This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft File: TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft (raw, json) Hash identifier: Qsdj+pxKO1z/+YkVq+TAyVrB8JBWYwucuMdxSN3IQNo= Subject key identifier: 47:59:18:BB:18:D4:0F:23:81:03:2E:9D:56:87:19:83:B7:B6:81:4D Authority key identifier: 4E:A8:05:AE:A8:60:30:BA:CD:D0:BA:3E:4E:42:4E:1B:AE:F0:82:4D Certificate issuer: /CN=4ea805aea86030bacdd0ba3e4e424e1baef0824d Certificate serial: 019B50A9A5559005AC755DC0918B3AC10759 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft Manifest number: 0381 Signing time: Wed 24 Dec 2025 14:00:53 +0000 Manifest this update: Wed 24 Dec 2025 14:00:53 +0000 Manifest next update: Thu 25 Dec 2025 14:00:53 +0000 Files and hashes: 1: TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl (hash: umVkJrw8jnxXQvVslEzMD2Ci+Nq00dD8v72iLA1LI00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a9:a5:55:90:05:ac:75:5d:c0:91:8b:3a:c1:07:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ea805aea86030bacdd0ba3e4e424e1baef0824d Validity Not Before: Dec 24 14:00:53 2025 GMT Not After : Dec 25 14:00:53 2025 GMT Subject: CN=475918bb18d40f2381032e9d56871983b7b6814d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:52:b5:a4:9f:5b:e1:d3:86:23:d3:8d:a7:9f: 4a:76:00:ca:8e:13:8b:c8:a6:a3:27:59:7d:9b:ab: fb:2b:e2:a5:43:6b:81:b0:29:f6:4e:3a:51:42:6b: fa:87:b2:05:cc:df:fe:0b:cd:70:eb:fc:02:c3:a1: 4c:0a:d2:62:30:25:07:1a:56:eb:8b:9d:30:c9:e9: 8d:50:35:0e:25:63:6e:f4:0f:6a:f7:47:50:6b:5b: ab:58:60:b2:d0:e8:18:26:63:3c:52:7a:00:b8:e4: da:4e:17:45:38:5b:e1:a5:bc:e9:92:55:03:bd:71: 77:a1:32:e9:84:0c:85:2e:c9:60:ff:7d:5f:64:8b: eb:92:1d:1d:fc:3b:f5:af:eb:58:b0:5c:81:ce:81: 2a:d3:55:2f:38:aa:f4:82:04:15:99:10:7f:2d:83: d3:00:d5:83:c0:b3:9b:7d:f7:3b:9d:c4:42:b5:03: e5:38:53:f0:50:ae:44:82:03:cc:00:9b:a6:b2:1f: 89:ea:87:ef:00:ea:5e:47:6b:fd:b0:5b:c0:bf:d5: e3:10:b0:9d:74:11:0a:ba:be:20:77:ab:0f:40:b9: da:a4:a3:e4:0a:94:8b:1d:f2:5b:8b:b9:4e:22:20: b1:e7:f1:ab:59:93:9f:7f:95:40:53:eb:d9:35:ca: fa:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:59:18:BB:18:D4:0F:23:81:03:2E:9D:56:87:19:83:B7:B6:81:4D X509v3 Authority Key Identifier: keyid:4E:A8:05:AE:A8:60:30:BA:CD:D0:BA:3E:4E:42:4E:1B:AE:F0:82:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:d6:7f:a7:33:55:94:5a:f8:58:f4:81:1d:35:ea:ce:de:3c: 0c:7d:0d:81:f4:86:09:78:e5:32:0c:3e:03:70:0b:cc:a5:96: 48:90:13:27:f8:7f:15:46:bf:c9:ff:d4:94:f0:b1:37:13:38: 0f:f2:e6:f0:b0:13:7c:5d:bb:7c:33:c2:70:98:39:99:f1:38: 5f:82:88:aa:66:e9:be:df:be:a3:04:01:cc:86:14:f6:05:64: 17:0c:40:b7:24:0d:bc:9d:32:e8:85:e9:05:7a:5f:8e:64:df: 9d:ab:20:b5:1b:9d:a0:86:0a:53:5d:55:2b:5b:c5:b6:30:19: fe:1a:f1:ba:07:81:29:4d:aa:ee:a0:84:49:eb:e9:0c:46:32: 9a:27:d6:5a:05:8a:22:b0:a3:d4:16:31:81:53:f1:45:77:9b: 14:0d:a7:20:ec:8d:ff:ee:08:99:59:c6:77:37:43:4a:56:1e: 4f:9c:f5:21:32:58:49:e5:8c:f2:c6:1a:61:99:98:d4:61:b6: 40:f4:25:42:87:17:e5:25:92:3b:39:7e:8e:ad:88:79:8d:8f: 98:ac:35:90:d9:18:42:9f:70:33:40:0f:ca:c1:02:fe:dd:24: ac:6f:f1:2e:e6:94:7e:a8:6b:ba:3e:55:8d:90:80:f6:14:b3: fe:c7:64:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqaVVkAWsdV3AkYs6wQdZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYTgwNWFlYTg2MDMwYmFjZGQwYmEzZTRlNDI0ZTFiYWVm MDgyNGQwHhcNMjUxMjI0MTQwMDUzWhcNMjUxMjI1MTQwMDUzWjAzMTEwLwYDVQQD Eyg0NzU5MThiYjE4ZDQwZjIzODEwMzJlOWQ1Njg3MTk4M2I3YjY4MTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFK1pJ9b4dOGI9ONp59KdgDKjhOL yKajJ1l9m6v7K+KlQ2uBsCn2TjpRQmv6h7IFzN/+C81w6/wCw6FMCtJiMCUHGlbr i50wyemNUDUOJWNu9A9q90dQa1urWGCy0OgYJmM8UnoAuOTaThdFOFvhpbzpklUD vXF3oTLphAyFLslg/31fZIvrkh0d/Dv1r+tYsFyBzoEq01UvOKr0ggQVmRB/LYPT ANWDwLObffc7ncRCtQPlOFPwUK5EggPMAJumsh+J6ofvAOpeR2v9sFvAv9XjELCd dBEKur4gd6sPQLnapKPkCpSLHfJbi7lOIiCx5/GrWZOff5VAU+vZNcr6uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdZGLsY1A8jgQMunVaHGYO3toFNMB8GA1UdIwQY MBaAFE6oBa6oYDC6zdC6Pk5CThuu8IJNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHFnRnJxaGdNTHJOMExvLVRrSk9HNjd3Z2swLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mOTBhYzktNTM2Ny00MjMyLWIxMzct Nzc4ODczYTI3MjZjLzEvVHFnRnJxaGdNTHJOMExvLVRrSk9HNjd3Z2swLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mOTBhYzktNTM2Ny00MjMyLWIxMzctNzc4ODczYTI3MjZj LzEvVHFnRnJxaGdNTHJOMExvLVRrSk9HNjd3Z2swLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdZ/pzNV lFr4WPSBHTXqzt48DH0NgfSGCXjlMgw+A3ALzKWWSJATJ/h/FUa/yf/UlPCxNxM4 D/Lm8LATfF27fDPCcJg5mfE4X4KIqmbpvt++owQBzIYU9gVkFwxAtyQNvJ0y6IXp BXpfjmTfnasgtRudoIYKU11VK1vFtjAZ/hrxugeBKU2q7qCESevpDEYymifWWgWK IrCj1BYxgVPxRXebFA2nIOyN/+4ImVnGdzdDSlYeT5z1ITJYSeWM8sYaYZmY1GG2 QPQlQocX5SWSOzl+jq2IeY2PmKw1kNkYQp9wM0APysEC/t0krG/xLuaUfqhruj5V jZCA9hSz/sdkqw== -----END CERTIFICATE-----Generated at Wed Dec 24 20:00:39 2025 by rpki-client