This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json) Hash identifier: tBzgwUa2BG85K5fjLr8DzcdBrJerjuoS+Yv/3hNDrp8= Subject key identifier: B7:C8:0A:A8:F9:3A:F7:47:19:A3:C4:B8:78:3A:1C:09:8F:A8:DC:83 Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0 Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0 Certificate serial: 019B104A66C7C892D1674D6D1C59BBB7BAFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft Manifest number: 0C27 Signing time: Fri 12 Dec 2025 02:01:09 +0000 Manifest this update: Fri 12 Dec 2025 02:01:09 +0000 Manifest next update: Sat 13 Dec 2025 02:01:09 +0000 Files and hashes: 1: E8fqlMMExB61QIsEKMENcZNpWcs.roa (hash: BmnUAt4AevLzEKuzLNe+ibP+z5vcZguaEireBbRJdHM=) 2: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: UmGlAh64iGUXJr+SLMkKQmw17bIFOGbVLqYTfU4tDJc=) 3: gXlhbbxVLQVqCMGvhejieNdtoBY.roa (hash: 8u7C6SqKmEB/oIEa7cYGrPkrur0B3bFj0WV0Kh36+qQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:4a:66:c7:c8:92:d1:67:4d:6d:1c:59:bb:b7:ba:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0 Validity Not Before: Dec 12 02:01:09 2025 GMT Not After : Dec 13 02:01:09 2025 GMT Subject: CN=b7c80aa8f93af74719a3c4b8783a1c098fa8dc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:7b:cb:80:6a:54:d2:4f:a9:cd:25:0e:3c: 64:a5:8c:d3:ae:3a:ac:4b:15:c0:84:1b:f3:fe:9e: 5c:ea:fb:3d:d8:90:1a:33:9d:77:84:2f:af:1d:51: f4:ac:e8:e7:5e:65:04:81:30:3c:95:bf:c0:91:62: 4b:8c:68:4d:14:90:d3:7c:69:9a:84:c2:c4:07:98: 60:12:a4:0f:10:8a:c1:4b:98:26:9e:ce:74:57:51: 5e:0f:4f:c5:b2:ff:24:47:05:17:26:81:f9:c0:9a: d2:b6:67:36:73:d1:b7:80:68:2d:b0:de:b4:59:52: fb:bf:67:93:5f:b6:7d:62:6d:4e:5c:b7:62:24:d2: a2:b6:eb:25:d7:d4:11:e8:13:6d:2d:8a:fe:cd:f6: 70:96:d5:8f:81:8e:6b:2b:f2:fd:d9:33:09:77:5a: 66:b6:23:b5:52:21:f5:1d:8e:43:12:5a:d9:fa:62: 28:4e:00:35:69:f4:6a:de:34:be:70:ed:6f:c3:6b: 8a:12:2a:42:92:16:48:64:3a:3b:01:42:69:8c:24: 4c:e5:92:4a:75:76:ef:9f:eb:e7:4e:0e:e7:00:16: 79:85:f7:83:44:ba:49:99:ff:c1:22:ea:f0:ac:84: 1c:d9:84:f4:13:07:ab:6e:58:f5:96:4a:bf:63:f6: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C8:0A:A8:F9:3A:F7:47:19:A3:C4:B8:78:3A:1C:09:8F:A8:DC:83 X509v3 Authority Key Identifier: keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:2c:da:17:a1:db:63:49:de:60:a3:f4:7c:83:60:b7:44:98: 9f:a3:dc:75:c3:5c:35:87:02:b5:8e:5a:fa:41:55:7e:90:85: 5d:79:81:29:10:90:67:c8:5e:37:7d:49:f6:60:ce:61:6c:e1: ec:5d:dd:ad:68:ef:ca:89:28:dc:32:82:26:6f:73:ee:77:c3: da:13:ef:1e:69:5f:95:8d:4b:f4:6c:e9:52:d6:90:03:64:c1: d2:b6:ba:ab:ca:fe:a8:97:92:ff:f3:99:0a:79:3c:c7:a0:c8: bb:e7:be:b2:0b:0f:97:92:a6:61:aa:bd:3c:09:81:15:b2:3e: 4f:fe:75:1d:51:44:6e:fa:6e:35:2f:7e:1d:79:e2:c2:8e:ca: 87:1e:c3:67:8d:a9:c1:86:f4:d2:4c:25:94:98:2a:c9:72:e7: 11:51:19:8f:73:2a:d8:6e:fe:90:e8:05:80:4d:9a:28:74:da: 4d:f2:3d:e5:86:1b:6c:8b:24:2e:17:4b:c3:d2:9f:fd:73:b4: 96:bc:39:44:d8:e9:19:a0:52:d4:49:6d:68:e7:2b:08:1c:9b: d1:a2:22:93:98:06:8d:87:af:70:d4:bb:c2:87:61:be:d3:69: a1:fd:a7:78:9c:d8:d5:17:6c:bb:cc:1a:ed:0a:d0:18:c7:8f: be:a4:7c:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSmbHyJLRZ01tHFm7t7r7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMjNlMmVkYjMyMWUxYThhNWNlOWVlM2UyZDk1YWE0MGYw ZGU4YTAwHhcNMjUxMjEyMDIwMTA5WhcNMjUxMjEzMDIwMTA5WjAzMTEwLwYDVQQD EyhiN2M4MGFhOGY5M2FmNzQ3MTlhM2M0Yjg3ODNhMWMwOThmYThkYzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRd7y4BqVNJPqc0lDjxkpYzTrjqs SxXAhBvz/p5c6vs92JAaM513hC+vHVH0rOjnXmUEgTA8lb/AkWJLjGhNFJDTfGma hMLEB5hgEqQPEIrBS5gmns50V1FeD0/Fsv8kRwUXJoH5wJrStmc2c9G3gGgtsN60 WVL7v2eTX7Z9Ym1OXLdiJNKitusl19QR6BNtLYr+zfZwltWPgY5rK/L92TMJd1pm tiO1UiH1HY5DElrZ+mIoTgA1afRq3jS+cO1vw2uKEipCkhZIZDo7AUJpjCRM5ZJK dXbvn+vnTg7nABZ5hfeDRLpJmf/BIurwrIQc2YT0Ewerblj1lkq/Y/asVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfICqj5OvdHGaPEuHg6HAmPqNyDMB8GA1UdIwQY MBaAFE0j4u2zIeGopc6e4+LZWqQPDeigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNGUwN2UtMTVmYy00OTQyLTg0MmEt NTM4NTA5ZjNhNzg5LzEvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lNGUwN2UtMTVmYy00OTQyLTg0MmEtNTM4NTA5ZjNhNzg5 LzEvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyzaF6Hb Y0neYKP0fINgt0SYn6PcdcNcNYcCtY5a+kFVfpCFXXmBKRCQZ8heN31J9mDOYWzh 7F3drWjvyoko3DKCJm9z7nfD2hPvHmlflY1L9GzpUtaQA2TB0ra6q8r+qJeS//OZ Cnk8x6DIu+e+sgsPl5KmYaq9PAmBFbI+T/51HVFEbvpuNS9+HXniwo7Khx7DZ42p wYb00kwllJgqyXLnEVEZj3Mq2G7+kOgFgE2aKHTaTfI95YYbbIskLhdLw9Kf/XO0 lrw5RNjpGaBS1EltaOcrCByb0aIik5gGjYevcNS7wodhvtNpof2neJzY1Rdsu8wa 7QrQGMePvqR8lA== -----END CERTIFICATE-----Generated at Fri Dec 12 08:02:16 2025 by rpki-client