This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json) Hash identifier: EQWJXUVMYXVkErZidC5ejrYL7YTxX2A5aTAS4iSM1Rw= Subject key identifier: F4:97:03:2A:53:12:B8:B1:75:CA:11:F3:9D:39:E1:2A:61:21:1C:75 Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e Certificate serial: 019B3A21D4B637FB3512BC35EC00B1C03612 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft Manifest number: 0AE1 Signing time: Sat 20 Dec 2025 05:00:54 +0000 Manifest this update: Sat 20 Dec 2025 05:00:54 +0000 Manifest next update: Sun 21 Dec 2025 05:00:54 +0000 Files and hashes: 1: ZFlE4CwGV5oXv28o6nsvolZlI_Y.roa (hash: S5Q4DAjjTKxkiafJ6he6yLpO30RXNUCaXjGnLWKadCQ=) 2: a3EraYk05VPEffLc6KjCZtg0uOM.roa (hash: MkXr1kaZ6Jwr9qIlXjAkJ2Xml1hQyvkyv9rct4pH8co=) 3: fJY20OuQ1IuJYeyVIHU1EBJ0rFM.roa (hash: +X81MlM0oUdVo08v6gDJj1EWTtIWJ/ia51w5FCk6+3U=) 4: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: DLbq32mIpYFNGQ8DFUi1XYYwk12Yi/gI2kBAOHWsdzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:d4:b6:37:fb:35:12:bc:35:ec:00:b1:c0:36:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e Validity Not Before: Dec 20 05:00:54 2025 GMT Not After : Dec 21 05:00:54 2025 GMT Subject: CN=f497032a5312b8b175ca11f39d39e12a61211c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7d:ca:00:5e:69:60:f4:1f:59:6e:a8:06:da: e6:61:d9:ed:c2:9e:8a:48:83:da:0a:cf:82:31:20: 65:f3:f2:a8:24:d5:33:1c:62:fd:b6:c5:6b:dd:ff: 88:b3:05:90:74:a4:a6:01:90:ee:c7:b1:fc:c6:b8: 17:78:d8:77:26:83:ba:09:62:bf:22:40:8e:bb:bb: cd:0e:64:1c:06:95:83:dc:a2:1f:33:58:d4:f8:c0: 24:90:03:46:7d:d8:18:6e:6a:a4:51:b2:3c:50:b4: 8d:26:2e:57:81:20:ed:38:e9:95:14:83:d7:ea:14: 7e:10:28:85:c4:57:e6:ab:3e:22:0f:1c:24:f1:b9: 65:09:63:7f:d6:37:9a:9f:2c:97:f0:c3:4a:32:12: 84:80:87:a1:1c:8d:3e:24:3a:3f:5e:cd:ff:d5:e6: 44:e3:46:cb:dc:0b:be:5e:38:e3:ff:2b:2f:42:3f: 94:04:85:52:d8:65:6e:73:5d:2f:b1:fa:7c:47:c6: f3:c2:a4:84:0b:2d:40:c3:de:8d:97:e1:d6:67:8a: f3:5d:06:a5:3b:cc:b6:dd:9c:d0:fc:de:af:3d:aa: b8:c5:a8:b7:e8:27:2b:51:d7:15:ca:17:0b:23:74: 0b:87:62:5c:73:a9:7c:f9:5b:c2:df:1f:64:e3:f1: 1e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:97:03:2A:53:12:B8:B1:75:CA:11:F3:9D:39:E1:2A:61:21:1C:75 X509v3 Authority Key Identifier: keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:bb:9c:1e:70:b5:a9:b1:79:6b:53:2c:6c:dc:60:1f:e3:8f: bb:3d:59:a6:32:66:63:b6:03:43:82:e8:2a:e8:d7:49:75:ba: 3b:5e:7f:00:13:c3:ad:cb:37:fb:bd:3a:ae:05:97:50:91:77: df:2c:45:61:55:0a:6f:76:5e:11:89:47:f6:84:4b:32:f9:75: 94:75:cd:83:55:a0:64:f7:91:4b:f5:4a:6d:be:b3:ce:05:22: e3:11:07:e2:06:ec:c8:ba:aa:4d:92:32:02:69:d6:1c:58:a7: 2a:c9:33:54:70:41:44:07:58:4a:f3:6e:12:3d:94:a2:78:52: b0:90:8b:4d:1b:09:f0:3f:62:8b:43:16:34:e7:f6:a2:44:54: 29:2b:b8:eb:01:5c:00:0f:0e:e3:c1:ed:b0:9d:96:30:bb:c0: cf:1f:6e:7a:8d:b7:cf:a5:2d:a3:10:ac:df:92:cb:ea:d3:8e: 9b:20:f3:67:90:8f:9a:da:66:ca:bb:57:b1:ab:5e:98:12:7e: 19:aa:54:4e:fd:00:98:ed:e0:16:92:ef:55:52:71:1d:98:48: c9:ef:28:a5:77:13:72:39:6d:0a:b0:0d:40:d2:1e:d3:52:2c: 19:24:f2:a3:84:3a:1b:0c:98:ac:e0:ec:88:25:9e:c2:e4:66: d4:eb:be:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IdS2N/s1Erw17ACxwDYSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YzdkODFlYzRjNDA1NWM2NzNmZjU3MWNjYWQwN2MzYTY5 OTEwNWUwHhcNMjUxMjIwMDUwMDU0WhcNMjUxMjIxMDUwMDU0WjAzMTEwLwYDVQQD EyhmNDk3MDMyYTUzMTJiOGIxNzVjYTExZjM5ZDM5ZTEyYTYxMjExYzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH3KAF5pYPQfWW6oBtrmYdntwp6K SIPaCs+CMSBl8/KoJNUzHGL9tsVr3f+IswWQdKSmAZDux7H8xrgXeNh3JoO6CWK/ IkCOu7vNDmQcBpWD3KIfM1jU+MAkkANGfdgYbmqkUbI8ULSNJi5XgSDtOOmVFIPX 6hR+ECiFxFfmqz4iDxwk8bllCWN/1jeanyyX8MNKMhKEgIehHI0+JDo/Xs3/1eZE 40bL3Au+Xjjj/ysvQj+UBIVS2GVuc10vsfp8R8bzwqSECy1Aw96Nl+HWZ4rzXQal O8y23ZzQ/N6vPaq4xai36CcrUdcVyhcLI3QLh2Jcc6l8+VvC3x9k4/EeNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSXAypTErixdcoR85054SphIRx1MB8GA1UdIwQY MBaAFLXH2B7ExAVcZz/1ccytB8OmmRBeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82NzJhMmYtYWMyYi00NjMxLWFiM2Qt YzJiYzE0NTFmMjcxLzEvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi82NzJhMmYtYWMyYi00NjMxLWFiM2QtYzJiYzE0NTFmMjcx LzEvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7ucHnC1 qbF5a1MsbNxgH+OPuz1ZpjJmY7YDQ4LoKujXSXW6O15/ABPDrcs3+706rgWXUJF3 3yxFYVUKb3ZeEYlH9oRLMvl1lHXNg1WgZPeRS/VKbb6zzgUi4xEH4gbsyLqqTZIy AmnWHFinKskzVHBBRAdYSvNuEj2UonhSsJCLTRsJ8D9ii0MWNOf2okRUKSu46wFc AA8O48HtsJ2WMLvAzx9ueo23z6UtoxCs35LL6tOOmyDzZ5CPmtpmyrtXsatemBJ+ GapUTv0AmO3gFpLvVVJxHZhIye8opXcTcjltCrANQNIe01IsGSTyo4Q6GwyYrODs iCWewuRm1Ou+FA== -----END CERTIFICATE-----Generated at Sat Dec 20 06:29:15 2025 by rpki-client