This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft File: TS-f1cihTNyfMcRYXNYNtXz_tMI.mft (raw, json) Hash identifier: eem2JO8XlIJI9/GbxAoQFHXbtLFG01i2BiA+PKMYolw= Subject key identifier: 4D:6C:0A:77:B5:FC:4F:22:7F:C4:EE:A0:23:E7:FB:82:15:10:DF:7B Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2 Certificate issuer: /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2 Certificate serial: 019B38A231B28866D34EC310355A48A3FE71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft Manifest number: 0E49 Signing time: Fri 19 Dec 2025 22:01:52 +0000 Manifest this update: Fri 19 Dec 2025 22:01:52 +0000 Manifest next update: Sat 20 Dec 2025 22:01:52 +0000 Files and hashes: 1: 1-QMPtoomm6W5CX-SS0fyQ5AS734.roa (hash: hcd0LKLxrMub9hVDF7pi719s+IDTrzb/8hX4yl7gw2w=) 2: 8-JB4jMg3_rMGJjuIMVCBLnxwQ8.roa (hash: buBER4odhou/4TCkZQ3UeIhbfaoQJUXmTZ3cmJ4K9k8=) 3: TS-f1cihTNyfMcRYXNYNtXz_tMI.crl (hash: Z/HUB1OkjJLYZLgllVRsNxRR21olDIcv00+7jaqXEC8=) 4: pSmbhIOz_v9DcZ6BjkBTv88tPZ4.roa (hash: 1vOAxGM5C9HFgFv3tm1lOiYWc4bRDbFQtmaO7PV8kkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:31:b2:88:66:d3:4e:c3:10:35:5a:48:a3:fe:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2 Validity Not Before: Dec 19 22:01:52 2025 GMT Not After : Dec 20 22:01:52 2025 GMT Subject: CN=4d6c0a77b5fc4f227fc4eea023e7fb821510df7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d1:33:16:4e:fe:0a:09:f1:63:bd:5c:0d:2a: 81:e3:d0:65:1b:c3:cd:16:62:07:7e:cd:36:6d:4b: c6:87:a8:de:93:1a:5e:fe:af:d7:94:3a:f8:4e:1c: 2e:85:3c:d7:ca:47:72:3b:af:12:49:37:3b:ca:f0: c0:32:fd:24:c8:97:a6:11:d6:3b:a9:13:a4:ed:35: 27:7b:41:d9:78:51:df:45:f4:de:53:d3:ef:52:cd: 16:b1:90:37:0d:03:0b:a8:77:02:ac:a6:1e:8a:5c: 03:60:29:82:a4:e4:6d:d1:86:b6:95:c0:47:6e:0f: 03:6a:1e:a0:2e:38:20:81:ad:7f:06:de:eb:ae:e6: 08:b7:9e:93:91:71:57:86:b0:34:29:58:56:7c:aa: 27:25:64:07:22:2e:29:9b:d3:41:cd:70:b6:22:88: 0d:e1:1f:40:f4:6b:97:d0:d4:2f:fc:99:a3:5f:c0: 88:84:4e:29:b5:ca:db:97:28:01:2f:17:f2:68:c4: 8c:96:88:20:49:44:ea:2f:8a:b8:0b:da:b3:0e:bc: 84:c2:64:40:17:12:3a:ae:e9:e5:d6:42:e5:24:c5: 60:d6:9c:6d:62:32:7f:ef:51:84:e8:a7:26:c0:3f: c2:e6:2c:bc:66:07:d6:a2:4f:b5:de:26:0f:09:b4: 68:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6C:0A:77:B5:FC:4F:22:7F:C4:EE:A0:23:E7:FB:82:15:10:DF:7B X509v3 Authority Key Identifier: keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:c9:ef:76:ed:a7:ce:de:7f:9e:e5:aa:6c:35:42:8f:36:5f: 6d:c7:5e:59:ac:07:83:1c:e9:cd:d7:27:59:0f:85:3d:7e:dc: 1f:86:62:28:72:c4:6c:c1:4d:1d:1f:4d:10:27:3c:45:5c:43: 6e:53:7e:63:03:79:44:8f:5a:92:35:8b:8a:a8:b1:1a:8c:3e: 9f:c8:d5:a6:ec:ef:24:b5:50:5d:af:60:2f:7f:99:67:cc:15: a5:92:e4:53:07:5a:74:04:df:74:30:e3:ee:ed:4a:4a:7e:17: 4d:f3:33:de:22:04:a0:6a:d3:c9:2b:34:70:57:35:51:3a:7d: 76:b0:1b:3c:7e:89:2d:e8:3b:e2:d4:c5:7b:35:b1:a2:17:1e: 22:ca:28:fa:1b:be:9f:4a:05:83:1b:2a:d4:d1:25:8c:ef:4b: ab:04:41:17:81:d4:9c:87:24:66:40:89:fd:a8:c1:eb:88:13: a2:11:e3:93:c5:cd:08:2f:8a:44:6f:e0:1f:7b:8a:ee:c3:a2: 24:69:27:2e:d7:a5:a5:c4:c4:7b:22:bd:be:bd:ee:ce:ac:d3: 64:40:b6:23:1b:99:bc:e6:69:d5:26:ec:3d:8a:57:2f:79:13: 8e:19:72:70:73:6d:82:a8:b8:24:58:13:02:33:de:16:d7:07: e1:43:62:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ojGyiGbTTsMQNVpIo/5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMmY5ZmQ1YzhhMTRjZGM5ZjMxYzQ1ODVjZDYwZGI1N2Nm ZmI0YzIwHhcNMjUxMjE5MjIwMTUyWhcNMjUxMjIwMjIwMTUyWjAzMTEwLwYDVQQD Eyg0ZDZjMGE3N2I1ZmM0ZjIyN2ZjNGVlYTAyM2U3ZmI4MjE1MTBkZjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNEzFk7+CgnxY71cDSqB49BlG8PN FmIHfs02bUvGh6jekxpe/q/XlDr4ThwuhTzXykdyO68SSTc7yvDAMv0kyJemEdY7 qROk7TUne0HZeFHfRfTeU9PvUs0WsZA3DQMLqHcCrKYeilwDYCmCpORt0Ya2lcBH bg8Dah6gLjggga1/Bt7rruYIt56TkXFXhrA0KVhWfKonJWQHIi4pm9NBzXC2IogN 4R9A9GuX0NQv/JmjX8CIhE4ptcrblygBLxfyaMSMloggSUTqL4q4C9qzDryEwmRA FxI6runl1kLlJMVg1pxtYjJ/71GE6KcmwD/C5iy8ZgfWok+13iYPCbRoHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1sCne1/E8if8TuoCPn+4IVEN97MB8GA1UdIwQY MBaAFE0vn9XIoUzcnzHEWFzWDbV8/7TCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kYTRlNDYtMmE5My00NGE0LWI4ZTMt YzIxMzNkZDgxYjU2LzEvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9kYTRlNDYtMmE5My00NGE0LWI4ZTMtYzIxMzNkZDgxYjU2 LzEvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8nvdu2n zt5/nuWqbDVCjzZfbcdeWawHgxzpzdcnWQ+FPX7cH4ZiKHLEbMFNHR9NECc8RVxD blN+YwN5RI9akjWLiqixGow+n8jVpuzvJLVQXa9gL3+ZZ8wVpZLkUwdadATfdDDj 7u1KSn4XTfMz3iIEoGrTySs0cFc1UTp9drAbPH6JLeg74tTFezWxohceIsoo+hu+ n0oFgxsq1NEljO9LqwRBF4HUnIckZkCJ/ajB64gTohHjk8XNCC+KRG/gH3uK7sOi JGknLtelpcTEeyK9vr3uzqzTZEC2IxuZvOZp1SbsPYpXL3kTjhlycHNtgqi4JFgT AjPeFtcH4UNiSw== -----END CERTIFICATE-----Generated at Sat Dec 20 03:05:36 2025 by rpki-client