This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft File: tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft (raw, json) Hash identifier: 94KTg1chmHSGEu20+h5L68wsbtQ37BXHZ5DYB6Ck4sU= Subject key identifier: 0B:E6:9E:05:3D:0E:8B:FD:19:E0:45:9C:E3:32:B6:5C:48:34:79:B2 Authority key identifier: B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39 Certificate issuer: /CN=b46320188098520c366277f749a4f77a1d444439 Certificate serial: 019B4DE13D536BE06223FB3F9466C28691FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft Manifest number: 178F Signing time: Wed 24 Dec 2025 01:02:45 +0000 Manifest this update: Wed 24 Dec 2025 01:02:45 +0000 Manifest next update: Thu 25 Dec 2025 01:02:45 +0000 Files and hashes: 1: 1c-Abo0LxBVDDE4sBrG9JS_ePzI.roa (hash: rxDs0I1CVbIWmreeYb6ePZfwtg9Spev7LU71wCrsp/4=) 2: tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl (hash: YFteI0xV5WhczOVaMSqU8sNqNR+PqkTBiiP6INEgVjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e1:3d:53:6b:e0:62:23:fb:3f:94:66:c2:86:91:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b46320188098520c366277f749a4f77a1d444439 Validity Not Before: Dec 24 01:02:45 2025 GMT Not After : Dec 25 01:02:45 2025 GMT Subject: CN=0be69e053d0e8bfd19e0459ce332b65c483479b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:12:55:bb:76:49:b0:b3:5c:cb:9b:74:b5:fc: dc:7f:5f:cc:94:cc:45:0b:be:f9:dc:bc:67:3b:72: fe:6d:bd:64:3f:53:cf:7f:a1:ff:c7:50:7b:c4:9c: c8:08:27:4a:af:61:72:89:91:52:fe:db:41:f7:83: ad:ba:d5:42:44:9e:73:1f:ff:d3:3f:d5:a7:ae:f7: 34:08:9b:3c:49:c2:a9:53:3f:6d:c6:4a:53:71:98: ca:33:62:2b:ae:ea:f5:45:0d:cf:ea:c5:df:d8:9c: 89:a3:41:22:9d:93:22:c5:3e:ba:46:ad:1c:2c:3e: f6:6b:13:ee:0b:81:41:e2:6b:82:b8:3e:94:50:4d: 2a:05:6a:84:85:e8:3e:0a:b1:90:eb:00:4c:76:c9: 99:dd:0e:f3:8a:c2:a5:2b:fa:b4:58:f1:2b:ea:3b: f1:80:f2:2f:37:31:4b:52:cc:d6:a8:13:4b:f2:e0: 45:1b:16:89:77:7d:f5:1d:53:6e:3d:11:da:af:a5: 63:29:52:c5:1a:1e:ab:7b:8a:ee:28:38:b2:6c:3b: 96:a7:66:18:f8:f7:92:d1:cb:4f:75:08:78:8e:46: 63:08:15:5c:71:ce:f1:53:2f:6e:e2:7b:5c:e0:b7: a0:60:19:15:3e:54:46:58:34:ac:69:0d:d6:f9:06: e9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E6:9E:05:3D:0E:8B:FD:19:E0:45:9C:E3:32:B6:5C:48:34:79:B2 X509v3 Authority Key Identifier: keyid:B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:50:62:16:6f:12:cc:1b:c3:1e:52:42:a7:40:36:c8:e6:52: 41:08:1e:87:6d:ba:3e:0a:d9:92:40:ef:45:a2:66:2e:c3:36: 59:dc:d8:85:cc:db:d6:d3:5c:46:49:52:b4:06:8e:c0:8c:2e: 5c:b1:6b:92:2b:a0:17:6e:4c:64:b8:d2:db:56:3b:8d:2f:5e: 56:ad:5c:38:f5:e6:de:cc:ba:43:d3:13:9c:b1:02:b8:df:b2: 7b:7c:2d:f3:0b:d6:f0:2b:31:50:cb:87:9d:47:6e:df:60:68: 8e:17:4c:f0:f2:a8:31:aa:ac:ba:fc:8c:49:15:68:26:1c:73: 24:3e:5b:32:dc:9f:ae:1d:55:95:26:03:77:b2:ac:61:63:b2: eb:9b:c1:57:55:df:08:63:9d:49:b1:03:b8:a1:6a:ab:b7:67: 94:64:3f:6f:41:b6:7a:73:4d:ef:15:da:62:63:b6:86:be:db: 80:21:bb:5f:7f:5b:93:83:6a:4a:91:38:7d:cb:33:9d:84:c8: 16:06:08:38:ec:ad:60:61:65:e4:3a:4a:9b:ab:9e:80:a9:99: 36:f9:a8:6c:e2:8e:e1:f1:f9:b5:99:aa:1c:84:32:22:19:b3: 5b:a7:0b:de:c8:ce:98:a3:91:d0:04:b0:c8:53:0a:7b:8c:a3: 30:43:6d:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4T1Ta+BiI/s/lGbChpH8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NjMyMDE4ODA5ODUyMGMzNjYyNzdmNzQ5YTRmNzdhMWQ0 NDQ0MzkwHhcNMjUxMjI0MDEwMjQ1WhcNMjUxMjI1MDEwMjQ1WjAzMTEwLwYDVQQD EygwYmU2OWUwNTNkMGU4YmZkMTllMDQ1OWNlMzMyYjY1YzQ4MzQ3OWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxJVu3ZJsLNcy5t0tfzcf1/MlMxF C7753LxnO3L+bb1kP1PPf6H/x1B7xJzICCdKr2FyiZFS/ttB94OtutVCRJ5zH//T P9Wnrvc0CJs8ScKpUz9txkpTcZjKM2Irrur1RQ3P6sXf2JyJo0EinZMixT66Rq0c LD72axPuC4FB4muCuD6UUE0qBWqEheg+CrGQ6wBMdsmZ3Q7zisKlK/q0WPEr6jvx gPIvNzFLUszWqBNL8uBFGxaJd331HVNuPRHar6VjKVLFGh6re4ruKDiybDuWp2YY +PeS0ctPdQh4jkZjCBVccc7xUy9u4ntc4LegYBkVPlRGWDSsaQ3W+QbpvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvmngU9Dov9GeBFnOMytlxINHmyMB8GA1UdIwQY MBaAFLRjIBiAmFIMNmJ390mk93odREQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEdNZ0dJQ1lVZ3cyWW5mM1NhVDNlaDFFUkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC80YWNiODMtZjk0MC00NzY2LWJjYTkt NjA4ZTdkNzc5YmM3LzEvdEdNZ0dJQ1lVZ3cyWW5mM1NhVDNlaDFFUkRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC80YWNiODMtZjk0MC00NzY2LWJjYTktNjA4ZTdkNzc5YmM3 LzEvdEdNZ0dJQ1lVZ3cyWW5mM1NhVDNlaDFFUkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFBiFm8S zBvDHlJCp0A2yOZSQQgeh226PgrZkkDvRaJmLsM2WdzYhczb1tNcRklStAaOwIwu XLFrkiugF25MZLjS21Y7jS9eVq1cOPXm3sy6Q9MTnLECuN+ye3wt8wvW8CsxUMuH nUdu32BojhdM8PKoMaqsuvyMSRVoJhxzJD5bMtyfrh1VlSYDd7KsYWOy65vBV1Xf CGOdSbEDuKFqq7dnlGQ/b0G2enNN7xXaYmO2hr7bgCG7X39bk4NqSpE4fcsznYTI FgYIOOytYGFl5DpKm6uegKmZNvmobOKO4fH5tZmqHIQyIhmzW6cL3sjOmKOR0ASw yFMKe4yjMENtxA== -----END CERTIFICATE-----Generated at Wed Dec 24 08:51:53 2025 by rpki-client