This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft File: TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft (raw, json) Hash identifier: p7Rbs7Mw3YH4SyQHeB7e5FVUiT6ELL8TtfMSPG8UmSc= Subject key identifier: A9:C3:9B:A2:91:C3:B1:36:12:F2:90:3C:22:15:B2:7E:9C:1F:33:D9 Authority key identifier: 4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79 Certificate issuer: /CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779 Certificate serial: 019B4DE0AAF4842111D18DF607D9A85D53A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft Manifest number: 08D8 Signing time: Wed 24 Dec 2025 01:02:07 +0000 Manifest this update: Wed 24 Dec 2025 01:02:07 +0000 Manifest next update: Thu 25 Dec 2025 01:02:07 +0000 Files and hashes: 1: GQnwoz9GTo0_6aViyidBMz0OXtQ.roa (hash: nHXXJO9fTVBgm0+nbMIO/zyd2MM+aOqt/Y2KW6tLr74=) 2: TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl (hash: GFCf+2AfKPJ7KfMZUt8vgTY1ETvX1jWtpBxc1Dpjl4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:aa:f4:84:21:11:d1:8d:f6:07:d9:a8:5d:53:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779 Validity Not Before: Dec 24 01:02:07 2025 GMT Not After : Dec 25 01:02:07 2025 GMT Subject: CN=a9c39ba291c3b13612f2903c2215b27e9c1f33d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b6:f8:75:a0:35:2e:a6:0d:4b:3f:52:66:a8: f3:24:c9:dd:63:91:7a:e4:e5:82:50:5d:c6:21:69: 06:94:77:fa:05:a5:b5:1d:e5:cd:31:68:da:1a:ce: ae:ea:74:00:77:8a:e6:84:75:5f:98:ee:87:7f:c8: 41:ec:e1:9f:d0:71:fc:8e:70:39:43:d1:57:88:40: bd:e5:22:15:c7:80:31:45:14:bc:9c:8c:65:ec:31: f0:10:d1:4a:11:69:b5:15:eb:64:3a:df:3e:e9:cf: 85:2f:47:19:49:21:ea:a3:c2:14:58:73:9b:6c:16: b7:0c:b6:64:17:91:2a:16:55:cc:82:dd:b8:0c:66: fa:46:d9:b9:37:1e:33:ba:ef:9f:5a:f7:01:87:17: c1:f1:c5:e0:df:d3:55:d9:43:73:a5:42:37:e9:ec: 10:ea:8d:18:1f:7d:6e:54:9e:ae:ce:46:32:d3:7d: 0c:1a:ae:22:2d:77:4b:c9:cf:10:b7:2d:65:73:20: b4:bd:c0:2f:4b:88:3d:c0:01:bc:e5:bc:e0:3e:03: 95:15:90:71:4e:b5:f3:95:19:38:20:cb:35:bf:bc: cf:50:5c:64:46:64:2e:64:c6:9d:70:65:f1:9a:04: 69:65:4b:60:2c:b9:01:18:91:ff:ee:13:59:7b:7e: 72:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C3:9B:A2:91:C3:B1:36:12:F2:90:3C:22:15:B2:7E:9C:1F:33:D9 X509v3 Authority Key Identifier: keyid:4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:1a:62:75:82:25:ee:b4:67:aa:71:15:e1:84:af:27:a1:c1: 90:83:3d:ff:00:28:c9:86:74:a0:0b:c1:3c:74:93:60:86:3b: 8e:91:09:f6:7e:ff:dc:8a:08:14:ca:95:33:c0:80:13:7e:2a: 75:4c:96:09:98:3a:69:d6:ed:08:f5:42:4d:d8:54:54:21:88: 47:84:c7:9c:54:01:37:1e:46:c5:31:48:fd:1d:7f:3a:b2:69: f1:cd:f7:ed:8c:06:7b:20:34:bc:3b:e3:24:24:32:42:de:3a: 91:7b:28:e4:45:45:cd:ad:9b:54:e4:cc:49:7b:79:26:7f:ec: 1b:38:01:1c:a5:ae:99:ac:85:bc:f3:8e:bc:98:59:a9:13:ca: 82:49:ae:c0:33:1d:04:1a:94:ab:64:5d:8e:c2:c1:0a:4d:2d: 3f:2b:88:b5:3b:79:dd:85:75:8d:f9:de:78:05:62:e7:66:52: d1:1a:d1:fa:c3:92:eb:5a:e1:b5:bf:c5:0c:10:0a:13:70:f5: f4:50:fb:31:fb:0d:00:99:e6:44:e9:ce:61:0c:ed:4f:f6:7a: 32:af:6c:ea:71:56:78:69:75:09:fd:ee:7a:5c:75:27:df:de: 50:02:35:88:80:e6:1e:66:44:44:d0:c1:1b:4c:d8:ea:10:5e: c7:c0:f7:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4Kr0hCER0Y32B9moXVOiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNGYyMDZmZGNjYWI4M2RkZmUxOWU4OTZlOTE2M2Q3YTlh ZDQ3NzkwHhcNMjUxMjI0MDEwMjA3WhcNMjUxMjI1MDEwMjA3WjAzMTEwLwYDVQQD EyhhOWMzOWJhMjkxYzNiMTM2MTJmMjkwM2MyMjE1YjI3ZTljMWYzM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bb4daA1LqYNSz9SZqjzJMndY5F6 5OWCUF3GIWkGlHf6BaW1HeXNMWjaGs6u6nQAd4rmhHVfmO6Hf8hB7OGf0HH8jnA5 Q9FXiEC95SIVx4AxRRS8nIxl7DHwENFKEWm1FetkOt8+6c+FL0cZSSHqo8IUWHOb bBa3DLZkF5EqFlXMgt24DGb6Rtm5Nx4zuu+fWvcBhxfB8cXg39NV2UNzpUI36ewQ 6o0YH31uVJ6uzkYy030MGq4iLXdLyc8Qty1lcyC0vcAvS4g9wAG85bzgPgOVFZBx TrXzlRk4IMs1v7zPUFxkRmQuZMadcGXxmgRpZUtgLLkBGJH/7hNZe35ylQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnDm6KRw7E2EvKQPCIVsn6cHzPZMB8GA1UdIwQY MBaAFExPIG/cyrg93+GeiW6RY9eprUd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEU4Z2I5ekt1RDNmNFo2SmJwRmoxNm10UjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jMjliYWMtNmNmOC00Yjg3LWE4ZTIt YWQ1NDkzMWMyNGIzLzEvVEU4Z2I5ekt1RDNmNFo2SmJwRmoxNm10UjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9jMjliYWMtNmNmOC00Yjg3LWE4ZTItYWQ1NDkzMWMyNGIz LzEvVEU4Z2I5ekt1RDNmNFo2SmJwRmoxNm10UjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARpidYIl 7rRnqnEV4YSvJ6HBkIM9/wAoyYZ0oAvBPHSTYIY7jpEJ9n7/3IoIFMqVM8CAE34q dUyWCZg6adbtCPVCTdhUVCGIR4THnFQBNx5GxTFI/R1/OrJp8c337YwGeyA0vDvj JCQyQt46kXso5EVFza2bVOTMSXt5Jn/sGzgBHKWumayFvPOOvJhZqRPKgkmuwDMd BBqUq2RdjsLBCk0tPyuItTt53YV1jfneeAVi52ZS0RrR+sOS61rhtb/FDBAKE3D1 9FD7MfsNAJnmROnOYQztT/Z6Mq9s6nFWeGl1Cf3uelx1J9/eUAI1iIDmHmZERNDB G0zY6hBex8D3RA== -----END CERTIFICATE-----Generated at Wed Dec 24 10:48:52 2025 by rpki-client