This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json) Hash identifier: JVvGfgyMFW5Q1/2a46WBeJyy8TkuXG70tdhp6Cyy3+Q= Subject key identifier: E1:A9:9B:10:30:24:71:48:89:E7:D5:19:BC:22:40:98:7B:8E:56:B5 Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7 Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7 Certificate serial: 019B4D71E8EFA1B49FE76F3C1C182EB472C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft Manifest number: 0419 Signing time: Tue 23 Dec 2025 23:01:09 +0000 Manifest this update: Tue 23 Dec 2025 23:01:09 +0000 Manifest next update: Wed 24 Dec 2025 23:01:09 +0000 Files and hashes: 1: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: DFnekgaTSr70NooPwYaJvRi7eJ9BZPfB3nWnedCS8e4=) 2: iTC7AIloz6nQaL3mT_rFGYZ-wig.roa (hash: fesaTZGLmhO2WzwSQegYz6bFqw2Ey8O4XUX49y7XEFA=) 3: uAJKiTWW3Ub4f2F2pRQzTM4uTxQ.roa (hash: QYC9wZJDQP4jalSd59izpnWdNPoZL5WfK7FyvYaliJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:71:e8:ef:a1:b4:9f:e7:6f:3c:1c:18:2e:b4:72:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7 Validity Not Before: Dec 23 23:01:09 2025 GMT Not After : Dec 24 23:01:09 2025 GMT Subject: CN=e1a99b103024714889e7d519bc2240987b8e56b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:63:eb:07:9b:a7:f9:57:94:3d:a8:75:aa:af: 2a:dd:c5:7f:3e:58:dd:cd:9b:3a:c9:59:8f:dd:81: 10:38:c0:de:6b:36:f0:1b:3e:0e:b2:0f:04:db:ea: 3f:90:66:ad:10:06:45:72:b7:ba:dd:f8:90:ce:7a: 68:2b:b5:75:c4:64:7d:d4:58:1b:af:66:96:2a:f1: 71:c7:3a:a3:17:64:4d:8f:d3:ee:91:0f:9e:a0:9a: 20:8b:d5:9b:9c:a7:aa:20:b2:07:4d:5f:d5:02:9b: cf:41:fd:fe:57:4b:7d:31:f7:01:a5:86:4f:b3:82: e0:75:40:3c:6f:5b:3f:6d:e8:5e:fd:3f:92:7a:68: 64:a3:1c:09:d7:7c:e5:55:49:02:50:a7:52:eb:dc: 47:44:89:5f:2f:72:d2:9b:bc:1d:eb:ba:53:c6:5f: d9:bb:7e:4e:ed:95:33:31:e7:f9:9e:c2:f3:92:6b: b2:dd:9c:b2:c7:ba:c8:80:0e:5e:a7:5f:fc:3b:77: f5:5e:5c:17:9e:50:49:0d:84:4b:ee:02:09:c1:92: 2c:48:5c:ad:20:53:32:2b:5d:b4:eb:83:77:75:d5: a8:35:e9:3b:8c:e0:6a:18:7f:32:4f:76:2c:b3:4f: 96:fc:f5:a3:ff:b2:02:c5:18:a4:1e:45:a2:c7:93: b2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A9:9B:10:30:24:71:48:89:E7:D5:19:BC:22:40:98:7B:8E:56:B5 X509v3 Authority Key Identifier: keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c9:64:c2:a1:dd:6a:0b:80:4e:ee:6b:dd:5c:93:46:c8:3f: 07:e7:b1:c4:bd:a7:76:be:e5:9a:6c:64:58:08:e4:fd:38:a8: 13:e6:16:96:38:a3:0e:34:de:d3:46:a1:c2:a6:2c:57:12:b2: c2:dc:40:a6:9c:ae:4a:0f:95:ef:7c:db:73:1e:5b:b2:0f:16: 6a:b0:a6:59:8d:9e:1b:55:3d:7f:2f:a3:59:3e:10:d0:1d:48: 49:45:95:0a:78:00:d2:26:61:77:00:72:17:54:55:93:68:10: a5:98:ba:64:c7:a4:2c:63:fe:39:e3:03:80:72:d5:5d:40:38: 28:11:dc:f7:cd:8a:a4:b5:a5:62:13:89:67:28:d4:d7:9f:3c: 5c:80:31:68:86:fa:6d:a7:6c:fd:b7:07:b6:e7:fb:ba:79:10: 88:8a:47:2d:34:13:9b:24:71:6f:56:2c:d9:f2:3c:da:6f:01: 9a:89:ff:97:3e:17:f5:98:a0:eb:9c:a7:4d:d2:19:a3:97:98: 11:6c:d8:37:b3:83:8b:88:3a:9d:48:42:96:78:85:15:55:6b: 90:cc:01:13:50:a1:1f:e7:ca:c0:cd:86:3c:7a:27:ff:5b:e6: 7c:d0:8b:53:25:d3:4c:99:14:30:2f:5a:70:b6:21:8d:07:7e: 3d:0d:fa:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNcejvobSf5288HBgutHLCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZGQ2OTczNDkzY2UwYzM4NDliOGI5MTliNzUwMmJhNWZh MDEzZDcwHhcNMjUxMjIzMjMwMTA5WhcNMjUxMjI0MjMwMTA5WjAzMTEwLwYDVQQD EyhlMWE5OWIxMDMwMjQ3MTQ4ODllN2Q1MTliYzIyNDA5ODdiOGU1NmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mPrB5un+VeUPah1qq8q3cV/Pljd zZs6yVmP3YEQOMDeazbwGz4Osg8E2+o/kGatEAZFcre63fiQznpoK7V1xGR91Fgb r2aWKvFxxzqjF2RNj9PukQ+eoJogi9WbnKeqILIHTV/VApvPQf3+V0t9MfcBpYZP s4LgdUA8b1s/behe/T+SemhkoxwJ13zlVUkCUKdS69xHRIlfL3LSm7wd67pTxl/Z u35O7ZUzMef5nsLzkmuy3Zyyx7rIgA5ep1/8O3f1XlwXnlBJDYRL7gIJwZIsSFyt IFMyK12064N3ddWoNek7jOBqGH8yT3Yss0+W/PWj/7ICxRikHkWix5OypQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGpmxAwJHFIiefVGbwiQJh7jla1MB8GA1UdIwQY MBaAFEzdaXNJPODDhJuLkZt1ArpfoBPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hMzVmN2YtMjE5NC00NmQzLTkxYmQt Y2MwZjUwYmRhMTU5LzEvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hMzVmN2YtMjE5NC00NmQzLTkxYmQtY2MwZjUwYmRhMTU5 LzEvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaslkwqHd aguATu5r3VyTRsg/B+exxL2ndr7lmmxkWAjk/TioE+YWljijDjTe00ahwqYsVxKy wtxAppyuSg+V73zbcx5bsg8WarCmWY2eG1U9fy+jWT4Q0B1ISUWVCngA0iZhdwBy F1RVk2gQpZi6ZMekLGP+OeMDgHLVXUA4KBHc982KpLWlYhOJZyjU1588XIAxaIb6 bads/bcHtuf7unkQiIpHLTQTmyRxb1Ys2fI82m8Bmon/lz4X9Zig65ynTdIZo5eY EWzYN7ODi4g6nUhClniFFVVrkMwBE1ChH+fKwM2GPHon/1vmfNCLUyXTTJkUMC9a cLYhjQd+PQ36wQ== -----END CERTIFICATE-----Generated at Wed Dec 24 03:38:52 2025 by rpki-client