This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft File: tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft (raw, json) Hash identifier: FH4lzRRhHfkz/0pni53YVB/gZpltCvdkif0DHzOkSxQ= Subject key identifier: 19:17:25:21:8E:70:85:57:AC:46:EB:26:4E:F1:4D:26:3F:8E:91:9F Authority key identifier: B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB Certificate issuer: /CN=b539831835c87c7501f6c37cb48e60a795a394bb Certificate serial: 019B2EFA4879F7DA055C50B9FDA272948E11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 01:01:52 +0000 Manifest this update: Thu 18 Dec 2025 01:01:52 +0000 Manifest next update: Fri 19 Dec 2025 01:01:52 +0000 Files and hashes: 1: tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl (hash: w60hKRzkUJfTjp5zOg1F9bEirq/3taTnh3vVqjYp4js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:48:79:f7:da:05:5c:50:b9:fd:a2:72:94:8e:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b539831835c87c7501f6c37cb48e60a795a394bb Validity Not Before: Dec 18 01:01:52 2025 GMT Not After : Dec 19 01:01:52 2025 GMT Subject: CN=191725218e708557ac46eb264ef14d263f8e919f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:43:02:df:b4:1a:d8:fe:6b:69:4d:2c:0a:46: 39:82:6b:f9:a6:68:2a:c3:9a:84:69:43:ec:29:17: e8:47:39:d5:9b:10:72:a3:bc:c7:34:45:90:5b:e0: 87:1f:d2:71:ab:bd:3d:cc:a5:96:ef:93:cd:e3:48: e9:dc:26:7b:f4:e6:05:81:8c:73:69:ba:65:ac:d4: a6:e5:d9:a9:3d:1a:c0:61:aa:23:e3:0b:cf:f5:63: a2:ed:a2:d5:5a:51:b5:87:78:a4:d2:ff:6d:ec:77: 0e:3a:41:6e:bc:45:b9:0b:fc:a3:64:38:04:0f:ed: 26:37:07:d8:57:05:ac:66:d3:aa:a9:a6:01:61:90: ac:4f:70:be:6d:f9:9e:1c:9a:a8:98:ad:dc:ea:7d: 0f:85:2c:ce:2f:0f:4b:52:cc:ff:58:e2:ae:8f:30: ff:6d:2b:39:fe:58:a6:9a:f7:5b:a5:88:65:49:84: c0:36:ef:41:db:74:75:85:fc:a4:dd:69:a2:c4:96: 76:7a:16:3f:d2:ae:8b:b6:68:2c:c5:00:b5:f7:5a: 82:9d:b0:8b:46:72:1c:43:4d:f4:a1:17:e5:3e:c5: d4:fc:a4:59:22:28:d4:2d:55:f2:66:5f:e8:6d:41: 94:af:44:32:50:39:f9:36:fb:18:11:f0:f7:40:cb: 21:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:17:25:21:8E:70:85:57:AC:46:EB:26:4E:F1:4D:26:3F:8E:91:9F X509v3 Authority Key Identifier: keyid:B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:78:ea:24:9b:9f:6b:d9:37:5e:11:c0:c7:da:7f:6a:f3:07: e4:99:f2:50:65:5b:1d:b7:30:fd:32:ca:d1:60:b6:b1:ca:76: b2:3d:15:7c:c1:34:85:2a:b4:75:c8:17:8e:10:bd:09:93:d9: ba:34:71:29:a4:2d:23:27:8f:b7:98:1e:e5:15:66:a8:73:18: bc:8c:3e:e3:a4:65:29:8c:56:17:bf:b8:39:98:0d:fa:21:e3: ff:ff:3a:a2:2c:3c:5e:aa:dc:78:c6:2e:13:a3:09:c1:29:89: 82:a4:1e:fd:08:f1:cc:bf:85:3f:68:bf:44:f0:28:bc:1a:12: 31:e3:bc:fe:40:3e:aa:62:99:ff:52:c4:93:ce:28:92:69:43: 90:5e:0a:31:a8:57:80:4c:47:91:a7:16:73:77:76:b2:61:3f: 12:48:79:31:81:d8:27:84:80:3a:d4:89:e4:c5:52:62:bf:b0: 9f:ce:09:49:4e:56:44:f6:72:e5:55:c2:c2:8f:80:9c:2f:ba: d8:bb:d1:ab:d6:e0:0e:78:ad:6a:7e:00:4e:65:da:4b:27:b0: c3:b7:58:98:50:b8:85:e0:71:77:28:d0:e5:7b:18:4f:92:54: 4b:2c:05:a5:f6:4a:55:14:15:6a:e1:30:25:26:3a:ac:a1:ca: d9:75:2e:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+kh599oFXFC5/aJylI4RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1Mzk4MzE4MzVjODdjNzUwMWY2YzM3Y2I0OGU2MGE3OTVh Mzk0YmIwHhcNMjUxMjE4MDEwMTUyWhcNMjUxMjE5MDEwMTUyWjAzMTEwLwYDVQQD EygxOTE3MjUyMThlNzA4NTU3YWM0NmViMjY0ZWYxNGQyNjNmOGU5MTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0MC37Qa2P5raU0sCkY5gmv5pmgq w5qEaUPsKRfoRznVmxByo7zHNEWQW+CHH9Jxq709zKWW75PN40jp3CZ79OYFgYxz abplrNSm5dmpPRrAYaoj4wvP9WOi7aLVWlG1h3ik0v9t7HcOOkFuvEW5C/yjZDgE D+0mNwfYVwWsZtOqqaYBYZCsT3C+bfmeHJqomK3c6n0PhSzOLw9LUsz/WOKujzD/ bSs5/limmvdbpYhlSYTANu9B23R1hfyk3WmixJZ2ehY/0q6LtmgsxQC191qCnbCL RnIcQ030oRflPsXU/KRZIijULVXyZl/obUGUr0QyUDn5NvsYEfD3QMshyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkXJSGOcIVXrEbrJk7xTSY/jpGfMB8GA1UdIwQY MBaAFLU5gxg1yHx1AfbDfLSOYKeVo5S7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFRtREdEWElmSFVCOXNOOHRJNWdwNVdqbExzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lNzAzYzgtNDY1Zi00N2E1LTk1MmMt NDk1ZTE4ODcwMWI2LzEvdFRtREdEWElmSFVCOXNOOHRJNWdwNVdqbExzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9lNzAzYzgtNDY1Zi00N2E1LTk1MmMtNDk1ZTE4ODcwMWI2 LzEvdFRtREdEWElmSFVCOXNOOHRJNWdwNVdqbExzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3jqJJuf a9k3XhHAx9p/avMH5JnyUGVbHbcw/TLK0WC2scp2sj0VfME0hSq0dcgXjhC9CZPZ ujRxKaQtIyePt5ge5RVmqHMYvIw+46RlKYxWF7+4OZgN+iHj//86oiw8XqrceMYu E6MJwSmJgqQe/QjxzL+FP2i/RPAovBoSMeO8/kA+qmKZ/1LEk84okmlDkF4KMahX gExHkacWc3d2smE/Ekh5MYHYJ4SAOtSJ5MVSYr+wn84JSU5WRPZy5VXCwo+AnC+6 2LvRq9bgDnitan4ATmXaSyeww7dYmFC4heBxdyjQ5XsYT5JUSywFpfZKVRQVauEw JSY6rKHK2XUuQw== -----END CERTIFICATE-----Generated at Thu Dec 18 11:11:32 2025 by rpki-client