This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft File: TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json) Hash identifier: P5ZtHac5ei+XhQ/Jy1QmKpco/jsqqX3i+oBsnokyJts= Subject key identifier: EE:86:5E:81:CA:BD:E0:B5:40:96:00:E2:1D:CB:7F:91:B4:1B:E9:FA Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62 Certificate issuer: /CN=4de70403c9d2d7962cf113d93c462f9493d87362 Certificate serial: 019B722289A8FCA5A7BBD56989DC73EF01D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft Manifest number: 17A3 Signing time: Wed 31 Dec 2025 02:00:24 +0000 Manifest this update: Wed 31 Dec 2025 02:00:24 +0000 Manifest next update: Thu 01 Jan 2026 02:00:24 +0000 Files and hashes: 1: GbfL1ZrfRVmwsoIJhPo9qm8dkFU.roa (hash: 5rCvc90C0u6LOlrowQ6t9CQlQZi5SGZg6tgn8PV2EF4=) 2: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: scwqpf2N7rH7w83zllPJODnm5+XYkMV6GEgnH8LXJmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:22:89:a8:fc:a5:a7:bb:d5:69:89:dc:73:ef:01:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362 Validity Not Before: Dec 31 02:00:24 2025 GMT Not After : Jan 1 02:00:24 2026 GMT Subject: CN=ee865e81cabde0b5409600e21dcb7f91b41be9fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:70:60:66:8a:97:53:92:1f:70:6f:3e:c1:2c: b9:86:1d:f1:ce:a8:b7:c4:75:02:65:de:20:60:fc: 39:92:83:0b:de:03:7a:17:98:7f:40:e6:b1:77:26: 47:06:c1:fb:5d:95:ef:3a:54:7f:87:75:71:a4:85: 86:1b:08:92:f1:d1:79:97:59:9b:99:09:44:f0:fd: 94:ac:11:63:19:98:46:0e:d0:92:8d:ca:08:aa:03: 76:21:cd:3d:71:f3:02:e0:e3:74:20:1a:98:46:13: 5d:58:04:5f:92:e4:b2:21:73:86:f1:88:52:aa:00: 15:a1:55:49:29:c7:38:9a:59:bc:ec:a2:f1:d7:65: ec:8c:5f:a3:0c:db:ea:28:a4:fd:95:53:ee:4d:e0: 49:68:c9:c7:d1:3b:c0:52:79:6f:a9:4f:ce:24:bc: b8:bc:ae:ce:10:3d:7e:55:c3:f6:18:42:1b:50:02: 4d:1c:12:b1:a1:e8:36:84:f9:c0:7a:84:8d:ed:2f: 12:45:b5:29:9b:51:17:70:99:73:e4:7b:51:c0:39: ab:48:bf:2e:1e:c2:23:aa:b8:b6:39:14:7e:cd:bf: a0:57:b6:a4:dd:9e:4f:9e:7d:15:46:9b:48:25:b5: cb:b1:b6:09:fb:39:ff:72:91:64:3c:de:c4:42:16: d9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:86:5E:81:CA:BD:E0:B5:40:96:00:E2:1D:CB:7F:91:B4:1B:E9:FA X509v3 Authority Key Identifier: keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:13:f9:04:06:15:75:bf:fc:27:0c:ce:5c:c5:59:70:81:0f: a7:c2:1f:24:4a:22:c3:3c:b0:10:fb:0d:e6:d0:ca:fe:d0:31: 23:32:bc:06:1e:f3:78:57:1b:e1:e1:1f:70:0d:61:a4:ce:63: a9:3c:41:cf:be:e2:51:bb:f0:4f:99:ad:8a:cb:e1:27:66:56: 32:12:92:09:6c:bb:a4:a8:e2:38:1f:ad:96:b1:f4:e2:4c:26: 40:27:c8:cb:95:4f:c5:21:fc:4c:0f:4b:3f:b0:7f:e5:78:7a: 1e:ab:28:6e:1f:a9:d4:6c:47:3e:5f:a2:eb:c0:9e:de:ba:a2: 64:92:31:b7:63:db:ee:0a:4a:6a:88:01:ba:f2:3e:28:e7:67: 5e:bb:06:c6:3b:5f:17:64:07:81:06:be:92:55:05:f0:85:1c: a0:5f:ab:75:ca:5d:5a:b3:c2:f3:d5:09:ae:fa:a2:38:42:ee: 61:72:d0:cc:4a:94:98:08:d7:90:b9:1c:03:de:70:7d:a0:2c: 24:e7:13:b9:47:a7:ec:ab:4d:87:97:1f:f6:e3:3c:f4:cf:2d: e4:89:de:b2:fe:5c:e7:24:aa:91:92:03:4e:8c:dc:d8:de:61: 51:36:6d:b1:85:c4:da:31:d2:14:71:d0:fb:98:3b:d6:87:4a: 5a:fa:e9:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyIomo/KWnu9Vpidxz7wHTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZTcwNDAzYzlkMmQ3OTYyY2YxMTNkOTNjNDYyZjk0OTNk ODczNjIwHhcNMjUxMjMxMDIwMDI0WhcNMjYwMTAxMDIwMDI0WjAzMTEwLwYDVQQD EyhlZTg2NWU4MWNhYmRlMGI1NDA5NjAwZTIxZGNiN2Y5MWI0MWJlOWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3BgZoqXU5IfcG8+wSy5hh3xzqi3 xHUCZd4gYPw5koML3gN6F5h/QOaxdyZHBsH7XZXvOlR/h3VxpIWGGwiS8dF5l1mb mQlE8P2UrBFjGZhGDtCSjcoIqgN2Ic09cfMC4ON0IBqYRhNdWARfkuSyIXOG8YhS qgAVoVVJKcc4mlm87KLx12XsjF+jDNvqKKT9lVPuTeBJaMnH0TvAUnlvqU/OJLy4 vK7OED1+VcP2GEIbUAJNHBKxoeg2hPnAeoSN7S8SRbUpm1EXcJlz5HtRwDmrSL8u HsIjqri2ORR+zb+gV7ak3Z5Pnn0VRptIJbXLsbYJ+zn/cpFkPN7EQhbZWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6GXoHKveC1QJYA4h3Lf5G0G+n6MB8GA1UdIwQY MBaAFE3nBAPJ0teWLPET2TxGL5ST2HNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGVjRUE4blMxNVlzOFJQWlBFWXZsSlBZYzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yNTAxMjctODVkNy00NmI0LTg4NjUt YmYwZGE1ZThjZTdmLzEvVGVjRUE4blMxNVlzOFJQWlBFWXZsSlBZYzJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yNTAxMjctODVkNy00NmI0LTg4NjUtYmYwZGE1ZThjZTdm LzEvVGVjRUE4blMxNVlzOFJQWlBFWXZsSlBZYzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRP5BAYV db/8JwzOXMVZcIEPp8IfJEoiwzywEPsN5tDK/tAxIzK8Bh7zeFcb4eEfcA1hpM5j qTxBz77iUbvwT5mtisvhJ2ZWMhKSCWy7pKjiOB+tlrH04kwmQCfIy5VPxSH8TA9L P7B/5Xh6Hqsobh+p1GxHPl+i68Ce3rqiZJIxt2Pb7gpKaogBuvI+KOdnXrsGxjtf F2QHgQa+klUF8IUcoF+rdcpdWrPC89UJrvqiOELuYXLQzEqUmAjXkLkcA95wfaAs JOcTuUen7KtNh5cf9uM89M8t5Inesv5c5ySqkZIDTozc2N5hUTZtsYXE2jHSFHHQ +5g71odKWvrpgg== -----END CERTIFICATE-----Generated at Wed Dec 31 07:57:47 2025 by rpki-client