This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft File: TNkIkaeTL3NWqAMznaDM32OtLTU.mft (raw, json) Hash identifier: sjnBI4HuD8UxR/BCzP6YLCG9HwkzSAxBIQw/zniCkFM= Subject key identifier: A4:78:87:20:9E:25:B8:B1:21:FF:4E:2D:E1:32:F5:29:8F:B9:11:A9 Authority key identifier: 4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35 Certificate issuer: /CN=4cd90891a7932f7356a803339da0ccdf63ad2d35 Certificate serial: 019B3F487AE0A6E8A78F0F757F864807F4AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft Manifest number: 0274 Signing time: Sun 21 Dec 2025 05:01:13 +0000 Manifest this update: Sun 21 Dec 2025 05:01:13 +0000 Manifest next update: Mon 22 Dec 2025 05:01:13 +0000 Files and hashes: 1: GPp0CA4dJEmXPt3FvKOuB6Y1Ajo.roa (hash: /WVZb52tGGnvS1Lpmu++5VCxojp2nMgaocCDFVDfPQY=) 2: TNkIkaeTL3NWqAMznaDM32OtLTU.crl (hash: OewSMkSW1tx3yDhrOlzT8u0kOEzOpKWjHjq+3Gjsk44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:7a:e0:a6:e8:a7:8f:0f:75:7f:86:48:07:f4:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cd90891a7932f7356a803339da0ccdf63ad2d35 Validity Not Before: Dec 21 05:01:13 2025 GMT Not After : Dec 22 05:01:13 2025 GMT Subject: CN=a47887209e25b8b121ff4e2de132f5298fb911a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:77:85:81:31:0a:bc:b1:2e:95:d6:58:34:5c: e6:02:c7:5d:65:a9:5e:5d:d9:06:34:0d:4a:c9:c8: 98:1a:09:db:e2:8f:9d:3e:63:81:a0:86:18:fa:60: 78:b7:bd:42:eb:e5:46:66:d0:fe:3d:45:b1:ba:9f: 1b:b1:2b:59:26:3b:86:15:a4:45:55:b2:76:e4:7e: 25:51:b0:a1:70:d0:26:62:b4:b4:cf:31:41:89:b0: dc:9d:55:d2:c5:1b:9e:32:6d:2e:07:ca:70:48:93: 9e:55:f6:fc:5f:8a:61:06:11:da:5b:d9:e6:aa:07: 7c:49:d3:21:02:33:e0:3c:86:28:5e:e9:9a:45:3e: 0d:e3:4a:81:20:0d:4a:57:d7:10:96:d2:57:89:9e: 60:9a:27:e9:87:6a:33:67:d1:52:9d:14:51:57:44: e6:80:af:c5:f4:f2:8f:cb:14:ce:28:8a:8e:ce:eb: fb:12:38:d9:be:b8:e8:2a:1d:9d:40:1a:38:0a:07: 6f:ff:3b:1a:66:57:52:eb:c0:c8:6f:ef:57:18:2c: 99:6a:cd:f1:19:63:da:5f:33:f2:91:e9:02:99:3f: d6:7d:ed:5b:b1:2b:a8:1a:c9:2b:0c:61:01:8f:2e: 46:72:9a:2f:57:d3:ac:ed:a8:91:0c:27:7d:91:9f: 30:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:78:87:20:9E:25:B8:B1:21:FF:4E:2D:E1:32:F5:29:8F:B9:11:A9 X509v3 Authority Key Identifier: keyid:4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:17:48:1d:d7:0e:cf:68:c6:fa:0a:9a:91:b2:55:d4:f5:c6: c9:da:1f:f0:23:6d:32:90:18:bd:09:1c:0e:b1:b5:11:96:81: cc:b0:2a:34:45:6b:f2:c4:2c:87:7c:b7:14:b7:74:0b:61:42: 58:02:44:af:ae:3b:d3:70:99:2d:0b:7c:a3:72:01:62:c4:7d: 90:fa:02:76:c0:6d:c7:3b:5a:6d:f1:b4:ba:31:c3:00:cd:f2: a2:c0:f9:dd:28:26:72:08:3b:96:8e:fc:36:01:e0:ff:1f:05: 1b:86:1e:d4:5e:60:4f:16:8d:e9:26:65:c8:c7:ca:70:8d:e2: 85:bc:71:47:43:a6:82:fa:e9:d7:ad:08:17:40:77:16:39:e6: cd:67:85:4f:b3:77:38:e7:e5:e0:6a:ea:e4:09:bf:41:f1:af: ff:c7:01:75:4b:4a:31:5e:46:38:cf:75:a4:b2:9e:51:13:24: ca:92:04:58:65:9a:b5:5c:52:51:24:fd:b4:d3:a9:ac:ca:c3: 15:0e:f6:37:5c:0f:ce:a4:ca:e1:85:e2:ad:56:27:c4:a0:b8: 81:fb:3d:94:d8:cd:9f:7f:9e:cf:4c:d4:9e:fd:96:79:de:c2: 87:db:85:1d:d0:e3:33:f4:40:df:ea:2f:50:4f:8b:ab:e4:5b: 3d:75:97:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SHrgpuinjw91f4ZIB/StMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZDkwODkxYTc5MzJmNzM1NmE4MDMzMzlkYTBjY2RmNjNh ZDJkMzUwHhcNMjUxMjIxMDUwMTEzWhcNMjUxMjIyMDUwMTEzWjAzMTEwLwYDVQQD EyhhNDc4ODcyMDllMjViOGIxMjFmZjRlMmRlMTMyZjUyOThmYjkxMWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXeFgTEKvLEuldZYNFzmAsddZale XdkGNA1KyciYGgnb4o+dPmOBoIYY+mB4t71C6+VGZtD+PUWxup8bsStZJjuGFaRF VbJ25H4lUbChcNAmYrS0zzFBibDcnVXSxRueMm0uB8pwSJOeVfb8X4phBhHaW9nm qgd8SdMhAjPgPIYoXumaRT4N40qBIA1KV9cQltJXiZ5gmifph2ozZ9FSnRRRV0Tm gK/F9PKPyxTOKIqOzuv7EjjZvrjoKh2dQBo4Cgdv/zsaZldS68DIb+9XGCyZas3x GWPaXzPykekCmT/Wfe1bsSuoGskrDGEBjy5GcpovV9Os7aiRDCd9kZ8wZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKR4hyCeJbixIf9OLeEy9SmPuRGpMB8GA1UdIwQY MBaAFEzZCJGnky9zVqgDM52gzN9jrS01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE5rSWthZVRMM05XcUFNem5hRE0zMk90TFRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82YTkzNzgtMmZhNy00ODJkLThjN2Mt NjljYTRjYjY1Zjk3LzEvVE5rSWthZVRMM05XcUFNem5hRE0zMk90TFRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS82YTkzNzgtMmZhNy00ODJkLThjN2MtNjljYTRjYjY1Zjk3 LzEvVE5rSWthZVRMM05XcUFNem5hRE0zMk90TFRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBdIHdcO z2jG+gqakbJV1PXGydof8CNtMpAYvQkcDrG1EZaBzLAqNEVr8sQsh3y3FLd0C2FC WAJEr64703CZLQt8o3IBYsR9kPoCdsBtxztabfG0ujHDAM3yosD53Sgmcgg7lo78 NgHg/x8FG4Ye1F5gTxaN6SZlyMfKcI3ihbxxR0Omgvrp160IF0B3FjnmzWeFT7N3 OOfl4Grq5Am/QfGv/8cBdUtKMV5GOM91pLKeURMkypIEWGWatVxSUST9tNOprMrD FQ72N1wPzqTK4YXirVYnxKC4gfs9lNjNn3+ez0zUnv2Wed7Ch9uFHdDjM/RA3+ov UE+Lq+RbPXWXTA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:14:22 2025 by rpki-client