This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft File: TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft (raw, json) Hash identifier: nMmEgv/RdQ+REniGaoWHUh4SVrHQeaw4p8AmUXeoUV0= Subject key identifier: 07:E5:F1:85:75:51:84:C1:72:1A:E8:27:04:B5:43:34:BE:4C:8F:37 Authority key identifier: 4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19 Certificate issuer: /CN=4cd71f5a0050f8ae6444c638769ba375fddbce19 Certificate serial: 019B4F29C7A0712263E021B097371403CFBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft Manifest number: 147D Signing time: Wed 24 Dec 2025 07:01:36 +0000 Manifest this update: Wed 24 Dec 2025 07:01:36 +0000 Manifest next update: Thu 25 Dec 2025 07:01:36 +0000 Files and hashes: 1: R8OfYueHd1P1AWWtdGiixwllIMs.roa (hash: ZKzgreBUlCJXbuPQDDLtfbqfZaf5YaZJohzFfYmemPA=) 2: TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl (hash: Ig/e2747kBkjauUVfpt2g9Y7JLn9ZFh5fnje2Gh6cZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:c7:a0:71:22:63:e0:21:b0:97:37:14:03:cf:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cd71f5a0050f8ae6444c638769ba375fddbce19 Validity Not Before: Dec 24 07:01:36 2025 GMT Not After : Dec 25 07:01:36 2025 GMT Subject: CN=07e5f185755184c1721ae82704b54334be4c8f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f9:bb:85:f8:89:77:fd:9c:db:07:c8:6b:14: 27:21:7a:2f:69:e5:bf:29:33:66:e3:d5:62:92:e7: ba:58:85:4e:fe:45:6c:0c:55:a6:22:82:af:df:db: 03:60:80:20:e1:cb:18:c3:7c:0e:02:0e:e5:3b:60: 99:61:1b:fb:4e:d6:76:be:8e:22:0b:e3:91:9d:17: 83:0b:92:fe:49:e2:d1:2a:7f:ed:8c:69:4f:75:e7: cc:1d:ce:61:f2:be:e0:51:a7:c9:69:59:42:62:2e: 09:38:9e:83:3b:c9:c1:a0:98:1e:08:48:68:be:e0: 54:b2:3e:d6:69:56:36:5f:21:af:e2:fd:0c:07:b0: 6c:99:f2:35:f5:aa:d5:84:9c:09:aa:a9:08:1e:3f: af:33:18:80:8f:56:71:79:0e:6a:91:18:63:49:31: a9:5d:bf:46:a7:fe:e6:0b:e7:b9:04:c9:bc:d4:8b: b4:4f:80:ba:d6:c3:b9:27:0a:37:20:43:e7:fe:2e: 62:70:e9:79:46:3d:3c:1e:bb:10:28:11:9e:1e:43: aa:e6:f1:1b:27:65:8c:79:a0:98:3e:e6:fb:e5:e4: e1:8d:f9:2e:eb:63:4c:3a:84:d9:4d:98:81:1a:4d: 6c:1d:7a:28:39:cc:21:a9:c3:fc:fa:44:19:92:b8: 4f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E5:F1:85:75:51:84:C1:72:1A:E8:27:04:B5:43:34:BE:4C:8F:37 X509v3 Authority Key Identifier: keyid:4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:4a:65:c9:0f:e5:2d:07:73:c7:4f:c4:b2:77:47:a3:95:cb: 2d:2d:a3:57:c9:0e:5a:43:e2:94:6b:6a:b5:90:5c:1a:82:46: 82:ce:61:ba:ca:e4:4e:e3:10:9f:c7:bc:40:83:c9:fe:23:c3: f0:60:8d:3e:dd:6a:8f:7c:cd:6c:34:d4:84:9b:63:d0:22:90: a1:3b:7a:b8:88:b8:02:a3:a7:13:1e:33:d7:7e:84:f9:ab:5a: ea:0a:32:92:a9:52:11:ef:92:f9:d6:ab:ee:19:ca:b0:64:61: 45:b6:0f:5d:1d:74:22:5a:82:c1:51:70:4b:cc:e7:d0:f4:57: 51:f4:a6:70:06:e4:43:da:9f:af:3a:86:5a:62:3f:6d:b4:bd: f5:3e:65:b0:2e:68:fd:50:6f:cc:fb:e4:d3:90:98:45:9a:cb: a7:dc:b8:18:24:77:a9:ef:9e:50:b9:4b:81:5f:2a:7b:09:96: 8a:38:8b:1e:1e:9f:a0:1b:f5:f4:09:98:96:ca:98:68:be:a4: 8a:f4:44:60:9c:a7:30:52:59:ee:59:ce:3f:4e:ed:ea:90:00: db:5a:72:c0:2f:09:0b:09:ab:76:2c:13:13:97:19:ce:ee:ce: 7a:ac:a8:87:35:52:16:36:57:bf:31:8a:73:a5:d4:46:84:a1: f1:88:da:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKcegcSJj4CGwlzcUA8++MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZDcxZjVhMDA1MGY4YWU2NDQ0YzYzODc2OWJhMzc1ZmRk YmNlMTkwHhcNMjUxMjI0MDcwMTM2WhcNMjUxMjI1MDcwMTM2WjAzMTEwLwYDVQQD EygwN2U1ZjE4NTc1NTE4NGMxNzIxYWU4MjcwNGI1NDMzNGJlNGM4ZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/m7hfiJd/2c2wfIaxQnIXovaeW/ KTNm49Vikue6WIVO/kVsDFWmIoKv39sDYIAg4csYw3wOAg7lO2CZYRv7TtZ2vo4i C+ORnReDC5L+SeLRKn/tjGlPdefMHc5h8r7gUafJaVlCYi4JOJ6DO8nBoJgeCEho vuBUsj7WaVY2XyGv4v0MB7BsmfI19arVhJwJqqkIHj+vMxiAj1ZxeQ5qkRhjSTGp Xb9Gp/7mC+e5BMm81Iu0T4C61sO5Jwo3IEPn/i5icOl5Rj08HrsQKBGeHkOq5vEb J2WMeaCYPub75eThjfku62NMOoTZTZiBGk1sHXooOcwhqcP8+kQZkrhPiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfl8YV1UYTBchroJwS1QzS+TI83MB8GA1UdIwQY MBaAFEzXH1oAUPiuZETGOHabo3X9284ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE5jZldnQlEtSzVrUk1ZNGRwdWpkZjNiemhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yNzgzOTgtNzMzOS00NGIyLWIwYjAt NzNhMDFhZTVkZThmLzEvVE5jZldnQlEtSzVrUk1ZNGRwdWpkZjNiemhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8yNzgzOTgtNzMzOS00NGIyLWIwYjAtNzNhMDFhZTVkZThm LzEvVE5jZldnQlEtSzVrUk1ZNGRwdWpkZjNiemhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUplyQ/l LQdzx0/EsndHo5XLLS2jV8kOWkPilGtqtZBcGoJGgs5husrkTuMQn8e8QIPJ/iPD 8GCNPt1qj3zNbDTUhJtj0CKQoTt6uIi4AqOnEx4z136E+ata6goykqlSEe+S+dar 7hnKsGRhRbYPXR10IlqCwVFwS8zn0PRXUfSmcAbkQ9qfrzqGWmI/bbS99T5lsC5o /VBvzPvk05CYRZrLp9y4GCR3qe+eULlLgV8qewmWijiLHh6foBv19AmYlsqYaL6k ivREYJynMFJZ7lnOP07t6pAA21pywC8JCwmrdiwTE5cZzu7OeqyohzVSFjZXvzGK c6XURoSh8YjaZA== -----END CERTIFICATE-----Generated at Wed Dec 24 08:47:34 2025 by rpki-client