This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft File: TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json) Hash identifier: +T7yEDca5ONo845fMf+R0juy8FQ4WD1Jtic1TEjRP4w= Subject key identifier: D0:30:2C:F6:6C:22:65:61:92:14:71:9E:F8:18:6C:07:94:66:BE:67 Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69 Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069 Certificate serial: 019B3D230112AD50FC8BF90F10427181CFB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft Manifest number: 123E Signing time: Sat 20 Dec 2025 19:01:02 +0000 Manifest this update: Sat 20 Dec 2025 19:01:02 +0000 Manifest next update: Sun 21 Dec 2025 19:01:02 +0000 Files and hashes: 1: NETt5LyS--lV9_ycDBmp9TmpxP4.roa (hash: rz60bepxWIT7kbaafyZ48rHU8Vmg6Vvtzt7Ebp5hgDU=) 2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: zPt2td9AGCH7jLOthHE5RDeCvIXvl1HliOUSeSxhMI4=) 3: YU0ymXaczDxniPQtB_xa4RTEU2Q.roa (hash: +3YrNwFP0+tuTgevzTw2FGRwOLOaLfupz3GSxL5OXLE=) 4: e99v7pEfrFm4Dg1SnIaNO39I8Ws.roa (hash: GWy1k4OaIi0pC/Ap0hgLnIy0Gp664zirmOTGWdfBTaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:01:12:ad:50:fc:8b:f9:0f:10:42:71:81:cf:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069 Validity Not Before: Dec 20 19:01:02 2025 GMT Not After : Dec 21 19:01:02 2025 GMT Subject: CN=d0302cf66c2265619214719ef8186c079466be67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:a2:2b:1e:36:d2:71:0c:41:dd:49:75:5b: ea:68:11:ed:b6:2f:df:34:91:fa:b1:70:84:a5:9e: ef:8b:cc:45:38:99:16:77:4e:3f:fd:c4:3c:f3:3c: fa:19:a8:65:05:9a:82:08:eb:ab:96:66:d4:46:d3: f6:c3:9c:ac:ce:c2:1e:e9:c2:ea:89:e6:e8:7d:08: 62:ce:e3:e5:c1:e2:c2:6e:a1:b2:9d:07:7e:d5:e2: 36:71:3f:e1:53:6d:ec:f6:12:ae:dd:d4:2c:ac:aa: dc:62:2c:ff:ba:ab:19:bb:4c:1a:af:ad:96:68:6a: 4b:54:51:e6:16:9d:1f:c7:ec:ca:5e:9a:2d:38:a3: b0:0a:29:ea:b3:4f:45:9c:61:93:7f:f9:b5:16:ab: 69:d9:a6:ac:4f:83:9b:77:d6:e4:95:90:a0:17:06: b2:e4:d4:2f:fc:73:5b:0d:52:ca:63:27:a5:07:27: 0a:cb:ce:2c:cc:d9:3a:9a:4e:54:11:95:e6:cd:f3: 2b:a5:d3:47:e7:c7:a8:27:d9:9a:1f:64:2a:6d:4f: 41:55:db:ee:0e:15:9c:9e:01:0f:6c:7d:53:37:5d: 33:2b:59:4c:f2:55:26:35:85:f7:3d:37:28:38:8c: e2:60:a6:f5:e1:be:ec:9b:eb:10:21:c0:45:3f:9d: b5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:30:2C:F6:6C:22:65:61:92:14:71:9E:F8:18:6C:07:94:66:BE:67 X509v3 Authority Key Identifier: keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:43:f1:d5:98:85:39:fd:89:cf:0d:01:fe:2f:d4:d4:ee:7b: f0:d5:54:7d:05:25:85:6f:fe:29:b9:92:a8:e9:b3:f1:0f:ac: b7:40:a9:0b:57:e3:86:2b:8d:87:af:8b:98:85:7f:11:d5:1f: 48:b2:4f:a3:ae:4a:12:a0:96:8e:ef:11:82:69:3b:bd:79:a6: 9b:5d:6a:25:95:d4:cd:65:97:cf:5e:3b:39:71:1d:b7:70:96: 86:0b:f7:a5:b7:8f:8a:14:7b:18:f6:53:4c:a5:53:85:c4:02: 31:b4:c5:fc:9d:b6:f4:f1:06:fa:f8:3e:5b:69:76:85:33:0a: 28:3b:19:73:a4:78:3f:51:31:83:ac:a1:87:71:33:aa:aa:ec: ec:d4:b7:2f:b4:5f:78:4f:66:ff:53:86:ab:87:fc:f7:6b:22: 1f:f2:3a:60:39:91:1d:19:95:a3:f0:c7:64:46:3c:d2:4c:22: ab:10:26:97:f5:de:42:ea:cd:44:e0:48:01:00:6b:52:76:e9: 37:bc:e4:1f:e9:52:ea:9c:d7:a2:ab:bc:b9:ce:74:42:2e:58: 2c:6e:a7:00:7e:94:f6:68:f9:d9:ae:16:a9:8d:e4:d5:bf:f6: 71:0b:40:f2:33:79:ce:5f:db:a6:46:1a:5f:34:52:73:35:6b: 3d:d3:ac:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IwESrVD8i/kPEEJxgc+4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNmI2MzcxYjk0NWEzNWU5ZGYzMDhmZjQzODAzZTI2MTc4 NTEwNjkwHhcNMjUxMjIwMTkwMTAyWhcNMjUxMjIxMTkwMTAyWjAzMTEwLwYDVQQD EyhkMDMwMmNmNjZjMjI2NTYxOTIxNDcxOWVmODE4NmMwNzk0NjZiZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttmiKx420nEMQd1JdVvqaBHtti/f NJH6sXCEpZ7vi8xFOJkWd04//cQ88zz6GahlBZqCCOurlmbURtP2w5yszsIe6cLq iebofQhizuPlweLCbqGynQd+1eI2cT/hU23s9hKu3dQsrKrcYiz/uqsZu0war62W aGpLVFHmFp0fx+zKXpotOKOwCinqs09FnGGTf/m1Fqtp2aasT4Obd9bklZCgFway 5NQv/HNbDVLKYyelBycKy84szNk6mk5UEZXmzfMrpdNH58eoJ9maH2QqbU9BVdvu DhWcngEPbH1TN10zK1lM8lUmNYX3PTcoOIziYKb14b7sm+sQIcBFP5210QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAwLPZsImVhkhRxnvgYbAeUZr5nMB8GA1UdIwQY MBaAFExrY3G5RaNenfMI/0OAPiYXhRBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS80NDQ4YTctMWFjMS00NmFkLWE3Mjct ZDk2MzkzYWYyZjIwLzEvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS80NDQ4YTctMWFjMS00NmFkLWE3MjctZDk2MzkzYWYyZjIw LzEvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAokPx1ZiF Of2Jzw0B/i/U1O578NVUfQUlhW/+KbmSqOmz8Q+st0CpC1fjhiuNh6+LmIV/EdUf SLJPo65KEqCWju8Rgmk7vXmmm11qJZXUzWWXz147OXEdt3CWhgv3pbePihR7GPZT TKVThcQCMbTF/J229PEG+vg+W2l2hTMKKDsZc6R4P1Exg6yhh3Ezqqrs7NS3L7Rf eE9m/1OGq4f892siH/I6YDmRHRmVo/DHZEY80kwiqxAml/XeQurNROBIAQBrUnbp N7zkH+lS6pzXoqu8uc50Qi5YLG6nAH6U9mj52a4WqY3k1b/2cQtA8jN5zl/bpkYa XzRSczVrPdOsyw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:24:58 2025 by rpki-client