This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft File: ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft (raw, json) Hash identifier: t8KAwgBW9GhzU2SHOHv1nEKvNAen/8byCbDA/9yqk80= Subject key identifier: 89:95:01:A2:11:1B:AD:3B:21:C1:9B:95:F9:1B:4D:F6:AB:39:6B:B7 Authority key identifier: 4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4 Certificate issuer: /CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4 Certificate serial: 019B70A29C6633A153FB832FA3B783B392F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft Manifest number: 0AA8 Signing time: Tue 30 Dec 2025 19:01:03 +0000 Manifest this update: Tue 30 Dec 2025 19:01:03 +0000 Manifest next update: Wed 31 Dec 2025 19:01:03 +0000 Files and hashes: 1: ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl (hash: lPg3klpLYYSsGPLNRewvOdUKVkTYBl2M/1T7GhGPWvs=) 2: dhaZ9rJEY3VSapdxzWuOpswb-w0.roa (hash: jRn4LzSctiGARclpcid7MOPCN0FjXXNaOIwerI8w1dk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a2:9c:66:33:a1:53:fb:83:2f:a3:b7:83:b3:92:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4 Validity Not Before: Dec 30 19:01:03 2025 GMT Not After : Dec 31 19:01:03 2025 GMT Subject: CN=899501a2111bad3b21c19b95f91b4df6ab396bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cc:36:16:aa:ba:db:06:66:1a:da:38:33:24: b4:3f:1c:fe:9a:b9:5f:3b:98:33:af:21:4c:13:b8: 68:d9:5b:99:62:69:17:42:1b:82:23:bf:25:84:da: 84:10:f5:cc:2c:3b:2f:00:3b:74:30:99:1f:4b:52: f7:16:68:5c:70:c0:8a:eb:f8:fe:7c:ab:0a:b9:20: ca:3a:20:be:b9:5e:04:43:f4:f6:e5:82:53:e0:6c: 29:2b:43:66:f5:81:fd:d3:d8:bd:8b:24:4a:59:01: 72:ec:8d:7a:44:09:be:99:69:d5:de:bc:a2:a0:34: 15:46:a1:5c:7d:94:07:a6:57:fc:10:9b:1e:8e:c7: 79:b6:a6:63:b6:53:4a:28:fb:f9:41:70:20:7d:00: 5a:84:aa:7b:40:05:ad:c3:26:2f:8b:fc:51:29:f6: be:94:09:19:6c:5b:13:22:6d:f9:62:dd:89:39:85: fc:3b:b1:c5:11:ff:59:e9:ac:37:66:82:a6:e1:e9: 95:6e:a8:6a:d9:60:1b:6f:b1:fd:ff:b0:43:23:72: c2:13:d4:42:33:60:55:dd:e0:fc:28:50:7e:5c:9e: cb:01:06:e5:38:aa:88:15:2b:ad:8d:92:9d:4e:a8: 06:3b:c9:55:01:5e:4c:d7:19:ae:ba:cc:68:cd:ec: 84:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:95:01:A2:11:1B:AD:3B:21:C1:9B:95:F9:1B:4D:F6:AB:39:6B:B7 X509v3 Authority Key Identifier: keyid:4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ce:fb:70:cd:61:26:eb:a7:53:a7:6d:97:31:cd:ff:4a:30: 24:7d:0f:0b:6d:95:21:cb:ad:eb:b0:27:09:ac:18:79:53:18: 9b:bf:34:4b:7e:fd:7c:57:a3:58:55:2d:e0:72:1b:1d:0b:82: 01:34:6e:0d:f5:de:c1:8f:4e:17:e2:68:13:86:b8:e3:c8:6f: 7c:68:ff:32:f4:5f:38:ae:58:5b:27:03:34:dd:14:eb:37:47: 86:94:81:05:31:64:74:db:f0:7d:29:25:64:1d:8d:3e:75:63: fb:3d:71:c1:ef:d8:9b:3b:b8:95:6a:e5:e2:d7:65:43:20:b1: 90:58:da:95:8c:1d:fe:72:82:05:39:30:f3:06:7f:fe:f4:e2: 04:96:55:8d:a7:6b:a6:49:e5:94:b1:2f:7b:bd:bd:a6:60:df: bf:c7:85:01:58:bc:dd:48:94:83:a7:19:70:63:57:5f:bb:97: ce:2f:62:5f:1e:82:05:59:61:d9:7a:6c:f6:60:3e:da:bd:b0: c3:7a:4e:65:84:ab:f4:9d:14:7a:00:b4:27:b9:f5:80:8c:ae: 90:0a:36:60:4c:19:28:97:24:24:94:d4:8f:8d:2f:85:0e:30: b5:36:bb:59:f2:b8:bb:39:89:92:b6:8c:ef:72:cd:fb:32:ce: bd:16:85:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwopxmM6FT+4Mvo7eDs5LyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMTI5ZmJjYzdhZThmNWI0MDE5ZjA3YTNkNmQyZTE4NDk2 YjVlZTQwHhcNMjUxMjMwMTkwMTAzWhcNMjUxMjMxMTkwMTAzWjAzMTEwLwYDVQQD Eyg4OTk1MDFhMjExMWJhZDNiMjFjMTliOTVmOTFiNGRmNmFiMzk2YmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8w2Fqq62wZmGto4MyS0Pxz+mrlf O5gzryFME7ho2VuZYmkXQhuCI78lhNqEEPXMLDsvADt0MJkfS1L3FmhccMCK6/j+ fKsKuSDKOiC+uV4EQ/T25YJT4GwpK0Nm9YH909i9iyRKWQFy7I16RAm+mWnV3ryi oDQVRqFcfZQHplf8EJsejsd5tqZjtlNKKPv5QXAgfQBahKp7QAWtwyYvi/xRKfa+ lAkZbFsTIm35Yt2JOYX8O7HFEf9Z6aw3ZoKm4emVbqhq2WAbb7H9/7BDI3LCE9RC M2BV3eD8KFB+XJ7LAQblOKqIFSutjZKdTqgGO8lVAV5M1xmuusxozeyEDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImVAaIRG607IcGblfkbTfarOWu3MB8GA1UdIwQY MBaAFE4Sn7zHro9bQBnwej1tLhhJa17kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGhLZnZNZXVqMXRBR2ZCNlBXMHVHRWxyWHVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mMjlhNTItMzcyMC00ODBmLTgwZGIt OTFkMmI0ODkwMzY5LzEvVGhLZnZNZXVqMXRBR2ZCNlBXMHVHRWxyWHVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9mMjlhNTItMzcyMC00ODBmLTgwZGItOTFkMmI0ODkwMzY5 LzEvVGhLZnZNZXVqMXRBR2ZCNlBXMHVHRWxyWHVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKc77cM1h JuunU6dtlzHN/0owJH0PC22VIcut67AnCawYeVMYm780S379fFejWFUt4HIbHQuC ATRuDfXewY9OF+JoE4a448hvfGj/MvRfOK5YWycDNN0U6zdHhpSBBTFkdNvwfSkl ZB2NPnVj+z1xwe/Ymzu4lWrl4tdlQyCxkFjalYwd/nKCBTkw8wZ//vTiBJZVjadr pknllLEve729pmDfv8eFAVi83UiUg6cZcGNXX7uXzi9iXx6CBVlh2Xps9mA+2r2w w3pOZYSr9J0UegC0J7n1gIyukAo2YEwZKJckJJTUj40vhQ4wtTa7WfK4uzmJkraM 73LN+zLOvRaF5g== -----END CERTIFICATE-----Generated at Wed Dec 31 00:02:29 2025 by rpki-client