This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft File: tmDXgyCGDV7-cp4gi160sqvr4Hg.mft (raw, json) Hash identifier: WK66fes14bEc0uxVqrhHw+1lmY21943w1PbtGX+klU4= Subject key identifier: 84:C0:CD:5B:15:64:F7:AB:EE:73:BA:19:9C:31:67:85:FB:35:39:31 Authority key identifier: B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78 Certificate issuer: /CN=b660d78320860d5efe729e208b5eb4b2abebe078 Certificate serial: 019B416D6735DCEC55EEB01EEE44DE16583C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft Manifest number: 0D3D Signing time: Sun 21 Dec 2025 15:00:47 +0000 Manifest this update: Sun 21 Dec 2025 15:00:47 +0000 Manifest next update: Mon 22 Dec 2025 15:00:47 +0000 Files and hashes: 1: H_s46FVu3VtqmBdzQOsgFtOpwm4.roa (hash: xXfRZ05adaRJT3b+JBMiwuYhoS+v9eiqRiPqJaWYY3s=) 2: tmDXgyCGDV7-cp4gi160sqvr4Hg.crl (hash: UDZeNPCFT6BiFOUZxC6oM2YB6Pp6pa7Y3LxDSIyzdGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:67:35:dc:ec:55:ee:b0:1e:ee:44:de:16:58:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b660d78320860d5efe729e208b5eb4b2abebe078 Validity Not Before: Dec 21 15:00:47 2025 GMT Not After : Dec 22 15:00:47 2025 GMT Subject: CN=84c0cd5b1564f7abee73ba199c316785fb353931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ff:75:fc:33:78:3e:a8:62:31:fb:68:c0:0e: 5b:1a:9c:55:c9:e7:e0:9e:6e:2a:12:58:fb:84:fb: be:62:31:8a:16:ed:62:f6:66:f3:1a:bb:96:01:91: 03:63:b0:05:8d:e1:e7:a0:15:d7:be:1f:53:3b:cc: a4:ea:16:3d:52:4c:80:6f:c8:b9:8f:84:f6:a2:d6: 01:a9:b1:63:03:31:82:43:e0:32:ab:a4:54:ac:d1: 47:d9:c6:a0:07:92:db:eb:f4:e1:43:9f:2e:57:37: 8d:e0:d4:45:9c:0a:5b:88:4c:a3:52:bc:95:29:f8: 66:c9:ec:a9:45:74:d4:18:b8:70:df:34:6d:ed:17: b1:71:52:e8:84:ca:02:dc:04:fa:d5:fd:7a:9f:ad: 0f:2f:56:76:f7:24:fe:84:02:5b:e3:ba:25:c3:0e: 7e:cf:4d:b8:6a:27:9a:5f:43:2d:ab:db:bf:25:6f: 92:a9:51:d7:12:84:94:78:07:f1:ca:49:9a:31:55: 54:8e:b7:23:b5:c1:e8:09:b7:d6:0b:2e:18:10:9a: 5a:de:69:d4:11:fa:9b:d9:da:ba:3f:d1:ea:8b:2c: 5b:fc:2f:16:5f:f5:90:b7:c6:cc:f4:ca:eb:35:3b: 0e:ae:38:9a:89:5c:fe:df:7e:be:de:1e:95:bf:d8: 90:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C0:CD:5B:15:64:F7:AB:EE:73:BA:19:9C:31:67:85:FB:35:39:31 X509v3 Authority Key Identifier: keyid:B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:32:23:e4:98:f0:0c:50:d3:88:90:ea:a6:32:fd:ef:f0:31: d8:1e:1f:52:19:1a:4b:84:e4:48:20:f2:11:70:73:3d:21:60: 5b:df:52:92:05:95:65:da:99:b4:f9:51:b6:e9:d2:73:82:1f: aa:28:c6:21:2e:46:c3:cd:46:aa:76:43:d3:cf:10:e2:09:03: a5:e0:2b:98:2d:e1:f7:54:3f:39:09:cc:41:5a:05:a3:5d:82: d4:f3:4d:fc:63:f0:07:aa:44:96:ce:a8:47:a6:eb:53:59:8f: eb:a3:ed:07:7a:6b:c2:33:0b:cf:a9:a2:4d:9f:3a:db:94:40: 59:b9:ad:1f:22:a2:6d:2d:83:b1:6f:e7:f9:1f:c4:16:7d:b6: ba:24:3f:70:3f:a8:40:0e:6c:b6:cc:e6:de:d6:3c:0c:49:af: ed:57:8c:83:99:85:20:40:32:46:8f:4f:ae:9e:92:64:ad:2b: 9a:de:5c:f5:80:f1:c9:b1:ed:b5:06:d5:4c:b3:3e:ac:96:f0: 77:90:8e:85:30:4c:08:3d:e2:3a:6a:59:f6:4d:5e:ec:e0:a4: 85:10:6a:13:fe:5a:fd:f5:e9:ca:48:23:83:90:34:7e:d7:76: 26:17:5d:62:c8:4e:34:16:f8:a9:9d:a0:24:d7:1d:9e:0c:40: b7:04:a8:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbWc13OxV7rAe7kTeFlg8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NjBkNzgzMjA4NjBkNWVmZTcyOWUyMDhiNWViNGIyYWJl YmUwNzgwHhcNMjUxMjIxMTUwMDQ3WhcNMjUxMjIyMTUwMDQ3WjAzMTEwLwYDVQQD Eyg4NGMwY2Q1YjE1NjRmN2FiZWU3M2JhMTk5YzMxNjc4NWZiMzUzOTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv91/DN4PqhiMftowA5bGpxVyefg nm4qElj7hPu+YjGKFu1i9mbzGruWAZEDY7AFjeHnoBXXvh9TO8yk6hY9UkyAb8i5 j4T2otYBqbFjAzGCQ+Ayq6RUrNFH2cagB5Lb6/ThQ58uVzeN4NRFnApbiEyjUryV KfhmyeypRXTUGLhw3zRt7RexcVLohMoC3AT61f16n60PL1Z29yT+hAJb47olww5+ z024aieaX0Mtq9u/JW+SqVHXEoSUeAfxykmaMVVUjrcjtcHoCbfWCy4YEJpa3mnU Efqb2dq6P9Hqiyxb/C8WX/WQt8bM9MrrNTsOrjiaiVz+336+3h6Vv9iQAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITAzVsVZPer7nO6GZwxZ4X7NTkxMB8GA1UdIwQY MBaAFLZg14Mghg1e/nKeIItetLKr6+B4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG1EWGd5Q0dEVjctY3A0Z2kxNjBzcXZyNEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9kYWYyMTItZjAwOS00YmQ0LTg3NGQt NjI0YzNlNzg4Y2RmLzEvdG1EWGd5Q0dEVjctY3A0Z2kxNjBzcXZyNEhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9kYWYyMTItZjAwOS00YmQ0LTg3NGQtNjI0YzNlNzg4Y2Rm LzEvdG1EWGd5Q0dEVjctY3A0Z2kxNjBzcXZyNEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtjIj5Jjw DFDTiJDqpjL97/Ax2B4fUhkaS4TkSCDyEXBzPSFgW99SkgWVZdqZtPlRtunSc4If qijGIS5Gw81GqnZD088Q4gkDpeArmC3h91Q/OQnMQVoFo12C1PNN/GPwB6pEls6o R6brU1mP66PtB3prwjMLz6miTZ8625RAWbmtHyKibS2DsW/n+R/EFn22uiQ/cD+o QA5stszm3tY8DEmv7VeMg5mFIEAyRo9Prp6SZK0rmt5c9YDxybHttQbVTLM+rJbw d5COhTBMCD3iOmpZ9k1e7OCkhRBqE/5a/fXpykgjg5A0ftd2JhddYshONBb4qZ2g JNcdngxAtwSosQ== -----END CERTIFICATE-----Generated at Sun Dec 21 23:12:19 2025 by rpki-client