This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft File: TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json) Hash identifier: k0mAIaN5sbQvP8LSqQq/11W1+0rmrgRtX47jtdm9vgA= Subject key identifier: 5C:57:AE:0B:00:A0:DC:9A:CC:A2:C2:F9:FD:37:A5:23:7F:F2:5C:DC Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49 Certificate issuer: /CN=4c51636fde905f8521f411479e81321cdcf49049 Certificate serial: 019B3E6CE7D4C4EE5953FCDA2A35DBF5D666 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft Manifest number: 0A19 Signing time: Sun 21 Dec 2025 01:01:23 +0000 Manifest this update: Sun 21 Dec 2025 01:01:23 +0000 Manifest next update: Mon 22 Dec 2025 01:01:23 +0000 Files and hashes: 1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: uXKdG7Mu3blLYdbh39PQ6dLpFBBxhng9gGjvF6uGbFc=) 2: k88eKZ3ggVkstFfz6v9jAollFdM.roa (hash: RToXutf5Qdv2Y+G73kPgZr6gfiGthSFW8G2eqnaoH64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:e7:d4:c4:ee:59:53:fc:da:2a:35:db:f5:d6:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049 Validity Not Before: Dec 21 01:01:23 2025 GMT Not After : Dec 22 01:01:23 2025 GMT Subject: CN=5c57ae0b00a0dc9acca2c2f9fd37a5237ff25cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ab:de:50:af:57:4b:a6:d5:ea:db:f9:83:a9: 0e:1b:7c:64:3e:29:a1:f7:76:45:2a:90:cf:b5:05: c3:b4:c1:18:59:84:88:67:2f:17:ce:eb:70:a1:ca: b3:7f:a6:24:fd:9e:0e:32:96:80:94:8d:78:68:be: cb:49:1f:db:a1:db:56:35:79:fd:69:80:15:4e:f9: db:a0:58:03:3c:c6:eb:0d:ab:9f:4a:fd:47:35:51: 07:b8:16:d0:c1:f2:95:1f:78:27:2d:1c:99:ea:de: 2c:83:59:a8:4c:dc:2e:1b:3e:16:e9:10:02:90:e9: 0a:01:32:19:19:80:8c:2d:2f:d9:72:4a:af:f4:01: 83:4c:5f:c1:2c:09:56:49:b8:d1:40:e0:7e:56:3a: f6:1c:ce:d9:31:80:26:b2:0d:ae:c3:12:9a:bb:df: cd:8f:66:96:97:7e:d1:85:78:77:d7:57:63:33:0d: 07:77:b7:02:5c:f7:68:50:9f:5c:ab:cd:60:e0:98: 3b:d3:85:e4:b9:df:0c:c9:0e:3d:09:3e:68:c8:a9: b7:87:92:1c:7b:ab:7a:39:c0:9d:ca:2c:51:82:ce: fd:8a:03:a9:21:87:46:70:59:30:fa:c7:c5:82:9d: 9c:9b:12:52:2a:f3:f8:92:78:80:2b:0c:8a:82:36: c8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:57:AE:0B:00:A0:DC:9A:CC:A2:C2:F9:FD:37:A5:23:7F:F2:5C:DC X509v3 Authority Key Identifier: keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:d1:6e:1c:c3:bd:57:cc:c7:42:fe:b7:0d:fb:ac:d6:76:81: 78:c0:cb:14:f0:65:4c:b3:ff:af:3d:03:a9:d1:0f:25:f0:06: fe:05:89:50:81:9a:a2:cf:c5:90:25:9b:38:53:8c:11:b0:f4: bd:86:e6:23:b1:b7:3e:46:98:47:6c:f4:1d:8e:22:29:c9:dd: 36:8a:e8:df:d4:fe:a2:17:03:9a:12:0a:c3:d5:fb:6a:01:93: fe:34:0f:ce:ae:dd:56:30:df:2e:ae:e0:f5:f8:f4:01:c4:72: bd:7b:55:1d:f9:10:38:ae:cd:b2:0e:06:90:b5:6c:b7:65:6a: 01:99:8e:8a:a5:fa:86:cd:1c:7b:7e:49:35:ad:33:1c:b9:f5: 87:2b:46:bd:7c:c4:cd:27:d5:a0:d8:82:fa:e1:d0:6e:1d:c7: b0:41:17:b7:01:e9:6a:17:06:0e:44:10:24:31:3b:ec:44:9d: 23:5a:3f:84:b3:12:b1:f3:38:81:9c:ec:38:77:11:ac:7a:51: ed:d4:06:2c:cb:65:79:7f:1e:bf:44:c4:26:97:04:b4:92:c0: 3c:58:f8:da:b1:ba:35:2a:b8:c1:4d:91:bd:d3:15:06:5f:5d: 47:c8:e6:c9:1b:14:21:62:60:56:75:2d:da:68:64:b2:a5:85: 09:70:b1:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bOfUxO5ZU/zaKjXb9dZmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNTE2MzZmZGU5MDVmODUyMWY0MTE0NzllODEzMjFjZGNm NDkwNDkwHhcNMjUxMjIxMDEwMTIzWhcNMjUxMjIyMDEwMTIzWjAzMTEwLwYDVQQD Eyg1YzU3YWUwYjAwYTBkYzlhY2NhMmMyZjlmZDM3YTUyMzdmZjI1Y2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aveUK9XS6bV6tv5g6kOG3xkPimh 93ZFKpDPtQXDtMEYWYSIZy8Xzutwocqzf6Yk/Z4OMpaAlI14aL7LSR/bodtWNXn9 aYAVTvnboFgDPMbrDaufSv1HNVEHuBbQwfKVH3gnLRyZ6t4sg1moTNwuGz4W6RAC kOkKATIZGYCMLS/Zckqv9AGDTF/BLAlWSbjRQOB+Vjr2HM7ZMYAmsg2uwxKau9/N j2aWl37RhXh311djMw0Hd7cCXPdoUJ9cq81g4Jg704Xkud8MyQ49CT5oyKm3h5Ic e6t6OcCdyixRgs79igOpIYdGcFkw+sfFgp2cmxJSKvP4kniAKwyKgjbIVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxXrgsAoNyazKLC+f03pSN/8lzcMB8GA1UdIwQY MBaAFExRY2/ekF+FIfQRR56BMhzc9JBJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84MDA4ZmUtMTc1Yi00MWJmLWIxZDYt MmNlMGViNDU4Nzg4LzEvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84MDA4ZmUtMTc1Yi00MWJmLWIxZDYtMmNlMGViNDU4Nzg4 LzEvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxtFuHMO9 V8zHQv63Dfus1naBeMDLFPBlTLP/rz0DqdEPJfAG/gWJUIGaos/FkCWbOFOMEbD0 vYbmI7G3PkaYR2z0HY4iKcndNoro39T+ohcDmhIKw9X7agGT/jQPzq7dVjDfLq7g 9fj0AcRyvXtVHfkQOK7Nsg4GkLVst2VqAZmOiqX6hs0ce35JNa0zHLn1hytGvXzE zSfVoNiC+uHQbh3HsEEXtwHpahcGDkQQJDE77ESdI1o/hLMSsfM4gZzsOHcRrHpR 7dQGLMtleX8ev0TEJpcEtJLAPFj42rG6NSq4wU2RvdMVBl9dR8jmyRsUIWJgVnUt 2mhksqWFCXCxhA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:34:08 2025 by rpki-client