This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft File: TnKscetFB6wKZSpUWY2uRR_jP0c.mft (raw, json) Hash identifier: q2wz9/9ot1/0Hrhe/reZEW6Lj5/qohHIfdwxSSiZP2c= Subject key identifier: 5C:56:CC:7B:9D:C8:42:33:61:AF:A1:4C:CE:F7:69:A0:B5:49:D8:FB Authority key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47 Certificate issuer: /CN=4e72ac71eb4507ac0a652a54598dae451fe33f47 Certificate serial: 019B3EA39939CA9840F7AEE0C72DA9D91CBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft Manifest number: 14B4 Signing time: Sun 21 Dec 2025 02:01:07 +0000 Manifest this update: Sun 21 Dec 2025 02:01:07 +0000 Manifest next update: Mon 22 Dec 2025 02:01:07 +0000 Files and hashes: 1: 4zuoqc0Glu6ApY4rQHmNAlxxavo.roa (hash: qDD4JCBpI34S2Q624/ndlMxJa6qHAv5moxaFgFJvL3I=) 2: TnKscetFB6wKZSpUWY2uRR_jP0c.crl (hash: BUS928kj76QqnWJI+mzNzWAChpe4Krm0Hg2WFQfmJa4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:99:39:ca:98:40:f7:ae:e0:c7:2d:a9:d9:1c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47 Validity Not Before: Dec 21 02:01:07 2025 GMT Not After : Dec 22 02:01:07 2025 GMT Subject: CN=5c56cc7b9dc8423361afa14ccef769a0b549d8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3d:e9:c4:d4:44:33:79:37:74:54:c4:0c:58: 4c:a4:13:a5:52:cb:03:6d:ef:2b:76:5f:74:08:c3: 09:cc:d8:1f:d5:86:4a:69:22:0b:e1:a3:02:5b:59: 01:ae:fb:54:16:d0:26:1d:e2:7f:ea:5b:f1:43:18: 89:c7:14:b8:ae:b8:76:88:4e:30:fb:1c:4b:e3:64: 8d:ec:27:89:57:79:bd:2e:6c:54:c9:fd:65:75:5b: e4:1a:0b:a1:7c:b7:fb:22:d8:81:41:1a:1e:65:5a: ce:04:35:a1:a0:9b:40:da:9d:27:ea:84:82:8e:e4: 15:be:97:fd:4e:a0:a5:68:2f:16:a2:1e:ce:08:76: 97:16:4a:77:aa:80:85:be:4b:8b:47:13:e5:0a:2e: 7c:c5:6a:d2:18:68:cf:4f:26:49:85:20:95:a0:b4: cd:af:ae:8a:93:d4:c3:12:ca:a0:f7:8c:ea:53:03: 15:a8:05:6c:46:5a:1b:3e:c9:9e:be:e3:fb:87:77: 67:87:39:d8:17:26:3f:b8:7a:e9:db:aa:15:78:f3: 02:d0:c3:0d:2e:74:71:03:39:a0:57:d5:9c:e2:c3: 44:b1:b5:3e:ab:b1:1a:01:72:2c:c1:9a:a7:05:f3: 00:61:25:1a:ce:7a:57:c4:58:37:20:fe:74:50:ce: a4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:56:CC:7B:9D:C8:42:33:61:AF:A1:4C:CE:F7:69:A0:B5:49:D8:FB X509v3 Authority Key Identifier: keyid:4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:f4:61:66:97:25:16:68:49:4e:0f:5e:af:3c:de:00:40:81: 9c:c1:19:1e:f0:ed:19:cd:2c:24:24:31:d7:c8:c5:a8:e7:b8: 02:9f:ef:4c:7d:ea:36:6b:3c:89:bb:fd:b7:af:9b:75:8c:76: 31:e0:ac:6c:0b:cc:98:69:aa:3c:f2:5a:33:a9:f2:81:da:74: 66:73:81:d8:9d:38:88:1e:d7:ae:ce:cd:81:d5:ef:f2:5b:1d: d8:9d:e8:f1:3f:f7:54:e6:76:c3:8c:a0:6c:a9:8f:32:c0:74: 4b:3c:92:f6:36:73:80:72:e5:2b:80:09:87:50:c4:c7:0a:f1: 4e:86:00:55:6f:65:38:a5:4a:2f:16:9f:66:ea:98:0b:45:4f: 55:39:99:24:9c:39:5b:66:9e:44:d7:7d:19:65:f3:41:25:fd: f2:3d:8a:72:50:54:74:04:e7:8d:74:1e:25:45:ad:b7:85:a5: 7c:e7:6f:87:70:3f:d4:4a:d9:7a:5a:b3:55:a0:38:51:63:15: 58:ce:b1:a4:41:f7:cb:9a:ec:98:ad:17:ee:1e:5a:05:f4:12: 1c:83:b6:fe:73:ef:11:80:37:1b:b4:59:dd:fb:8a:7b:26:17: b9:74:b8:3d:55:7b:22:7d:5a:99:47:61:32:ef:ae:2f:db:c6: be:e5:81:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o5k5yphA967gxy2p2Ry9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNzJhYzcxZWI0NTA3YWMwYTY1MmE1NDU5OGRhZTQ1MWZl MzNmNDcwHhcNMjUxMjIxMDIwMTA3WhcNMjUxMjIyMDIwMTA3WjAzMTEwLwYDVQQD Eyg1YzU2Y2M3YjlkYzg0MjMzNjFhZmExNGNjZWY3NjlhMGI1NDlkOGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz3pxNREM3k3dFTEDFhMpBOlUssD be8rdl90CMMJzNgf1YZKaSIL4aMCW1kBrvtUFtAmHeJ/6lvxQxiJxxS4rrh2iE4w +xxL42SN7CeJV3m9LmxUyf1ldVvkGguhfLf7ItiBQRoeZVrOBDWhoJtA2p0n6oSC juQVvpf9TqClaC8Woh7OCHaXFkp3qoCFvkuLRxPlCi58xWrSGGjPTyZJhSCVoLTN r66Kk9TDEsqg94zqUwMVqAVsRlobPsmevuP7h3dnhznYFyY/uHrp26oVePMC0MMN LnRxAzmgV9Wc4sNEsbU+q7EaAXIswZqnBfMAYSUaznpXxFg3IP50UM6kFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxWzHudyEIzYa+hTM73aaC1Sdj7MB8GA1UdIwQY MBaAFE5yrHHrRQesCmUqVFmNrkUf4z9HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG5Lc2NldEZCNndLWlNwVVdZMnVSUl9qUDBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMDc1MjMtODM5Mi00N2Y1LTgyYjMt MzBjNDMwYTM5OGU2LzEvVG5Lc2NldEZCNndLWlNwVVdZMnVSUl9qUDBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hMDc1MjMtODM5Mi00N2Y1LTgyYjMtMzBjNDMwYTM5OGU2 LzEvVG5Lc2NldEZCNndLWlNwVVdZMnVSUl9qUDBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfRhZpcl FmhJTg9erzzeAECBnMEZHvDtGc0sJCQx18jFqOe4Ap/vTH3qNms8ibv9t6+bdYx2 MeCsbAvMmGmqPPJaM6nygdp0ZnOB2J04iB7Xrs7NgdXv8lsd2J3o8T/3VOZ2w4yg bKmPMsB0SzyS9jZzgHLlK4AJh1DExwrxToYAVW9lOKVKLxafZuqYC0VPVTmZJJw5 W2aeRNd9GWXzQSX98j2KclBUdATnjXQeJUWtt4WlfOdvh3A/1ErZelqzVaA4UWMV WM6xpEH3y5rsmK0X7h5aBfQSHIO2/nPvEYA3G7RZ3fuKeyYXuXS4PVV7In1amUdh Mu+uL9vGvuWBow== -----END CERTIFICATE-----Generated at Sun Dec 21 10:32:28 2025 by rpki-client