This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft File: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft (raw, json) Hash identifier: IGnreRUy3RUPqANdGEPPrnq5PXnNm/giEPtmvKrjLDY= Subject key identifier: 38:1C:AE:AD:9F:7F:E9:4E:1D:92:AB:48:C3:A7:04:87:07:CC:65:C5 Authority key identifier: 4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21 Certificate issuer: /CN=4c101ff51b67eefe0d67800e76d3606df4c94721 Certificate serial: 019B6579FBA1F542D3C277561CC16776F328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft Manifest number: 070E Signing time: Sun 28 Dec 2025 15:00:51 +0000 Manifest this update: Sun 28 Dec 2025 15:00:51 +0000 Manifest next update: Mon 29 Dec 2025 15:00:51 +0000 Files and hashes: 1: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl (hash: Tdugy/K5qw3KBt+ZrlvOs/YRJBEbrI+dKYZkfEIqw2E=) 2: cri3ULh6Rj8r6ZDUmdSIkYBmP1o.roa (hash: Lisc7jMorS/4tIMBDxqrdkl7lwX530FUMpT0ozDszqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 15:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:79:fb:a1:f5:42:d3:c2:77:56:1c:c1:67:76:f3:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c101ff51b67eefe0d67800e76d3606df4c94721 Validity Not Before: Dec 28 15:00:51 2025 GMT Not After : Dec 29 15:00:51 2025 GMT Subject: CN=381caead9f7fe94e1d92ab48c3a7048707cc65c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:21:93:0f:68:6d:bb:c8:7c:34:a7:03:7f:01: 32:17:e0:35:cf:18:34:fc:c7:38:b8:a0:3f:8f:9c: 9a:10:22:57:9d:cf:2f:d2:93:56:a8:ca:ce:c0:b0: 13:c8:1f:d4:d8:b0:65:2f:13:11:a2:ed:56:b8:d3: be:89:a8:33:be:a2:ed:ca:56:69:f2:c2:72:45:9c: e8:df:fc:a6:ff:09:1c:28:5f:4d:d2:96:38:8c:c3: 79:1d:2f:13:82:77:59:a6:20:3b:a7:ef:8a:6d:14: 5f:19:e1:28:5e:d8:12:7b:0b:4c:f1:a6:9a:68:5b: 73:7f:9b:a3:2b:41:5b:06:db:e7:bf:ff:86:98:3e: fa:91:79:a0:6b:e7:4c:53:6b:d5:3e:6a:15:9b:1e: ad:db:df:7f:12:12:bf:4d:69:5c:ed:a0:07:f4:90: 76:0e:2a:bf:ad:55:75:01:3a:7a:22:ca:13:88:99: 88:bd:00:74:e7:44:fc:fc:b5:45:b4:62:cb:52:c4: 44:5c:76:33:f5:f4:4e:16:f0:f5:00:38:12:fc:88: e5:6e:83:d0:ef:68:c1:0e:e2:cf:fa:fe:f8:69:19: b7:5f:b7:93:10:4a:ae:97:13:cd:a5:ae:75:62:f3: ec:3a:91:d5:5a:d8:4f:52:2d:ce:ed:41:a3:64:40: c3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1C:AE:AD:9F:7F:E9:4E:1D:92:AB:48:C3:A7:04:87:07:CC:65:C5 X509v3 Authority Key Identifier: keyid:4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8e:48:20:25:6c:9a:ee:51:a6:84:fe:3c:6c:5d:40:7f:c4: da:f0:60:59:7e:69:ea:c5:0a:56:6f:64:42:9e:3d:90:3c:f4: d0:a9:86:20:38:ae:9c:47:1e:9d:4f:f4:08:82:8f:81:e6:ce: d1:5d:00:32:95:c6:be:8b:32:63:36:55:a5:85:ef:ec:f3:b5: be:a8:da:aa:af:19:3d:bf:34:ba:ea:7e:08:07:d4:cd:55:b2: 5e:bc:54:78:b0:c5:0c:83:9f:97:04:50:ba:92:cd:9c:a4:fb: b9:bd:2e:9d:fe:06:50:12:4e:f3:23:44:31:69:d7:09:92:bc: cf:8b:e4:95:63:2f:ea:90:e0:3f:3a:c8:42:92:c1:4e:8a:f6: 40:b8:e0:46:1b:4d:dd:64:fa:da:3e:b9:d3:89:1a:4a:ff:5e: cc:ea:52:f3:f5:2d:50:6a:c9:71:6e:f4:b8:e8:9f:f6:d2:1f: 35:5e:1d:e0:34:b1:f2:55:21:b8:d4:8f:70:8f:82:85:5c:cb: c4:15:41:e6:c5:2e:6d:17:e2:cc:33:71:79:fe:ba:de:78:9c: d6:7a:28:df:37:d6:cc:e9:5b:6e:04:74:eb:8e:ae:33:3e:07: df:f2:aa:da:85:ad:4b:d7:1b:42:b5:ed:9c:e0:d8:32:ac:e2: 6a:bc:13:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlefuh9ULTwndWHMFndvMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMTAxZmY1MWI2N2VlZmUwZDY3ODAwZTc2ZDM2MDZkZjRj OTQ3MjEwHhcNMjUxMjI4MTUwMDUxWhcNMjUxMjI5MTUwMDUxWjAzMTEwLwYDVQQD EygzODFjYWVhZDlmN2ZlOTRlMWQ5MmFiNDhjM2E3MDQ4NzA3Y2M2NWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iGTD2htu8h8NKcDfwEyF+A1zxg0 /Mc4uKA/j5yaECJXnc8v0pNWqMrOwLATyB/U2LBlLxMRou1WuNO+iagzvqLtylZp 8sJyRZzo3/ym/wkcKF9N0pY4jMN5HS8TgndZpiA7p++KbRRfGeEoXtgSewtM8aaa aFtzf5ujK0FbBtvnv/+GmD76kXmga+dMU2vVPmoVmx6t299/EhK/TWlc7aAH9JB2 Diq/rVV1ATp6IsoTiJmIvQB050T8/LVFtGLLUsREXHYz9fROFvD1ADgS/IjlboPQ 72jBDuLP+v74aRm3X7eTEEqulxPNpa51YvPsOpHVWthPUi3O7UGjZEDDZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgcrq2ff+lOHZKrSMOnBIcHzGXFMB8GA1UdIwQY MBaAFEwQH/UbZ+7+DWeADnbTYG30yUchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEJBZjlSdG43djROWjRBT2R0TmdiZlRKUnlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81OWRjYmQtNzhiZi00OGVkLTk1NGQt Y2NhYTZlYjNjNTEzLzEvVEJBZjlSdG43djROWjRBT2R0TmdiZlRKUnlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC81OWRjYmQtNzhiZi00OGVkLTk1NGQtY2NhYTZlYjNjNTEz LzEvVEJBZjlSdG43djROWjRBT2R0TmdiZlRKUnlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADI5IICVs mu5RpoT+PGxdQH/E2vBgWX5p6sUKVm9kQp49kDz00KmGIDiunEcenU/0CIKPgebO 0V0AMpXGvosyYzZVpYXv7PO1vqjaqq8ZPb80uup+CAfUzVWyXrxUeLDFDIOflwRQ upLNnKT7ub0unf4GUBJO8yNEMWnXCZK8z4vklWMv6pDgPzrIQpLBTor2QLjgRhtN 3WT62j6504kaSv9ezOpS8/UtUGrJcW70uOif9tIfNV4d4DSx8lUhuNSPcI+ChVzL xBVB5sUubRfizDNxef663nic1noo3zfWzOlbbgR0646uMz4H3/Kq2oWtS9cbQrXt nODYMqziarwTmw== -----END CERTIFICATE-----Generated at Sun Dec 28 23:22:00 2025 by rpki-client