This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft File: TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft (raw, json) Hash identifier: ldvGHnQYyM8KQOMIJ2uu7P62PaOcIlhqusSVV8RpZSM= Subject key identifier: 10:69:7D:01:C9:69:22:DA:B9:F2:92:BD:68:24:96:43:8D:A2:A3:98 Authority key identifier: 4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79 Certificate issuer: /CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779 Certificate serial: 019B42495DC930A62F157202624879531C3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft Manifest number: 08D2 Signing time: Sun 21 Dec 2025 19:01:02 +0000 Manifest this update: Sun 21 Dec 2025 19:01:02 +0000 Manifest next update: Mon 22 Dec 2025 19:01:02 +0000 Files and hashes: 1: GQnwoz9GTo0_6aViyidBMz0OXtQ.roa (hash: nHXXJO9fTVBgm0+nbMIO/zyd2MM+aOqt/Y2KW6tLr74=) 2: TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl (hash: SCpH6hrnHX+i/t2dK6FM4LgDNgWQ/5cRUCCUMYQ6ULQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:5d:c9:30:a6:2f:15:72:02:62:48:79:53:1c:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779 Validity Not Before: Dec 21 19:01:02 2025 GMT Not After : Dec 22 19:01:02 2025 GMT Subject: CN=10697d01c96922dab9f292bd682496438da2a398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:10:88:fd:b6:62:f1:fe:b3:88:8a:dd:07: 9c:40:4a:20:3f:84:5c:27:8b:74:be:b0:7a:bb:4b: e6:8c:d1:53:bc:07:4d:7f:5b:ba:3f:68:75:e3:ba: fe:a7:95:f4:c0:9f:a8:a0:62:08:5d:5b:17:4a:92: b6:9a:38:f6:8e:c2:b6:a4:19:30:68:b1:7a:53:fa: 1a:cb:3f:73:25:34:f1:8b:4c:76:ed:44:fb:b9:16: 79:76:a6:77:88:68:f9:d0:82:13:b5:e2:63:12:de: 03:4a:ed:2c:0d:8f:7a:0d:cf:e1:89:56:dd:a5:37: 80:70:c4:16:a4:a9:a3:cd:00:05:3a:a4:3e:86:d8: f2:57:4c:1a:9e:d4:c3:c4:aa:d1:e5:ef:46:09:d3: f4:34:ff:54:bd:fa:aa:85:55:e5:df:9f:3c:4e:bd: 10:a2:0b:ae:f7:89:c3:16:72:9a:52:ef:61:f3:8b: bc:8c:36:1c:ae:28:e7:07:19:cb:53:b2:0b:84:d8: 4b:cb:9a:07:4b:68:ec:3a:73:b1:b9:36:39:0d:56: dd:03:d0:99:c7:a0:b4:2e:b1:8c:65:6b:b8:8f:65: 82:eb:88:5f:18:a0:a2:04:9d:06:56:42:e1:be:0b: 40:45:51:60:f9:1d:c4:fc:cd:0a:de:39:c5:c2:63: 2f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:69:7D:01:C9:69:22:DA:B9:F2:92:BD:68:24:96:43:8D:A2:A3:98 X509v3 Authority Key Identifier: keyid:4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:86:dd:58:fc:9c:06:37:98:4e:6a:b5:1e:82:70:49:54:cf: 1f:bf:8f:66:09:39:86:0a:71:64:fa:14:80:9e:ca:8d:db:01: d3:38:9a:2d:82:50:49:be:3a:95:6a:f2:59:88:6f:98:8f:d9: fb:77:bc:38:41:33:33:1c:6f:07:c0:75:b1:62:90:52:e9:1a: cc:2f:06:a5:46:35:35:b6:06:92:cd:2f:d9:d7:8d:4e:04:75: 2e:ca:84:25:00:07:e0:59:68:c1:bb:98:c3:23:c7:eb:8b:c5: fc:2e:b5:40:12:55:92:d5:19:a7:9d:1f:4c:a1:6e:dd:3a:c2: a5:f8:da:77:6f:15:8d:c2:1c:f0:a8:90:bc:fa:22:f8:bc:48: 35:ea:fd:74:ea:8a:ea:0e:50:37:b1:c7:72:6b:b1:48:e3:d3: be:ca:a4:79:1a:49:cb:d9:c6:64:8a:21:a7:c9:6b:93:30:e5: 25:01:8c:ab:71:5a:e7:6a:5b:e0:18:23:1a:ec:f7:af:f8:14: 20:69:28:e7:e0:e1:37:06:26:6a:b2:8e:54:5e:65:57:78:80: 82:49:29:98:a8:a9:bb:55:53:5f:21:9f:44:34:61:64:aa:b1: f8:19:f7:f0:e0:a4:1a:a2:cf:d6:30:9c:d5:c9:70:45:4a:0c: a2:f6:ea:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSV3JMKYvFXICYkh5Uxw/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNGYyMDZmZGNjYWI4M2RkZmUxOWU4OTZlOTE2M2Q3YTlh ZDQ3NzkwHhcNMjUxMjIxMTkwMTAyWhcNMjUxMjIyMTkwMTAyWjAzMTEwLwYDVQQD EygxMDY5N2QwMWM5NjkyMmRhYjlmMjkyYmQ2ODI0OTY0MzhkYTJhMzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNYQiP22YvH+s4iK3QecQEogP4Rc J4t0vrB6u0vmjNFTvAdNf1u6P2h147r+p5X0wJ+ooGIIXVsXSpK2mjj2jsK2pBkw aLF6U/oayz9zJTTxi0x27UT7uRZ5dqZ3iGj50IITteJjEt4DSu0sDY96Dc/hiVbd pTeAcMQWpKmjzQAFOqQ+htjyV0wantTDxKrR5e9GCdP0NP9UvfqqhVXl3588Tr0Q oguu94nDFnKaUu9h84u8jDYcrijnBxnLU7ILhNhLy5oHS2jsOnOxuTY5DVbdA9CZ x6C0LrGMZWu4j2WC64hfGKCiBJ0GVkLhvgtARVFg+R3E/M0K3jnFwmMvMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBpfQHJaSLaufKSvWgklkONoqOYMB8GA1UdIwQY MBaAFExPIG/cyrg93+GeiW6RY9eprUd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEU4Z2I5ekt1RDNmNFo2SmJwRmoxNm10UjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jMjliYWMtNmNmOC00Yjg3LWE4ZTIt YWQ1NDkzMWMyNGIzLzEvVEU4Z2I5ekt1RDNmNFo2SmJwRmoxNm10UjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9jMjliYWMtNmNmOC00Yjg3LWE4ZTItYWQ1NDkzMWMyNGIz LzEvVEU4Z2I5ekt1RDNmNFo2SmJwRmoxNm10UjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXobdWPyc BjeYTmq1HoJwSVTPH7+PZgk5hgpxZPoUgJ7KjdsB0ziaLYJQSb46lWryWYhvmI/Z +3e8OEEzMxxvB8B1sWKQUukazC8GpUY1NbYGks0v2deNTgR1LsqEJQAH4FlowbuY wyPH64vF/C61QBJVktUZp50fTKFu3TrCpfjad28VjcIc8KiQvPoi+LxINer9dOqK 6g5QN7HHcmuxSOPTvsqkeRpJy9nGZIohp8lrkzDlJQGMq3Fa52pb4BgjGuz3r/gU IGko5+DhNwYmarKOVF5lV3iAgkkpmKipu1VTXyGfRDRhZKqx+Bn38OCkGqLP1jCc 1clwRUoMovbqJg== -----END CERTIFICATE-----Generated at Mon Dec 22 00:06:28 2025 by rpki-client