This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft File: TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft (raw, json) Hash identifier: EmQwWE4n8NRWzaY9Ev2CrD28cjYYUuCsXOytMD5O07w= Subject key identifier: 13:2C:A3:4F:19:6F:39:2F:5F:9B:4A:7F:E9:65:F2:D9:56:B0:F8:19 Authority key identifier: 4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F Certificate issuer: /CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f Certificate serial: 019B3FECAE78961D8D739B137EB554FCFA3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft Manifest number: 11A4 Signing time: Sun 21 Dec 2025 08:00:34 +0000 Manifest this update: Sun 21 Dec 2025 08:00:34 +0000 Manifest next update: Mon 22 Dec 2025 08:00:34 +0000 Files and hashes: 1: TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl (hash: JRMolpps2pD4leGN3W4CMcQF2Mf+RmRxwJBh9DpAo8o=) 2: WDEZ3ZaDac1rHXOITo0Y0_gA1WA.roa (hash: 2eqZynI8QAeqviBK64M0ctiXcb1WfCdmlsqvsre2oAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:ae:78:96:1d:8d:73:9b:13:7e:b5:54:fc:fa:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f Validity Not Before: Dec 21 08:00:34 2025 GMT Not After : Dec 22 08:00:34 2025 GMT Subject: CN=132ca34f196f392f5f9b4a7fe965f2d956b0f819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:54:7b:ac:f4:dc:70:dd:c8:97:87:00:3b:dc: bb:1c:19:82:64:3f:9d:64:c3:0e:a8:ed:71:e1:94: 64:32:c1:39:c4:07:20:9a:cb:f0:28:e5:46:d4:aa: de:47:8d:7f:45:38:d3:79:4f:91:c9:2c:af:61:2e: 17:d8:ba:70:11:5e:30:83:83:2b:84:03:e6:52:38: 0c:8c:c4:09:fb:ce:04:ce:b2:c9:ef:72:11:c5:a7: de:b4:18:0f:fd:45:0b:7b:f4:79:6f:01:0d:54:3f: 5e:cb:ab:49:ed:57:1a:28:ba:8f:20:e6:bf:71:0e: 25:8d:04:f8:e1:73:e3:7c:d8:e7:df:ca:6b:ba:b4: 93:63:1b:59:e9:c2:4e:0c:b8:66:f9:c0:2f:ea:e1: f4:e4:60:f1:89:ff:3d:26:b7:eb:78:a9:19:31:c9: 4c:19:99:3f:59:be:98:bb:18:ad:7b:9b:3b:db:43: f9:62:60:6c:e2:ca:1b:8c:9e:2f:a1:4d:16:3e:4d: 55:50:cd:ae:bd:b7:11:5f:03:50:7b:9d:31:d2:28: 0b:08:c5:cf:08:8b:41:cd:c9:40:5a:72:4f:f6:11: 62:f6:b6:ee:5b:6c:f0:d4:c0:c6:86:81:48:16:42: 24:b0:22:3a:b1:f3:45:af:f5:01:bc:95:d4:cd:7a: 49:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2C:A3:4F:19:6F:39:2F:5F:9B:4A:7F:E9:65:F2:D9:56:B0:F8:19 X509v3 Authority Key Identifier: keyid:4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:2b:79:c3:a0:19:6d:2e:d1:2e:33:1a:fb:a3:97:43:d2:ec: 25:8d:6f:a4:2b:82:07:02:d1:1d:fa:f8:83:ba:c8:d1:ff:70: 9f:f7:d4:4b:cc:99:04:02:19:75:e1:3f:0f:50:6d:f1:41:53: 6e:13:66:c7:e0:b6:05:eb:5f:a8:b2:54:b8:2f:ae:b2:64:63: 50:2e:5d:b4:3c:44:c1:3c:2b:a6:b7:4e:8b:ab:61:bb:43:5d: 4f:6e:77:65:6c:69:d8:ff:b1:f0:ae:a3:36:dd:4e:13:5e:4d: 94:3c:20:42:f0:02:17:31:b8:b5:98:75:db:d0:40:4b:7b:db: e5:fc:5c:79:6b:43:86:26:2b:80:82:fa:03:f3:cb:49:8a:d5: 59:2c:3f:ab:0b:cd:6f:cd:16:4f:e7:73:b2:57:7b:36:a2:36: 46:66:ea:40:c2:67:cc:49:4e:d6:08:35:5b:fc:5d:20:53:40: 92:9d:b4:f9:e4:3d:6f:3d:40:b5:37:c1:0c:3c:b9:b0:bf:ed: 70:1f:d0:df:ac:8b:2c:71:9b:aa:de:21:67:82:95:3a:7e:98: 21:6d:53:85:e9:ff:d5:c1:e6:fe:60:34:ab:22:71:37:35:9f: f7:3c:e9:3b:a4:67:da:12:87:0c:31:5c:b5:c4:bb:b6:cd:56: 43:50:e4:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7K54lh2Nc5sTfrVU/Po/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkY2JlZjA2YWQwNWZkNmU2ZTdlN2IxMDg0Y2IxZDdkNjVl NjQyNmYwHhcNMjUxMjIxMDgwMDM0WhcNMjUxMjIyMDgwMDM0WjAzMTEwLwYDVQQD EygxMzJjYTM0ZjE5NmYzOTJmNWY5YjRhN2ZlOTY1ZjJkOTU2YjBmODE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlR7rPTccN3Il4cAO9y7HBmCZD+d ZMMOqO1x4ZRkMsE5xAcgmsvwKOVG1KreR41/RTjTeU+RySyvYS4X2LpwEV4wg4Mr hAPmUjgMjMQJ+84EzrLJ73IRxafetBgP/UULe/R5bwENVD9ey6tJ7VcaKLqPIOa/ cQ4ljQT44XPjfNjn38prurSTYxtZ6cJODLhm+cAv6uH05GDxif89JrfreKkZMclM GZk/Wb6Yuxite5s720P5YmBs4sobjJ4voU0WPk1VUM2uvbcRXwNQe50x0igLCMXP CItBzclAWnJP9hFi9rbuW2zw1MDGhoFIFkIksCI6sfNFr/UBvJXUzXpJPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMso08ZbzkvX5tKf+ll8tlWsPgZMB8GA1UdIwQY MBaAFE3L7watBf1ubn57EITLHX1l5kJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGN2dkJxMEZfVzV1Zm5zUWhNc2RmV1htUW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yYTZlYWEtZTQzNy00M2JjLTk3MmUt M2UzYmZhYTE5MGRmLzEvVGN2dkJxMEZfVzV1Zm5zUWhNc2RmV1htUW04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yYTZlYWEtZTQzNy00M2JjLTk3MmUtM2UzYmZhYTE5MGRm LzEvVGN2dkJxMEZfVzV1Zm5zUWhNc2RmV1htUW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSt5w6AZ bS7RLjMa+6OXQ9LsJY1vpCuCBwLRHfr4g7rI0f9wn/fUS8yZBAIZdeE/D1Bt8UFT bhNmx+C2BetfqLJUuC+usmRjUC5dtDxEwTwrprdOi6thu0NdT253ZWxp2P+x8K6j Nt1OE15NlDwgQvACFzG4tZh129BAS3vb5fxceWtDhiYrgIL6A/PLSYrVWSw/qwvN b80WT+dzsld7NqI2RmbqQMJnzElO1gg1W/xdIFNAkp20+eQ9bz1AtTfBDDy5sL/t cB/Q36yLLHGbqt4hZ4KVOn6YIW1Then/1cHm/mA0qyJxNzWf9zzpO6Rn2hKHDDFc tcS7ts1WQ1DkvA== -----END CERTIFICATE-----Generated at Sun Dec 21 14:14:34 2025 by rpki-client