:CE:E5:65 Authority key identifier: 4C:2A:3D:69:DB:F9:EF:47:F5:91:09:C7:F6:B2:30:2A:AF:2D:B0:BC Certificate issuer: /CN=4c2a3d69dbf9ef47f59109c7f6b2302aaf2db0bc Certificate serial: 019B5AF6B099BD7BC7AC25BAC8C5345DB141 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCo9adv570f1kQnH9rIwKq8tsLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/TCo9adv570f1kQnH9rIwKq8tsLw.mft Manifest number: 72 Signing time: Fri 26 Dec 2025 14:01:15 +0000 Manifest this update: Fri 26 Dec 2025 14:01:15 +0000 Manifest next update: Sat 27 Dec 2025 14:01:15 +0000 Files and hashes: 1: TCo9adv570f1kQnH9rIwKq8tsLw.crl (hash: 23QxvNb6Kvu43y3ab9p1qWGgii15ITu2tIz8LwV5AVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/TCo9adv570f1kQnH9rIwKq8tsLw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/TCo9adv570f1kQnH9rIwKq8tsLw.mft rsync://rpki.ripe.net/repository/DEFAULT/TCo9adv570f1kQnH9rIwKq8tsLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:b0:99:bd:7b:c7:ac:25:ba:c8:c5:34:5d:b1:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c2a3d69dbf9ef47f59109c7f6b2302aaf2db0bc Validity Not Before: Dec 26 14:01:15 2025 GMT Not After : Dec 27 14:01:15 2025 GMT Subject: CN=4c54f1dc5cdb614cd2e45f41367e369799cee565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a8:74:9a:92:fe:ef:09:26:36:48:36:02:8d: 10:94:e9:40:4b:ee:39:e9:9b:c8:bd:aa:38:43:73: 3b:51:3b:96:48:02:b8:d9:5e:79:4f:ad:11:0c:00: 81:28:5d:da:41:71:ab:e3:30:ff:16:b9:67:b9:14: 49:2d:26:42:80:3a:5b:bb:ad:d3:7f:ca:86:fe:95: 1a:7a:c2:d3:06:30:1a:57:d9:55:22:03:b2:d6:bc: c8:3f:97:fd:0a:09:ba:97:70:ce:ca:63:a2:6d:95: 9b:2b:5d:6e:a3:24:92:9a:a2:f2:b0:da:f3:f9:52: 44:7f:10:ca:a8:47:67:26:26:78:06:5c:74:b0:28: c7:dc:60:61:4c:d7:ff:b2:4d:8d:62:74:c7:fe:72: 2d:e6:e4:36:34:1c:a6:1f:fd:46:42:e5:6c:f5:44: 70:d5:51:88:4a:88:de:a2:97:4d:01:e7:8c:25:98: ec:7e:81:86:38:c6:60:32:76:a1:09:19:d0:ee:8f: 6f:04:f4:cf:84:97:b6:99:95:93:40:81:de:69:06: 78:51:53:1b:be:c1:0b:dc:0c:2d:ff:9f:6e:07:2f: b5:22:a0:88:da:51:2f:36:b1:8b:ca:6a:4b:7c:95: e7:24:06:af:90:9e:ad:81:85:d2:32:65:4a:52:e9: 55:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:54:F1:DC:5C:DB:61:4C:D2:E4:5F:41:36:7E:36:97:99:CE:E5:65 X509v3 Authority Key Identifier: keyid:4C:2A:3D:69:DB:F9:EF:47:F5:91:09:C7:F6:B2:30:2A:AF:2D:B0:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCo9adv570f1kQnH9rIwKq8tsLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/TCo9adv570f1kQnH9rIwKq8tsLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8e9bed-b8ef-4484-8160-26a95097fb7e/1/TCo9adv570f1kQnH9rIwKq8tsLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:39:00:11:e1:49:74:0b:76:4c:1b:4d:88:e3:f3:2b:e6:34: 67:a2:0f:88:a0:80:d4:9a:8a:ca:05:e0:a8:b4:2c:4f:c5:d8: eb:eb:eb:ac:cb:8e:c8:af:f9:8d:7b:6d:9a:e7:35:83:6b:da: 6e:b9:51:da:bc:6b:3d:4c:3b:8e:2f:a2:44:72:ef:63:a9:97: be:ff:07:68:ec:71:1b:6a:33:77:83:14:ce:60:0a:35:b1:18: 1b:e1:65:a4:72:53:83:65:2e:9e:5a:48:35:c0:a1:51:4f:47: 3d:84:2e:99:65:9f:08:f1:7d:6d:1a:cd:5a:fe:2c:6e:33:be: 7f:a9:46:8c:91:7f:41:fb:39:7d:cb:16:8f:19:a6:3c:6b:b2: f5:84:25:6a:bc:b3:22:7f:de:17:9d:eb:8f:10:40:3d:c0:48: c6:47:3e:bf:a9:ed:3c:fb:a1:83:6c:24:0c:2f:b2:e1:64:ca: aa:2e:11:3e:32:e4:e3:ee:4f:c1:a0:a8:2e:66:f8:94:12:46: ef:77:4f:0b:cd:3a:b1:b3:e1:7f:16:66:83:05:9e:bd:5b:03: da:ca:68:32:12:6b:9e:39:d2:8b:07:97:44:89:68:4a:06:9a: 29:34:52:a1:74:06:00:ac:7d:59:51:be:15:7b:37:a4:37:b8: 2c:f9:ff:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9rCZvXvHrCW6yMU0XbFBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMmEzZDY5ZGJmOWVmNDdmNTkxMDljN2Y2YjIzMDJhYWYy ZGIwYmMwHhcNMjUxMjI2MTQwMTE1WhcNMjUxMjI3MTQwMTE1WjAzMTEwLwYDVQQD Eyg0YzU0ZjFkYzVjZGI2MTRjZDJlNDVmNDEzNjdlMzY5Nzk5Y2VlNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKh0mpL+7wkmNkg2Ao0QlOlAS+45 6ZvIvao4Q3M7UTuWSAK42V55T60RDACBKF3aQXGr4zD/FrlnuRRJLSZCgDpbu63T f8qG/pUaesLTBjAaV9lVIgOy1rzIP5f9Cgm6l3DOymOibZWbK11uoySSmqLysNrz +VJEfxDKqEdnJiZ4Blx0sCjH3GBhTNf/sk2NYnTH/nIt5uQ2NBymH/1GQuVs9URw 1VGISojeopdNAeeMJZjsfoGGOMZgMnahCRnQ7o9vBPTPhJe2mZWTQIHeaQZ4UVMb vsEL3Awt/59uBy+1IqCI2lEvNrGLympLfJXnJAavkJ6tgYXSMmVKUulVhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExU8dxc22FM0uRfQTZ+NpeZzuVlMB8GA1UdIwQY MBaAFEwqPWnb+e9H9ZEJx/ayMCqvLbC8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVENvOWFkdjU3MGYxa1FuSDlySXdLcTh0c0x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84ZTliZWQtYjhlZi00NDg0LTgxNjAt MjZhOTUwOTdmYjdlLzEvVENvOWFkdjU3MGYxa1FuSDlySXdLcTh0c0x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi84ZTliZWQtYjhlZi00NDg0LTgxNjAtMjZhOTUwOTdmYjdl LzEvVENvOWFkdjU3MGYxa1FuSDlySXdLcTh0c0x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzkAEeFJ dAt2TBtNiOPzK+Y0Z6IPiKCA1JqKygXgqLQsT8XY6+vrrMuOyK/5jXttmuc1g2va brlR2rxrPUw7ji+iRHLvY6mXvv8HaOxxG2ozd4MUzmAKNbEYG+FlpHJTg2UunlpI NcChUU9HPYQumWWfCPF9bRrNWv4sbjO+f6lGjJF/Qfs5fcsWjxmmPGuy9YQlaryz In/eF53rjxBAPcBIxkc+v6ntPPuhg2wkDC+y4WTKqi4RPjLk4+5PwaCoLmb4lBJG 73dPC806sbPhfxZmgwWevVsD2spoMhJrnjnSiweXRIloSgaaKTRSoXQGAKx9WVG+ FXs3pDe4LPn/tg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:15 2025 by rpki-client