This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft File: TC9Y05SvcD-57w_FN77Q6X23Wo8.mft (raw, json) Hash identifier: GULKZ6g6Ck2G2rQaoyFNdQTj36r2WsjgmD+da5tNFOQ= Subject key identifier: 2D:E8:24:D1:33:33:F0:2E:51:25:8B:D6:82:F1:34:D4:FE:59:F3:02 Authority key identifier: 4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F Certificate issuer: /CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f Certificate serial: 019B3A8FBDA1D6CEC785AD586A859CECB2B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft Manifest number: 171B Signing time: Sat 20 Dec 2025 07:00:57 +0000 Manifest this update: Sat 20 Dec 2025 07:00:57 +0000 Manifest next update: Sun 21 Dec 2025 07:00:57 +0000 Files and hashes: 1: TC9Y05SvcD-57w_FN77Q6X23Wo8.crl (hash: T9Fza9JniVwVdhm65ODYs5XTdMRGsjfcheiZMinv5Fg=) 2: oazotxA3EnIAjH5CiO4PoDx9aig.roa (hash: H9V6PprjcGQjd8u9DXvLpu5E0DcK6LW/BPtbyyYT+nc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:bd:a1:d6:ce:c7:85:ad:58:6a:85:9c:ec:b2:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f Validity Not Before: Dec 20 07:00:57 2025 GMT Not After : Dec 21 07:00:57 2025 GMT Subject: CN=2de824d13333f02e51258bd682f134d4fe59f302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:61:05:62:ef:c5:e8:92:c4:97:b1:47:78:f2: 6b:34:27:8b:94:18:db:48:b5:93:cb:37:e0:78:45: a4:c7:b7:e8:f7:2f:c3:b8:be:ea:13:e4:c5:af:dc: 10:14:85:3f:2f:9c:cd:96:0e:46:2b:33:f8:9f:ee: 25:49:31:c5:60:8b:a9:5e:14:7b:d2:66:9a:dc:37: 50:48:cc:35:78:91:26:62:1b:90:fe:5f:6f:d3:1f: 10:1b:53:c9:a0:88:bf:49:1f:38:e2:bd:7c:57:84: 3e:e1:08:7c:83:0d:20:6b:eb:c3:8b:ca:27:82:2e: ba:33:a1:d4:52:7f:fc:71:c4:84:df:b4:b8:98:b9: 27:86:8f:22:08:8a:6b:55:40:3b:c1:52:85:8d:f1: fb:0b:0e:1f:b9:3a:90:a6:56:10:38:ff:f9:60:1a: a2:18:ba:2e:24:30:37:0c:a2:e6:53:b1:a1:21:05: 65:d2:07:75:99:80:82:7f:d9:f9:9b:57:74:62:54: 16:d7:e0:a8:00:e8:80:b1:0c:41:b5:74:b8:68:96: cc:2a:dc:6d:e1:5d:50:e2:9d:d0:7e:da:3c:13:a1: a0:cd:79:25:e9:74:0b:df:58:ac:ed:eb:aa:60:99: 23:f0:24:9e:71:55:7f:c6:03:b2:6b:81:c2:c9:aa: 8a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E8:24:D1:33:33:F0:2E:51:25:8B:D6:82:F1:34:D4:FE:59:F3:02 X509v3 Authority Key Identifier: keyid:4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:19:ae:ff:bb:9d:28:47:e2:d2:68:24:b4:67:e8:4f:3d:3e: 54:b7:22:23:8f:bb:60:1b:0c:68:dc:72:58:c9:b7:12:5f:d6: 15:4b:62:a9:2b:84:42:cc:c2:3a:68:e7:6e:d4:9e:0d:da:b0: c3:a7:dd:37:0c:a0:cc:61:fe:8a:b6:fe:31:84:71:1d:43:9d: 4b:1b:75:dc:17:c3:c7:33:6a:ca:67:9f:43:be:b4:d9:58:fe: 09:94:39:d3:10:79:07:72:eb:fa:bb:e8:ea:c8:a9:3f:ac:c1: 13:9e:cc:a6:40:00:aa:6b:81:37:7e:ff:0d:5e:09:c2:4f:07: 80:d8:41:c6:35:97:96:fa:76:a6:25:5f:b1:a8:ed:b6:6d:81: 9a:3a:b8:b4:a3:c6:40:18:20:22:4b:63:fc:25:c5:e2:50:a9: f6:29:84:eb:f8:5a:86:b9:62:7c:ac:2c:73:17:d2:1d:13:1a: b0:6c:36:3e:c5:fb:b0:6d:ee:cf:45:b7:b9:aa:4e:3e:b4:f3: 0d:bb:15:2d:f0:04:e9:7d:a8:8a:92:8e:00:4e:db:04:5c:66: 6d:9a:66:82:c3:83:33:82:41:18:d0:13:71:26:73:31:0d:9b: 17:8e:6d:6c:8a:0b:93:0c:ec:bc:f1:6a:a3:40:06:52:36:00: 13:ce:8d:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j72h1s7Hha1YaoWc7LKzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMmY1OGQzOTRhZjcwM2ZiOWVmMGZjNTM3YmVkMGU5N2Ri NzVhOGYwHhcNMjUxMjIwMDcwMDU3WhcNMjUxMjIxMDcwMDU3WjAzMTEwLwYDVQQD EygyZGU4MjRkMTMzMzNmMDJlNTEyNThiZDY4MmYxMzRkNGZlNTlmMzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2EFYu/F6JLEl7FHePJrNCeLlBjb SLWTyzfgeEWkx7fo9y/DuL7qE+TFr9wQFIU/L5zNlg5GKzP4n+4lSTHFYIupXhR7 0maa3DdQSMw1eJEmYhuQ/l9v0x8QG1PJoIi/SR844r18V4Q+4Qh8gw0ga+vDi8on gi66M6HUUn/8ccSE37S4mLknho8iCIprVUA7wVKFjfH7Cw4fuTqQplYQOP/5YBqi GLouJDA3DKLmU7GhIQVl0gd1mYCCf9n5m1d0YlQW1+CoAOiAsQxBtXS4aJbMKtxt 4V1Q4p3Qfto8E6GgzXkl6XQL31is7euqYJkj8CSecVV/xgOya4HCyaqK5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3oJNEzM/AuUSWL1oLxNNT+WfMCMB8GA1UdIwQY MBaAFEwvWNOUr3A/ue8PxTe+0Ol9t1qPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEM5WTA1U3ZjRC01N3dfRk43N1E2WDIzV284LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yNDY3NjktZDg3Ni00ZjIyLTlhMWMt NDVjNWY0NTZkNGJiLzEvVEM5WTA1U3ZjRC01N3dfRk43N1E2WDIzV284Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8yNDY3NjktZDg3Ni00ZjIyLTlhMWMtNDVjNWY0NTZkNGJi LzEvVEM5WTA1U3ZjRC01N3dfRk43N1E2WDIzV284LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxmu/7ud KEfi0mgktGfoTz0+VLciI4+7YBsMaNxyWMm3El/WFUtiqSuEQszCOmjnbtSeDdqw w6fdNwygzGH+irb+MYRxHUOdSxt13BfDxzNqymefQ7602Vj+CZQ50xB5B3Lr+rvo 6sipP6zBE57MpkAAqmuBN37/DV4Jwk8HgNhBxjWXlvp2piVfsajttm2Bmjq4tKPG QBggIktj/CXF4lCp9imE6/hahrlifKwscxfSHRMasGw2PsX7sG3uz0W3uapOPrTz DbsVLfAE6X2oipKOAE7bBFxmbZpmgsODM4JBGNATcSZzMQ2bF45tbIoLkwzsvPFq o0AGUjYAE86NFQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:16:25 2025 by rpki-client