This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft File: TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft (raw, json) Hash identifier: TvY80etfw2AfgEkUVkJ5co0Ma9oX16cNzLMiGOdygb4= Subject key identifier: CA:FF:38:43:8C:4A:9B:91:42:80:B5:C3:C2:28:9C:4C:8B:4D:9E:AC Authority key identifier: 4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC Certificate issuer: /CN=4cd710b65373e0d910da70636fc143c06ba5ddac Certificate serial: 019B44A56062404595C65D7BA7AB319B38F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft Manifest number: 16E2 Signing time: Mon 22 Dec 2025 06:00:47 +0000 Manifest this update: Mon 22 Dec 2025 06:00:47 +0000 Manifest next update: Tue 23 Dec 2025 06:00:47 +0000 Files and hashes: 1: TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl (hash: RRBjaBoOeO6Q6Phi4Zf+V6BEuffGFmOpsUwL4LjTd9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:60:62:40:45:95:c6:5d:7b:a7:ab:31:9b:38:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cd710b65373e0d910da70636fc143c06ba5ddac Validity Not Before: Dec 22 06:00:47 2025 GMT Not After : Dec 23 06:00:47 2025 GMT Subject: CN=caff38438c4a9b914280b5c3c2289c4c8b4d9eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:01:d2:20:c8:6a:fd:6a:e6:a3:05:f1:fb:de: 0d:72:5c:01:f9:57:d8:01:7b:77:a6:fb:e6:15:fc: 62:81:24:d1:4d:b5:f1:fb:bc:1e:85:da:e1:05:8c: 55:89:bb:c0:b9:b7:06:b3:fa:b7:34:85:83:f7:99: ab:eb:20:3a:f5:e9:ef:10:32:92:f0:49:35:50:ee: 6b:06:bc:06:df:5d:70:4f:50:b9:74:bd:da:19:db: e6:f6:b1:21:de:a0:20:f8:db:12:e7:4e:93:2b:ab: 02:d0:24:7b:5d:d0:a0:8e:88:a9:95:ff:87:be:47: c1:1d:79:c9:6b:42:f9:d0:15:08:6d:5e:ed:5d:3b: 3e:ff:23:cc:6c:07:cf:67:ae:aa:0c:33:a5:c8:d4: 5b:f0:d8:1c:b1:72:6e:3d:3a:1d:27:e5:d5:46:97: a8:0d:8f:38:fe:97:b9:d3:4f:a9:91:b1:c6:b8:b8: ff:d9:e6:85:22:34:48:63:97:d7:aa:ff:c8:6a:8d: 5d:2e:58:49:43:bd:5d:cf:b0:28:a5:0b:16:d4:a9: ca:52:ce:19:aa:01:2f:20:bc:f1:ae:64:38:ef:df: a5:d3:84:c9:18:12:3c:1d:1d:92:91:92:66:f8:99: b7:f0:40:bc:e3:b3:c8:f4:15:f4:01:cd:35:e8:59: 14:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FF:38:43:8C:4A:9B:91:42:80:B5:C3:C2:28:9C:4C:8B:4D:9E:AC X509v3 Authority Key Identifier: keyid:4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:17:88:30:6f:6e:b0:1c:d6:5b:94:f5:e3:85:9b:05:b8:06: 58:e6:c5:79:61:70:7d:a4:d7:2f:5a:27:99:f1:b0:f8:b6:db: 05:22:6e:1b:17:59:65:50:d3:e7:46:a9:f7:b6:a8:dd:3c:a1: 41:70:f1:3c:eb:c2:a0:40:2e:0b:fd:6c:9c:3b:fd:b5:a2:6f: 2e:ac:d8:e3:84:25:18:21:e4:6c:b0:71:f2:b1:6a:77:6e:e8: 05:0e:2b:94:b7:7e:5c:4d:a6:5f:d7:2f:97:1e:31:f0:03:91: ab:6d:15:45:d1:91:3a:99:b0:72:41:71:3e:d3:b5:74:d5:42: 1f:49:e9:15:9b:f6:d5:49:a3:02:86:3b:c9:b8:4c:43:84:f3: de:c3:60:af:c8:48:f3:5d:b9:61:89:fb:5b:e1:9e:95:e6:92: fe:b7:74:b0:88:8e:38:48:77:2b:22:2b:58:bb:a8:ae:78:93: 99:ac:3e:3d:25:8e:40:86:20:c2:0b:dd:ed:58:3f:4a:0b:78: 96:15:be:a5:6d:01:ee:71:5b:ec:6b:55:25:51:35:53:04:e9: d8:26:c3:37:86:a9:51:1e:05:fc:cd:8c:a6:7f:63:5c:4c:0a: 1d:f1:97:d1:d1:a4:e9:c1:b7:ce:a4:22:de:ae:9a:91:5f:43: 98:19:c5:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpWBiQEWVxl17p6sxmzj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZDcxMGI2NTM3M2UwZDkxMGRhNzA2MzZmYzE0M2MwNmJh NWRkYWMwHhcNMjUxMjIyMDYwMDQ3WhcNMjUxMjIzMDYwMDQ3WjAzMTEwLwYDVQQD EyhjYWZmMzg0MzhjNGE5YjkxNDI4MGI1YzNjMjI4OWM0YzhiNGQ5ZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgHSIMhq/WrmowXx+94NclwB+VfY AXt3pvvmFfxigSTRTbXx+7wehdrhBYxVibvAubcGs/q3NIWD95mr6yA69envEDKS 8Ek1UO5rBrwG311wT1C5dL3aGdvm9rEh3qAg+NsS506TK6sC0CR7XdCgjoiplf+H vkfBHXnJa0L50BUIbV7tXTs+/yPMbAfPZ66qDDOlyNRb8NgcsXJuPTodJ+XVRpeo DY84/pe500+pkbHGuLj/2eaFIjRIY5fXqv/Iao1dLlhJQ71dz7AopQsW1KnKUs4Z qgEvILzxrmQ479+l04TJGBI8HR2SkZJm+Jm38EC847PI9BX0Ac016FkUSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMr/OEOMSpuRQoC1w8IonEyLTZ6sMB8GA1UdIwQY MBaAFEzXELZTc+DZENpwY2/BQ8Brpd2sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE5jUXRsTno0TmtRMm5CamI4RkR3R3VsM2F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82ZjQwZGQtNGMwNy00MDViLWEwNDIt ZjkyNTBkZDc5ZmU5LzEvVE5jUXRsTno0TmtRMm5CamI4RkR3R3VsM2F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny82ZjQwZGQtNGMwNy00MDViLWEwNDItZjkyNTBkZDc5ZmU5 LzEvVE5jUXRsTno0TmtRMm5CamI4RkR3R3VsM2F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxeIMG9u sBzWW5T144WbBbgGWObFeWFwfaTXL1onmfGw+LbbBSJuGxdZZVDT50ap97ao3Tyh QXDxPOvCoEAuC/1snDv9taJvLqzY44QlGCHkbLBx8rFqd27oBQ4rlLd+XE2mX9cv lx4x8AORq20VRdGROpmwckFxPtO1dNVCH0npFZv21UmjAoY7ybhMQ4Tz3sNgr8hI 8125YYn7W+GeleaS/rd0sIiOOEh3KyIrWLuorniTmaw+PSWOQIYgwgvd7Vg/Sgt4 lhW+pW0B7nFb7GtVJVE1UwTp2CbDN4apUR4F/M2Mpn9jXEwKHfGX0dGk6cG3zqQi 3q6akV9DmBnFYg== -----END CERTIFICATE-----Generated at Mon Dec 22 15:39:46 2025 by rpki-client