This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft File: TEA7xgtKE8Pao0EaySPGNy1CPrg.mft (raw, json) Hash identifier: i7POXWOjHMeSE7UiPLaiDgCqkafWuACoEJQhbycybFQ= Subject key identifier: 50:AD:42:3B:56:0C:27:04:17:33:AB:D9:C7:73:16:E8:B6:37:F0:CA Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8 Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8 Certificate serial: 019B3B34C30AB37F2715F0ED4AEC9653C7EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 10:01:12 +0000 Manifest this update: Sat 20 Dec 2025 10:01:12 +0000 Manifest next update: Sun 21 Dec 2025 10:01:12 +0000 Files and hashes: 1: 2T0ylluLZU5IRXTIsZCaSueUWbM.roa (hash: udIR5t7k2pJaVqMVtuXWgauNi5zcnt5mr94dfqv8MFY=) 2: 3HLBnkXtu06Yvfysal3d65x1XK4.roa (hash: 0ad/9ecLvEc9DbEtJjYjCQwDopmxQ2S5mXrCZefzQ6Y=) 3: TEA7xgtKE8Pao0EaySPGNy1CPrg.crl (hash: UtTwG9VvVqu2eJQsvNkRVG23ipgtL30JTe0f3MAAkwg=) 4: ymqrtOTNWDQDdgBajqQ828K-pKw.roa (hash: MvzirsJ3BfWJOTVpYajs6bYFgV7Uhw3FJ4ibTjZ7nbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:c3:0a:b3:7f:27:15:f0:ed:4a:ec:96:53:c7:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8 Validity Not Before: Dec 20 10:01:12 2025 GMT Not After : Dec 21 10:01:12 2025 GMT Subject: CN=50ad423b560c27041733abd9c77316e8b637f0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cd:0a:bf:76:16:c4:80:16:38:e5:4c:79:1c: c3:f5:27:42:e4:46:02:b3:d3:dd:a6:b3:90:57:e6: ce:2d:cb:27:0a:42:f0:7a:a7:34:28:6a:bd:45:b0: 06:11:40:41:b6:ec:a0:84:96:e0:ca:c4:d2:9c:bb: 44:c5:9c:45:01:b3:06:91:5b:87:38:fc:2a:0b:a0: 74:c5:ea:e6:7f:90:38:4e:de:c0:63:94:8c:9c:0d: 31:5e:11:4e:8a:a9:0a:db:32:db:77:39:49:21:f9: b6:be:42:13:78:2b:53:6a:c9:ad:a7:35:39:4d:18: a6:a3:1d:c6:4c:ab:67:33:5c:bf:e7:45:6d:96:11: 49:4c:79:b2:2f:ce:c2:8e:c8:55:36:fd:3b:9e:5c: de:a8:9f:5a:0e:ea:ca:3e:ae:80:7e:bf:42:0b:96: de:51:11:f3:17:d2:25:51:07:7f:d7:0a:a0:d4:37: d0:fe:98:96:93:5d:73:50:c1:34:a4:70:c7:30:b7: b0:34:7f:df:30:16:fa:1c:50:31:19:ce:2b:1f:81: 55:ec:a0:68:a4:7e:33:33:8e:bb:8b:0e:e7:d5:41: 83:26:8f:fd:f5:30:3c:bd:2d:f0:e6:9c:f7:36:71: 52:2f:53:36:64:9c:ed:ac:64:27:9d:5e:e4:33:99: ad:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AD:42:3B:56:0C:27:04:17:33:AB:D9:C7:73:16:E8:B6:37:F0:CA X509v3 Authority Key Identifier: keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:79:5d:2d:4a:cc:25:0e:11:b7:e7:9f:ec:4c:18:7e:41:1e: 90:e6:24:ae:1e:95:27:f3:b4:e0:9a:a3:98:01:be:75:b5:3c: 2e:21:21:0f:f1:25:84:b2:50:69:16:43:53:ca:b2:11:2c:d9: e5:79:1d:8c:a9:8f:bc:63:f6:60:72:f4:b6:64:1b:c1:82:2c: 92:8e:38:cf:b9:b2:a3:0e:a2:0b:00:90:3c:33:31:d6:7a:eb: 0d:7f:f8:29:c6:a6:c8:e8:10:8d:aa:dd:16:be:23:d7:98:c4: 17:35:2b:a1:57:40:ac:64:19:7d:fe:61:71:e4:33:8e:43:03: 61:36:56:fc:ec:d0:02:d7:d3:ae:e3:e5:92:34:c4:1d:b9:d8: b3:a8:8f:aa:a5:74:11:74:28:23:05:57:36:91:fe:ef:6b:1e: 1c:74:18:f2:cc:30:1f:f8:a1:48:35:c1:22:d6:3f:01:62:e3: 65:3a:27:2a:35:76:80:d7:ad:e2:44:e1:44:33:0e:f1:c4:f0: 42:a4:89:dc:4c:f6:74:a5:93:de:36:a6:c0:44:cd:f8:f0:8f: f3:ef:ca:60:f6:22:77:64:cf:79:4a:67:cb:a0:25:60:8e:f2: 2e:20:10:a9:bd:76:79:e3:0a:c7:75:2e:93:e0:68:1c:8b:e3: bd:c0:0e:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NMMKs38nFfDtSuyWU8fvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNDAzYmM2MGI0YTEzYzNkYWEzNDExYWM5MjNjNjM3MmQ0 MjNlYjgwHhcNMjUxMjIwMTAwMTEyWhcNMjUxMjIxMTAwMTEyWjAzMTEwLwYDVQQD Eyg1MGFkNDIzYjU2MGMyNzA0MTczM2FiZDljNzczMTZlOGI2MzdmMGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi80Kv3YWxIAWOOVMeRzD9SdC5EYC s9PdprOQV+bOLcsnCkLweqc0KGq9RbAGEUBBtuyghJbgysTSnLtExZxFAbMGkVuH OPwqC6B0xermf5A4Tt7AY5SMnA0xXhFOiqkK2zLbdzlJIfm2vkITeCtTasmtpzU5 TRimox3GTKtnM1y/50VtlhFJTHmyL87CjshVNv07nlzeqJ9aDurKPq6Afr9CC5be URHzF9IlUQd/1wqg1DfQ/piWk11zUME0pHDHMLewNH/fMBb6HFAxGc4rH4FV7KBo pH4zM467iw7n1UGDJo/99TA8vS3w5pz3NnFSL1M2ZJztrGQnnV7kM5mt7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCtQjtWDCcEFzOr2cdzFui2N/DKMB8GA1UdIwQY MBaAFExAO8YLShPD2qNBGskjxjctQj64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjct MmU4NGI4ZDE4ZTRlLzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjctMmU4NGI4ZDE4ZTRl LzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3ldLUrM JQ4Rt+ef7EwYfkEekOYkrh6VJ/O04JqjmAG+dbU8LiEhD/ElhLJQaRZDU8qyESzZ 5XkdjKmPvGP2YHL0tmQbwYIsko44z7myow6iCwCQPDMx1nrrDX/4KcamyOgQjard Fr4j15jEFzUroVdArGQZff5hceQzjkMDYTZW/OzQAtfTruPlkjTEHbnYs6iPqqV0 EXQoIwVXNpH+72seHHQY8swwH/ihSDXBItY/AWLjZTonKjV2gNet4kThRDMO8cTw QqSJ3Ez2dKWT3jamwETN+PCP8+/KYPYid2TPeUpny6AlYI7yLiAQqb12eeMKx3Uu k+BoHIvjvcAOTQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:41:00 2025 by rpki-client