This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft File: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft (raw, json) Hash identifier: i0vU98tYUf8Ai5HhlxI+KSSbMUd0l4932GyNogHRgyI= Subject key identifier: 8D:8F:B4:B7:7F:0C:4C:5B:4E:DF:B4:BF:84:14:68:03:13:9A:1F:84 Authority key identifier: 4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00 Certificate issuer: /CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000 Certificate serial: 019B3C100CA90E6E272A19E9C8C5D28D0066 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft Manifest number: 01A3 Signing time: Sat 20 Dec 2025 14:00:43 +0000 Manifest this update: Sat 20 Dec 2025 14:00:43 +0000 Manifest next update: Sun 21 Dec 2025 14:00:43 +0000 Files and hashes: 1: 1-U8-4zu6FwPD_h-JBtHqluBUugc.roa (hash: B3V6UvPy+Yv+8toI+28gvW2unDO4YgNU77Me0s0gt9U=) 2: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl (hash: DyI7JoWVlZCirBXEzezDN5/63ixkVSf6lKzR39xOlTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:0c:a9:0e:6e:27:2a:19:e9:c8:c5:d2:8d:00:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000 Validity Not Before: Dec 20 14:00:43 2025 GMT Not After : Dec 21 14:00:43 2025 GMT Subject: CN=8d8fb4b77f0c4c5b4edfb4bf84146803139a1f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:91:21:f7:cf:96:2f:40:2c:af:2c:52:6e:34: c2:c8:e6:69:76:c2:2c:55:21:c6:d5:ab:18:3b:6f: 9e:5d:b8:eb:ae:bb:ee:aa:6b:27:80:8e:c7:c7:20: 05:3c:69:e2:aa:39:12:df:a5:bc:00:e6:d6:62:d5: 78:02:54:68:b3:85:3e:1d:fe:b5:c5:16:69:13:cb: 19:a5:61:8c:5c:26:40:39:0a:ac:83:17:05:51:71: 99:6d:5f:6e:35:24:aa:5d:b5:bc:84:3e:6f:e7:61: 50:87:51:ed:4a:cd:8d:43:73:8a:5c:df:54:0c:63: 9c:65:74:e3:94:26:84:c9:9b:03:56:f1:53:b1:6c: 44:5c:e1:fe:91:ca:97:41:3e:e0:98:c4:f4:be:0c: 67:68:80:a1:bf:0b:37:0a:fc:42:f5:f3:10:24:51: d9:98:69:30:e8:87:1d:03:87:05:3e:64:05:a1:0c: 0d:11:a0:00:79:88:e2:31:f0:d1:6b:97:30:96:d9: 80:5c:b5:4b:35:73:13:3a:52:12:16:9d:00:f7:d9: 6e:9d:9b:ef:63:bc:d5:9f:6b:75:db:f7:c3:87:86: 87:15:e6:85:ab:f6:18:85:13:f7:8a:ac:9f:c2:14: be:b8:7c:92:bc:87:1c:79:57:17:70:1a:04:88:0c: 45:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8F:B4:B7:7F:0C:4C:5B:4E:DF:B4:BF:84:14:68:03:13:9A:1F:84 X509v3 Authority Key Identifier: keyid:4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e0:1f:c9:50:ba:25:65:58:6c:42:8f:f9:04:f9:5e:79:b7: 3e:14:4c:fb:51:47:60:d7:8b:3a:42:6f:fc:16:83:47:81:77: 18:d0:cc:79:37:bd:b5:8e:f4:cb:e1:89:88:26:26:4b:ec:c9: c3:6e:33:28:6a:51:9b:7a:2a:7f:c7:22:d7:d2:04:51:fe:9f: 85:d7:3b:e4:11:11:e9:20:bd:c5:9b:66:26:c8:38:48:3a:72: c5:99:a7:ee:3f:2c:cc:ac:77:e8:87:5c:07:85:c5:b9:03:d1: 11:af:3e:7e:bf:23:a0:d0:da:16:66:da:87:be:60:c2:e3:b3: ef:ec:6d:92:be:25:dc:3f:c8:8c:64:c1:b7:6b:05:b7:db:fd: 24:a7:4c:96:84:2d:b9:e5:16:f5:5e:58:95:ad:f0:a5:d9:7a: 03:1a:5b:53:7a:3b:93:9e:83:df:8f:c5:a7:78:6e:9c:67:1e: 29:8c:22:84:ab:4c:52:e3:a3:33:ef:29:ff:a8:6d:65:ca:e7: fa:92:44:0a:01:8a:2e:38:0e:47:41:0f:51:e9:41:94:ee:89: 52:b8:97:9b:e2:e8:41:7a:35:af:93:4a:4a:7a:b9:df:05:17: 1e:ea:09:0f:5f:89:11:52:af:37:19:61:7b:43:1e:83:b9:26: 2c:b3:73:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EAypDm4nKhnpyMXSjQBmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMGYzMWM2ZWZkYjlhNDQ1YjhmMTcyZjBiZTBkZmQ1MTQy YmUwMDAwHhcNMjUxMjIwMTQwMDQzWhcNMjUxMjIxMTQwMDQzWjAzMTEwLwYDVQQD Eyg4ZDhmYjRiNzdmMGM0YzViNGVkZmI0YmY4NDE0NjgwMzEzOWExZjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpEh98+WL0AsryxSbjTCyOZpdsIs VSHG1asYO2+eXbjrrrvuqmsngI7HxyAFPGniqjkS36W8AObWYtV4AlRos4U+Hf61 xRZpE8sZpWGMXCZAOQqsgxcFUXGZbV9uNSSqXbW8hD5v52FQh1HtSs2NQ3OKXN9U DGOcZXTjlCaEyZsDVvFTsWxEXOH+kcqXQT7gmMT0vgxnaIChvws3CvxC9fMQJFHZ mGkw6IcdA4cFPmQFoQwNEaAAeYjiMfDRa5cwltmAXLVLNXMTOlISFp0A99lunZvv Y7zVn2t12/fDh4aHFeaFq/YYhRP3iqyfwhS+uHySvIcceVcXcBoEiAxF5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2PtLd/DExbTt+0v4QUaAMTmh+EMB8GA1UdIwQY MBaAFE4PMcbv25pEW48XLwvg39UUK+AAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGc4eHh1X2Jta1JianhjdkMtRGYxUlFyNEFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hY2E3OTAtNjMyOS00MTRhLWJlZDUt YmFkMmNiNDgwOTEyLzEvVGc4eHh1X2Jta1JianhjdkMtRGYxUlFyNEFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9hY2E3OTAtNjMyOS00MTRhLWJlZDUtYmFkMmNiNDgwOTEy LzEvVGc4eHh1X2Jta1JianhjdkMtRGYxUlFyNEFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeAfyVC6 JWVYbEKP+QT5Xnm3PhRM+1FHYNeLOkJv/BaDR4F3GNDMeTe9tY70y+GJiCYmS+zJ w24zKGpRm3oqf8ci19IEUf6fhdc75BER6SC9xZtmJsg4SDpyxZmn7j8szKx36Idc B4XFuQPREa8+fr8joNDaFmbah75gwuOz7+xtkr4l3D/IjGTBt2sFt9v9JKdMloQt ueUW9V5Yla3wpdl6AxpbU3o7k56D34/Fp3hunGceKYwihKtMUuOjM+8p/6htZcrn +pJECgGKLjgOR0EPUelBlO6JUriXm+LoQXo1r5NKSnq53wUXHuoJD1+JEVKvNxlh e0Meg7kmLLNziA== -----END CERTIFICATE-----Generated at Sat Dec 20 17:17:56 2025 by rpki-client