This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft File: Tm32g40DOAFB635O5V3AXYcGHck.mft (raw, json) Hash identifier: +C2lbPem9VmHv5ukDzxpqOCKNaA1eK1Ttzi1lEchems= Subject key identifier: 18:8E:6C:CE:18:19:91:4D:32:20:8D:72:87:5D:4A:A4:6C:30:A4:FF Authority key identifier: 4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9 Certificate issuer: /CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9 Certificate serial: 019B27E4C310EC5264A72B9C415F5DA343F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft Manifest number: 11CB Signing time: Tue 16 Dec 2025 16:01:02 +0000 Manifest this update: Tue 16 Dec 2025 16:01:02 +0000 Manifest next update: Wed 17 Dec 2025 16:01:02 +0000 Files and hashes: 1: 6zGLvq4k5vmzCBWK5uxpgKx-SpM.roa (hash: d72RjXOy3TrPnzNgu1Y/cwJXn9F8xvKoAfaZ+LW3oR4=) 2: Tm32g40DOAFB635O5V3AXYcGHck.crl (hash: PcxwyvRa2MHVCvq0DRas50d6vAaPgKiFJCQIQpA70ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e4:c3:10:ec:52:64:a7:2b:9c:41:5f:5d:a3:43:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9 Validity Not Before: Dec 16 16:01:02 2025 GMT Not After : Dec 17 16:01:02 2025 GMT Subject: CN=188e6cce1819914d32208d72875d4aa46c30a4ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:14:35:73:a8:cc:0c:2a:04:e9:d3:0d:f7:11: 3d:34:8c:89:30:fb:08:a3:57:42:64:a8:38:96:de: cd:c2:14:1d:d4:d1:67:ae:f0:fb:42:ee:91:bd:36: 1b:3c:4c:4d:3c:98:ba:d1:1e:3e:30:a4:a4:6f:25: ae:68:81:ad:af:1a:70:05:6c:01:01:f3:4c:3e:ef: ce:05:9e:16:bb:54:55:a1:8c:c9:23:42:92:8a:7a: ad:5b:30:ad:2b:db:3a:a2:e3:f5:ef:fc:62:23:45: 70:a8:57:c3:d6:fc:0b:37:9b:1a:a0:09:9c:d7:ea: 90:8c:cb:22:3a:c9:72:f9:3c:9a:c8:12:3d:11:9a: 90:97:69:26:a2:31:63:fd:cf:78:a9:70:5b:8d:09: d4:50:d1:4d:7c:bf:39:c1:58:fb:3e:64:3a:0b:02: 8a:dd:37:ae:fb:57:ad:20:d0:28:5a:cf:ce:53:7d: 0b:38:81:d7:d2:d9:b6:41:95:56:15:25:2e:93:b1: d0:47:c4:e5:c5:de:bc:f1:ab:2a:ff:58:38:fa:14: 53:28:cf:d6:62:fe:76:a2:f6:78:05:03:35:f6:fd: 8b:8a:a2:9b:56:de:31:9a:fb:b3:0b:82:7c:cf:15: f7:5a:b5:dc:ec:33:f4:ec:28:21:17:3f:82:aa:31: 21:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8E:6C:CE:18:19:91:4D:32:20:8D:72:87:5D:4A:A4:6C:30:A4:FF X509v3 Authority Key Identifier: keyid:4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:c0:62:3a:d9:4b:87:1a:81:a6:86:96:80:77:12:38:93:be: f5:e1:01:4e:01:df:80:3d:0b:6b:29:06:0b:7e:f2:c7:6e:e8: 45:c1:59:34:a8:b0:6d:db:14:aa:2b:b8:8f:5b:33:2b:a5:d8: 5e:e7:cf:08:67:ee:9a:25:12:e0:4f:a8:79:4a:5d:73:55:14: 9e:59:93:66:af:ef:d6:5d:6b:f8:b7:82:1a:8a:52:81:1d:ff: a5:31:a5:0e:63:67:86:db:29:1c:3d:2f:43:2c:94:58:40:63: 93:8a:bb:9c:34:18:cc:3e:90:3f:94:8a:99:d6:0f:7f:47:b2: b7:f2:93:0b:ca:fd:80:e4:ff:6d:a3:fe:11:3a:dc:27:28:33: 42:8b:6c:57:d1:4c:6c:43:0c:37:55:59:6e:66:1c:9e:65:35: c6:e0:99:09:cd:88:a6:ec:34:c6:04:8c:d3:57:6b:59:3b:66: f7:b8:0a:9c:31:62:27:36:85:59:61:6b:0e:a7:96:88:9e:3a: 65:ab:d6:cf:b5:94:71:84:cf:dd:d3:85:95:db:26:c4:d0:0a: e6:55:c6:ae:84:d2:ad:90:80:c3:e2:1a:c6:f5:9d:9d:b5:d1: 2d:04:08:ea:45:9f:a8:18:09:ba:d6:b2:15:40:7e:3b:b8:d5: 87:d9:02:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5MMQ7FJkpyucQV9do0P3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNmRmNjgzOGQwMzM4MDE0MWViN2U0ZWU1NWRjMDVkODcw NjFkYzkwHhcNMjUxMjE2MTYwMTAyWhcNMjUxMjE3MTYwMTAyWjAzMTEwLwYDVQQD EygxODhlNmNjZTE4MTk5MTRkMzIyMDhkNzI4NzVkNGFhNDZjMzBhNGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBQ1c6jMDCoE6dMN9xE9NIyJMPsI o1dCZKg4lt7NwhQd1NFnrvD7Qu6RvTYbPExNPJi60R4+MKSkbyWuaIGtrxpwBWwB AfNMPu/OBZ4Wu1RVoYzJI0KSinqtWzCtK9s6ouP17/xiI0VwqFfD1vwLN5saoAmc 1+qQjMsiOsly+TyayBI9EZqQl2kmojFj/c94qXBbjQnUUNFNfL85wVj7PmQ6CwKK 3Teu+1etINAoWs/OU30LOIHX0tm2QZVWFSUuk7HQR8Tlxd688asq/1g4+hRTKM/W Yv52ovZ4BQM19v2LiqKbVt4xmvuzC4J8zxX3WrXc7DP07CghFz+CqjEhZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiObM4YGZFNMiCNcoddSqRsMKT/MB8GA1UdIwQY MBaAFE5t9oONAzgBQet+TuVdwF2HBh3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG0zMmc0MERPQUZCNjM1TzVWM0FYWWNHSGNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi82ZWViNWMtZDI1MS00NzBhLWE3Y2Qt MzE4MzYyMDA0ZThhLzEvVG0zMmc0MERPQUZCNjM1TzVWM0FYWWNHSGNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi82ZWViNWMtZDI1MS00NzBhLWE3Y2QtMzE4MzYyMDA0ZThh LzEvVG0zMmc0MERPQUZCNjM1TzVWM0FYWWNHSGNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMBiOtlL hxqBpoaWgHcSOJO+9eEBTgHfgD0LaykGC37yx27oRcFZNKiwbdsUqiu4j1szK6XY XufPCGfumiUS4E+oeUpdc1UUnlmTZq/v1l1r+LeCGopSgR3/pTGlDmNnhtspHD0v QyyUWEBjk4q7nDQYzD6QP5SKmdYPf0eyt/KTC8r9gOT/baP+ETrcJygzQotsV9FM bEMMN1VZbmYcnmU1xuCZCc2Ipuw0xgSM01drWTtm97gKnDFiJzaFWWFrDqeWiJ46 ZavWz7WUcYTP3dOFldsmxNAK5lXGroTSrZCAw+IaxvWdnbXRLQQI6kWfqBgJutay FUB+O7jVh9kCqA== -----END CERTIFICATE-----Generated at Tue Dec 16 23:18:55 2025 by rpki-client