This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft File: TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft (raw, json) Hash identifier: pwXz1FIxABP+VQef9X4Fti4aYlh/sXtmLejoUmmqlZU= Subject key identifier: C2:A1:46:00:D6:E0:B3:60:86:12:30:4B:96:13:2E:3D:23:16:36:8D Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76 Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976 Certificate serial: 019B3F11B07472DB906F5B93FD798AAFC377 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 04:01:22 +0000 Manifest this update: Sun 21 Dec 2025 04:01:22 +0000 Manifest next update: Mon 22 Dec 2025 04:01:22 +0000 Files and hashes: 1: TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl (hash: iOtjLlj4hV2Ct8P3R6kP8R6uLyYir89P2VMbH0o7V54=) 2: bs1HYE5HpmfRDe1IWRWlAw4_YbQ.roa (hash: /9wCX+4PJTuFTnMcFlhOot3PdJrbFSkbu3ySPd314JY=) 3: kvulLtgS7l9j5cL5cr_z1UEgt1M.roa (hash: lwycUBIUeNB/fogCEgMYVAepQLASER5k8Ye40EXBAoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:b0:74:72:db:90:6f:5b:93:fd:79:8a:af:c3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976 Validity Not Before: Dec 21 04:01:22 2025 GMT Not After : Dec 22 04:01:22 2025 GMT Subject: CN=c2a14600d6e0b3608612304b96132e3d2316368d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b3:43:02:d5:ec:9d:51:46:ce:c3:8b:5a:46: 80:41:9a:9d:71:7e:3d:a7:93:ae:59:ce:b8:c6:1f: 20:e9:95:00:0a:88:9c:c2:4d:10:3d:db:d3:59:21: 08:1b:16:5d:64:5a:13:a7:51:c8:cc:11:ab:71:d9: 41:d8:39:7b:ce:38:4d:c7:9e:49:38:34:43:f4:f5: 4c:c0:9f:09:5c:13:4f:70:f5:02:68:89:b0:83:69: b6:65:80:a0:fc:2d:a4:0a:65:b8:e5:b1:65:51:87: 1e:4a:06:a6:84:aa:2a:76:dc:d1:21:e2:ed:92:71: a1:98:51:4d:3e:59:5b:f3:99:63:9d:06:38:20:b9: 1e:cc:04:3f:32:42:ec:b9:22:fc:13:1a:2c:29:08: eb:16:8e:01:c7:3b:74:ec:83:de:51:04:13:e5:d5: dc:ff:6e:2f:f0:1d:49:ca:e7:02:44:24:31:0d:c8: d5:6d:60:42:a9:04:9e:ce:1e:5f:14:a5:d3:23:b5: 07:bc:5c:71:1a:2a:35:ea:d2:7a:75:9f:6b:5a:43: 09:e1:66:f4:c6:12:a5:62:aa:93:51:84:ff:1a:14: 36:83:df:ae:71:e9:5e:1f:7c:96:10:65:5e:b0:e1: dc:fc:85:72:f8:61:66:50:f7:76:ee:e5:ed:d2:1e: f5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A1:46:00:D6:E0:B3:60:86:12:30:4B:96:13:2E:3D:23:16:36:8D X509v3 Authority Key Identifier: keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f4:a4:e3:75:b9:a4:f8:ad:04:85:4c:67:5c:0f:79:00:bb: 0b:3c:c7:90:0e:3c:cb:e3:a2:84:54:e8:1f:a7:1f:2b:d4:c3: 98:5c:fd:d0:b4:42:23:b1:fe:32:1d:c3:db:8f:af:39:64:92: 60:3f:56:27:fd:58:b2:31:f6:c6:50:b3:11:9d:3a:5e:a0:62: 69:42:5d:06:0a:fc:e2:7b:b8:78:9e:23:93:fc:86:90:6d:c2: 03:b6:c3:9f:c4:c9:85:cd:ca:aa:d4:6d:39:63:8f:4e:84:10: 87:2c:14:e9:10:78:60:53:72:1f:d1:09:6b:3c:ae:e8:7a:9f: 5c:8e:42:63:6b:6c:54:d6:5b:4f:ab:af:9a:0c:ef:a2:df:01: 64:2d:81:09:48:95:f8:2b:68:ce:e1:02:39:6a:05:58:8c:a8: 7e:77:6e:38:9a:72:6b:78:2d:b6:00:bc:19:82:1b:75:6d:15: 39:a8:ba:a0:01:25:1c:90:77:64:9d:0e:c8:71:49:20:f7:28: 3f:77:1f:41:30:71:db:c6:89:76:fe:2d:0e:e5:e0:54:75:93: 05:d5:21:66:46:1e:0d:4f:29:c9:77:66:0b:08:ce:ea:9d:c7: c9:3d:70:da:03:6f:ae:a0:8f:d1:72:d4:55:b9:54:33:50:50: e9:ca:a2:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EbB0ctuQb1uT/XmKr8N3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjY2JjNWUwNDVlYWE1Zjc2MmE5MTQ2MjQ0YzE5MjQ4YjYy YmE5NzYwHhcNMjUxMjIxMDQwMTIyWhcNMjUxMjIyMDQwMTIyWjAzMTEwLwYDVQQD EyhjMmExNDYwMGQ2ZTBiMzYwODYxMjMwNGI5NjEzMmUzZDIzMTYzNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLNDAtXsnVFGzsOLWkaAQZqdcX49 p5OuWc64xh8g6ZUACoicwk0QPdvTWSEIGxZdZFoTp1HIzBGrcdlB2Dl7zjhNx55J ODRD9PVMwJ8JXBNPcPUCaImwg2m2ZYCg/C2kCmW45bFlUYceSgamhKoqdtzRIeLt knGhmFFNPllb85ljnQY4ILkezAQ/MkLsuSL8ExosKQjrFo4Bxzt07IPeUQQT5dXc /24v8B1JyucCRCQxDcjVbWBCqQSezh5fFKXTI7UHvFxxGio16tJ6dZ9rWkMJ4Wb0 xhKlYqqTUYT/GhQ2g9+uceleH3yWEGVesOHc/IVy+GFmUPd27uXt0h71KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKhRgDW4LNghhIwS5YTLj0jFjaNMB8GA1UdIwQY MBaAFEzLxeBF6qX3YqkUYkTBkki2K6l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDct YTdjNTlkZGNmNzZiLzEvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDctYTdjNTlkZGNmNzZi LzEvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvSk43W5 pPitBIVMZ1wPeQC7CzzHkA48y+OihFToH6cfK9TDmFz90LRCI7H+Mh3D24+vOWSS YD9WJ/1YsjH2xlCzEZ06XqBiaUJdBgr84nu4eJ4jk/yGkG3CA7bDn8TJhc3KqtRt OWOPToQQhywU6RB4YFNyH9EJazyu6HqfXI5CY2tsVNZbT6uvmgzvot8BZC2BCUiV +CtozuECOWoFWIyofnduOJpya3gttgC8GYIbdW0VOai6oAElHJB3ZJ0OyHFJIPco P3cfQTBx28aJdv4tDuXgVHWTBdUhZkYeDU8pyXdmCwjO6p3HyT1w2gNvrqCP0XLU VblUM1BQ6cqi4A== -----END CERTIFICATE-----Generated at Sun Dec 21 06:08:57 2025 by rpki-client