This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft File: TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft (raw, json) Hash identifier: Ua7Ux0UZUhAQSgKtkPwUMQ5EJqhg0Z905LY5vE0zWL4= Subject key identifier: 98:29:D2:B6:A3:77:2E:85:03:FC:92:73:F5:88:EE:FE:10:EF:D5:09 Authority key identifier: 4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C Certificate issuer: /CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c Certificate serial: 019B3FB63F7295173CCFD321BBAB27081F42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft Manifest number: 084A Signing time: Sun 21 Dec 2025 07:01:06 +0000 Manifest this update: Sun 21 Dec 2025 07:01:06 +0000 Manifest next update: Mon 22 Dec 2025 07:01:06 +0000 Files and hashes: 1: TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl (hash: WpTnYS2mD8U7aTyCoVOyuUPjO/hI7oJJCN5pcUHHdX0=) 2: UJ9_FeIGOOjgZRJDmb3mfb4BJZs.roa (hash: Iv5M96f/4AyXNBfTo49Zxh554cDlKiW0Et8FXEewisM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:3f:72:95:17:3c:cf:d3:21:bb:ab:27:08:1f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c Validity Not Before: Dec 21 07:01:06 2025 GMT Not After : Dec 22 07:01:06 2025 GMT Subject: CN=9829d2b6a3772e8503fc9273f588eefe10efd509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3f:ac:a3:19:a0:4a:1c:2f:a9:34:7d:83:de: 16:d7:20:8a:81:66:57:63:04:77:64:b6:07:2c:bf: ae:ba:d9:67:12:aa:4d:d1:b6:fb:8d:13:d3:63:e2: 78:fb:60:89:ba:4b:1f:70:fd:75:08:10:dd:bd:2f: 78:0c:12:af:cf:8a:b4:c7:bc:84:47:27:71:1f:55: 09:71:7e:88:69:29:ad:9e:6d:b2:3b:06:2c:d5:12: 51:f0:74:46:ec:1a:4d:27:f3:e2:a6:5a:b4:25:2b: 6d:41:28:6f:ba:3b:b3:89:f9:b6:58:64:b5:a3:c4: ae:55:ff:29:ae:de:06:e1:a3:df:5e:20:13:29:cc: 15:0a:05:f1:8d:93:e2:45:33:c9:ac:5a:a7:d6:71: 97:5d:1f:e5:c8:fd:71:f0:a6:ba:c4:a7:8f:ca:bc: a2:6a:c4:6a:b5:d1:23:48:dd:b3:73:26:ce:c2:ef: 08:16:68:18:be:36:e6:c7:32:f0:a1:a7:84:62:54: e1:3c:f3:60:39:58:b7:9c:22:7d:55:03:ed:f8:27: c4:82:3f:a2:33:f1:2f:cc:87:9a:c7:f0:d3:69:ff: 18:f8:af:63:76:c5:42:e5:5f:6a:dc:f4:84:c4:d1: d7:a2:82:2d:90:97:e9:d2:59:88:17:c5:a5:2b:71: 7a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:29:D2:B6:A3:77:2E:85:03:FC:92:73:F5:88:EE:FE:10:EF:D5:09 X509v3 Authority Key Identifier: keyid:4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:c4:ef:69:6b:39:b2:bd:3f:01:7d:83:06:ca:39:b6:31:4d: d4:58:06:b3:bb:48:9d:c4:35:27:3d:c9:bb:dc:9f:45:82:3e: a0:05:a6:24:54:50:98:54:6c:18:cd:18:f0:7f:05:a3:77:43: a5:c7:b8:82:e9:3e:b0:8f:61:91:61:24:67:68:bf:ee:31:fc: 5f:bb:e0:1e:ed:2c:26:29:14:e9:84:25:99:f4:23:91:37:ea: 14:d3:6b:81:dc:d3:5d:b9:bd:01:a4:0d:83:9d:83:f4:a0:08: 85:d9:25:99:2d:f7:72:62:85:de:b3:46:55:b3:fc:4e:34:46: 1b:da:43:80:4d:9a:61:31:b1:a2:d6:34:67:7b:3f:d1:ba:be: c4:07:43:eb:28:53:a1:6d:3d:17:23:cf:24:37:26:a4:03:79: 6d:d5:a3:d5:87:d9:4b:f1:9c:62:44:e2:e9:63:2f:4f:35:7a: fb:1d:cb:c7:9d:ad:e1:26:74:89:5f:bc:57:3a:92:02:71:e1: b8:cf:7e:ba:8d:ac:39:ac:37:7b:76:06:d0:31:37:7c:1a:dd: ee:b8:82:02:c5:ee:3b:6c:e8:31:0b:de:6e:e9:7f:c9:28:36: 86:56:27:5e:0d:10:c9:8d:be:8e:77:33:45:09:a9:ad:2a:c6: c4:4e:bd:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tj9ylRc8z9Mhu6snCB9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZjljM2VjNDdmY2NmMDFkOTMwNWZlMGQ3ZDQ4MWIzMDZi MGQ0OGMwHhcNMjUxMjIxMDcwMTA2WhcNMjUxMjIyMDcwMTA2WjAzMTEwLwYDVQQD Eyg5ODI5ZDJiNmEzNzcyZTg1MDNmYzkyNzNmNTg4ZWVmZTEwZWZkNTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD+soxmgShwvqTR9g94W1yCKgWZX YwR3ZLYHLL+uutlnEqpN0bb7jRPTY+J4+2CJuksfcP11CBDdvS94DBKvz4q0x7yE RydxH1UJcX6IaSmtnm2yOwYs1RJR8HRG7BpNJ/Piplq0JSttQShvujuzifm2WGS1 o8SuVf8prt4G4aPfXiATKcwVCgXxjZPiRTPJrFqn1nGXXR/lyP1x8Ka6xKePyryi asRqtdEjSN2zcybOwu8IFmgYvjbmxzLwoaeEYlThPPNgOVi3nCJ9VQPt+CfEgj+i M/EvzIeax/DTaf8Y+K9jdsVC5V9q3PSExNHXooItkJfp0lmIF8WlK3F6IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgp0rajdy6FA/ySc/WI7v4Q79UJMB8GA1UdIwQY MBaAFEz5w+xH/M8B2TBf4NfUgbMGsNSMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFBuRDdFZjh6d0haTUZfZzE5U0Jzd2F3MUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iM2ZhNjQtZjhiMS00NGU4LWFiYTYt ODYwMTY2MzM5NWViLzEvVFBuRDdFZjh6d0haTUZfZzE5U0Jzd2F3MUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9iM2ZhNjQtZjhiMS00NGU4LWFiYTYtODYwMTY2MzM5NWVi LzEvVFBuRDdFZjh6d0haTUZfZzE5U0Jzd2F3MUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcTvaWs5 sr0/AX2DBso5tjFN1FgGs7tIncQ1Jz3Ju9yfRYI+oAWmJFRQmFRsGM0Y8H8Fo3dD pce4guk+sI9hkWEkZ2i/7jH8X7vgHu0sJikU6YQlmfQjkTfqFNNrgdzTXbm9AaQN g52D9KAIhdklmS33cmKF3rNGVbP8TjRGG9pDgE2aYTGxotY0Z3s/0bq+xAdD6yhT oW09FyPPJDcmpAN5bdWj1YfZS/GcYkTi6WMvTzV6+x3Lx52t4SZ0iV+8VzqSAnHh uM9+uo2sOaw3e3YG0DE3fBrd7riCAsXuO2zoMQvebul/ySg2hlYnXg0QyY2+jncz RQmprSrGxE69yg== -----END CERTIFICATE-----Generated at Sun Dec 21 14:39:04 2025 by rpki-client