This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json) Hash identifier: mYOFu5WCMRVDxcpi40kFozS1cJ8UXiGQkdQZMbi9C/U= Subject key identifier: 3C:6B:6B:57:09:A0:A1:77:9D:58:4E:41:EB:D3:AD:A9:B7:E6:D3:E5 Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc Certificate serial: 019B3A91476DD09E3D30F88CB6E7A88EF5BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft Manifest number: 1475 Signing time: Sat 20 Dec 2025 07:02:38 +0000 Manifest this update: Sat 20 Dec 2025 07:02:38 +0000 Manifest next update: Sun 21 Dec 2025 07:02:38 +0000 Files and hashes: 1: H36xXwuB9FJ3ESjpo_XmH_KZ2R4.roa (hash: CUtTMRPtfP9rNsMoQeZ2J44Z+jwTnsWRsKW5k/0LKug=) 2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: VYX/5St2qi6MSvjhYmagGjmOf7dd7fcpAtGmXFd7HJA=) 3: tpqvdlW8wuSttlFQd80uk4F5YQY.roa (hash: yDvp+gGPiyhARcManoLZEVb02KcZ7k4JkC3clhGu75w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:47:6d:d0:9e:3d:30:f8:8c:b6:e7:a8:8e:f5:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc Validity Not Before: Dec 20 07:02:38 2025 GMT Not After : Dec 21 07:02:38 2025 GMT Subject: CN=3c6b6b5709a0a1779d584e41ebd3ada9b7e6d3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:d9:e0:76:1f:2f:c7:75:73:98:b0:7f:82: 1b:00:4b:70:23:2c:2e:03:31:de:eb:0e:4b:f6:e3: 87:4b:28:4c:47:99:ab:f1:31:0d:f0:9c:f5:8c:81: a9:82:6f:4c:93:08:36:2a:a0:e8:e7:1e:ad:16:8d: e6:8a:30:c1:f7:69:c5:10:8e:79:42:a2:8e:26:83: d8:75:9c:33:aa:23:ec:35:b6:63:ac:2f:67:35:10: e9:99:5e:d1:90:6c:e8:81:ee:24:57:d4:fb:c0:5f: ff:97:1e:fe:a6:64:db:3b:c5:f7:29:4f:85:7c:e9: 57:72:78:0d:82:8b:84:c1:40:01:e1:26:58:c5:b0: 80:f8:40:1d:46:0f:ba:d4:91:8b:93:8b:2d:a1:1c: a9:12:50:32:87:9b:90:56:f3:ce:69:88:b1:9f:21: a9:eb:0c:ba:80:ce:c1:a6:26:8e:71:f6:9e:4b:b2: 13:c7:73:45:1a:d1:a4:27:54:64:5f:e0:5a:78:d0: 91:1e:b9:7d:7d:a4:92:da:5e:f8:b6:e2:a7:e9:98: cf:07:5c:4e:c3:10:f6:52:0e:54:3f:84:fc:87:67: 54:50:d9:be:91:4a:8f:05:3b:15:e2:80:b5:80:f7: 7a:b7:7d:03:29:40:e1:9f:65:40:29:bc:b4:75:38: 31:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6B:6B:57:09:A0:A1:77:9D:58:4E:41:EB:D3:AD:A9:B7:E6:D3:E5 X509v3 Authority Key Identifier: keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:af:ae:80:0e:0b:7b:9b:a7:fa:18:50:e6:b9:11:ef:92:81: f5:f2:c2:60:13:c7:9c:ab:3d:ec:ef:30:c4:76:8d:f2:78:59: bf:4c:fa:85:86:ed:6f:ce:44:9d:45:39:09:da:d3:2e:4e:b2: c4:7b:ce:79:ec:37:5c:0d:c1:a7:71:a8:e1:fd:ed:4c:84:92: a4:ee:46:e1:ae:b5:50:59:c9:80:2f:79:bc:61:03:99:b3:0f: 8c:fb:ea:98:1c:07:c5:d5:8c:29:8a:b5:1d:0e:09:54:d2:14: d6:41:29:ad:24:5f:c8:8d:42:de:13:7f:48:19:8d:6f:28:e8: 77:df:32:6a:fd:e2:72:5d:15:ba:23:d2:c3:b9:3d:b4:53:53: 97:23:14:bd:c2:c2:21:b7:05:8c:c8:99:ec:47:c3:d6:3b:ce: d0:86:9e:0c:59:48:87:e1:ea:52:8a:8c:3b:d1:6d:a3:a3:24: 10:80:f3:19:e4:95:bd:f6:97:b1:fd:38:f6:40:e6:19:c1:44: bc:6c:35:82:73:ad:47:a4:42:26:e3:88:b0:f3:a3:3a:13:bb: e6:a7:54:32:e1:b8:7b:37:6c:a8:0a:3d:89:07:13:dd:0c:e9: 87:a1:7a:3c:c5:84:b0:67:4a:10:37:0c:e6:e6:df:e3:e6:fb: b7:91:92:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kUdt0J49MPiMtueojvW6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMWIwYzQwOTY5MDgwOTU3ZmNjZWUxZmI4YTNmYjRiYjM4 YmY1ZGMwHhcNMjUxMjIwMDcwMjM4WhcNMjUxMjIxMDcwMjM4WjAzMTEwLwYDVQQD EygzYzZiNmI1NzA5YTBhMTc3OWQ1ODRlNDFlYmQzYWRhOWI3ZTZkM2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj3Z4HYfL8d1c5iwf4IbAEtwIywu AzHe6w5L9uOHSyhMR5mr8TEN8Jz1jIGpgm9Mkwg2KqDo5x6tFo3mijDB92nFEI55 QqKOJoPYdZwzqiPsNbZjrC9nNRDpmV7RkGzoge4kV9T7wF//lx7+pmTbO8X3KU+F fOlXcngNgouEwUAB4SZYxbCA+EAdRg+61JGLk4stoRypElAyh5uQVvPOaYixnyGp 6wy6gM7BpiaOcfaeS7ITx3NFGtGkJ1RkX+BaeNCRHrl9faSS2l74tuKn6ZjPB1xO wxD2Ug5UP4T8h2dUUNm+kUqPBTsV4oC1gPd6t30DKUDhn2VAKby0dTgx7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxra1cJoKF3nVhOQevTram35tPlMB8GA1UdIwQY MBaAFEwbDECWkICVf8zuH7ij+0uzi/XcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMt OTRjODI1NGJkM2I3LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMtOTRjODI1NGJkM2I3 LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQK+ugA4L e5un+hhQ5rkR75KB9fLCYBPHnKs97O8wxHaN8nhZv0z6hYbtb85EnUU5CdrTLk6y xHvOeew3XA3Bp3Go4f3tTISSpO5G4a61UFnJgC95vGEDmbMPjPvqmBwHxdWMKYq1 HQ4JVNIU1kEprSRfyI1C3hN/SBmNbyjod98yav3icl0VuiPSw7k9tFNTlyMUvcLC IbcFjMiZ7EfD1jvO0IaeDFlIh+HqUoqMO9Fto6MkEIDzGeSVvfaXsf049kDmGcFE vGw1gnOtR6RCJuOIsPOjOhO75qdUMuG4ezdsqAo9iQcT3Qzph6F6PMWEsGdKEDcM 5ubf4+b7t5GScg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:04:35 2025 by rpki-client