This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft File: TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json) Hash identifier: KoYx5GKEEvf8Z8tnR0cTZO26766hYD74eCsQOkZUxq0= Subject key identifier: 1A:1A:B4:95:11:60:23:9F:5F:46:13:F9:55:B6:F4:CA:50:6D:7B:27 Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49 Certificate issuer: /CN=4c51636fde905f8521f411479e81321cdcf49049 Certificate serial: 019B70A4130A6A8BF5ABB5F54B46FA924F67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft Manifest number: 0A33 Signing time: Tue 30 Dec 2025 19:02:39 +0000 Manifest this update: Tue 30 Dec 2025 19:02:39 +0000 Manifest next update: Wed 31 Dec 2025 19:02:39 +0000 Files and hashes: 1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: ED/OcrVWdfhWtzqtNZ1Z/zZoLiZPFOd0N4a76vMnKzA=) 2: k88eKZ3ggVkstFfz6v9jAollFdM.roa (hash: RToXutf5Qdv2Y+G73kPgZr6gfiGthSFW8G2eqnaoH64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 19:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a4:13:0a:6a:8b:f5:ab:b5:f5:4b:46:fa:92:4f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049 Validity Not Before: Dec 30 19:02:39 2025 GMT Not After : Dec 31 19:02:39 2025 GMT Subject: CN=1a1ab4951160239f5f4613f955b6f4ca506d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bd:8f:c3:c3:dc:bf:df:02:a7:64:a3:19:5b: db:19:26:e7:be:e9:ca:f2:f3:5f:f7:e6:e9:b4:ca: 04:4b:08:05:44:64:00:88:82:46:35:6b:21:d8:37: bc:f3:53:e3:50:83:fc:1c:62:9c:f4:d0:9e:da:3a: 5a:61:08:74:c1:2e:3f:e1:42:60:3c:1a:93:11:47: ff:5e:42:0e:13:98:c2:3e:31:6f:9a:74:b0:a6:19: 00:fa:46:9e:49:99:a3:55:10:79:b9:17:67:8a:15: d6:63:f5:cc:81:0f:87:1f:7c:4f:96:1d:0e:23:1a: cb:8e:0a:e7:6f:11:37:ae:e1:da:bc:f7:ed:5b:0a: 3c:a2:5b:96:40:1e:e8:8a:fc:56:61:41:ed:03:6b: 99:b9:f5:a9:c6:6b:b3:bf:90:15:ff:ea:42:f0:51: 7c:8b:0f:d2:67:bd:33:fa:74:2e:39:70:0c:f2:ce: bb:63:e3:ce:e0:e0:04:68:40:c2:04:4c:fb:c2:7e: 62:49:05:47:c6:0d:0b:71:a6:3f:47:bb:05:51:34: 0d:b4:ff:16:d7:f4:12:97:4d:4b:28:b0:40:3c:21: cd:e1:7b:b9:c3:47:98:67:95:ee:38:dd:56:c6:e0: 19:13:ea:a1:4c:b8:05:eb:40:3f:ab:d5:1b:39:e8: 13:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1A:B4:95:11:60:23:9F:5F:46:13:F9:55:B6:F4:CA:50:6D:7B:27 X509v3 Authority Key Identifier: keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:6d:71:81:a6:f2:f8:69:9e:3c:36:99:83:02:4f:f8:20:1c: 6b:2c:5d:07:af:a6:29:98:25:be:7b:11:ff:42:b3:e5:2e:ea: d4:96:98:ce:72:4f:82:a3:26:89:11:d8:45:2a:ba:c0:ce:eb: 92:e0:3b:5a:f4:58:c3:1c:ec:08:11:b1:99:40:22:4d:d0:9b: 1b:54:7a:ce:2f:2d:d6:cb:b3:24:af:03:10:95:97:62:78:76: 57:31:09:30:f4:3b:70:0b:1c:3e:00:24:79:c1:d5:d4:ea:3b: 82:52:9b:25:49:e9:1f:7e:43:17:aa:52:50:d4:c1:fc:39:df: c0:39:87:0e:41:a9:c6:08:45:14:2d:21:ae:b8:68:91:f4:69: 09:0a:df:53:1d:9f:51:32:a1:be:cd:dc:46:31:f6:c5:9e:e1: dd:4d:8c:c5:0f:c0:8a:bf:73:0a:cc:f7:88:67:d9:90:ac:46: 6d:1b:92:96:cd:e1:cc:6e:e9:8e:4c:96:c4:54:b7:40:d2:60: 98:c3:d3:90:66:17:24:da:bf:b4:0a:57:93:6a:01:6a:df:88: 2b:9f:76:a1:c8:b3:1c:94:9b:07:db:2d:e4:54:17:5f:cd:52: 4d:18:d3:56:4d:4a:50:a8:4e:98:72:79:42:34:91:fe:70:af: 67:53:74:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwpBMKaov1q7X1S0b6kk9nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNTE2MzZmZGU5MDVmODUyMWY0MTE0NzllODEzMjFjZGNm NDkwNDkwHhcNMjUxMjMwMTkwMjM5WhcNMjUxMjMxMTkwMjM5WjAzMTEwLwYDVQQD EygxYTFhYjQ5NTExNjAyMzlmNWY0NjEzZjk1NWI2ZjRjYTUwNmQ3YjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr2Pw8Pcv98Cp2SjGVvbGSbnvunK 8vNf9+bptMoESwgFRGQAiIJGNWsh2De881PjUIP8HGKc9NCe2jpaYQh0wS4/4UJg PBqTEUf/XkIOE5jCPjFvmnSwphkA+kaeSZmjVRB5uRdnihXWY/XMgQ+HH3xPlh0O IxrLjgrnbxE3ruHavPftWwo8oluWQB7oivxWYUHtA2uZufWpxmuzv5AV/+pC8FF8 iw/SZ70z+nQuOXAM8s67Y+PO4OAEaEDCBEz7wn5iSQVHxg0LcaY/R7sFUTQNtP8W 1/QSl01LKLBAPCHN4Xu5w0eYZ5XuON1WxuAZE+qhTLgF60A/q9UbOegTewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoatJURYCOfX0YT+VW29MpQbXsnMB8GA1UdIwQY MBaAFExRY2/ekF+FIfQRR56BMhzc9JBJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84MDA4ZmUtMTc1Yi00MWJmLWIxZDYt MmNlMGViNDU4Nzg4LzEvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84MDA4ZmUtMTc1Yi00MWJmLWIxZDYtMmNlMGViNDU4Nzg4 LzEvVEZGamI5NlFYNFVoOUJGSG5vRXlITnowa0VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsW1xgaby +GmePDaZgwJP+CAcayxdB6+mKZglvnsR/0Kz5S7q1JaYznJPgqMmiRHYRSq6wM7r kuA7WvRYwxzsCBGxmUAiTdCbG1R6zi8t1suzJK8DEJWXYnh2VzEJMPQ7cAscPgAk ecHV1Oo7glKbJUnpH35DF6pSUNTB/DnfwDmHDkGpxghFFC0hrrhokfRpCQrfUx2f UTKhvs3cRjH2xZ7h3U2MxQ/Air9zCsz3iGfZkKxGbRuSls3hzG7pjkyWxFS3QNJg mMPTkGYXJNq/tApXk2oBat+IK592ocizHJSbB9st5FQXX81STRjTVk1KUKhOmHJ5 QjSR/nCvZ1N0rA== -----END CERTIFICATE-----Generated at Wed Dec 31 03:42:34 2025 by rpki-client