This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft File: Tm_7mQbuvrofWxpVju1jcvZTzoY.mft (raw, json) Hash identifier: S6G0qHzHALTqwgEyLE+y9UP2j83Wh4JPN5mEh8MjwwU= Subject key identifier: 74:E3:E3:DE:01:2A:E9:44:16:45:3D:FE:4F:D7:E1:F0:BC:A1:E3:A0 Authority key identifier: 4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86 Certificate issuer: /CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86 Certificate serial: 019B334444B15B3E0B4FD7224C97894B711B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 21:01:10 +0000 Manifest this update: Thu 18 Dec 2025 21:01:10 +0000 Manifest next update: Fri 19 Dec 2025 21:01:10 +0000 Files and hashes: 1: Tm_7mQbuvrofWxpVju1jcvZTzoY.crl (hash: v/qo/i8DsOKdO+iqQgqd8aSj1k7qcLV1fBMbEVCJVpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:44:b1:5b:3e:0b:4f:d7:22:4c:97:89:4b:71:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86 Validity Not Before: Dec 18 21:01:10 2025 GMT Not After : Dec 19 21:01:10 2025 GMT Subject: CN=74e3e3de012ae94416453dfe4fd7e1f0bca1e3a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:72:70:de:41:9d:4b:14:34:bc:0b:e3:80:45: 7a:39:9d:1a:dd:e8:e2:b7:18:d0:89:0b:10:10:7d: 5d:2d:88:e7:af:45:e3:55:84:d7:3c:51:cf:8b:08: 81:09:f2:32:c0:81:5d:fd:fe:6e:4d:a7:11:b8:66: 01:3c:63:ee:de:9c:e1:a7:b6:77:15:a3:52:9c:c0: bf:a6:35:b4:95:99:9e:79:6f:87:b3:6c:4e:04:1d: 52:b9:a1:bf:91:ec:ce:b4:65:12:2f:bf:05:02:60: 4b:a4:bc:84:0f:fb:4d:1f:2d:f6:b1:1a:a8:53:87: 08:0d:61:e3:c9:ff:8e:41:cc:13:88:9c:4c:75:0c: ba:9d:64:88:6f:1f:64:b3:88:6c:c7:1d:88:8b:43: 00:8a:1d:34:31:ad:5d:0f:c7:d9:67:1c:9d:51:38: a9:a9:7b:98:d7:f5:48:3d:55:f3:0c:79:3b:17:86: 91:e0:f3:9f:8d:26:c6:52:f0:d2:bb:1c:64:03:00: 1c:07:bd:41:2b:8a:c8:81:8e:92:6c:53:3f:0b:a9: 9c:dd:39:34:0b:d5:00:21:4a:3a:7f:93:8f:e4:ac: 02:d0:c7:00:95:09:70:0e:33:41:63:88:1f:14:49: 5a:18:21:5e:f4:14:2e:63:a7:cf:86:0d:e7:52:d7: 08:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E3:E3:DE:01:2A:E9:44:16:45:3D:FE:4F:D7:E1:F0:BC:A1:E3:A0 X509v3 Authority Key Identifier: keyid:4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:83:0a:66:d1:5e:af:cf:8d:4c:9e:2b:cf:21:fb:5f:1f:d5: c7:90:d3:64:80:e4:dd:41:88:18:34:43:84:a2:23:af:60:86: 04:8c:7c:fa:e8:e5:82:a6:10:a3:f4:1d:cf:ab:81:02:af:40: 4a:a4:ca:43:01:ff:ef:c8:b9:cb:a8:65:2e:1f:fe:66:e9:e6: 4e:69:a6:7a:06:72:6b:09:dc:81:e4:eb:f3:b2:8d:1a:83:1f: 38:73:cc:3c:b2:02:ee:b3:f4:96:f9:54:df:a6:95:fa:07:9e: 9c:a1:e1:0b:21:3f:dc:b9:f0:23:22:ec:a6:7d:05:04:95:fd: 5a:13:c6:6e:8f:83:b3:be:f5:a8:dc:6a:da:49:05:fa:00:a1: 09:63:c9:7c:12:a4:68:b5:4b:fa:4e:8c:bd:44:a0:b6:be:52: 7b:3d:10:90:e0:1c:9e:74:82:b3:77:61:d9:f2:6d:09:45:b8: 9d:42:78:39:f2:c0:58:f3:f3:15:8c:fe:7c:2d:f0:e0:b3:df: db:92:68:9d:87:71:a2:84:b5:e2:0b:5f:2f:fd:70:97:aa:d1: 0b:28:4a:86:11:ad:6e:87:f2:27:c6:08:c8:3a:9b:65:c6:27: 8a:d0:f1:84:37:c1:7f:0f:4c:4f:c7:da:47:0e:44:51:66:04: 0f:90:9b:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRESxWz4LT9ciTJeJS3EbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNmZmYjk5MDZlZWJlYmExZjViMWE1NThlZWQ2MzcyZjY1 M2NlODYwHhcNMjUxMjE4MjEwMTEwWhcNMjUxMjE5MjEwMTEwWjAzMTEwLwYDVQQD Eyg3NGUzZTNkZTAxMmFlOTQ0MTY0NTNkZmU0ZmQ3ZTFmMGJjYTFlM2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nJw3kGdSxQ0vAvjgEV6OZ0a3eji txjQiQsQEH1dLYjnr0XjVYTXPFHPiwiBCfIywIFd/f5uTacRuGYBPGPu3pzhp7Z3 FaNSnMC/pjW0lZmeeW+Hs2xOBB1SuaG/kezOtGUSL78FAmBLpLyED/tNHy32sRqo U4cIDWHjyf+OQcwTiJxMdQy6nWSIbx9ks4hsxx2Ii0MAih00Ma1dD8fZZxydUTip qXuY1/VIPVXzDHk7F4aR4POfjSbGUvDSuxxkAwAcB71BK4rIgY6SbFM/C6mc3Tk0 C9UAIUo6f5OP5KwC0McAlQlwDjNBY4gfFElaGCFe9BQuY6fPhg3nUtcIBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTj494BKulEFkU9/k/X4fC8oeOgMB8GA1UdIwQY MBaAFE5v+5kG7r66H1saVY7tY3L2U86GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xOTgwYmQtMDc1My00MTYxLWI2ZjUt OWM3MmUxNTdhYmIzLzEvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8xOTgwYmQtMDc1My00MTYxLWI2ZjUtOWM3MmUxNTdhYmIz LzEvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoMKZtFe r8+NTJ4rzyH7Xx/Vx5DTZIDk3UGIGDRDhKIjr2CGBIx8+ujlgqYQo/Qdz6uBAq9A SqTKQwH/78i5y6hlLh/+ZunmTmmmegZyawncgeTr87KNGoMfOHPMPLIC7rP0lvlU 36aV+geenKHhCyE/3LnwIyLspn0FBJX9WhPGbo+Ds771qNxq2kkF+gChCWPJfBKk aLVL+k6MvUSgtr5Sez0QkOAcnnSCs3dh2fJtCUW4nUJ4OfLAWPPzFYz+fC3w4LPf 25JonYdxooS14gtfL/1wl6rRCyhKhhGtbofyJ8YIyDqbZcYnitDxhDfBfw9MT8fa Rw5EUWYED5Cb+A== -----END CERTIFICATE-----Generated at Fri Dec 19 02:25:04 2025 by rpki-client