This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft File: tcsrXq88wV3Us7I62LlHKlJAwDs.mft (raw, json) Hash identifier: jj4FvF8Qfo+/vduGHVDiKDilmAXmOjNMirC2FCR/nIE= Subject key identifier: EC:7E:27:FE:F5:8E:45:BF:23:04:F3:2B:70:13:44:28:68:7F:0B:67 Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b Certificate serial: 019B5CADA9377E1F37360705CA0F27DCC4B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft Manifest number: 017B Signing time: Fri 26 Dec 2025 22:00:43 +0000 Manifest this update: Fri 26 Dec 2025 22:00:43 +0000 Manifest next update: Sat 27 Dec 2025 22:00:43 +0000 Files and hashes: 1: 4I0Ig-sZsSlS-ISQfhvyI-hIXNs.roa (hash: JlPqPVzZ1fRapenzkzSS/av8yhZnv6+RiIsubYAxBXc=) 2: Ay7JoslT6EAyHRaULsBRtIZWwog.roa (hash: gTv3k9NPlg2vVpHAiGMl3DtLPA9ZFxKifPWXSsGIZk8=) 3: a9i8eCPzOCR2a7g49i_eP0oTcMg.roa (hash: CLgIXtXHGLkSKlPAdABLQyRziV9nANmmCJ4xG0uixD8=) 4: tcsrXq88wV3Us7I62LlHKlJAwDs.crl (hash: 71UP9MNV9OmBABUR1WODOq1I3Agv9YAPvwQSbST0I8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ad:a9:37:7e:1f:37:36:07:05:ca:0f:27:dc:c4:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b Validity Not Before: Dec 26 22:00:43 2025 GMT Not After : Dec 27 22:00:43 2025 GMT Subject: CN=ec7e27fef58e45bf2304f32b70134428687f0b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:43:72:d2:c0:5f:17:d1:87:d6:92:a5:ab:9e: 81:94:b2:49:ef:df:7f:e8:be:72:0b:93:2e:e4:9a: bc:31:3e:b3:2c:f0:b6:e4:ac:11:89:2a:9f:00:cd: 3d:07:d0:89:c6:01:5e:be:7a:d9:b6:bd:41:09:c7: 48:53:5b:e0:ec:ad:aa:69:5b:9f:68:69:4b:65:16: 61:07:ea:04:c7:51:b6:c8:74:df:d5:49:a8:37:67: a6:eb:42:3d:62:1b:0a:7d:bf:d4:e3:7f:81:b9:86: e0:7b:f9:2c:0e:35:43:f3:f8:c0:6c:91:8e:d2:7d: 37:6e:f8:81:e7:18:9c:4d:95:0d:7b:46:7d:71:30: 3c:fd:33:49:0a:a2:ea:61:d6:3b:dd:7c:c9:4a:b2: 92:3c:4f:e2:b9:64:f2:05:9b:7c:96:b3:69:8c:8e: 2b:35:93:13:2c:13:41:56:b4:39:f4:14:26:a2:0d: 7c:ef:f3:dd:2d:d8:9c:37:76:ee:bd:ec:f4:25:d2: 71:9d:e0:7b:18:db:49:13:30:d6:25:f5:f7:fe:a9: ad:7f:32:d2:4a:db:27:57:24:af:73:8a:04:a1:93: d0:bc:89:53:69:07:1b:b0:34:e4:8a:f8:75:c8:75: 62:a3:24:a7:72:a9:37:39:06:ab:ec:85:28:2e:fa: 96:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7E:27:FE:F5:8E:45:BF:23:04:F3:2B:70:13:44:28:68:7F:0B:67 X509v3 Authority Key Identifier: keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:32:20:20:98:47:85:ae:1a:cd:e4:60:93:f1:2e:2c:cc:f7: 53:fa:be:89:77:98:be:a9:00:70:c1:03:0c:01:8e:6a:62:d9: 1d:cf:c4:fb:26:35:7c:3b:c8:e8:c1:af:f1:2f:9e:31:8f:9d: a8:6e:15:f9:85:08:24:f7:1e:7f:a9:83:af:9e:31:be:b4:2e: 04:ff:1e:69:cf:e2:98:56:87:0c:28:9c:1e:88:93:03:f1:ed: 69:c8:2f:b6:4c:7e:aa:86:1a:f3:45:35:ea:33:4d:6c:bb:4d: ad:03:e2:39:41:7f:21:84:15:b4:80:64:64:a5:ab:84:13:ca: d0:fa:56:95:c0:2c:f5:e1:7c:00:29:a0:71:89:60:99:f5:39: 43:e1:fe:0d:4a:52:e4:3b:22:8c:e2:3b:01:c0:c9:0a:7a:69: 00:e6:07:fd:cc:e1:e3:11:81:a6:d6:ca:16:47:a7:60:7d:fe: 25:6c:4c:55:1b:a7:4e:e8:6b:34:7c:87:ab:2d:a6:25:60:87: 95:68:59:a7:63:98:8c:c4:23:f3:78:7d:b6:67:e5:c0:fb:d1: e7:f4:97:88:80:3e:d0:7b:78:1a:5b:25:f1:c0:42:d7:c5:6a: 10:c3:3c:50:4b:35:f0:a8:06:19:5f:a5:d7:15:a8:3e:a9:1c: 98:aa:be:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrak3fh83NgcFyg8n3MS1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1Y2IyYjVlYWYzY2MxNWRkNGIzYjIzYWQ4Yjk0NzJhNTI0 MGMwM2IwHhcNMjUxMjI2MjIwMDQzWhcNMjUxMjI3MjIwMDQzWjAzMTEwLwYDVQQD EyhlYzdlMjdmZWY1OGU0NWJmMjMwNGYzMmI3MDEzNDQyODY4N2YwYjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzENy0sBfF9GH1pKlq56BlLJJ799/ 6L5yC5Mu5Jq8MT6zLPC25KwRiSqfAM09B9CJxgFevnrZtr1BCcdIU1vg7K2qaVuf aGlLZRZhB+oEx1G2yHTf1UmoN2em60I9YhsKfb/U43+BuYbge/ksDjVD8/jAbJGO 0n03bviB5xicTZUNe0Z9cTA8/TNJCqLqYdY73XzJSrKSPE/iuWTyBZt8lrNpjI4r NZMTLBNBVrQ59BQmog187/PdLdicN3buvez0JdJxneB7GNtJEzDWJfX3/qmtfzLS StsnVySvc4oEoZPQvIlTaQcbsDTkivh1yHVioySncqk3OQar7IUoLvqWzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOx+J/71jkW/IwTzK3ATRChofwtnMB8GA1UdIwQY MBaAFLXLK16vPMFd1LOyOti5RypSQMA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83OTVlZDktOGZhZC00YzQ0LTg1ODMt MDZjYTcwOWEzYzU5LzEvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS83OTVlZDktOGZhZC00YzQ0LTg1ODMtMDZjYTcwOWEzYzU5 LzEvdGNzclhxODh3VjNVczdJNjJMbEhLbEpBd0RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjIgIJhH ha4azeRgk/EuLMz3U/q+iXeYvqkAcMEDDAGOamLZHc/E+yY1fDvI6MGv8S+eMY+d qG4V+YUIJPcef6mDr54xvrQuBP8eac/imFaHDCicHoiTA/Htacgvtkx+qoYa80U1 6jNNbLtNrQPiOUF/IYQVtIBkZKWrhBPK0PpWlcAs9eF8ACmgcYlgmfU5Q+H+DUpS 5DsijOI7AcDJCnppAOYH/czh4xGBptbKFkenYH3+JWxMVRunTuhrNHyHqy2mJWCH lWhZp2OYjMQj83h9tmflwPvR5/SXiIA+0Ht4Glsl8cBC18VqEMM8UEs18KgGGV+l 1xWoPqkcmKq+4A== -----END CERTIFICATE-----Generated at Fri Dec 26 23:04:15 2025 by rpki-client