This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft File: TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json) Hash identifier: GZsJW3wU6Vk0MPWRVd/iUfNO6Yt8egEyXRLg9cGvYKw= Subject key identifier: 8B:76:0E:90:47:38:A3:23:AE:56:EF:7E:2F:07:A7:08:01:DB:72:87 Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78 Certificate issuer: /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078 Certificate serial: 019B679F806370182E2CCE3261577E013F7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft Manifest number: 179D Signing time: Mon 29 Dec 2025 01:01:04 +0000 Manifest this update: Mon 29 Dec 2025 01:01:04 +0000 Manifest next update: Tue 30 Dec 2025 01:01:04 +0000 Files and hashes: 1: 1LkKTJE8VWFRjFVsY2vc5JNxUyo.roa (hash: gqvXE5VHGf5Er/eIvJDh+DnQ30d/N/LUShz/R2QWX8s=) 2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: 27jSyVaKrq5vWGwpeJSIJL58DnFfhpicH/9FrVmizHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:9f:80:63:70:18:2e:2c:ce:32:61:57:7e:01:3f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078 Validity Not Before: Dec 29 01:01:04 2025 GMT Not After : Dec 30 01:01:04 2025 GMT Subject: CN=8b760e904738a323ae56ef7e2f07a70801db7287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:92:94:2a:5d:0b:2e:9a:72:97:20:5a:dc:68: b2:09:a3:70:46:1c:30:b6:73:4f:9a:f9:a6:23:e8: 0d:71:6f:ca:1c:fc:83:9e:9a:4d:0a:50:b6:31:f5: aa:3e:eb:48:78:0d:00:b9:1a:01:03:4c:cf:8c:f6: 44:05:1a:a4:1d:dd:73:e2:6b:86:f9:dd:90:97:ff: 3d:51:95:a3:44:73:7c:48:b7:9e:5a:44:5c:50:96: f0:0b:d8:16:49:32:9a:2f:d1:be:8c:e8:c2:71:13: 74:31:e3:42:39:2f:48:0f:20:46:9c:94:ad:b1:cd: d8:85:bc:40:11:0e:18:a0:f7:cc:e4:1b:2d:ca:26: bc:10:f3:c7:cb:01:48:31:af:e9:af:0d:4c:bf:15: 78:b7:de:30:d6:97:3c:e0:d7:5f:e3:c1:d6:f3:c2: fc:01:24:62:23:93:65:a1:d1:f8:c2:c6:ea:01:a9: 0d:e8:bc:18:f7:72:24:1c:7e:67:60:7d:dc:cf:fd: 98:66:07:9b:20:d1:e4:24:04:34:f4:c7:3e:e7:65: 2d:4a:06:54:e2:4b:e1:21:21:9e:6b:aa:2e:3b:0a: ba:49:90:aa:fb:2d:e3:d0:28:a7:88:8a:3f:f5:6d: 01:ac:a2:78:61:b8:a3:c5:0f:87:48:b7:b1:05:3a: 01:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:76:0E:90:47:38:A3:23:AE:56:EF:7E:2F:07:A7:08:01:DB:72:87 X509v3 Authority Key Identifier: keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:e6:a1:a2:f4:73:7f:83:c2:86:5f:8c:e2:12:fc:06:39:0a: c3:35:f4:98:65:a8:9c:59:4e:62:54:86:5a:2f:b9:64:9b:88: 09:29:18:59:c5:6f:44:fe:e7:e8:83:85:66:92:c2:04:69:dd: 9e:65:4f:5f:2b:f0:4a:1d:8d:c2:73:11:72:7e:65:50:3d:26: 77:17:a2:9a:bc:2c:40:b0:4e:a9:1b:65:11:0a:ce:a9:9b:0e: 62:c8:37:46:09:64:4f:58:9b:69:85:df:3e:51:e1:ef:3f:97: 86:69:01:da:8e:14:ca:8c:f9:68:d2:ac:18:95:b3:5e:97:3a: 26:2a:1f:a3:38:0b:f4:f4:46:09:97:c5:93:87:84:1d:b6:7e: 61:3c:98:71:a4:bf:84:80:2c:6f:5d:eb:e3:99:d1:ea:d6:3b: 23:50:fd:b4:97:27:eb:7c:8e:c9:60:b9:9c:6f:01:df:2d:32: 23:b1:71:89:cb:84:8f:3e:c3:0d:2f:c4:ae:32:ba:90:a8:91: 83:da:d4:80:96:2a:82:94:b8:64:db:8d:0c:89:f7:ed:be:e3: c7:00:1d:36:18:96:73:f2:0a:a2:e6:37:17:0c:e1:ae:8e:81: 0e:97:13:a4:f9:dd:9a:6c:a9:52:24:29:d0:c4:13:d3:32:79: c5:44:68:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnn4BjcBguLM4yYVd+AT9+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjOTMyMTNkODhmYTg3NGViNDQ2MGUyYzVjZjFiYjFhOTFk YTkwNzgwHhcNMjUxMjI5MDEwMTA0WhcNMjUxMjMwMDEwMTA0WjAzMTEwLwYDVQQD Eyg4Yjc2MGU5MDQ3MzhhMzIzYWU1NmVmN2UyZjA3YTcwODAxZGI3Mjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZKUKl0LLppylyBa3GiyCaNwRhww tnNPmvmmI+gNcW/KHPyDnppNClC2MfWqPutIeA0AuRoBA0zPjPZEBRqkHd1z4muG +d2Ql/89UZWjRHN8SLeeWkRcUJbwC9gWSTKaL9G+jOjCcRN0MeNCOS9IDyBGnJSt sc3YhbxAEQ4YoPfM5Bstyia8EPPHywFIMa/prw1MvxV4t94w1pc84Ndf48HW88L8 ASRiI5NlodH4wsbqAakN6LwY93IkHH5nYH3cz/2YZgebINHkJAQ09Mc+52UtSgZU 4kvhISGea6ouOwq6SZCq+y3j0CiniIo/9W0BrKJ4YbijxQ+HSLexBToBCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIt2DpBHOKMjrlbvfi8HpwgB23KHMB8GA1UdIwQY MBaAFEyTIT2I+odOtEYOLFzxuxqR2pB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEpNaFBZajZoMDYwUmc0c1hQRzdHcEhha0hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lNGU2OTYtOWQ3OC00MTRjLWFmNDAt Y2Y1NmM2NmEwYWMwLzEvVEpNaFBZajZoMDYwUmc0c1hQRzdHcEhha0hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9lNGU2OTYtOWQ3OC00MTRjLWFmNDAtY2Y1NmM2NmEwYWMw LzEvVEpNaFBZajZoMDYwUmc0c1hQRzdHcEhha0hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAueahovRz f4PChl+M4hL8BjkKwzX0mGWonFlOYlSGWi+5ZJuICSkYWcVvRP7n6IOFZpLCBGnd nmVPXyvwSh2NwnMRcn5lUD0mdxeimrwsQLBOqRtlEQrOqZsOYsg3RglkT1ibaYXf PlHh7z+XhmkB2o4Uyoz5aNKsGJWzXpc6JiofozgL9PRGCZfFk4eEHbZ+YTyYcaS/ hIAsb13r45nR6tY7I1D9tJcn63yOyWC5nG8B3y0yI7FxicuEjz7DDS/ErjK6kKiR g9rUgJYqgpS4ZNuNDIn37b7jxwAdNhiWc/IKouY3Fwzhro6BDpcTpPndmmypUiQp 0MQT0zJ5xURohQ== -----END CERTIFICATE-----Generated at Mon Dec 29 05:26:30 2025 by rpki-client