This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft File: Tj_pDw-taiXUa9fDNbki2gMbLHg.mft (raw, json) Hash identifier: sOlW65piYaigzB31vNGyL5tRfoCS/iGcHp9jiDuWf4M= Subject key identifier: ED:81:12:0F:F4:8B:67:6F:B1:B0:D0:9A:FE:D3:CD:4F:3F:35:C2:C5 Authority key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78 Certificate issuer: /CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78 Certificate serial: 019B3CB543A700E93D37463A1A79C65B4748 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft Manifest number: 0C30 Signing time: Sat 20 Dec 2025 17:01:10 +0000 Manifest this update: Sat 20 Dec 2025 17:01:10 +0000 Manifest next update: Sun 21 Dec 2025 17:01:10 +0000 Files and hashes: 1: A8YDmTBK0K140SrVGjKT4rgJaBs.roa (hash: dZ2I5la+5OGaL56JsGr6ibfQkik4DvtIbwTHLacKDFU=) 2: Tj_pDw-taiXUa9fDNbki2gMbLHg.crl (hash: 9ZUOoHZOnofmvRFyhK6K3keiAYm9AvTS9RwrEGPeuy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:43:a7:00:e9:3d:37:46:3a:1a:79:c6:5b:47:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78 Validity Not Before: Dec 20 17:01:10 2025 GMT Not After : Dec 21 17:01:10 2025 GMT Subject: CN=ed81120ff48b676fb1b0d09afed3cd4f3f35c2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:44:d0:8c:e1:3b:46:e5:51:6a:e3:1a:8e: 63:c9:e9:4d:1e:2b:b4:f9:ba:38:ba:31:70:54:3d: e7:ed:5d:48:c2:6a:bd:80:9e:81:71:5f:28:1b:12: 77:9d:b9:76:53:ff:71:8b:25:51:91:0e:d0:bb:71: 43:ab:39:57:7a:00:d0:03:ac:76:a1:f5:a8:48:bb: 57:ce:7f:34:04:e3:d1:1f:29:d1:d5:bd:76:0c:12: cf:95:da:20:9f:4e:1d:3b:e5:5d:01:31:74:c7:25: 70:fc:17:02:0e:69:31:7a:2b:89:1f:bb:a3:58:4d: 99:f0:7c:bb:41:b9:4f:43:79:57:4a:f9:02:65:e9: eb:5b:7d:51:43:2f:65:3a:80:7b:f2:cc:6a:37:3d: bc:01:4d:9a:2d:fd:46:a6:0a:6b:70:45:ee:5a:b8: b4:47:d8:07:a5:28:66:da:e3:ec:87:81:e6:ff:f1: 52:3b:b6:74:bd:d3:d8:8c:cf:5d:5a:52:55:24:e9: 68:f8:71:88:8f:36:00:24:16:1a:f9:13:32:5e:ee: 77:90:04:0d:6e:32:15:50:37:dc:df:02:99:fb:02: 89:d0:14:af:cf:10:65:8f:af:80:bd:5b:23:9b:a8: bc:86:8a:68:4e:f1:cd:c4:4d:80:da:05:68:3e:91: be:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:81:12:0F:F4:8B:67:6F:B1:B0:D0:9A:FE:D3:CD:4F:3F:35:C2:C5 X509v3 Authority Key Identifier: keyid:4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b3:d5:69:cb:df:15:aa:57:a7:96:0a:8e:a6:d7:12:97:9f: 99:15:24:cc:01:d6:48:39:1c:79:cc:51:73:c2:51:6a:bf:46: f2:1c:47:41:e5:d4:a7:f4:6f:c3:79:c4:31:92:d3:62:f0:c4: 96:7f:17:e3:ea:2e:39:6d:4e:6a:74:dc:54:b5:ac:f9:4d:5c: 3b:fc:8a:e0:63:f6:f1:28:00:cd:70:1f:03:36:10:ca:0e:92: d4:bb:ca:1b:88:44:71:4e:b6:70:bf:bc:55:48:28:92:26:a0: 2e:3d:56:19:b6:02:e3:8c:56:41:3c:d6:a9:f2:32:fe:ba:ff: f9:e4:88:6c:26:36:57:d5:8c:fe:18:18:bc:4b:e6:80:ff:69: 3f:2c:0a:5c:ac:58:00:e5:4e:b0:18:bf:53:c1:78:da:c1:11: b6:0f:2a:94:87:22:f3:b6:84:f7:ac:cf:a0:be:0b:8b:e2:00: fe:e1:3d:80:f2:85:e2:69:d4:c9:8d:11:38:4f:d1:66:cd:85: 66:dd:70:95:22:6d:b3:a5:46:e8:0e:9d:98:44:da:cf:1c:1d: 45:1c:9f:f7:22:d4:49:d7:14:ca:ae:57:c9:3b:2e:08:1f:02: 58:af:aa:95:6a:4b:99:b5:5d:3e:2b:b5:4a:f1:08:01:99:31: ed:02:99:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tUOnAOk9N0Y6GnnGW0dIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlM2ZlOTBmMGZhZDZhMjVkNDZiZDdjMzM1YjkyMmRhMDMx YjJjNzgwHhcNMjUxMjIwMTcwMTEwWhcNMjUxMjIxMTcwMTEwWjAzMTEwLwYDVQQD EyhlZDgxMTIwZmY0OGI2NzZmYjFiMGQwOWFmZWQzY2Q0ZjNmMzVjMmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrNE0IzhO0blUWrjGo5jyelNHiu0 +bo4ujFwVD3n7V1Iwmq9gJ6BcV8oGxJ3nbl2U/9xiyVRkQ7Qu3FDqzlXegDQA6x2 ofWoSLtXzn80BOPRHynR1b12DBLPldogn04dO+VdATF0xyVw/BcCDmkxeiuJH7uj WE2Z8Hy7QblPQ3lXSvkCZenrW31RQy9lOoB78sxqNz28AU2aLf1GpgprcEXuWri0 R9gHpShm2uPsh4Hm//FSO7Z0vdPYjM9dWlJVJOlo+HGIjzYAJBYa+RMyXu53kAQN bjIVUDfc3wKZ+wKJ0BSvzxBlj6+AvVsjm6i8hopoTvHNxE2A2gVoPpG+ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO2BEg/0i2dvsbDQmv7TzU8/NcLFMB8GA1UdIwQY MBaAFE4/6Q8PrWol1GvXwzW5ItoDGyx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGpfcER3LXRhaVhVYTlmRE5ia2kyZ01iTEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80Zjk0M2YtZDE2YS00OGRhLWI5M2Et MTQ4N2M2MDIwYzQ2LzEvVGpfcER3LXRhaVhVYTlmRE5ia2kyZ01iTEhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi80Zjk0M2YtZDE2YS00OGRhLWI5M2EtMTQ4N2M2MDIwYzQ2 LzEvVGpfcER3LXRhaVhVYTlmRE5ia2kyZ01iTEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLPVacvf FapXp5YKjqbXEpefmRUkzAHWSDkcecxRc8JRar9G8hxHQeXUp/Rvw3nEMZLTYvDE ln8X4+ouOW1OanTcVLWs+U1cO/yK4GP28SgAzXAfAzYQyg6S1LvKG4hEcU62cL+8 VUgokiagLj1WGbYC44xWQTzWqfIy/rr/+eSIbCY2V9WM/hgYvEvmgP9pPywKXKxY AOVOsBi/U8F42sERtg8qlIci87aE96zPoL4Li+IA/uE9gPKF4mnUyY0ROE/RZs2F Zt1wlSJts6VG6A6dmETazxwdRRyf9yLUSdcUyq5XyTsuCB8CWK+qlWpLmbVdPiu1 SvEIAZkx7QKZyA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:53:18 2025 by rpki-client