This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft File: TKvzOws4CIj-HjuA7aSLF4G7dwk.mft (raw, json) Hash identifier: 4GTJvNoLE3sxrAoPuAPM96HxTBGSHBS+Ekjhzg8DFo4= Subject key identifier: 14:94:A8:F3:8D:B5:54:75:BD:4A:45:D9:F1:C6:D1:57:75:8A:7E:FB Authority key identifier: 4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09 Certificate issuer: /CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709 Certificate serial: 019B59766E09920F4D60BF133F7F898149B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 07:01:32 +0000 Manifest this update: Fri 26 Dec 2025 07:01:32 +0000 Manifest next update: Sat 27 Dec 2025 07:01:32 +0000 Files and hashes: 1: Ej6AGqgrDcCEmdxGQ51_3en2bK0.roa (hash: iJ7FETE7qwjnaLdIl0yVteeRiSysQ9U3gczbrqrkwXU=) 2: TKvzOws4CIj-HjuA7aSLF4G7dwk.crl (hash: SKtz9j82pcUAO8wMLi6JI3dlNb1mYdblCzfS3IHT4ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:6e:09:92:0f:4d:60:bf:13:3f:7f:89:81:49:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709 Validity Not Before: Dec 26 07:01:32 2025 GMT Not After : Dec 27 07:01:32 2025 GMT Subject: CN=1494a8f38db55475bd4a45d9f1c6d157758a7efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ce:c6:85:74:14:b6:cc:6f:e5:1a:ba:4a:51: 14:0d:dd:7d:af:73:3a:3c:c1:3b:8b:e0:cc:7f:d3: 99:ec:5d:c5:33:cb:0f:7c:3d:67:07:08:61:f8:d4: 7d:53:c2:59:d4:cb:73:c1:dc:6b:aa:44:07:3f:c7: 81:12:77:8a:63:ee:75:b9:16:9a:a9:4a:16:04:ec: 4c:d2:e9:d4:25:f6:9f:16:07:43:ee:71:29:45:72: d7:9f:fd:39:ff:c4:63:29:3a:e2:25:d5:b7:2f:69: e5:ed:fe:6e:a4:4e:69:37:7d:4a:1c:aa:ec:71:d9: 6b:4e:d9:09:6c:5e:78:42:6f:6d:80:52:4e:da:d8: 73:23:44:b9:ed:13:6f:98:73:97:46:33:35:19:74: 77:1f:68:01:09:c1:fb:67:33:fc:c8:10:4d:c8:50: 4d:ac:2a:78:77:18:e7:ff:e9:68:5d:8b:7b:d6:91: 61:14:98:36:f2:44:33:57:1d:5b:56:61:1e:2f:60: e5:2f:ae:4a:c5:29:bb:22:eb:62:79:3c:0d:f5:04: f9:6f:3c:82:a5:88:ac:da:eb:b4:e2:7a:69:a0:4f: 0f:91:00:40:c5:99:fe:e5:25:e2:97:df:5e:a2:e0: 91:b4:92:29:69:ac:75:ed:3a:d5:26:df:f2:5c:81: 51:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:94:A8:F3:8D:B5:54:75:BD:4A:45:D9:F1:C6:D1:57:75:8A:7E:FB X509v3 Authority Key Identifier: keyid:4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:19:dc:25:73:0c:15:3f:ef:93:e3:27:aa:59:63:5b:24:5d: 63:ba:a1:21:ce:85:cd:db:3f:83:c5:62:9d:da:da:41:b9:f0: 18:e7:54:a0:09:91:da:87:39:38:b7:b1:6b:8c:a5:d9:4e:a5: ee:08:65:5e:87:6b:5d:7a:b3:15:9f:ea:94:12:66:2b:4f:5d: bf:49:77:f2:b8:f5:13:e6:0c:d8:2a:96:b3:b6:26:fd:75:ea: 1d:8c:d3:96:35:b2:9c:07:c3:82:0f:4a:ca:eb:48:b4:c0:e9: 5f:19:10:14:d1:4e:34:d5:10:59:37:f3:b2:9b:77:f7:8e:6b: d3:55:14:f2:d9:ae:64:7b:cf:74:9d:b8:04:f6:4c:c7:01:c6: b8:e7:27:59:5e:3a:84:4a:df:fc:56:52:fc:b4:54:80:67:1f: b5:6c:3f:79:c4:12:b5:b3:97:2f:a6:44:0e:ee:51:51:6a:22: 9c:42:cd:ac:8f:d1:d4:a9:90:29:f0:20:29:86:ea:98:d1:dc: b4:7e:df:66:ad:0c:b0:9c:ac:56:e9:b7:71:a0:b8:8a:3b:cf: 18:c5:47:6a:3e:07:2f:64:5d:79:18:e2:cb:08:e4:b8:e0:1d: 9d:c5:51:4f:c8:04:7a:ed:b6:ce:a3:7d:2d:ea:fa:39:98:4f: 15:cb:67:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdm4Jkg9NYL8TP3+JgUmzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYWJmMzNiMGIzODA4ODhmZTFlM2I4MGVkYTQ4YjE3ODFi Yjc3MDkwHhcNMjUxMjI2MDcwMTMyWhcNMjUxMjI3MDcwMTMyWjAzMTEwLwYDVQQD EygxNDk0YThmMzhkYjU1NDc1YmQ0YTQ1ZDlmMWM2ZDE1Nzc1OGE3ZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts7GhXQUtsxv5Rq6SlEUDd19r3M6 PME7i+DMf9OZ7F3FM8sPfD1nBwhh+NR9U8JZ1MtzwdxrqkQHP8eBEneKY+51uRaa qUoWBOxM0unUJfafFgdD7nEpRXLXn/05/8RjKTriJdW3L2nl7f5upE5pN31KHKrs cdlrTtkJbF54Qm9tgFJO2thzI0S57RNvmHOXRjM1GXR3H2gBCcH7ZzP8yBBNyFBN rCp4dxjn/+loXYt71pFhFJg28kQzVx1bVmEeL2DlL65KxSm7IutieTwN9QT5bzyC pYis2uu04nppoE8PkQBAxZn+5SXil99eouCRtJIpaax17TrVJt/yXIFRbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSUqPONtVR1vUpF2fHG0Vd1in77MB8GA1UdIwQY MBaAFEyr8zsLOAiI/h47gO2kixeBu3cJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEt2ek93czRDSWotSGp1QTdhU0xGNEc3ZHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xODVhNDItY2I3Zi00MDU4LTg2ZjUt NDFhZTVmNGE1MDU1LzEvVEt2ek93czRDSWotSGp1QTdhU0xGNEc3ZHdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xODVhNDItY2I3Zi00MDU4LTg2ZjUtNDFhZTVmNGE1MDU1 LzEvVEt2ek93czRDSWotSGp1QTdhU0xGNEc3ZHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxncJXMM FT/vk+MnqlljWyRdY7qhIc6Fzds/g8VindraQbnwGOdUoAmR2oc5OLexa4yl2U6l 7ghlXodrXXqzFZ/qlBJmK09dv0l38rj1E+YM2CqWs7Ym/XXqHYzTljWynAfDgg9K yutItMDpXxkQFNFONNUQWTfzspt3945r01UU8tmuZHvPdJ24BPZMxwHGuOcnWV46 hErf/FZS/LRUgGcftWw/ecQStbOXL6ZEDu5RUWoinELNrI/R1KmQKfAgKYbqmNHc tH7fZq0MsJysVum3caC4ijvPGMVHaj4HL2RdeRjiywjkuOAdncVRT8gEeu22zqN9 Ler6OZhPFctnCA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:15 2025 by rpki-client