This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft File: tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json) Hash identifier: 90iKLLMpjFmM7VX8qJonqlaW0HotY9OG4PqKYsd+NzA= Subject key identifier: 0E:36:67:FA:82:1E:D5:56:05:4B:C4:AB:7D:CA:9B:04:EB:09:9A:6B Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2 Certificate issuer: /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2 Certificate serial: 019B3D59C977C5B7D65E0F61C97DFD454D3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 20:00:52 +0000 Manifest this update: Sat 20 Dec 2025 20:00:52 +0000 Manifest next update: Sun 21 Dec 2025 20:00:52 +0000 Files and hashes: 1: 4yLFcyM54Hv8nF5ON-TIrD-1oYQ.roa (hash: hE+OT4FiIcXi0TRuDiRDYqpuBeR4hhUYci4sdFCd/CY=) 2: jKEy0LJLh7AqTPNLnCDWho1dIJ0.roa (hash: BKRsVG5h+FxIv9YJSObhtgL9EqcN1BIPxpc/4d7NHx4=) 3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: HjmV4qYeVOuYHAGfzqtWN92bAaQC7Ozcjw7r3Oaup68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:c9:77:c5:b7:d6:5e:0f:61:c9:7d:fd:45:4d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2 Validity Not Before: Dec 20 20:00:52 2025 GMT Not After : Dec 21 20:00:52 2025 GMT Subject: CN=0e3667fa821ed556054bc4ab7dca9b04eb099a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:03:d4:bf:de:56:56:c5:70:64:65:81:16:e4: c0:4a:28:a6:bd:c6:46:83:ea:d8:a6:73:60:0f:a7: ac:9b:d8:20:ce:d8:d1:cd:ce:43:42:ff:25:b4:94: 46:bb:2d:32:48:1c:2e:c4:0c:74:53:3b:1c:e1:53: 15:e3:a3:84:6e:3f:49:89:e1:d3:fa:b1:f0:bc:b0: 72:f0:57:84:ea:90:d6:c6:00:79:54:3f:d1:41:4d: 7d:90:7f:c9:d0:03:5c:af:f6:e8:4f:0e:63:7b:bf: e5:07:f9:2f:e8:4a:06:77:61:4f:2d:4e:53:10:59: b7:85:a2:de:03:cf:0e:19:28:4c:a8:b6:c6:6f:27: 63:66:e6:57:10:5a:cf:a6:c7:88:89:4e:08:97:64: d2:c4:3b:75:6d:bb:9c:02:f8:73:3a:3c:70:93:b4: 09:43:36:22:20:32:14:11:1e:16:d9:d4:bc:c0:c0: 70:66:8e:d5:40:32:8a:6a:c5:73:72:27:6b:af:46: f6:34:83:84:5e:58:4b:e6:15:70:6b:b0:3d:67:29: 40:69:f8:01:31:26:21:f9:72:28:04:79:d7:35:72: 42:1f:c4:d7:b3:2d:15:c1:97:a4:2a:f0:d3:ce:1f: c6:6b:b6:9e:51:ee:13:a7:a7:b6:87:e1:5f:da:2b: 7a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:36:67:FA:82:1E:D5:56:05:4B:C4:AB:7D:CA:9B:04:EB:09:9A:6B X509v3 Authority Key Identifier: keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:cc:94:a3:98:b5:df:66:41:c1:d4:c2:51:2f:eb:4a:06:28: 62:ea:cf:c2:b0:e1:37:90:ee:91:ee:2b:32:03:5e:c7:38:d9: 7c:c9:11:ab:15:b0:05:b9:fe:74:e3:30:60:e0:46:84:df:00: e7:73:71:12:e2:64:8f:ea:49:3c:74:30:20:36:b5:a6:b0:e2: 6e:97:78:e2:71:b0:23:20:94:1e:f4:6c:05:ec:50:54:e3:f6: 41:08:bd:52:02:c3:76:44:38:45:0f:ba:04:98:fc:46:7f:e3: 34:2f:67:50:8c:e8:92:12:a3:e1:4e:87:a2:de:10:c5:e6:5c: 20:7d:a8:a3:05:b5:3f:77:61:ef:70:75:04:04:17:1a:d4:28: e8:a2:a5:39:9c:9a:40:65:ba:04:86:15:2d:cf:e2:a1:e1:d7: ad:a8:fe:73:6d:c5:88:52:01:28:9a:74:d6:53:5b:a6:b1:00: e2:93:1f:b6:65:f7:eb:ac:c9:c5:00:41:31:d2:b1:25:db:6f: a5:7c:4e:45:f5:1a:52:e5:03:80:41:ad:6c:73:4d:50:a2:f6: 8a:ee:71:22:e3:d6:88:3a:07:1b:ab:33:07:b9:67:7b:a2:b1: 54:12:18:29:1c:f7:25:55:41:8c:25:e3:58:a9:7a:f4:00:9a: 9d:f1:9a:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wcl3xbfWXg9hyX39RU09MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZmFlYzRiOGQ5OTJkZDZiOWNkODlhODQ4OWQzYzNhNjUy YWVjZDIwHhcNMjUxMjIwMjAwMDUyWhcNMjUxMjIxMjAwMDUyWjAzMTEwLwYDVQQD EygwZTM2NjdmYTgyMWVkNTU2MDU0YmM0YWI3ZGNhOWIwNGViMDk5YTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQPUv95WVsVwZGWBFuTASiimvcZG g+rYpnNgD6esm9ggztjRzc5DQv8ltJRGuy0ySBwuxAx0Uzsc4VMV46OEbj9JieHT +rHwvLBy8FeE6pDWxgB5VD/RQU19kH/J0ANcr/boTw5je7/lB/kv6EoGd2FPLU5T EFm3haLeA88OGShMqLbGbydjZuZXEFrPpseIiU4Il2TSxDt1bbucAvhzOjxwk7QJ QzYiIDIUER4W2dS8wMBwZo7VQDKKasVzcidrr0b2NIOEXlhL5hVwa7A9ZylAafgB MSYh+XIoBHnXNXJCH8TXsy0VwZekKvDTzh/Ga7aeUe4Tp6e2h+Ff2it68wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA42Z/qCHtVWBUvEq33KmwTrCZprMB8GA1UdIwQY MBaAFLX67EuNmS3Wuc2JqEidPDplKuzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGZyc1M0MlpMZGE1elltb1NKMDhPbVVxN05JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82OGMyOTYtNjliMi00MDcwLTlmZjkt NDI0M2RlY2FkMzYwLzEvdGZyc1M0MlpMZGE1elltb1NKMDhPbVVxN05JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS82OGMyOTYtNjliMi00MDcwLTlmZjktNDI0M2RlY2FkMzYw LzEvdGZyc1M0MlpMZGE1elltb1NKMDhPbVVxN05JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsyUo5i1 32ZBwdTCUS/rSgYoYurPwrDhN5Duke4rMgNexzjZfMkRqxWwBbn+dOMwYOBGhN8A 53NxEuJkj+pJPHQwIDa1prDibpd44nGwIyCUHvRsBexQVOP2QQi9UgLDdkQ4RQ+6 BJj8Rn/jNC9nUIzokhKj4U6Hot4QxeZcIH2oowW1P3dh73B1BAQXGtQo6KKlOZya QGW6BIYVLc/ioeHXraj+c23FiFIBKJp01lNbprEA4pMftmX366zJxQBBMdKxJdtv pXxORfUaUuUDgEGtbHNNUKL2iu5xIuPWiDoHG6szB7lne6KxVBIYKRz3JVVBjCXj WKl69ACanfGavg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:52:43 2025 by rpki-client