This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft File: tcR4e4CrSAGrYrG9v7KOBtMM32o.mft (raw, json) Hash identifier: e+LGVNKu985if6Xpdrio0mXwZVsp1LTTDfnbrTw+mn4= Subject key identifier: E6:84:94:FB:BC:28:85:38:BF:20:94:8B:2D:3A:AE:2F:FC:A6:F8:54 Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A Certificate issuer: /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a Certificate serial: 019B2BC23BA35D04C67D865F0A1B04AF2CDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft Manifest number: 05DB Signing time: Wed 17 Dec 2025 10:01:48 +0000 Manifest this update: Wed 17 Dec 2025 10:01:48 +0000 Manifest next update: Thu 18 Dec 2025 10:01:48 +0000 Files and hashes: 1: ktAbm-eMqyUysDj5Rz0ozhsQgoU.roa (hash: sOoFB/V0u6n0JOO4WrnOrE08EvrJyrBKeqUzyGdoIfI=) 2: tcR4e4CrSAGrYrG9v7KOBtMM32o.crl (hash: aTMulvjk1eAKsyOQdzbB8Uf9yPJ7J0f8JXQ6rI2rVAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:3b:a3:5d:04:c6:7d:86:5f:0a:1b:04:af:2c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a Validity Not Before: Dec 17 10:01:48 2025 GMT Not After : Dec 18 10:01:48 2025 GMT Subject: CN=e68494fbbc288538bf20948b2d3aae2ffca6f854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b8:45:e1:eb:ba:d7:5d:05:23:cc:37:df:c5: ba:7a:ed:e3:89:4b:ef:1a:2a:2f:ea:98:3c:33:44: 76:11:32:38:20:0d:05:9e:ca:b5:0c:4c:22:11:75: 38:70:c8:ff:b8:3f:22:4d:f9:18:43:86:e7:a2:c6: a0:e5:f9:73:7d:9c:ce:cd:d5:40:d4:aa:59:e5:5f: b0:50:9f:cd:34:b0:de:78:54:7b:bd:be:61:53:f5: 0e:e6:53:f8:a1:7a:67:67:94:a1:e1:8f:80:69:61: ff:f1:db:f7:b9:36:66:c7:f8:a0:f9:18:db:b9:73: 83:bd:99:3c:cb:09:e3:03:6e:bb:03:2b:8b:0b:f7: 3a:dd:8b:6c:5a:65:61:70:9c:3e:3b:63:e5:60:fa: e9:2c:ab:38:09:81:5e:1e:35:67:5b:d4:1b:44:2d: 54:8e:40:0b:30:37:87:37:38:87:5c:e9:2c:cb:9f: 56:12:e1:c8:bc:7c:da:26:d6:9f:23:98:66:da:02: 2f:39:ad:f9:d7:c9:70:75:57:2b:20:b1:85:a0:79: 1f:81:d7:2c:ce:20:a5:6d:6e:c4:b6:0d:83:0e:45: 42:9f:ee:b2:4c:24:b7:16:23:0c:cf:32:fa:b0:77: d3:00:a5:d1:c6:22:bc:48:0c:e1:f9:41:de:90:c9: 06:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:84:94:FB:BC:28:85:38:BF:20:94:8B:2D:3A:AE:2F:FC:A6:F8:54 X509v3 Authority Key Identifier: keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c7:c9:15:d8:39:5f:56:31:54:60:ba:ef:1a:1e:b7:19:22: 3d:34:ee:e0:5f:d9:54:9d:8d:14:e2:ec:e0:c0:a1:56:8a:87: 46:26:cd:b1:a4:56:07:04:ca:e6:a4:aa:70:e4:d0:c5:7f:9e: cd:c1:28:da:d2:6a:6b:f0:79:30:33:ce:36:49:88:76:a1:55: d6:a8:49:6d:12:4a:52:4e:d9:b6:0d:48:3b:ba:7c:21:9a:8a: 87:f1:45:48:ef:56:57:5e:b5:5d:ed:09:44:fd:d7:21:f4:4b: c8:64:c9:96:ac:7d:20:e7:ae:c2:43:3b:dc:43:0b:b7:fe:b7: cc:a5:5a:6c:a1:9e:a9:71:1e:21:80:2b:96:8d:ca:ee:cb:8a: 03:9b:63:b4:d4:01:7f:18:fd:ec:00:9c:d8:9c:da:0a:f7:67: 32:69:1d:3a:8d:c1:4a:c2:a8:5e:aa:01:bc:72:c3:79:20:b9: fc:b5:11:3e:25:c8:89:4c:1a:6a:6d:6d:f0:b0:00:28:20:70: 09:63:31:6c:49:2b:96:dc:0e:c9:7f:ca:e2:7e:43:7c:d3:af: 20:9f:7b:fc:d1:2f:db:e0:a7:06:89:14:6f:79:68:69:21:78: 30:7a:f8:46:26:66:55:52:01:c2:f2:59:d2:26:92:9a:d0:d9: d2:e2:68:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwjujXQTGfYZfChsEryzcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YzQ3ODdiODBhYjQ4MDFhYjYyYjFiZGJmYjI4ZTA2ZDMw Y2RmNmEwHhcNMjUxMjE3MTAwMTQ4WhcNMjUxMjE4MTAwMTQ4WjAzMTEwLwYDVQQD EyhlNjg0OTRmYmJjMjg4NTM4YmYyMDk0OGIyZDNhYWUyZmZjYTZmODU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LhF4eu6110FI8w338W6eu3jiUvv Giov6pg8M0R2ETI4IA0Fnsq1DEwiEXU4cMj/uD8iTfkYQ4bnosag5flzfZzOzdVA 1KpZ5V+wUJ/NNLDeeFR7vb5hU/UO5lP4oXpnZ5Sh4Y+AaWH/8dv3uTZmx/ig+Rjb uXODvZk8ywnjA267AyuLC/c63YtsWmVhcJw+O2PlYPrpLKs4CYFeHjVnW9QbRC1U jkALMDeHNziHXOksy59WEuHIvHzaJtafI5hm2gIvOa3518lwdVcrILGFoHkfgdcs ziClbW7Etg2DDkVCn+6yTCS3FiMMzzL6sHfTAKXRxiK8SAzh+UHekMkGnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaElPu8KIU4vyCUiy06ri/8pvhUMB8GA1UdIwQY MBaAFLXEeHuAq0gBq2Kxvb+yjgbTDN9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kOWQzYzktZjE5NC00YjI2LThmMTAt ZmY2YTljZGU2MzM1LzEvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kOWQzYzktZjE5NC00YjI2LThmMTAtZmY2YTljZGU2MzM1 LzEvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsfJFdg5 X1YxVGC67xoetxkiPTTu4F/ZVJ2NFOLs4MChVoqHRibNsaRWBwTK5qSqcOTQxX+e zcEo2tJqa/B5MDPONkmIdqFV1qhJbRJKUk7Ztg1IO7p8IZqKh/FFSO9WV161Xe0J RP3XIfRLyGTJlqx9IOeuwkM73EMLt/63zKVabKGeqXEeIYArlo3K7suKA5tjtNQB fxj97ACc2JzaCvdnMmkdOo3BSsKoXqoBvHLDeSC5/LURPiXIiUwaam1t8LAAKCBw CWMxbEkrltwOyX/K4n5DfNOvIJ97/NEv2+CnBokUb3loaSF4MHr4RiZmVVIBwvJZ 0iaSmtDZ0uJo3w== -----END CERTIFICATE-----Generated at Wed Dec 17 18:22:04 2025 by rpki-client