This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json) Hash identifier: mfbewUnFfLEIYdnWHXqBDXXjm/nkMbxMka50ly9S0Es= Subject key identifier: FE:1B:74:08:BE:1E:64:A3:72:54:AA:F5:CD:9F:CA:A7:7F:8C:51:55 Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42 Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42 Certificate serial: 019B3C106B69254056878EF200397E503BA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft Manifest number: 06D6 Signing time: Sat 20 Dec 2025 14:01:07 +0000 Manifest this update: Sat 20 Dec 2025 14:01:07 +0000 Manifest next update: Sun 21 Dec 2025 14:01:07 +0000 Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: NoEHIw+MW7ZQUpFvWyC+M964Y4Dd+A6g4I1mTDMjOVY=) 2: ypWsWp3lqcgm3orp5hClVetL1gs.roa (hash: gAI+ZENNE355QZzW1lVcF9M6FT+OGK0PoiiTAc8yFHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:6b:69:25:40:56:87:8e:f2:00:39:7e:50:3b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42 Validity Not Before: Dec 20 14:01:07 2025 GMT Not After : Dec 21 14:01:07 2025 GMT Subject: CN=fe1b7408be1e64a37254aaf5cd9fcaa77f8c5155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ce:90:a4:f6:89:05:6b:46:d2:2c:01:13:fc: d8:79:2e:77:a4:67:ce:07:f0:39:7b:60:f5:50:c3: 1d:5e:3f:e2:50:66:dc:a2:f6:21:66:a0:f4:4c:fa: 53:09:05:bf:cc:89:a7:8f:12:01:ad:5d:8c:5a:2e: 3f:e8:a2:d6:60:0d:21:82:59:68:22:f6:a2:6c:c2: 5a:f3:bb:77:c0:ef:8a:b9:0f:ee:06:d3:02:38:22: df:a9:f7:84:0a:b2:1f:aa:23:f8:c4:5c:bb:5a:3e: 7c:ab:53:49:cf:83:2b:4f:38:3e:c7:0e:de:6c:58: 06:7e:76:3a:87:da:0e:12:b4:31:c8:db:ae:5d:97: f9:54:be:0e:42:c0:fe:d2:a2:66:44:d9:6f:37:ed: 28:a9:40:24:30:c2:77:20:f5:7b:76:d9:18:a7:aa: be:20:c0:42:f1:77:9b:12:4c:98:7a:7e:8b:11:0b: f9:f8:01:3a:49:cc:67:9b:8b:34:fc:11:62:8d:ce: f7:66:ee:6d:8c:0d:01:3f:8c:9f:8c:79:92:f2:13: 43:d4:81:d7:ff:4a:a4:14:40:a9:a2:f2:62:b7:4d: ad:52:ed:48:30:3b:b6:7a:54:12:e3:33:bf:08:40: be:a5:29:e7:a6:24:23:d0:85:1b:94:70:db:4f:1d: 43:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1B:74:08:BE:1E:64:A3:72:54:AA:F5:CD:9F:CA:A7:7F:8C:51:55 X509v3 Authority Key Identifier: keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5e:2b:a6:cb:8f:e7:5f:91:7b:a7:78:c0:a7:05:4c:cd:6d: 75:b6:81:97:e2:77:53:39:aa:ee:68:6d:a0:e6:b4:15:86:a3: a7:cb:96:e0:19:a9:cf:35:cb:d3:bb:0b:78:13:51:90:59:61: 0b:db:ee:54:53:a3:38:ae:a7:c8:23:2f:47:3c:d4:0d:cc:2d: f2:6a:aa:7b:2f:75:4e:52:8b:ff:7e:9d:74:05:c7:e6:6f:44: 3b:b2:c5:f6:86:fa:38:68:e8:36:62:bb:87:8f:3a:8a:7c:aa: 44:5f:ee:47:00:b8:3b:70:24:e6:b3:43:a6:84:34:e6:da:c5: 96:6e:a2:eb:76:ed:7b:68:11:8f:54:87:f8:c1:44:db:f4:12: d4:f7:2b:5c:ac:04:b2:c0:c6:8f:ae:af:1a:71:dd:50:2f:4c: 50:1b:ee:5c:60:fc:25:71:3b:b2:72:42:64:4e:fd:3d:e4:e7: b8:03:c0:3d:7a:24:d3:cd:f9:1b:f4:b6:01:9f:5a:62:75:5f: a3:93:aa:47:b6:b8:5c:4c:99:8d:a2:79:8b:3c:a4:37:5b:2d: ad:40:47:01:63:78:4e:8e:4b:59:fb:12:51:99:ed:ba:8e:82: 03:9c:b6:3d:33:7c:f1:2a:36:73:7b:6d:c7:ba:cd:31:a5:d6: 83:05:5d:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EGtpJUBWh47yADl+UDunMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMmEzMDU2ZTYyNTkyNDlmNDY2ZjAwNTViYjExYjgzYTZh MzBhNDIwHhcNMjUxMjIwMTQwMTA3WhcNMjUxMjIxMTQwMTA3WjAzMTEwLwYDVQQD EyhmZTFiNzQwOGJlMWU2NGEzNzI1NGFhZjVjZDlmY2FhNzdmOGM1MTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM6QpPaJBWtG0iwBE/zYeS53pGfO B/A5e2D1UMMdXj/iUGbcovYhZqD0TPpTCQW/zImnjxIBrV2MWi4/6KLWYA0hgllo IvaibMJa87t3wO+KuQ/uBtMCOCLfqfeECrIfqiP4xFy7Wj58q1NJz4MrTzg+xw7e bFgGfnY6h9oOErQxyNuuXZf5VL4OQsD+0qJmRNlvN+0oqUAkMMJ3IPV7dtkYp6q+ IMBC8XebEkyYen6LEQv5+AE6Scxnm4s0/BFijc73Zu5tjA0BP4yfjHmS8hND1IHX /0qkFECpovJit02tUu1IMDu2elQS4zO/CEC+pSnnpiQj0IUblHDbTx1DgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4bdAi+HmSjclSq9c2fyqd/jFFVMB8GA1UdIwQY MBaAFEwqMFbmJZJJ9GbwBVuxG4OmowpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NzhhZjItYjJjMC00NzA0LTlmYTIt Mjg0MTAxM2JjY2I0LzEvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC83NzhhZjItYjJjMC00NzA0LTlmYTItMjg0MTAxM2JjY2I0 LzEvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS14rpsuP 51+Re6d4wKcFTM1tdbaBl+J3Uzmq7mhtoOa0FYajp8uW4BmpzzXL07sLeBNRkFlh C9vuVFOjOK6nyCMvRzzUDcwt8mqqey91TlKL/36ddAXH5m9EO7LF9ob6OGjoNmK7 h486inyqRF/uRwC4O3Ak5rNDpoQ05trFlm6i63bte2gRj1SH+MFE2/QS1PcrXKwE ssDGj66vGnHdUC9MUBvuXGD8JXE7snJCZE79PeTnuAPAPXok0835G/S2AZ9aYnVf o5OqR7a4XEyZjaJ5izykN1strUBHAWN4To5LWfsSUZntuo6CA5y2PTN88So2c3tt x7rNMaXWgwVdGw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:43:25 2025 by rpki-client