This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft File: TnzINx7SS6z2esqLkCzucGr8Yks.mft (raw, json) Hash identifier: Nl6sBoQXT8dg9OX7UVn/IbI09mdajo/8NrBby/f7+Vs= Subject key identifier: 1D:91:18:FF:CA:47:B3:85:2B:F1:5D:08:D1:F2:59:11:6F:07:8A:D3 Authority key identifier: 4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B Certificate issuer: /CN=4e7cc8371ed24bacf67aca8b902cee706afc624b Certificate serial: 019B53E1502698E71783D16A54E0FD763997 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 05:00:33 +0000 Manifest this update: Thu 25 Dec 2025 05:00:33 +0000 Manifest next update: Fri 26 Dec 2025 05:00:33 +0000 Files and hashes: 1: AFXKRWkq4CEJ7e_q_TT8oCKNDgs.roa (hash: vvcSpEWzby7j1iGxx2OT88XWdiMYKYH4weh98eM4dfY=) 2: TnzINx7SS6z2esqLkCzucGr8Yks.crl (hash: ff/hM63a2okMYjwiiVNnlybMHVmr0jlYnMCuGf0hO5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:50:26:98:e7:17:83:d1:6a:54:e0:fd:76:39:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e7cc8371ed24bacf67aca8b902cee706afc624b Validity Not Before: Dec 25 05:00:33 2025 GMT Not After : Dec 26 05:00:33 2025 GMT Subject: CN=1d9118ffca47b3852bf15d08d1f259116f078ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f3:c2:47:73:38:32:c3:01:86:9d:96:05:70: 6d:d2:bd:58:67:97:36:ef:f5:cd:dc:3c:87:2b:e3: 49:1d:2f:65:1f:f3:aa:38:94:ec:c0:73:ff:9e:54: 2d:3a:e5:6d:2b:a6:72:ae:55:cc:8a:4b:82:8c:60: 42:91:a7:92:c6:9b:d3:e8:7b:40:3d:30:e5:96:3e: a4:99:61:14:fd:19:b8:45:16:79:d5:9f:ad:bc:77: 88:66:e2:8b:1d:81:c8:af:d1:3d:4b:47:b0:e6:d2: 63:e8:17:85:f6:4b:84:bd:eb:2a:29:c5:7c:d6:0c: ab:ac:a4:82:b5:13:f1:2e:e1:15:fa:0f:e6:37:c2: fd:57:c1:0a:7f:d3:72:57:89:b1:fd:38:e3:e2:8e: 79:b6:ab:bf:58:db:a6:65:67:66:ab:13:1c:3c:e4: 38:5a:79:9c:4f:3b:96:b0:c4:f6:ad:47:93:95:f1: 82:03:d2:d4:1b:a3:4c:e9:47:54:20:47:e9:94:a4: 4c:55:97:84:cc:55:a7:18:60:60:e9:f1:a4:ab:f3: c8:c7:e3:3d:2c:74:ef:38:98:7b:5c:10:54:98:25: 47:08:bb:6e:41:5a:62:a3:3a:c2:bd:c4:0a:97:e0: ce:9c:76:88:bb:38:c8:f5:8e:e6:2c:7b:1c:50:a6: 7c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:91:18:FF:CA:47:B3:85:2B:F1:5D:08:D1:F2:59:11:6F:07:8A:D3 X509v3 Authority Key Identifier: keyid:4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ce:3c:b7:f2:a6:60:ad:bd:69:69:b0:c3:7c:62:07:0b:55: 37:bf:bd:3c:e6:fd:2c:c8:de:73:83:a1:9f:13:4b:bb:07:53: fe:15:06:ad:ff:21:b6:37:b9:6e:2c:cb:9c:88:88:8a:e1:9a: 05:be:7d:29:a8:db:fc:4e:6a:7b:e1:f9:9a:96:45:cc:7d:44: 05:70:48:a2:7b:86:3d:bf:af:aa:7f:e5:ea:01:b8:6b:97:4a: b5:9d:b4:80:b4:be:6c:e4:56:62:b8:b5:05:a0:03:39:d9:cd: 6a:73:42:7f:5b:26:8f:45:5b:f3:88:8e:dc:6d:20:3f:e6:11: ff:c5:c9:56:e5:b1:90:1b:01:55:13:71:ae:52:ae:7f:95:53: 72:2f:a6:cf:ff:04:b7:b6:2e:9a:d2:62:5e:19:05:35:02:bb: aa:52:bb:39:65:c9:cf:16:ac:b7:91:b8:18:3e:75:ac:99:f7: 70:24:97:16:9e:16:80:f5:10:39:5d:2c:87:32:fa:c8:1c:4d: af:50:1e:a1:fd:04:d9:78:ab:21:8d:4d:62:8d:0a:52:91:cc: f7:67:9a:1a:3f:c1:d0:39:28:0f:5b:93:b7:43:74:8e:09:46: 28:31:61:5c:f2:0c:c1:12:d2:2a:48:50:e4:49:b3:f2:5d:2e: 22:62:b2:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4VAmmOcXg9FqVOD9djmXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlN2NjODM3MWVkMjRiYWNmNjdhY2E4YjkwMmNlZTcwNmFm YzYyNGIwHhcNMjUxMjI1MDUwMDMzWhcNMjUxMjI2MDUwMDMzWjAzMTEwLwYDVQQD EygxZDkxMThmZmNhNDdiMzg1MmJmMTVkMDhkMWYyNTkxMTZmMDc4YWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PPCR3M4MsMBhp2WBXBt0r1YZ5c2 7/XN3DyHK+NJHS9lH/OqOJTswHP/nlQtOuVtK6ZyrlXMikuCjGBCkaeSxpvT6HtA PTDllj6kmWEU/Rm4RRZ51Z+tvHeIZuKLHYHIr9E9S0ew5tJj6BeF9kuEvesqKcV8 1gyrrKSCtRPxLuEV+g/mN8L9V8EKf9NyV4mx/Tjj4o55tqu/WNumZWdmqxMcPOQ4 WnmcTzuWsMT2rUeTlfGCA9LUG6NM6UdUIEfplKRMVZeEzFWnGGBg6fGkq/PIx+M9 LHTvOJh7XBBUmCVHCLtuQVpiozrCvcQKl+DOnHaIuzjI9Y7mLHscUKZ8nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2RGP/KR7OFK/FdCNHyWRFvB4rTMB8GA1UdIwQY MBaAFE58yDce0kus9nrKi5As7nBq/GJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG56SU54N1NTNnoyZXNxTGtDenVjR3I4WWtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8wYjRjZGYtYjQ4Ni00YTU4LTgwMGQt OGVkNWE3OWRlODM1LzEvVG56SU54N1NTNnoyZXNxTGtDenVjR3I4WWtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8wYjRjZGYtYjQ4Ni00YTU4LTgwMGQtOGVkNWE3OWRlODM1 LzEvVG56SU54N1NTNnoyZXNxTGtDenVjR3I4WWtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAds48t/Km YK29aWmww3xiBwtVN7+9POb9LMjec4OhnxNLuwdT/hUGrf8htje5bizLnIiIiuGa Bb59Kajb/E5qe+H5mpZFzH1EBXBIonuGPb+vqn/l6gG4a5dKtZ20gLS+bORWYri1 BaADOdnNanNCf1smj0Vb84iO3G0gP+YR/8XJVuWxkBsBVRNxrlKuf5VTci+mz/8E t7YumtJiXhkFNQK7qlK7OWXJzxast5G4GD51rJn3cCSXFp4WgPUQOV0shzL6yBxN r1Aeof0E2XirIY1NYo0KUpHM92eaGj/B0DkoD1uTt0N0jglGKDFhXPIMwRLSKkhQ 5Emz8l0uImKyPQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:07:24 2025 by rpki-client