This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft File: TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft (raw, json) Hash identifier: hp01KtCDTNOx+RUZRuxV9NhkWig652TmaZZSS7gGJaQ= Subject key identifier: 4E:36:28:7A:BF:5A:AF:8E:66:5B:9F:45:81:FC:6E:48:4C:7B:C4:D4 Authority key identifier: 4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11 Certificate issuer: /CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011 Certificate serial: 019B337AF6F366EFE3633231934E72811C47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft Manifest number: 0D25 Signing time: Thu 18 Dec 2025 22:00:55 +0000 Manifest this update: Thu 18 Dec 2025 22:00:55 +0000 Manifest next update: Fri 19 Dec 2025 22:00:55 +0000 Files and hashes: 1: 8bYh9KTQNyhUoZK5Xa3Zu-_BqQk.roa (hash: Ckdj62IcP39fMv9cL87VgjiYlT1GoMjuC5C5dI+N2jA=) 2: MR-TaWWn4lHnPBNNw4lTIvLNpqc.roa (hash: Y9aYFZU2HCNzQnAyTtx7dtrBQZRdTDSp9t076Yfi8ac=) 3: TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl (hash: J8VKoTwpsIIjfKBr2TcW6UDtqBvhbF298G2Yx9K6+H0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:f6:f3:66:ef:e3:63:32:31:93:4e:72:81:1c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011 Validity Not Before: Dec 18 22:00:55 2025 GMT Not After : Dec 19 22:00:55 2025 GMT Subject: CN=4e36287abf5aaf8e665b9f4581fc6e484c7bc4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f5:da:d9:6c:15:71:dc:40:e0:97:69:45:7b: 40:41:ec:02:c3:db:ad:4b:e5:50:87:55:b9:d6:37: 6e:5c:53:a7:54:33:a9:0e:e8:a2:30:37:e6:3a:c5: e1:98:1e:29:83:ab:30:53:9e:95:7b:77:32:0e:9c: a3:7e:b6:28:0a:89:90:e9:ec:3a:34:ba:0d:5e:95: cb:d2:17:2c:a5:13:c8:1e:4f:99:2b:ba:ba:95:e1: 7c:10:d9:cd:31:27:99:99:02:37:b5:2b:98:dd:32: 8e:fa:e1:67:d4:2f:ca:3f:9a:24:27:55:09:20:5d: c3:ea:a8:fd:5b:7a:1f:4c:2b:81:26:ef:60:ce:1b: e5:59:87:ff:3c:0a:a0:4d:ff:7c:bd:a0:d5:e1:e3: 91:be:71:9c:06:8e:06:3c:c8:d5:d8:1b:48:27:b8: dc:1e:77:df:74:bc:a6:ba:d6:71:b1:51:28:80:89: 86:97:59:92:8e:a6:fb:b4:41:c0:93:7f:c5:47:07: 92:b5:82:b1:af:66:fe:06:76:9a:ef:34:b4:06:db: 5c:0b:6f:9c:10:5b:56:28:54:04:76:aa:e4:7b:2e: 76:c6:77:e8:d5:a2:e1:26:3c:c6:00:dc:e3:76:e9: e6:5f:19:dd:0e:97:3e:d7:5c:31:70:bc:e5:1e:79: f2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:36:28:7A:BF:5A:AF:8E:66:5B:9F:45:81:FC:6E:48:4C:7B:C4:D4 X509v3 Authority Key Identifier: keyid:4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:20:3e:f8:4e:b7:c6:bf:27:56:bc:d9:fc:ce:9d:43:d9:f7: d7:e4:ba:48:c5:ac:d6:62:ad:24:1b:1b:82:51:3f:c3:ea:74: 17:06:93:a2:d7:94:03:db:d6:c4:5f:b3:a1:0c:3a:ad:cf:94: 26:f4:c6:78:08:a8:69:bd:0e:92:14:1b:e3:04:27:65:9e:cd: f9:06:6d:69:07:0c:13:35:fd:91:63:57:4f:96:af:f8:78:08: 84:e1:19:71:0c:e5:88:3f:d5:6b:d3:cb:d8:6f:01:d6:08:47: e3:56:b1:48:0e:dc:02:91:df:ad:b8:70:2c:88:ab:fe:d9:de: c1:cd:57:56:a5:43:20:e8:5f:63:d0:de:75:4a:16:b6:08:16: e9:c3:9e:d7:cc:cc:ad:76:7b:dc:8d:1a:01:fd:2d:2a:56:11: 5a:71:01:fd:6b:36:c2:65:2e:12:d4:8c:4e:02:83:ae:7d:42: 02:7d:f6:e0:1f:6d:19:08:20:be:0b:b3:59:0c:aa:b3:de:e9: 85:2c:66:9b:06:60:0e:74:3a:ed:96:32:f5:c4:99:cd:55:42: d2:9c:0e:af:80:27:e7:73:71:6f:55:df:fe:60:a4:25:f9:ae: 9a:cd:93:d7:b5:85:76:de:f9:6c:81:a4:9a:87:bd:5f:8b:84: c8:72:95:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszevbzZu/jYzIxk05ygRxHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZjA5NzA0ODRlYjI2YmM1OWZkOGZhOGQ1YmY3YzNjNzIx MmQwMTEwHhcNMjUxMjE4MjIwMDU1WhcNMjUxMjE5MjIwMDU1WjAzMTEwLwYDVQQD Eyg0ZTM2Mjg3YWJmNWFhZjhlNjY1YjlmNDU4MWZjNmU0ODRjN2JjNGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPXa2WwVcdxA4JdpRXtAQewCw9ut S+VQh1W51jduXFOnVDOpDuiiMDfmOsXhmB4pg6swU56Ve3cyDpyjfrYoComQ6ew6 NLoNXpXL0hcspRPIHk+ZK7q6leF8ENnNMSeZmQI3tSuY3TKO+uFn1C/KP5okJ1UJ IF3D6qj9W3ofTCuBJu9gzhvlWYf/PAqgTf98vaDV4eORvnGcBo4GPMjV2BtIJ7jc HnffdLymutZxsVEogImGl1mSjqb7tEHAk3/FRweStYKxr2b+Bnaa7zS0BttcC2+c EFtWKFQEdqrkey52xnfo1aLhJjzGANzjdunmXxndDpc+11wxcLzlHnnyJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE42KHq/Wq+OZlufRYH8bkhMe8TUMB8GA1UdIwQY MBaAFE3wlwSE6ya8Wf2PqNW/fDxyEtARMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84ZTExOTgtZTUwZi00MTZmLTlkNmIt MWU5YmZmNWU0MDIxLzEvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC84ZTExOTgtZTUwZi00MTZmLTlkNmItMWU5YmZmNWU0MDIx LzEvVGZDWEJJVHJKcnhaX1ktbzFiOThQSElTMEJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSA++E63 xr8nVrzZ/M6dQ9n31+S6SMWs1mKtJBsbglE/w+p0FwaToteUA9vWxF+zoQw6rc+U JvTGeAioab0OkhQb4wQnZZ7N+QZtaQcMEzX9kWNXT5av+HgIhOEZcQzliD/Va9PL 2G8B1ghH41axSA7cApHfrbhwLIir/tnewc1XVqVDIOhfY9DedUoWtggW6cOe18zM rXZ73I0aAf0tKlYRWnEB/Ws2wmUuEtSMTgKDrn1CAn324B9tGQggvguzWQyqs97p hSxmmwZgDnQ67ZYy9cSZzVVC0pwOr4An53Nxb1Xf/mCkJfmums2T17WFdt75bIGk moe9X4uEyHKVCg== -----END CERTIFICATE-----Generated at Fri Dec 19 08:24:45 2025 by rpki-client