This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft File: TEA7xgtKE8Pao0EaySPGNy1CPrg.mft (raw, json) Hash identifier: Ot8QX7OKvecmYuTAcefMG0ubZx+bzxavZNq2cfLJZv0= Subject key identifier: 42:3D:23:61:A9:90:82:4D:86:E6:FB:D5:0F:6E:B7:F8:64:45:6A:AB Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8 Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8 Certificate serial: 019B39466CE64EE7486EF04371C39E589744 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 01:01:15 +0000 Manifest this update: Sat 20 Dec 2025 01:01:15 +0000 Manifest next update: Sun 21 Dec 2025 01:01:15 +0000 Files and hashes: 1: 2T0ylluLZU5IRXTIsZCaSueUWbM.roa (hash: udIR5t7k2pJaVqMVtuXWgauNi5zcnt5mr94dfqv8MFY=) 2: 3HLBnkXtu06Yvfysal3d65x1XK4.roa (hash: 0ad/9ecLvEc9DbEtJjYjCQwDopmxQ2S5mXrCZefzQ6Y=) 3: TEA7xgtKE8Pao0EaySPGNy1CPrg.crl (hash: lJjDG94xyAmMKgrV87Exvx8i8BJ6EG1/QhC9rdV0Seo=) 4: ymqrtOTNWDQDdgBajqQ828K-pKw.roa (hash: MvzirsJ3BfWJOTVpYajs6bYFgV7Uhw3FJ4ibTjZ7nbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:6c:e6:4e:e7:48:6e:f0:43:71:c3:9e:58:97:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8 Validity Not Before: Dec 20 01:01:15 2025 GMT Not After : Dec 21 01:01:15 2025 GMT Subject: CN=423d2361a990824d86e6fbd50f6eb7f864456aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e3:b4:c7:ee:6e:56:24:30:8d:c3:da:90:37: b8:c5:1b:aa:2e:e2:25:77:58:9b:4b:17:67:df:15: 18:20:53:f7:10:02:ce:b6:b4:6a:98:73:cb:84:c9: 8c:3b:93:7f:53:09:08:a3:7c:9e:84:6a:3b:1b:8e: c3:dc:51:58:c0:1e:79:ff:11:03:d3:1b:91:46:57: 38:44:5b:8c:6f:d1:aa:ea:b6:29:1f:c1:ec:19:38: d0:ad:fb:ed:4b:52:9b:9c:af:4e:68:e2:cf:19:ae: 92:55:c8:61:4a:91:72:4b:e4:da:1c:54:16:dc:d9: 5a:67:0d:18:e3:5a:66:4d:af:d8:ed:bb:8c:66:b6: b6:4a:35:c4:63:8f:4a:8c:1a:a7:c7:4e:84:05:de: 09:7f:b1:c9:0f:11:2b:9e:f0:13:56:6e:08:c2:c1: 1d:a3:0c:7c:06:45:c8:f0:ec:0a:5f:8e:d7:14:c7: 72:45:08:b9:70:b6:f4:41:0f:88:60:24:4c:a0:f9: e0:23:a9:8b:a2:e3:da:b1:cd:de:17:a9:bc:20:2f: fa:68:fb:a6:b2:b8:a5:be:e4:32:05:12:ab:6d:e2: 43:61:40:64:21:50:3a:d9:df:43:ee:d4:95:e7:6d: 03:6c:16:c3:6c:ba:e2:24:58:7f:6d:e4:96:77:4f: a7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3D:23:61:A9:90:82:4D:86:E6:FB:D5:0F:6E:B7:F8:64:45:6A:AB X509v3 Authority Key Identifier: keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:77:78:df:0a:62:c3:59:9d:d3:3d:a5:9f:57:69:10:57:d2: 72:a0:2e:1f:8f:a4:52:8f:b4:36:fa:06:4b:bd:60:ec:3d:04: 99:a6:e2:7b:81:67:8d:10:e5:e4:17:47:dd:2c:34:22:44:3f: a9:0e:bb:fb:32:85:4a:e9:6f:ed:8e:68:b1:55:86:cd:64:4a: 35:e6:1d:17:df:ef:0e:9c:21:e5:e1:9a:02:c5:89:a9:ac:b0: f8:26:26:16:59:08:35:47:b9:78:95:e3:96:0b:3d:f7:f6:9e: 82:7d:89:ae:aa:ca:b5:20:14:d5:77:63:ac:6f:ee:3d:b0:20: 3a:a8:23:81:47:0c:42:4c:b0:c4:26:23:87:02:71:ce:b3:19: 7d:0c:c4:f5:57:47:1a:36:f7:c6:06:40:88:9e:7b:68:12:bd: be:ca:6a:52:e6:91:38:b6:4f:cf:80:18:af:31:b7:c5:3c:e6: 06:d8:de:79:53:d2:32:ec:0a:1e:9b:16:17:72:51:ff:63:0a: e3:4b:d7:72:62:79:40:6c:b7:0f:98:e1:e5:a5:dd:23:a7:cf: 58:0f:ba:10:2f:44:f1:de:41:b3:56:66:b7:95:7b:6e:e4:db: 77:e0:31:ca:a9:aa:51:f6:79:61:2f:14:e7:28:7d:8a:04:8c: 3b:1f:11:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RmzmTudIbvBDccOeWJdEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNDAzYmM2MGI0YTEzYzNkYWEzNDExYWM5MjNjNjM3MmQ0 MjNlYjgwHhcNMjUxMjIwMDEwMTE1WhcNMjUxMjIxMDEwMTE1WjAzMTEwLwYDVQQD Eyg0MjNkMjM2MWE5OTA4MjRkODZlNmZiZDUwZjZlYjdmODY0NDU2YWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuO0x+5uViQwjcPakDe4xRuqLuIl d1ibSxdn3xUYIFP3EALOtrRqmHPLhMmMO5N/UwkIo3yehGo7G47D3FFYwB55/xED 0xuRRlc4RFuMb9Gq6rYpH8HsGTjQrfvtS1KbnK9OaOLPGa6SVchhSpFyS+TaHFQW 3NlaZw0Y41pmTa/Y7buMZra2SjXEY49KjBqnx06EBd4Jf7HJDxErnvATVm4IwsEd owx8BkXI8OwKX47XFMdyRQi5cLb0QQ+IYCRMoPngI6mLouPasc3eF6m8IC/6aPum srilvuQyBRKrbeJDYUBkIVA62d9D7tSV520DbBbDbLriJFh/beSWd0+nOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEI9I2GpkIJNhub71Q9ut/hkRWqrMB8GA1UdIwQY MBaAFExAO8YLShPD2qNBGskjxjctQj64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjct MmU4NGI4ZDE4ZTRlLzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjctMmU4NGI4ZDE4ZTRl LzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3d43wpi w1md0z2ln1dpEFfScqAuH4+kUo+0NvoGS71g7D0Emabie4FnjRDl5BdH3Sw0IkQ/ qQ67+zKFSulv7Y5osVWGzWRKNeYdF9/vDpwh5eGaAsWJqayw+CYmFlkINUe5eJXj lgs99/aegn2JrqrKtSAU1XdjrG/uPbAgOqgjgUcMQkywxCYjhwJxzrMZfQzE9VdH Gjb3xgZAiJ57aBK9vspqUuaROLZPz4AYrzG3xTzmBtjeeVPSMuwKHpsWF3JR/2MK 40vXcmJ5QGy3D5jh5aXdI6fPWA+6EC9E8d5Bs1Zmt5V7buTbd+AxyqmqUfZ5YS8U 5yh9igSMOx8RrA== -----END CERTIFICATE-----Generated at Sat Dec 20 02:58:25 2025 by rpki-client