This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft File: TkMMADsADTVe0WnlXYzPOTg34go.mft (raw, json) Hash identifier: VN9iPkJ23AMipkiaNowi2afM71HufMt2VeoF1eK04SI= Subject key identifier: 09:34:5D:F1:13:67:F4:57:9B:90:92:6E:49:D2:51:C2:9F:8A:84:6F Authority key identifier: 4E:43:0C:00:3B:00:0D:35:5E:D1:69:E5:5D:8C:CF:39:38:37:E2:0A Certificate issuer: /CN=4e430c003b000d355ed169e55d8ccf393837e20a Certificate serial: 019B6D339C47B5CC243CC9340BEB0A8E9F0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkMMADsADTVe0WnlXYzPOTg34go.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft Manifest number: 0F25 Signing time: Tue 30 Dec 2025 03:00:57 +0000 Manifest this update: Tue 30 Dec 2025 03:00:57 +0000 Manifest next update: Wed 31 Dec 2025 03:00:57 +0000 Files and hashes: 1: TkMMADsADTVe0WnlXYzPOTg34go.crl (hash: yzYZB/LUPNQZSJ9zwxssxzXg2tN74nMKHlnsqHDg9Kw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.crl rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft rsync://rpki.ripe.net/repository/DEFAULT/TkMMADsADTVe0WnlXYzPOTg34go.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:9c:47:b5:cc:24:3c:c9:34:0b:eb:0a:8e:9f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e430c003b000d355ed169e55d8ccf393837e20a Validity Not Before: Dec 30 03:00:57 2025 GMT Not After : Dec 31 03:00:57 2025 GMT Subject: CN=09345df11367f4579b90926e49d251c29f8a846f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:08:58:d1:5b:6e:16:d0:bc:02:7e:e5:62:01: ad:44:bf:52:72:a1:c2:88:e0:d6:97:0e:d7:8f:bd: 40:ef:32:19:a8:e7:02:74:34:85:29:82:a6:e8:b3: 5c:5f:c3:7d:b1:dd:0f:23:d9:8e:b3:0e:46:d0:0e: 1d:1c:75:fb:65:f1:d5:9f:78:a9:01:91:54:cf:bd: 04:b2:3b:99:54:9a:93:f6:15:b7:68:d8:0d:7f:b3: 10:ca:e3:9a:6a:1c:f5:8a:ab:c9:0e:a8:52:8c:7f: 8a:94:39:d2:4f:1e:53:40:9e:25:f8:60:03:5c:db: 6e:9a:da:69:fd:3f:4c:a7:08:5e:34:21:fa:dd:a3: 2b:d1:9b:5f:bb:03:f4:22:33:b1:ac:80:03:42:8d: f1:2e:17:4a:58:d9:b0:d1:c9:9b:46:7a:52:e5:6b: 3e:ab:0e:46:aa:42:a8:21:53:57:1a:60:00:85:19: 4a:2a:9b:b5:78:7e:6d:83:95:0f:3b:bb:e8:cf:53: 1b:a1:e1:1a:59:e3:1a:1b:85:93:b2:ae:5b:2e:51: 31:c7:1d:7e:65:06:d0:04:52:1a:4d:47:93:62:44: 44:aa:51:ca:5e:21:59:dd:55:a2:44:5d:a5:b0:fa: 9e:b6:a8:11:2e:5f:2e:66:70:42:dd:0e:55:56:5e: 7a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:34:5D:F1:13:67:F4:57:9B:90:92:6E:49:D2:51:C2:9F:8A:84:6F X509v3 Authority Key Identifier: keyid:4E:43:0C:00:3B:00:0D:35:5E:D1:69:E5:5D:8C:CF:39:38:37:E2:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkMMADsADTVe0WnlXYzPOTg34go.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:a3:4e:a0:e4:5c:04:1c:ac:35:bb:e3:55:f0:b7:d8:8a:aa: c3:13:bc:9b:8f:c2:07:7d:09:f7:17:94:48:2b:0d:a6:56:b8: d8:5e:7e:cc:0c:4c:80:33:49:69:81:09:a2:33:23:53:37:92: 56:71:64:36:84:9d:74:ec:e2:94:ab:6a:5d:dc:81:a7:d9:17: 09:eb:18:f9:ee:be:48:dc:d7:54:2c:29:a3:f9:a1:91:32:72: 3e:8e:6f:40:25:f2:be:e2:33:9f:e4:aa:7a:6d:f5:d0:bc:e3: a6:0c:9d:8c:82:e5:88:a5:bd:e5:20:7e:97:17:fd:d9:4f:b3: a0:21:34:77:8d:6b:6d:e5:58:8c:c1:a2:12:de:5a:c7:b5:c2: 99:e7:e0:82:b6:a8:f1:e2:25:7b:30:d4:4b:6a:1e:cc:24:4f: 55:f2:b0:11:4a:68:df:0b:9b:e4:f9:84:67:7a:81:eb:b6:40: 7f:fe:4f:77:36:5d:62:d9:47:56:a0:8b:c6:50:9a:0f:69:e8: c5:84:90:f7:12:86:44:fb:a3:65:97:79:9a:ea:5b:8f:11:9e: 0d:25:8e:a2:df:b9:81:b3:4b:8c:96:d0:9c:b3:73:60:37:b3: 4f:24:0e:24:ed:54:5a:ab:a1:ab:16:48:f6:76:26:87:6c:4e: 98:0d:64:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttM5xHtcwkPMk0C+sKjp8OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNDMwYzAwM2IwMDBkMzU1ZWQxNjllNTVkOGNjZjM5Mzgz N2UyMGEwHhcNMjUxMjMwMDMwMDU3WhcNMjUxMjMxMDMwMDU3WjAzMTEwLwYDVQQD EygwOTM0NWRmMTEzNjdmNDU3OWI5MDkyNmU0OWQyNTFjMjlmOGE4NDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAhY0VtuFtC8An7lYgGtRL9ScqHC iODWlw7Xj71A7zIZqOcCdDSFKYKm6LNcX8N9sd0PI9mOsw5G0A4dHHX7ZfHVn3ip AZFUz70EsjuZVJqT9hW3aNgNf7MQyuOaahz1iqvJDqhSjH+KlDnSTx5TQJ4l+GAD XNtumtpp/T9MpwheNCH63aMr0ZtfuwP0IjOxrIADQo3xLhdKWNmw0cmbRnpS5Ws+ qw5GqkKoIVNXGmAAhRlKKpu1eH5tg5UPO7voz1MboeEaWeMaG4WTsq5bLlExxx1+ ZQbQBFIaTUeTYkREqlHKXiFZ3VWiRF2lsPqetqgRLl8uZnBC3Q5VVl56qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAk0XfETZ/RXm5CSbknSUcKfioRvMB8GA1UdIwQY MBaAFE5DDAA7AA01XtFp5V2Mzzk4N+IKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGtNTUFEc0FEVFZlMFdubFhZelBPVGczNGdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS84MjIyNWQtMDQwYS00ZDliLWEzM2It ODhkODIzNGE2ZDNlLzEvVGtNTUFEc0FEVFZlMFdubFhZelBPVGczNGdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS84MjIyNWQtMDQwYS00ZDliLWEzM2ItODhkODIzNGE2ZDNl LzEvVGtNTUFEc0FEVFZlMFdubFhZelBPVGczNGdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqNOoORc BBysNbvjVfC32IqqwxO8m4/CB30J9xeUSCsNpla42F5+zAxMgDNJaYEJojMjUzeS VnFkNoSddOzilKtqXdyBp9kXCesY+e6+SNzXVCwpo/mhkTJyPo5vQCXyvuIzn+Sq em310LzjpgydjILliKW95SB+lxf92U+zoCE0d41rbeVYjMGiEt5ax7XCmefggrao 8eIlezDUS2oezCRPVfKwEUpo3wub5PmEZ3qB67ZAf/5PdzZdYtlHVqCLxlCaD2no xYSQ9xKGRPujZZd5mupbjxGeDSWOot+5gbNLjJbQnLNzYDezTyQOJO1UWquhqxZI 9nYmh2xOmA1kgQ== -----END CERTIFICATE-----Generated at Tue Dec 30 10:32:18 2025 by rpki-client