This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft File: TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft (raw, json) Hash identifier: dhlUG60g7z7exH/5EOVnCfYnT+alYB1emEKY2A52Axg= Subject key identifier: 06:CB:FE:E6:0E:E2:3B:FF:9D:6A:FE:93:DD:25:64:23:19:53:86:53 Authority key identifier: 4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1 Certificate issuer: /CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1 Certificate serial: 019B5787EC6864F7439D7086904B6A8C6F0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft Manifest number: 0479 Signing time: Thu 25 Dec 2025 22:01:24 +0000 Manifest this update: Thu 25 Dec 2025 22:01:24 +0000 Manifest next update: Fri 26 Dec 2025 22:01:24 +0000 Files and hashes: 1: TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl (hash: 3VzQRe/E+nFkYB6WYLrIquRh18s+3gSMiF2QuWk316I=) 2: _l-XctLDCPzRb-pMlqXmGyqDvHM.roa (hash: myqB80koPH8JwlE9qSMpb7bOcTN1/cJ21+MIuMT+GyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:87:ec:68:64:f7:43:9d:70:86:90:4b:6a:8c:6f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1 Validity Not Before: Dec 25 22:01:24 2025 GMT Not After : Dec 26 22:01:24 2025 GMT Subject: CN=06cbfee60ee23bff9d6afe93dd25642319538653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fc:e6:04:cd:b2:13:c7:b5:0b:09:10:42:8f: f5:1c:d8:bd:62:3c:02:8d:ac:5b:58:b9:42:80:8b: cd:43:d2:d4:ce:cf:2a:62:df:82:fd:8f:7d:1f:84: 69:2c:53:28:ba:90:d8:74:82:8d:c6:ed:cf:49:69: f0:e6:12:95:0e:3d:a4:c8:5a:69:9e:82:65:da:23: 81:c5:04:25:43:4a:6d:71:dc:41:ce:55:b5:e2:72: 8b:a7:99:c8:b9:0e:05:66:7b:77:78:a6:b4:fd:17: ec:49:d5:a0:ce:54:19:01:14:ed:ab:b7:3c:e1:e6: 99:b6:c4:3d:ea:4d:4d:7a:b5:be:93:15:0c:03:5b: b4:f0:e8:40:3d:37:0b:67:97:39:a0:e8:6e:ae:e0: 78:42:f7:7d:4b:57:a3:92:3f:f1:88:33:dc:09:89: 3e:63:08:f8:c0:1c:1f:8c:24:8a:2f:92:df:72:59: b0:bf:82:81:ac:6a:f1:27:60:fc:71:4b:d1:26:a2: c7:14:6e:ce:42:25:8c:bc:4c:46:95:41:fc:a6:79: 84:17:28:db:93:6f:4c:62:bb:aa:58:4c:27:91:73: ed:77:8b:30:8b:bc:d8:a5:37:b0:31:45:c9:0e:cb: ab:c9:c5:cc:e0:b4:eb:60:b6:85:26:b2:3a:dc:1c: 73:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CB:FE:E6:0E:E2:3B:FF:9D:6A:FE:93:DD:25:64:23:19:53:86:53 X509v3 Authority Key Identifier: keyid:4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ba:2c:10:93:3a:d2:cd:15:30:b5:28:2b:24:aa:9a:a2:0c: 12:bb:c3:72:a4:81:e8:a7:a6:4e:2d:5d:3b:19:21:f0:3d:66: 56:4b:d6:ec:74:2b:d9:84:73:40:ac:e4:74:5f:b1:f8:9f:a4: 6e:7d:ef:20:1f:ea:4b:82:0d:0a:52:82:cf:fa:22:1e:74:96: b5:c6:c5:21:64:8f:68:d6:17:84:86:3e:e3:b4:e2:d6:ba:7f: 42:cb:2b:16:54:21:f3:ba:b0:36:a5:bc:a6:4e:42:a4:0f:a4: eb:c3:32:1f:c1:03:e7:2f:48:be:48:fa:75:f3:e9:5c:1e:1e: dc:6b:34:c0:4e:2f:7c:89:63:76:68:d5:c1:00:20:41:ac:04: 35:fc:77:96:6a:65:b1:5e:91:c2:25:45:38:91:1d:75:c4:e8: 3a:48:96:4d:2d:81:2d:23:46:94:40:22:95:3f:3b:34:17:e2: 41:d4:30:85:ba:bc:9c:0f:2b:28:fe:97:25:85:7a:90:af:bf: 4f:fa:4d:c6:9a:63:2f:8b:91:f0:17:41:62:2b:df:9f:88:4a: 90:42:0a:e2:94:c4:27:64:76:09:95:00:89:fb:75:b9:df:38: 97:3a:0a:e8:bb:bb:af:e0:91:b2:e5:d6:ec:6f:2f:ee:d0:50: a7:39:6e:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXh+xoZPdDnXCGkEtqjG8KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMjRjMzA4YjAyNDFjM2JjYzE0Y2Y2Nzc3NTkxZDI3MjM3 ZmZhZjEwHhcNMjUxMjI1MjIwMTI0WhcNMjUxMjI2MjIwMTI0WjAzMTEwLwYDVQQD EygwNmNiZmVlNjBlZTIzYmZmOWQ2YWZlOTNkZDI1NjQyMzE5NTM4NjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/zmBM2yE8e1CwkQQo/1HNi9YjwC jaxbWLlCgIvNQ9LUzs8qYt+C/Y99H4RpLFMoupDYdIKNxu3PSWnw5hKVDj2kyFpp noJl2iOBxQQlQ0ptcdxBzlW14nKLp5nIuQ4FZnt3eKa0/RfsSdWgzlQZARTtq7c8 4eaZtsQ96k1NerW+kxUMA1u08OhAPTcLZ5c5oOhuruB4Qvd9S1ejkj/xiDPcCYk+ Ywj4wBwfjCSKL5Lfclmwv4KBrGrxJ2D8cUvRJqLHFG7OQiWMvExGlUH8pnmEFyjb k29MYruqWEwnkXPtd4swi7zYpTewMUXJDsurycXM4LTrYLaFJrI63BxzlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbL/uYO4jv/nWr+k90lZCMZU4ZTMB8GA1UdIwQY MBaAFEwkwwiwJBw7zBTPZ3dZHScjf/rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVENURENMQWtIRHZNRk05bmQxa2RKeU5fLXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85MmQ3MTktMGJjMi00YTFlLThiOTQt NjYxYmIwZTllNmVjLzEvVENURENMQWtIRHZNRk05bmQxa2RKeU5fLXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85MmQ3MTktMGJjMi00YTFlLThiOTQtNjYxYmIwZTllNmVj LzEvVENURENMQWtIRHZNRk05bmQxa2RKeU5fLXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLosEJM6 0s0VMLUoKySqmqIMErvDcqSB6KemTi1dOxkh8D1mVkvW7HQr2YRzQKzkdF+x+J+k bn3vIB/qS4INClKCz/oiHnSWtcbFIWSPaNYXhIY+47Ti1rp/QssrFlQh87qwNqW8 pk5CpA+k68MyH8ED5y9Ivkj6dfPpXB4e3Gs0wE4vfIljdmjVwQAgQawENfx3lmpl sV6RwiVFOJEddcToOkiWTS2BLSNGlEAilT87NBfiQdQwhbq8nA8rKP6XJYV6kK+/ T/pNxppjL4uR8BdBYivfn4hKkEIK4pTEJ2R2CZUAift1ud84lzoK6Lu7r+CRsuXW 7G8v7tBQpzluTA== -----END CERTIFICATE-----Generated at Fri Dec 26 03:11:24 2025 by rpki-client