This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json) Hash identifier: 7bT6r6P0/+rqMV2ieX8gptNqGOzz1ZoyB5Ededx5yNc= Subject key identifier: 7E:BB:CB:CC:6D:C3:F4:B2:F3:E0:52:FA:2E:B8:9E:BE:9F:01:7F:90 Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46 Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546 Certificate serial: 019B3DFE8C3F0485102681DE32D9ABEF5DC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 23:00:50 +0000 Manifest this update: Sat 20 Dec 2025 23:00:50 +0000 Manifest next update: Sun 21 Dec 2025 23:00:50 +0000 Files and hashes: 1: dMyCW0_TBkO1nYNBL_n11IKNaBI.roa (hash: WTKaBFp1QPSs1ROafjR4WJfZR1PRtcVHfjnPURoJWEQ=) 2: iWujOO5h_XVMHY2nSFxBko0o46E.roa (hash: hfZ0O6pRdbOdpr8hVRCYtXgEcI0jSP4lHjfs8kAt2hk=) 3: qrrQR7WuIleyYS2sO7I0VvjROUo.roa (hash: 4JE74Aq/xmpPqZIRbZrMja/xvjU3RSpM11pAC7vf4sE=) 4: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: bSMTclT9ck/rfYJFtIATxqDa+HiYTWIfgLRC4HSfR2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:8c:3f:04:85:10:26:81:de:32:d9:ab:ef:5d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546 Validity Not Before: Dec 20 23:00:50 2025 GMT Not After : Dec 21 23:00:50 2025 GMT Subject: CN=7ebbcbcc6dc3f4b2f3e052fa2eb89ebe9f017f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:be:0c:c3:9f:52:bd:8f:ed:1e:60:27:0f:cc: 5d:4d:8a:69:11:d5:2a:7b:5a:ef:f3:67:e5:f7:53: 6f:38:a1:af:44:fe:76:6b:a6:8a:25:19:88:ef:8b: 45:98:d4:df:92:d0:6c:13:f5:4c:0d:ce:7c:f2:c9: 77:26:b2:47:20:1e:41:6b:09:de:44:d1:2c:7e:54: 87:6e:96:61:46:b9:85:80:c3:b7:27:82:b3:d8:71: 41:59:76:d1:56:45:68:90:67:b5:08:b4:4e:c0:6f: 38:90:55:22:49:eb:ef:d0:30:02:68:7a:cd:ae:f4: 4d:1a:a7:08:69:0e:66:15:71:ac:f1:01:6e:44:14: bd:9a:26:5e:f0:42:20:21:cc:63:3b:48:26:50:57: 4f:52:cd:17:7a:5e:ab:63:42:c9:24:8d:a6:fe:60: 11:1c:04:aa:04:b3:33:eb:eb:00:e4:4f:f0:9d:b1: ef:9f:1b:5c:dc:26:ae:5a:29:d1:a6:08:e5:55:94: 2d:4a:22:aa:21:4c:5f:41:c2:75:a1:21:92:8d:cc: 82:39:79:4b:f0:58:20:db:7d:b1:6d:5e:a5:60:93: 99:2c:d2:48:4e:6a:02:21:a9:09:42:78:5e:0b:ad: 76:03:41:65:05:fe:a1:23:a2:0b:c4:d3:ef:eb:21: 16:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BB:CB:CC:6D:C3:F4:B2:F3:E0:52:FA:2E:B8:9E:BE:9F:01:7F:90 X509v3 Authority Key Identifier: keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:ca:ea:8c:1d:38:b7:81:86:26:da:84:7c:18:5b:36:66:cd: ea:4e:ef:87:fa:66:a8:e9:61:c5:0e:a5:6a:81:78:4a:be:0e: 30:6b:61:2d:60:0e:e5:05:49:a3:55:1a:1b:ee:5e:68:76:93: b2:19:aa:9f:7d:0c:8e:9c:3e:b6:a5:9a:cf:84:35:54:4f:d0: f0:10:38:8c:0c:96:1e:19:31:6b:2a:ed:54:34:98:a0:a5:98: db:43:e3:5a:26:68:b6:40:2d:dd:28:86:b0:56:43:3b:a7:25: 7e:aa:53:79:0b:55:9d:34:05:78:c2:7b:97:20:99:47:ee:f7: af:c7:8c:3d:71:d0:ab:ca:d3:97:d0:7a:86:2a:9b:48:f6:1d: 90:b4:fe:3e:17:0b:24:88:59:de:7b:b4:80:a5:67:1a:48:3c: dd:f2:61:11:cf:c8:7b:e6:39:00:5b:af:02:b1:7b:89:09:fa: 0a:8e:55:70:92:ca:aa:ec:90:41:6f:88:ba:db:14:71:6b:11: b1:6f:69:a6:33:66:db:b6:f7:a2:f6:c3:a1:63:a2:09:6e:a4: c8:15:54:85:4e:9c:4a:7f:f4:75:ed:ff:80:cc:19:e1:7a:20: 4d:8d:a3:c1:19:58:b0:a1:19:d9:3e:af:73:7b:79:48:34:c4: 3f:0e:35:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/ow/BIUQJoHeMtmr713IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZjE5ZWIwZGQ0OGUxYjI0OTI0OTA4YmI1YjY4NDhjYzE2 Nzg1NDYwHhcNMjUxMjIwMjMwMDUwWhcNMjUxMjIxMjMwMDUwWjAzMTEwLwYDVQQD Eyg3ZWJiY2JjYzZkYzNmNGIyZjNlMDUyZmEyZWI4OWViZTlmMDE3ZjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub4Mw59SvY/tHmAnD8xdTYppEdUq e1rv82fl91NvOKGvRP52a6aKJRmI74tFmNTfktBsE/VMDc588sl3JrJHIB5Bawne RNEsflSHbpZhRrmFgMO3J4Kz2HFBWXbRVkVokGe1CLROwG84kFUiSevv0DACaHrN rvRNGqcIaQ5mFXGs8QFuRBS9miZe8EIgIcxjO0gmUFdPUs0Xel6rY0LJJI2m/mAR HASqBLMz6+sA5E/wnbHvnxtc3CauWinRpgjlVZQtSiKqIUxfQcJ1oSGSjcyCOXlL 8Fgg232xbV6lYJOZLNJITmoCIakJQnheC612A0FlBf6hI6ILxNPv6yEWbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH67y8xtw/Sy8+BS+i64nr6fAX+QMB8GA1UdIwQY MBaAFLXxnrDdSOGySSSQi7W2hIzBZ4VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jZTAwMWItYTRkOC00ZjBlLTgzMWQt MzVjNjZkN2M1MjYwLzEvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9jZTAwMWItYTRkOC00ZjBlLTgzMWQtMzVjNjZkN2M1MjYw LzEvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAocrqjB04 t4GGJtqEfBhbNmbN6k7vh/pmqOlhxQ6laoF4Sr4OMGthLWAO5QVJo1UaG+5eaHaT shmqn30Mjpw+tqWaz4Q1VE/Q8BA4jAyWHhkxayrtVDSYoKWY20PjWiZotkAt3SiG sFZDO6clfqpTeQtVnTQFeMJ7lyCZR+73r8eMPXHQq8rTl9B6hiqbSPYdkLT+PhcL JIhZ3nu0gKVnGkg83fJhEc/Ie+Y5AFuvArF7iQn6Co5VcJLKquyQQW+IutsUcWsR sW9ppjNm27b3ovbDoWOiCW6kyBVUhU6cSn/0de3/gMwZ4XogTY2jwRlYsKEZ2T6v c3t5SDTEPw41lw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:03:51 2025 by rpki-client