This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft File: TJMCnFsmOc0pufndUpTMlO9S1q8.mft (raw, json) Hash identifier: 3XEaXTNlW7mZSGJkDJvBWEQ9MT/omay7+JWw+SDywgk= Subject key identifier: F8:B6:92:AC:B3:A0:DE:B3:06:F0:A0:A6:09:9C:7D:99:A5:17:86:F6 Authority key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF Certificate issuer: /CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af Certificate serial: 019B5E655C5557D2AA54BDEFA8EB9AED3B04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft Manifest number: 0DCB Signing time: Sat 27 Dec 2025 06:00:59 +0000 Manifest this update: Sat 27 Dec 2025 06:00:59 +0000 Manifest next update: Sun 28 Dec 2025 06:00:59 +0000 Files and hashes: 1: MmCHZ1tigLx6qv-0vdY9p2DTybw.asa (hash: q4g5QLnj5C7tBM9YSoS7cbGeaJrSGDWbXD0wfTvKfKk=) 2: TJMCnFsmOc0pufndUpTMlO9S1q8.crl (hash: ucGkRgmZHcR4Vpxyj6lZCuTWjUqTOB9J3Wf2alWqXy0=) 3: gm0FjeCIRrnMhU3d57SvCilXQ6Y.roa (hash: uUS5qc0jED6lwxU3POQRNrHoJ8s1cSrD4ysUmIZNtjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 06:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:65:5c:55:57:d2:aa:54:bd:ef:a8:eb:9a:ed:3b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af Validity Not Before: Dec 27 06:00:59 2025 GMT Not After : Dec 28 06:00:59 2025 GMT Subject: CN=f8b692acb3a0deb306f0a0a6099c7d99a51786f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:cf:6f:60:30:6e:cb:b6:bc:9e:e0:a2:98:89: e8:a8:90:15:c3:2b:2e:02:5c:82:4c:e3:81:ac:cd: 25:4e:a0:93:0e:c9:3d:f9:43:37:03:f0:4c:65:34: a3:54:ce:1b:16:66:e6:5f:2a:2e:2e:71:9e:00:cb: 92:b2:f0:77:13:bb:ca:15:57:4f:01:7f:06:cc:01: 12:7e:22:4d:a8:e3:c7:54:1b:58:bf:fb:83:17:e3: 8f:33:40:ca:57:7b:a4:db:60:59:37:77:e4:90:1a: 80:af:f3:89:5d:a8:63:8f:dd:39:87:28:fd:15:4e: e5:29:ca:7b:00:6b:d3:e5:67:c7:a3:02:0d:26:6f: c9:b8:f0:a7:37:f9:c0:a9:c4:c8:eb:a8:a2:42:9e: 64:2f:6f:24:15:27:ec:8e:91:9a:0a:fd:d4:83:6d: 3f:bd:57:a0:35:fd:11:58:a4:49:24:a5:cb:45:e8: 40:c9:0a:ce:e4:49:09:06:27:9f:b5:3e:a9:67:c6: f5:d6:2a:ac:48:42:ae:c7:9f:f9:da:e1:97:53:94: b7:57:dd:1a:62:57:2d:c0:64:25:a8:82:bd:87:d4: 22:d9:da:c3:cd:fd:5d:0b:c1:cf:e4:21:6a:7d:67: 94:70:2e:d6:af:8d:0f:ec:88:22:8e:41:ea:54:ec: 52:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B6:92:AC:B3:A0:DE:B3:06:F0:A0:A6:09:9C:7D:99:A5:17:86:F6 X509v3 Authority Key Identifier: keyid:4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:ed:46:65:b0:82:f2:80:69:ea:47:5d:6e:80:1a:3f:dd:36: d5:e2:d6:df:95:78:e5:3c:09:81:69:5c:91:a1:49:49:4a:e1: 85:99:ea:b0:8f:e3:b0:b9:d4:21:00:34:e8:b4:2f:7e:2f:8d: 77:98:8c:db:9a:a4:46:a8:fe:1b:c4:8f:4c:63:bb:00:90:72: b1:84:ab:df:bd:b0:41:e8:64:1b:eb:f2:70:17:12:f7:d5:29: 52:c7:7c:e1:be:cf:cf:2d:0c:a4:e0:ef:6f:11:b9:0a:5a:c2: 51:16:51:5f:ef:ee:07:22:12:61:03:3e:df:57:b9:ee:39:9e: 16:1a:25:e6:29:4a:ab:89:50:fa:20:b8:82:10:52:dd:94:59: 1e:f1:d0:f8:73:e1:f6:a2:f0:83:5b:4e:1d:d5:a8:72:24:60: 0d:68:3e:d5:54:d6:13:4d:36:45:33:4e:ed:33:bc:fb:3a:e8: 26:0d:b2:8c:68:33:85:ec:85:b3:97:17:d0:fb:9b:39:be:56: c7:e3:ac:72:8f:d0:6c:42:6e:72:0f:1f:5d:60:b6:05:58:f1: 5d:54:42:16:2b:6a:ee:3b:67:0b:eb:14:db:88:4a:e3:f6:af: 14:64:b2:b5:90:76:20:a6:6f:4b:d6:45:c8:1e:16:97:c2:21: 1b:19:c2:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZteZVxVV9KqVL3vqOua7TsEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjOTMwMjljNWIyNjM5Y2QyOWI5ZjlkZDUyOTRjYzk0ZWY1 MmQ2YWYwHhcNMjUxMjI3MDYwMDU5WhcNMjUxMjI4MDYwMDU5WjAzMTEwLwYDVQQD EyhmOGI2OTJhY2IzYTBkZWIzMDZmMGEwYTYwOTljN2Q5OWE1MTc4NmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA889vYDBuy7a8nuCimInoqJAVwysu AlyCTOOBrM0lTqCTDsk9+UM3A/BMZTSjVM4bFmbmXyouLnGeAMuSsvB3E7vKFVdP AX8GzAESfiJNqOPHVBtYv/uDF+OPM0DKV3uk22BZN3fkkBqAr/OJXahjj905hyj9 FU7lKcp7AGvT5WfHowINJm/JuPCnN/nAqcTI66iiQp5kL28kFSfsjpGaCv3Ug20/ vVegNf0RWKRJJKXLRehAyQrO5EkJBieftT6pZ8b11iqsSEKux5/52uGXU5S3V90a YlctwGQlqIK9h9Qi2drDzf1dC8HP5CFqfWeUcC7Wr40P7IgijkHqVOxS5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPi2kqyzoN6zBvCgpgmcfZmlF4b2MB8GA1UdIwQY MBaAFEyTApxbJjnNKbn53VKUzJTvUtavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEpNQ25Gc21PYzBwdWZuZFVwVE1sTzlTMXE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83YmQ3MjktOThlNS00M2ZmLWFmZTYt MTg3YjFmNzdjMWE1LzEvVEpNQ25Gc21PYzBwdWZuZFVwVE1sTzlTMXE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC83YmQ3MjktOThlNS00M2ZmLWFmZTYtMTg3YjFmNzdjMWE1 LzEvVEpNQ25Gc21PYzBwdWZuZFVwVE1sTzlTMXE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACO1GZbCC 8oBp6kddboAaP9021eLW35V45TwJgWlckaFJSUrhhZnqsI/jsLnUIQA06LQvfi+N d5iM25qkRqj+G8SPTGO7AJBysYSr372wQehkG+vycBcS99UpUsd84b7Pzy0MpODv bxG5ClrCURZRX+/uByISYQM+31e57jmeFhol5ilKq4lQ+iC4ghBS3ZRZHvHQ+HPh 9qLwg1tOHdWociRgDWg+1VTWE002RTNO7TO8+zroJg2yjGgzheyFs5cX0PubOb5W x+Osco/QbEJucg8fXWC2BVjxXVRCFitq7jtnC+sU24hK4/avFGSytZB2IKZvS9ZF yB4Wl8IhGxnC+g== -----END CERTIFICATE-----Generated at Sat Dec 27 12:33:27 2025 by rpki-client