This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft File: TKE73qVPdrioVxKv22FRhrM4OME.mft (raw, json) Hash identifier: LeK4mzLDVIssfWEb2CVyuO+hXWnblDg5oSnU8ooHyB4= Subject key identifier: FB:9B:4A:78:53:0C:39:97:F9:35:A1:E8:2D:F2:7A:36:6B:F2:67:63 Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1 Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1 Certificate serial: 019B3BA27EED49C91D05442D17F829D225C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 12:01:03 +0000 Manifest this update: Sat 20 Dec 2025 12:01:03 +0000 Manifest next update: Sun 21 Dec 2025 12:01:03 +0000 Files and hashes: 1: TKE73qVPdrioVxKv22FRhrM4OME.crl (hash: peSfYNUt0E3+n+hCXeNniltpblbSC1CNtSfx3MOw15s=) 2: WNroR83uzcjISqXHww42f1zYgLY.roa (hash: ZAQula8xqSNg9/XEOBi+pmskOiJ5Nh7rkmicK30wwYU=) 3: WZJH_ooSqUDE8CuUHonLIGQeTwM.roa (hash: PXoHbbx7PHb2+Knkp3tuLg6G82PksLK6/WnPXwU1W1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:7e:ed:49:c9:1d:05:44:2d:17:f8:29:d2:25:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1 Validity Not Before: Dec 20 12:01:03 2025 GMT Not After : Dec 21 12:01:03 2025 GMT Subject: CN=fb9b4a78530c3997f935a1e82df27a366bf26763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:be:66:0a:cb:6f:24:5c:70:1a:e3:65:7c:16: 6d:6e:8e:43:70:5a:aa:67:f8:21:20:1f:e3:cc:bb: 39:79:46:a7:71:e8:6d:d7:ff:5f:70:be:7d:1d:10: 5d:d9:f6:97:06:24:b8:82:dc:a2:11:08:22:f3:bc: b5:fb:c6:f6:3c:92:94:b3:4f:d1:3b:68:37:b2:1c: cf:17:1f:a9:c6:95:19:ce:07:16:11:a9:15:ba:47: a7:67:21:6a:5a:fc:19:a7:23:4e:62:24:f3:7c:38: a5:df:ef:22:5c:c9:14:2a:03:db:7a:2e:53:0f:3c: 36:ba:ee:22:6e:9c:1b:68:60:f3:60:01:fb:dd:c1: 41:c8:74:00:4c:0e:5e:e4:f8:67:ee:9d:6a:88:8e: 5f:25:ac:89:03:8f:29:d2:98:23:b0:6b:f1:76:85: 97:88:af:41:38:7c:0e:33:84:a7:c7:84:04:96:1c: 63:81:7a:b8:07:73:32:45:24:fe:77:c4:76:a7:56: da:23:41:2c:03:24:18:17:c1:64:21:92:13:83:19: 6f:25:14:c4:98:0f:50:32:44:f2:40:fd:ca:f5:af: 71:51:5f:09:6f:a5:7d:8c:c6:76:62:4b:23:af:4f: 6b:f7:a1:44:b4:68:f3:d5:f0:8a:f4:de:4d:56:0e: 30:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9B:4A:78:53:0C:39:97:F9:35:A1:E8:2D:F2:7A:36:6B:F2:67:63 X509v3 Authority Key Identifier: keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:40:05:50:ce:68:b1:78:2a:f7:f9:6a:0b:b8:da:da:5b:7a: 85:82:76:24:65:b2:90:77:d5:7e:bd:2c:b4:e5:7f:d3:ac:dd: 59:98:e0:cc:b1:67:6e:14:f0:f1:56:1c:61:3e:c8:69:ac:4b: 13:ba:2b:e5:f0:70:74:32:11:87:53:fa:50:9c:e8:2c:bc:d4: 18:f8:b6:db:82:5c:da:48:ca:f4:70:e6:5f:85:ea:a5:09:a4: 07:bf:91:32:ef:06:1e:84:9b:33:12:93:0d:0f:ff:b5:24:b6: 9a:26:8b:dc:ae:d1:e8:d1:ee:30:20:04:62:70:fc:46:35:ea: 00:78:17:44:9c:12:a7:81:fa:a5:59:2d:dc:a1:ee:49:62:5c: 65:a3:a7:54:d8:0c:f5:b5:b9:af:60:74:f2:4d:85:84:97:a4: 9a:ed:7f:f5:e1:b5:ff:40:e7:cc:74:1b:0c:3b:3f:d9:60:52: c8:87:e8:99:d3:05:4f:72:cf:a0:a4:f6:94:de:de:df:85:d3: 7f:57:42:00:ba:af:66:3f:15:3e:bc:06:82:ba:7a:f9:7c:0e: d8:91:ba:2d:da:e0:c4:bc:4e:25:12:07:a1:cb:ed:0c:bc:ba: 85:db:dc:27:c6:22:a9:3f:a6:6c:8b:1d:a7:47:98:81:0a:95: 21:2d:41:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7on7tSckdBUQtF/gp0iXJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTEzYmRlYTU0Zjc2YjhhODU3MTJhZmRiNjE1MTg2YjMz ODM4YzEwHhcNMjUxMjIwMTIwMTAzWhcNMjUxMjIxMTIwMTAzWjAzMTEwLwYDVQQD EyhmYjliNGE3ODUzMGMzOTk3ZjkzNWExZTgyZGYyN2EzNjZiZjI2NzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs75mCstvJFxwGuNlfBZtbo5DcFqq Z/ghIB/jzLs5eUanceht1/9fcL59HRBd2faXBiS4gtyiEQgi87y1+8b2PJKUs0/R O2g3shzPFx+pxpUZzgcWEakVukenZyFqWvwZpyNOYiTzfDil3+8iXMkUKgPbei5T Dzw2uu4ibpwbaGDzYAH73cFByHQATA5e5Phn7p1qiI5fJayJA48p0pgjsGvxdoWX iK9BOHwOM4Snx4QElhxjgXq4B3MyRST+d8R2p1baI0EsAyQYF8FkIZITgxlvJRTE mA9QMkTyQP3K9a9xUV8Jb6V9jMZ2Yksjr09r96FEtGjz1fCK9N5NVg4wXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPubSnhTDDmX+TWh6C3yejZr8mdjMB8GA1UdIwQY MBaAFEyhO96lT3a4qFcSr9thUYazODjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNjJkMTMtN2YwMy00ZDE5LThiNDYt ZmM5MTQzM2QzNjdkLzEvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNjJkMTMtN2YwMy00ZDE5LThiNDYtZmM5MTQzM2QzNjdk LzEvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUAFUM5o sXgq9/lqC7ja2lt6hYJ2JGWykHfVfr0stOV/06zdWZjgzLFnbhTw8VYcYT7IaaxL E7or5fBwdDIRh1P6UJzoLLzUGPi224Jc2kjK9HDmX4XqpQmkB7+RMu8GHoSbMxKT DQ//tSS2miaL3K7R6NHuMCAEYnD8RjXqAHgXRJwSp4H6pVkt3KHuSWJcZaOnVNgM 9bW5r2B08k2FhJekmu1/9eG1/0DnzHQbDDs/2WBSyIfomdMFT3LPoKT2lN7e34XT f1dCALqvZj8VPrwGgrp6+XwO2JG6LdrgxLxOJRIHocvtDLy6hdvcJ8YiqT+mbIsd p0eYgQqVIS1BsQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:04:46 2025 by rpki-client