This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft File: Tc_QAaZn4WRatAxbvtifWScAT4U.mft (raw, json) Hash identifier: lBtNTLloW2aewURFHC3jbJ957cLzIRVeSfP8jgjPXSo= Subject key identifier: 9A:9D:18:40:86:9A:FC:E1:5A:DB:7F:E7:59:FD:7F:59:2E:BC:64:E1 Authority key identifier: 4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85 Certificate issuer: /CN=4dcfd001a667e1645ab40c5bbed89f5927004f85 Certificate serial: 019B4A715CB6E711A669B4336E93A60E887D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft Manifest number: 0BBA Signing time: Tue 23 Dec 2025 09:01:41 +0000 Manifest this update: Tue 23 Dec 2025 09:01:41 +0000 Manifest next update: Wed 24 Dec 2025 09:01:41 +0000 Files and hashes: 1: Tc_QAaZn4WRatAxbvtifWScAT4U.crl (hash: VcC3QSOp0OkdVAOD6PWY2Lqzuc32Vl9J11zNUOVhWu4=) 2: jdMFheDlAIgKvi6YF6C6Rm8zqwg.roa (hash: 0uopvNrGmCf9iLiAY1t8oTN34NZD3FhGP5c/aZny+2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:5c:b6:e7:11:a6:69:b4:33:6e:93:a6:0e:88:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dcfd001a667e1645ab40c5bbed89f5927004f85 Validity Not Before: Dec 23 09:01:41 2025 GMT Not After : Dec 24 09:01:41 2025 GMT Subject: CN=9a9d1840869afce15adb7fe759fd7f592ebc64e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:72:f2:8d:1e:43:6b:6a:66:83:a0:77:d3: dc:db:4b:31:9c:39:65:ea:5e:7c:24:79:db:40:98: 9d:8e:6f:d3:45:5c:79:23:9b:fc:f7:90:9d:e9:48: b0:a5:c4:16:88:08:83:80:07:1b:18:6f:57:59:44: bf:c6:24:21:ea:0d:47:b1:62:2a:f0:d3:d3:46:db: b0:6c:7a:a1:c7:48:19:5c:1b:9f:e8:8a:ac:12:dc: 6a:77:60:45:a5:1b:bb:91:26:a0:24:7e:32:c5:34: 5a:60:b0:6a:ca:a0:68:8c:dd:df:32:7d:03:8f:7c: d0:bf:82:70:88:8b:6c:52:4d:2c:07:3e:a3:61:15: c0:76:17:5b:b6:06:35:e6:a4:41:ae:d3:99:ee:ec: ed:09:f9:38:69:e0:33:30:c4:f1:51:78:15:d0:eb: dd:08:51:72:7e:d5:0a:d5:1b:9b:68:3c:6b:48:aa: 41:de:4f:cf:e1:ac:0d:b1:4f:a1:dd:94:b3:16:f4: e8:83:8e:ed:8c:2c:8a:84:d8:f9:85:d1:47:9c:a7: 30:8c:ed:01:98:15:f6:ba:97:b3:1a:48:11:bc:ee: 6b:93:91:90:3e:a5:fb:e5:23:6c:85:57:a9:77:c5: 9a:5f:e2:78:4b:35:9a:fe:a5:31:76:c9:56:e7:0f: 55:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9D:18:40:86:9A:FC:E1:5A:DB:7F:E7:59:FD:7F:59:2E:BC:64:E1 X509v3 Authority Key Identifier: keyid:4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:32:41:63:32:9e:2f:9a:3e:f2:ce:d0:53:68:8c:5d:55:f4: b6:6b:ee:66:fd:c0:a0:78:57:a3:2a:d6:e6:4a:0f:1a:fd:9a: b1:75:ab:4f:c9:34:f4:15:a5:83:a0:0c:5f:c5:d7:4c:bd:1f: 75:65:35:aa:22:89:f7:a6:18:15:6b:7f:38:5d:b1:5d:4e:f5: 73:e1:8d:6d:52:4e:56:a1:eb:4f:13:24:fd:2a:3d:d8:de:20: d9:d3:28:38:e3:55:74:bd:b2:fc:f1:a5:47:84:bb:c6:07:41: a7:58:7e:a2:ec:b2:ed:06:fc:08:ce:8b:4b:b1:01:4d:37:92: 6a:ee:76:bb:3e:8a:a3:12:41:9c:41:39:94:c0:36:66:18:81: 16:bc:32:6a:18:1a:00:38:59:72:4c:02:89:2a:89:ba:8d:34: b6:86:0e:77:3f:68:78:8e:00:bf:ae:a3:26:48:d4:e3:de:22: 99:de:bd:7d:92:06:87:ab:cd:60:88:73:d0:dd:d7:f2:79:e9: 97:91:fa:7c:37:e4:a0:3e:19:b5:b4:88:2b:8f:e4:0a:ef:ef: f7:b7:38:c2:1f:9d:cf:19:e7:53:4b:1a:44:cb:14:cd:8e:4b: 87:45:68:0d:17:9c:c4:b1:05:de:84:2d:ed:df:ff:14:b3:33: 6d:58:18:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcVy25xGmabQzbpOmDoh9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkY2ZkMDAxYTY2N2UxNjQ1YWI0MGM1YmJlZDg5ZjU5Mjcw MDRmODUwHhcNMjUxMjIzMDkwMTQxWhcNMjUxMjI0MDkwMTQxWjAzMTEwLwYDVQQD Eyg5YTlkMTg0MDg2OWFmY2UxNWFkYjdmZTc1OWZkN2Y1OTJlYmM2NGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjhy8o0eQ2tqZoOgd9Pc20sxnDll 6l58JHnbQJidjm/TRVx5I5v895Cd6UiwpcQWiAiDgAcbGG9XWUS/xiQh6g1HsWIq 8NPTRtuwbHqhx0gZXBuf6IqsEtxqd2BFpRu7kSagJH4yxTRaYLBqyqBojN3fMn0D j3zQv4JwiItsUk0sBz6jYRXAdhdbtgY15qRBrtOZ7uztCfk4aeAzMMTxUXgV0Ovd CFFyftUK1RubaDxrSKpB3k/P4awNsU+h3ZSzFvTog47tjCyKhNj5hdFHnKcwjO0B mBX2upezGkgRvO5rk5GQPqX75SNshVepd8WaX+J4SzWa/qUxdslW5w9V7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqdGECGmvzhWtt/51n9f1kuvGThMB8GA1UdIwQY MBaAFE3P0AGmZ+FkWrQMW77Yn1knAE+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81YmE4MWUtZTI3NC00YmEzLTk1NGQt YmRmOTRhM2ZiMzJkLzEvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC81YmE4MWUtZTI3NC00YmEzLTk1NGQtYmRmOTRhM2ZiMzJk LzEvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1TJBYzKe L5o+8s7QU2iMXVX0tmvuZv3AoHhXoyrW5koPGv2asXWrT8k09BWlg6AMX8XXTL0f dWU1qiKJ96YYFWt/OF2xXU71c+GNbVJOVqHrTxMk/So92N4g2dMoOONVdL2y/PGl R4S7xgdBp1h+ouyy7Qb8CM6LS7EBTTeSau52uz6KoxJBnEE5lMA2ZhiBFrwyahga ADhZckwCiSqJuo00toYOdz9oeI4Av66jJkjU494imd69fZIGh6vNYIhz0N3X8nnp l5H6fDfkoD4ZtbSIK4/kCu/v97c4wh+dzxnnU0saRMsUzY5Lh0VoDRecxLEF3oQt 7d//FLMzbVgY0g== -----END CERTIFICATE-----Generated at Tue Dec 23 10:46:52 2025 by rpki-client