This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft File: Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft (raw, json) Hash identifier: 4QbiUDmDWkRFCEtyK23zEFJlpwrZV6bWaG4LFO03I38= Subject key identifier: 70:7C:BC:0A:8B:43:C6:FF:23:25:E5:B9:5A:49:10:90:AD:28:0F:38 Authority key identifier: 4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB Certificate issuer: /CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab Certificate serial: 019B3C1002B53CBB31E337A268A31942836B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft Manifest number: 0443 Signing time: Sat 20 Dec 2025 14:00:40 +0000 Manifest this update: Sat 20 Dec 2025 14:00:40 +0000 Manifest next update: Sun 21 Dec 2025 14:00:40 +0000 Files and hashes: 1: 1-KGFkp6-58CAfMM59AAzTBwEK5A.roa (hash: LpeybfjrfgjM/OjVBSR68hbsEhIa7z+y+IoR5F/Kfmc=) 2: Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl (hash: xx8aCHHjiEWW5sGGnIvqtMjf5haaIZQj86ucmN2C7LA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:02:b5:3c:bb:31:e3:37:a2:68:a3:19:42:83:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9f52fd550692be7eec192fc3ed2327f5a2f9ab Validity Not Before: Dec 20 14:00:40 2025 GMT Not After : Dec 21 14:00:40 2025 GMT Subject: CN=707cbc0a8b43c6ff2325e5b95a491090ad280f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:02:ad:af:92:11:bd:d1:2c:3c:63:db:19:ff: 26:f3:37:c1:dc:d1:23:82:9b:f3:60:34:50:8f:9c: 38:29:ae:dc:13:6e:d7:bc:98:46:f0:65:3d:5a:8d: 3f:85:42:cf:57:95:4f:9c:d2:a6:84:59:e1:f4:7a: 74:d8:3d:d1:df:be:cd:c8:98:d6:0d:37:8e:07:17: a9:d9:93:37:04:5d:31:2d:c8:5d:1b:4c:ac:88:8b: f1:98:1e:5b:4c:ff:aa:fa:8f:14:45:ce:4b:cb:96: 16:ff:74:85:7f:e9:48:f7:ea:90:c9:a0:7e:b9:57: f6:8e:85:cc:8e:2d:56:70:a3:ab:f9:2c:02:d8:9f: 73:ed:10:7a:7a:2c:10:4a:7a:4b:07:92:c6:44:29: 50:66:b1:2f:91:dd:29:0b:f1:68:ae:20:01:15:9f: 1e:9e:ab:8c:73:ba:f6:4a:5d:cc:17:84:4c:e3:02: be:3b:32:63:c0:8a:f7:01:df:27:ab:a9:3f:a5:14: fd:1d:5e:ed:12:2a:e5:1a:48:b4:c5:0d:f7:dd:99: 89:22:d1:6a:30:6c:11:6a:ea:b5:2d:76:4c:88:40: 85:87:0d:7f:56:56:61:c6:83:06:2c:91:9d:cd:45: b5:8e:5c:a9:00:0b:51:b9:d9:cb:ea:2d:e8:05:17: 56:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7C:BC:0A:8B:43:C6:FF:23:25:E5:B9:5A:49:10:90:AD:28:0F:38 X509v3 Authority Key Identifier: keyid:4E:9F:52:FD:55:06:92:BE:7E:EC:19:2F:C3:ED:23:27:F5:A2:F9:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d6ba8d-150e-450e-849c-f38fa0e71d99/1/Tp9S_VUGkr5-7Bkvw-0jJ_Wi-as.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:2e:a7:cf:9e:14:38:1e:71:3c:fe:96:a4:ce:ee:56:b1:e2: 0e:50:ea:18:65:09:a9:9b:f7:af:90:50:5b:8d:8f:f6:d9:19: 90:85:cc:37:d6:6f:7d:d1:08:51:e8:21:c0:e2:36:4c:67:b2: 37:cf:80:b5:6b:92:02:2b:dd:4e:b2:c3:1b:05:04:d3:5e:74: c9:81:05:c4:94:29:1a:4f:1a:dc:f8:54:e4:1d:3f:e5:99:6a: 18:5d:94:5e:96:fb:29:52:f6:5a:81:d7:04:b7:c0:55:5a:06: a4:b2:43:f1:cd:c3:6f:dc:f9:46:d3:cf:e4:08:88:f1:50:3e: b9:95:5a:d1:c6:e8:6c:27:a0:eb:2c:01:c1:90:5b:6e:5f:8e: f0:3e:93:19:6e:19:1d:9f:8b:aa:01:e6:d8:68:aa:86:3c:a2: 80:ef:3e:98:37:82:c4:e3:df:ea:9b:46:98:bb:25:a8:d8:44: 7b:91:b8:3f:90:65:07:64:17:e7:63:d2:1c:83:91:15:02:63: c8:27:a4:9c:fb:a0:05:0e:ac:33:05:57:5c:b6:a7:3e:1f:35: 98:66:e7:8e:00:b3:95:91:1f:1d:c9:f0:08:7b:a5:af:2c:67: 9b:9a:59:66:dd:51:92:5c:79:ca:2f:0b:b1:9d:46:91:3c:da: e7:77:c2:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EAK1PLsx4zeiaKMZQoNrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlOWY1MmZkNTUwNjkyYmU3ZWVjMTkyZmMzZWQyMzI3ZjVh MmY5YWIwHhcNMjUxMjIwMTQwMDQwWhcNMjUxMjIxMTQwMDQwWjAzMTEwLwYDVQQD Eyg3MDdjYmMwYThiNDNjNmZmMjMyNWU1Yjk1YTQ5MTA5MGFkMjgwZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gKtr5IRvdEsPGPbGf8m8zfB3NEj gpvzYDRQj5w4Ka7cE27XvJhG8GU9Wo0/hULPV5VPnNKmhFnh9Hp02D3R377NyJjW DTeOBxep2ZM3BF0xLchdG0ysiIvxmB5bTP+q+o8URc5Ly5YW/3SFf+lI9+qQyaB+ uVf2joXMji1WcKOr+SwC2J9z7RB6eiwQSnpLB5LGRClQZrEvkd0pC/ForiABFZ8e nquMc7r2Sl3MF4RM4wK+OzJjwIr3Ad8nq6k/pRT9HV7tEirlGki0xQ333ZmJItFq MGwRauq1LXZMiECFhw1/VlZhxoMGLJGdzUW1jlypAAtRudnL6i3oBRdWawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHB8vAqLQ8b/IyXluVpJEJCtKA84MB8GA1UdIwQY MBaAFE6fUv1VBpK+fuwZL8PtIyf1ovmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHA5U19WVUdrcjUtN0JrdnctMGpKX1dpLWFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kNmJhOGQtMTUwZS00NTBlLTg0OWMt ZjM4ZmEwZTcxZDk5LzEvVHA5U19WVUdrcjUtN0JrdnctMGpKX1dpLWFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9kNmJhOGQtMTUwZS00NTBlLTg0OWMtZjM4ZmEwZTcxZDk5 LzEvVHA5U19WVUdrcjUtN0JrdnctMGpKX1dpLWFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhi6nz54U OB5xPP6WpM7uVrHiDlDqGGUJqZv3r5BQW42P9tkZkIXMN9ZvfdEIUeghwOI2TGey N8+AtWuSAivdTrLDGwUE0150yYEFxJQpGk8a3PhU5B0/5ZlqGF2UXpb7KVL2WoHX BLfAVVoGpLJD8c3Db9z5RtPP5AiI8VA+uZVa0cbobCeg6ywBwZBbbl+O8D6TGW4Z HZ+LqgHm2GiqhjyigO8+mDeCxOPf6ptGmLslqNhEe5G4P5BlB2QX52PSHIORFQJj yCeknPugBQ6sMwVXXLanPh81mGbnjgCzlZEfHcnwCHulryxnm5pZZt1Rklx5yi8L sZ1GkTza53fCEQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:39:42 2025 by rpki-client