This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft File: tcr-HjrqL22RHtEHoIqv7peaT1E.mft (raw, json) Hash identifier: peDoxmysSQFqBoNyvsntG9BVFIWenh+nkp9if9LxzFc= Subject key identifier: DC:F2:A9:0A:48:C0:B7:2B:43:83:E5:4D:98:FD:32:0E:9B:98:1B:79 Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51 Certificate issuer: /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51 Certificate serial: 019B2FD54CD0035DD50CF4413006906F71D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft Manifest number: 0ACB Signing time: Thu 18 Dec 2025 05:01:06 +0000 Manifest this update: Thu 18 Dec 2025 05:01:06 +0000 Manifest next update: Fri 19 Dec 2025 05:01:06 +0000 Files and hashes: 1: Sk4oS4Jwout0TIyWtwTprBvECw8.roa (hash: d9eggJxjronzsMXpOOKPiqelR6UqHbuMYzc02e4+PZo=) 2: tcr-HjrqL22RHtEHoIqv7peaT1E.crl (hash: qZAiBBPwk9Nq9cz1whT5w/gcraRJGI749pcsHozOGAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:4c:d0:03:5d:d5:0c:f4:41:30:06:90:6f:71:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51 Validity Not Before: Dec 18 05:01:06 2025 GMT Not After : Dec 19 05:01:06 2025 GMT Subject: CN=dcf2a90a48c0b72b4383e54d98fd320e9b981b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:97:04:64:b1:aa:af:2b:86:a9:99:54:25:5b: 4c:a7:95:14:38:39:74:76:e5:ec:a2:57:a6:b4:5e: 30:c6:b1:b1:77:be:6d:f5:4b:28:15:4f:6f:aa:82: 54:1e:af:47:ec:39:12:f8:b9:bc:4d:2a:20:83:e4: 78:06:c5:4c:ab:c4:ca:ac:0b:e1:54:94:b9:0f:fd: 5d:c9:3a:88:37:6d:c0:a9:e2:00:ef:33:5e:86:c4: a7:23:cc:da:da:e9:99:3e:06:ca:b2:dc:3a:a0:6c: 87:b6:fb:69:4b:96:70:17:3d:05:8a:1c:5a:60:32: da:14:da:99:e3:1c:9f:e0:ec:0b:50:a2:00:a3:9f: e5:d6:c5:ed:d4:23:4c:da:39:05:82:5e:86:54:df: bc:58:84:88:3f:4c:3b:9f:55:3d:b2:3f:9f:96:14: 11:c2:9a:42:27:88:07:69:50:25:c0:0d:8d:bd:52: cc:7f:95:28:77:84:01:a3:f5:55:ae:b3:42:60:5f: 67:a1:46:a8:ce:3f:1e:88:74:63:e2:60:f4:0d:0b: 4d:b2:db:9d:35:f7:8c:79:73:d1:44:4b:4b:91:43: e1:95:c4:7b:4d:e2:a3:3d:56:9b:54:9c:67:23:b6: d1:ee:2e:92:8c:de:6a:83:d0:a8:89:e3:0f:99:af: 33:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F2:A9:0A:48:C0:B7:2B:43:83:E5:4D:98:FD:32:0E:9B:98:1B:79 X509v3 Authority Key Identifier: keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:66:d4:a1:73:c4:86:6f:ec:fe:79:b0:bf:23:14:f8:b7:af: 1e:e5:98:23:d8:02:e1:1a:78:d1:80:75:78:5d:b4:49:3c:44: 6a:ba:a6:6e:02:cb:de:1d:36:6d:03:16:c2:b7:40:d0:19:ac: ff:60:f5:c9:ef:8c:8a:71:73:6a:38:ac:7a:e6:b9:6b:3e:b8: 1a:51:13:34:ba:a9:3a:1b:69:6b:d4:58:ec:5e:c7:12:fe:b7: db:c4:19:a9:03:75:96:c4:10:67:59:4b:74:ff:94:a2:dc:1f: a5:d6:17:4f:9b:fe:3e:a0:ec:df:20:a8:60:f3:9d:a2:ed:94: de:7d:8e:d6:f6:74:49:01:81:ed:d1:d4:d9:9d:91:bf:c9:b4: 1d:46:04:ef:69:d6:52:f5:0a:89:96:1f:ec:98:47:20:0d:6d: 9e:77:62:29:5b:10:ed:a4:bd:9d:51:99:c1:ab:e2:f2:94:6e: 2f:74:10:fa:80:31:fd:3a:78:5e:f9:0f:ea:92:a8:b5:41:1c: f4:dc:16:dc:c5:87:91:e5:89:fb:eb:42:87:ad:63:9e:db:b8: 97:3c:7a:23:81:f1:01:0d:65:a0:56:5b:98:dc:e7:24:e8:66: 60:57:d2:a2:52:9e:b2:92:53:2d:88:39:3d:05:85:41:2e:0a: c1:bb:a8:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1UzQA13VDPRBMAaQb3HYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1Y2FmZTFlM2FlYTJmNmQ5MTFlZDEwN2EwOGFhZmVlOTc5 YTRmNTEwHhcNMjUxMjE4MDUwMTA2WhcNMjUxMjE5MDUwMTA2WjAzMTEwLwYDVQQD EyhkY2YyYTkwYTQ4YzBiNzJiNDM4M2U1NGQ5OGZkMzIwZTliOTgxYjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15cEZLGqryuGqZlUJVtMp5UUODl0 duXsolemtF4wxrGxd75t9UsoFU9vqoJUHq9H7DkS+Lm8TSogg+R4BsVMq8TKrAvh VJS5D/1dyTqIN23AqeIA7zNehsSnI8za2umZPgbKstw6oGyHtvtpS5ZwFz0Fihxa YDLaFNqZ4xyf4OwLUKIAo5/l1sXt1CNM2jkFgl6GVN+8WISIP0w7n1U9sj+flhQR wppCJ4gHaVAlwA2NvVLMf5Uod4QBo/VVrrNCYF9noUaozj8eiHRj4mD0DQtNstud NfeMeXPRREtLkUPhlcR7TeKjPVabVJxnI7bR7i6SjN5qg9CoieMPma8zGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzyqQpIwLcrQ4PlTZj9Mg6bmBt5MB8GA1UdIwQY MBaAFLXK/h466i9tkR7RB6CKr+6Xmk9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGNyLUhqcnFMMjJSSHRFSG9JcXY3cGVhVDFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi83N2Y5OWMtMzVjYi00N2E2LWJhYzMt Y2FiYTgxYzlhMTUyLzEvdGNyLUhqcnFMMjJSSHRFSG9JcXY3cGVhVDFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi83N2Y5OWMtMzVjYi00N2E2LWJhYzMtY2FiYTgxYzlhMTUy LzEvdGNyLUhqcnFMMjJSSHRFSG9JcXY3cGVhVDFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmbUoXPE hm/s/nmwvyMU+LevHuWYI9gC4Rp40YB1eF20STxEarqmbgLL3h02bQMWwrdA0Bms /2D1ye+MinFzajiseua5az64GlETNLqpOhtpa9RY7F7HEv6328QZqQN1lsQQZ1lL dP+UotwfpdYXT5v+PqDs3yCoYPOdou2U3n2O1vZ0SQGB7dHU2Z2Rv8m0HUYE72nW UvUKiZYf7JhHIA1tnndiKVsQ7aS9nVGZwavi8pRuL3QQ+oAx/Tp4XvkP6pKotUEc 9NwW3MWHkeWJ++tCh61jntu4lzx6I4HxAQ1loFZbmNznJOhmYFfSolKespJTLYg5 PQWFQS4Kwbuopw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:15:36 2025 by rpki-client