This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft File: TNN3vorxFHipq-Jx-L3i3j0zNAg.mft (raw, json) Hash identifier: UBGmPtNnInomPP67DK+gzhzZt1Kaa4XTmYzkpih1g7I= Subject key identifier: 4B:F9:68:34:33:96:1B:66:21:08:BF:FE:7B:EC:6F:5A:1B:E2:15:E5 Authority key identifier: 4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08 Certificate issuer: /CN=4cd377be8af11478a9abe271f8bde2de3d333408 Certificate serial: 019B74ECE9EDB6DCA6BD5EF8BA44EA35BFD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft Manifest number: 09F5 Signing time: Wed 31 Dec 2025 15:00:41 +0000 Manifest this update: Wed 31 Dec 2025 15:00:41 +0000 Manifest next update: Thu 01 Jan 2026 15:00:41 +0000 Files and hashes: 1: TNN3vorxFHipq-Jx-L3i3j0zNAg.crl (hash: cTMhcug+dYj+g1yxlQyFs6emzJhR5pueLosGziDrizQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 15:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:ec:e9:ed:b6:dc:a6:bd:5e:f8:ba:44:ea:35:bf:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cd377be8af11478a9abe271f8bde2de3d333408 Validity Not Before: Dec 31 15:00:41 2025 GMT Not After : Jan 1 15:00:41 2026 GMT Subject: CN=4bf9683433961b662108bffe7bec6f5a1be215e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:26:c8:e2:1e:ce:2f:89:56:ab:ba:f1:7c:c5: e0:b1:0b:29:06:9b:be:1e:d4:f1:62:41:60:74:14: b2:12:63:31:0d:f5:49:ba:86:a5:95:b7:d5:1c:83: 7f:71:27:94:58:03:55:6d:b3:2c:08:a5:3e:aa:d6: 4f:40:7b:27:a8:20:fb:8a:3d:8e:ee:1b:4b:92:65: 19:79:52:1a:16:b8:bc:04:f5:a2:af:4c:68:e4:fc: 93:ee:1f:7a:13:af:b0:96:d5:c9:d7:f2:b9:2b:a7: b0:b7:b4:ea:a2:24:e4:9f:10:57:83:b7:07:64:2b: 2d:10:8b:ec:6a:49:cc:d3:bd:16:ef:e1:53:dc:d1: 09:8f:a8:24:8a:b4:7a:46:c0:3d:b9:96:d6:77:7a: ac:e6:5c:31:7c:16:da:2b:0a:52:6c:7e:a5:1c:f9: 8a:36:83:08:c2:82:ee:ce:80:99:0b:f6:fb:c2:96: 07:df:e4:51:22:44:eb:d4:59:00:97:01:d1:a8:ff: ab:76:92:75:e4:c8:85:2f:c1:ba:1e:a7:6b:8a:4c: c7:c3:66:04:1e:fe:87:24:41:94:de:e6:08:9e:22: 04:ed:2c:88:31:6a:bd:f1:2a:fb:94:db:d4:07:43: d1:70:33:a0:85:d0:02:21:f4:39:d1:24:a8:e1:ed: a8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F9:68:34:33:96:1B:66:21:08:BF:FE:7B:EC:6F:5A:1B:E2:15:E5 X509v3 Authority Key Identifier: keyid:4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:1d:bd:49:73:70:44:dc:58:40:81:54:10:e6:56:e4:34:c4: de:65:2d:21:d5:e2:78:7f:09:6b:21:5b:e1:ca:ed:b3:49:1d: f8:63:12:da:5a:f1:c8:e8:d8:0f:1c:10:bc:08:b6:50:f1:bf: 4a:02:4f:86:35:96:94:a6:88:fb:17:19:1e:3f:c5:48:a8:2e: 9b:4a:bc:46:4a:0e:2a:81:f3:ba:53:2d:9e:9c:31:9d:19:05: d2:48:30:1e:23:f5:76:a2:45:d1:8a:76:3c:e3:96:ce:1e:c8: b5:4c:e7:37:69:73:5e:bb:5a:22:57:ba:56:0e:c0:72:84:49: 9f:22:da:f7:9e:a0:7c:74:8f:67:24:ee:cb:07:af:11:c4:5b: e4:46:b6:fe:78:8d:dc:f3:31:59:d1:42:4f:58:48:b5:25:32: ad:d7:fc:f1:6f:8e:20:5c:86:2c:3f:fd:a5:bd:91:9b:8b:1d: 8d:23:62:e8:28:51:50:bf:6e:48:18:ee:7a:fa:86:0d:2a:f5: 83:6e:34:02:7d:14:bc:59:23:5f:24:06:8c:fc:c8:09:4c:cf: 2c:17:74:e6:62:52:a2:81:ef:36:d3:25:6a:13:72:06:34:99: a7:b2:9f:a3:20:0c:95:f1:c0:35:6f:c7:9a:01:47:12:0d:b8: 39:81:b8:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt07OntttymvV74ukTqNb/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZDM3N2JlOGFmMTE0NzhhOWFiZTI3MWY4YmRlMmRlM2Qz MzM0MDgwHhcNMjUxMjMxMTUwMDQxWhcNMjYwMTAxMTUwMDQxWjAzMTEwLwYDVQQD Eyg0YmY5NjgzNDMzOTYxYjY2MjEwOGJmZmU3YmVjNmY1YTFiZTIxNWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxybI4h7OL4lWq7rxfMXgsQspBpu+ HtTxYkFgdBSyEmMxDfVJuoallbfVHIN/cSeUWANVbbMsCKU+qtZPQHsnqCD7ij2O 7htLkmUZeVIaFri8BPWir0xo5PyT7h96E6+wltXJ1/K5K6ewt7TqoiTknxBXg7cH ZCstEIvsaknM070W7+FT3NEJj6gkirR6RsA9uZbWd3qs5lwxfBbaKwpSbH6lHPmK NoMIwoLuzoCZC/b7wpYH3+RRIkTr1FkAlwHRqP+rdpJ15MiFL8G6HqdrikzHw2YE Hv6HJEGU3uYIniIE7SyIMWq98Sr7lNvUB0PRcDOghdACIfQ50SSo4e2oFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEv5aDQzlhtmIQi//nvsb1ob4hXlMB8GA1UdIwQY MBaAFEzTd76K8RR4qavicfi94t49MzQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE5OM3ZvcnhGSGlwcS1KeC1MM2kzajB6TkFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81MWU4YjUtN2UyYy00MDA4LWJmODMt YjEyZWIxY2VhYTE0LzEvVE5OM3ZvcnhGSGlwcS1KeC1MM2kzajB6TkFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81MWU4YjUtN2UyYy00MDA4LWJmODMtYjEyZWIxY2VhYTE0 LzEvVE5OM3ZvcnhGSGlwcS1KeC1MM2kzajB6TkFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATB29SXNw RNxYQIFUEOZW5DTE3mUtIdXieH8JayFb4crts0kd+GMS2lrxyOjYDxwQvAi2UPG/ SgJPhjWWlKaI+xcZHj/FSKgum0q8RkoOKoHzulMtnpwxnRkF0kgwHiP1dqJF0Yp2 POOWzh7ItUznN2lzXrtaIle6Vg7AcoRJnyLa956gfHSPZyTuywevEcRb5Ea2/niN 3PMxWdFCT1hItSUyrdf88W+OIFyGLD/9pb2Rm4sdjSNi6ChRUL9uSBjuevqGDSr1 g240An0UvFkjXyQGjPzICUzPLBd05mJSooHvNtMlahNyBjSZp7KfoyAMlfHANW/H mgFHEg24OYG4RQ== -----END CERTIFICATE-----Generated at Wed Dec 31 21:06:11 2025 by rpki-client