This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json) Hash identifier: snZlGtnbk6JukD/XXL+KS+aG6L9mI4vwi3v/2CwmjlE= Subject key identifier: 32:A9:92:5B:EC:E4:71:28:CA:C0:8C:A0:78:58:FC:3A:7D:60:09:87 Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0 Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0 Certificate serial: 019B3F480DDC9ED47EEB8E48C7B6468486EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft Manifest number: 081B Signing time: Sun 21 Dec 2025 05:00:45 +0000 Manifest this update: Sun 21 Dec 2025 05:00:45 +0000 Manifest next update: Mon 22 Dec 2025 05:00:45 +0000 Files and hashes: 1: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: ndeM/Iia/Nczmu/9pExmWC3nk4qONmskQxNjRyigqFE=) 2: fIoweheWq1JqzVdLBCrrD-x4kK4.roa (hash: yoQba86aaUs4p2P/E/UoxSeIL5NEm/wDobQOVMT4e5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:0d:dc:9e:d4:7e:eb:8e:48:c7:b6:46:84:86:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0 Validity Not Before: Dec 21 05:00:45 2025 GMT Not After : Dec 22 05:00:45 2025 GMT Subject: CN=32a9925bece47128cac08ca07858fc3a7d600987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:da:f8:b4:22:2d:b2:0a:18:f4:46:7f:ef:dc: 23:32:03:db:55:5a:85:4e:50:cf:08:3e:a0:61:dc: 1f:e7:09:1e:aa:cc:8d:9e:98:03:b9:0e:7c:69:65: b4:15:06:28:8f:08:a9:1b:09:8c:c8:41:7e:4b:ee: 48:89:08:27:1d:e8:b7:57:cb:fd:37:0c:ed:61:1c: 91:ce:ff:16:72:a7:bb:b0:4f:3b:38:33:5d:bc:ed: 60:18:6a:ab:f7:86:35:da:cc:66:c2:6a:6a:fe:42: aa:5c:34:80:50:4a:d9:f0:33:70:1e:82:29:38:a2: 6b:a1:51:d9:df:cb:6f:01:b4:52:6c:28:58:7f:f6: 39:e4:6f:55:b7:ab:53:4f:a9:00:f5:0d:61:96:a2: 23:38:77:0e:d7:01:7f:31:84:ab:d9:37:f8:bf:66: 35:43:f7:e2:c4:c4:9a:97:5b:0a:90:26:3a:dd:27: e3:9a:23:20:0d:91:54:f7:8e:be:f6:8f:6c:63:21: c7:d2:3a:19:99:d6:74:b4:ff:fb:e0:72:24:d9:0e: ed:6f:cc:dd:95:e1:a5:b5:37:55:aa:9f:1c:d3:b6: 49:c6:5b:96:c5:41:14:ff:2c:87:76:19:85:12:1c: e1:bd:d7:49:c9:a7:a0:fa:2f:ea:f6:c8:77:d3:5b: df:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A9:92:5B:EC:E4:71:28:CA:C0:8C:A0:78:58:FC:3A:7D:60:09:87 X509v3 Authority Key Identifier: keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:3c:05:f0:5b:93:27:b7:65:b6:fa:41:62:dc:9b:76:14:77: 60:ae:d1:63:17:70:67:c5:16:dd:78:ed:f9:38:eb:8e:07:0f: 2e:90:73:f2:73:33:62:dc:fc:bb:e2:c4:c9:f2:ab:e0:d1:6d: 8c:f9:4b:0f:97:2a:6d:8c:22:54:c5:fd:e7:69:16:3d:a8:db: 0d:84:e6:35:90:e9:2f:8c:e4:f7:d1:71:bb:69:30:f8:0d:62: ef:1e:ba:e1:b2:5c:3b:e8:73:f0:5b:d9:f7:64:cc:24:b4:09: ad:08:14:8f:0e:a9:aa:c7:92:ba:b2:72:68:bb:76:5e:fc:b5: 98:f5:b0:a2:f2:64:1c:b5:d8:34:7c:27:14:40:05:4a:52:80: 6f:9f:54:70:d4:b9:7b:5f:a8:06:30:7c:64:5f:a5:ed:2b:f3: 77:24:72:dd:f8:a8:0f:ff:7c:95:bd:fd:10:b5:6e:27:41:9a: e7:bd:bc:52:35:bf:74:e4:a1:e4:33:34:6b:d7:66:20:fe:10: 32:5f:f7:6b:a3:0f:2d:29:10:62:98:d3:40:2b:e4:6e:42:84: d7:f6:38:7f:91:76:76:b8:d4:70:51:c9:66:7c:c1:dc:a1:51: 3f:80:37:47:82:33:8d:76:bc:25:c9:f0:5b:2d:9f:12:33:c5: 08:05:29:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SA3cntR+645Ix7ZGhIbsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTQ0N2Y3YjNhNzc2ZjcyNGQ4YmM4MTQwYmUzMTc2NjYy YzI0ZDAwHhcNMjUxMjIxMDUwMDQ1WhcNMjUxMjIyMDUwMDQ1WjAzMTEwLwYDVQQD EygzMmE5OTI1YmVjZTQ3MTI4Y2FjMDhjYTA3ODU4ZmMzYTdkNjAwOTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tr4tCItsgoY9EZ/79wjMgPbVVqF TlDPCD6gYdwf5wkeqsyNnpgDuQ58aWW0FQYojwipGwmMyEF+S+5IiQgnHei3V8v9 NwztYRyRzv8Wcqe7sE87ODNdvO1gGGqr94Y12sxmwmpq/kKqXDSAUErZ8DNwHoIp OKJroVHZ38tvAbRSbChYf/Y55G9Vt6tTT6kA9Q1hlqIjOHcO1wF/MYSr2Tf4v2Y1 Q/fixMSal1sKkCY63SfjmiMgDZFU946+9o9sYyHH0joZmdZ0tP/74HIk2Q7tb8zd leGltTdVqp8c07ZJxluWxUEU/yyHdhmFEhzhvddJyaeg+i/q9sh301vf0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKpklvs5HEoysCMoHhY/Dp9YAmHMB8GA1UdIwQY MBaAFEykR/ezp3b3JNi8gUC+MXZmLCTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZjNlMGItMjZjMy00Y2Y5LTgwNTYt MjlhZjMzYmM2Yjk4LzEvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZjNlMGItMjZjMy00Y2Y5LTgwNTYtMjlhZjMzYmM2Yjk4 LzEvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTwF8FuT J7dltvpBYtybdhR3YK7RYxdwZ8UW3Xjt+TjrjgcPLpBz8nMzYtz8u+LEyfKr4NFt jPlLD5cqbYwiVMX952kWPajbDYTmNZDpL4zk99Fxu2kw+A1i7x664bJcO+hz8FvZ 92TMJLQJrQgUjw6pqseSurJyaLt2Xvy1mPWwovJkHLXYNHwnFEAFSlKAb59UcNS5 e1+oBjB8ZF+l7SvzdyRy3fioD/98lb39ELVuJ0Ga5728UjW/dOSh5DM0a9dmIP4Q Ml/3a6MPLSkQYpjTQCvkbkKE1/Y4f5F2drjUcFHJZnzB3KFRP4A3R4IzjXa8Jcnw Wy2fEjPFCAUpfA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:41:31 2025 by rpki-client