This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft File: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft (raw, json) Hash identifier: i7xNEHZTVtYIQDgyOjDQ0fL+sD1mmd0ORJbV7st+bjw= Subject key identifier: A2:A2:77:2A:99:38:46:D0:49:A1:81:78:CC:58:41:5F:CE:FD:28:75 Authority key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA Certificate issuer: /CN=4e69b402b67d75936f45dc8bc54b86814e0636ba Certificate serial: 019B39B450F077388FF45DB87FF01DE29279 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft Manifest number: 1367 Signing time: Sat 20 Dec 2025 03:01:17 +0000 Manifest this update: Sat 20 Dec 2025 03:01:17 +0000 Manifest next update: Sun 21 Dec 2025 03:01:17 +0000 Files and hashes: 1: OvfWeCcNPkjbD4WceB7qJUQP56g.roa (hash: fRXrYY7/CZ7H+wWfEy5WHXYQSNWj53G/u9ERuP4d6t8=) 2: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl (hash: KZTc26L/sUicmnYzMrmXOSXy3y5ElCMG3n8ztC1f+U0=) 3: mVQlHhnVYgof6PbGg47IlXbHufE.roa (hash: EuWc5XhS83Rt6mxNh7vCwfoYl/yRKN36oWWE3rRVLmQ=) 4: qs4pJOexn1Zfkfzcd1TjFYHIVOs.roa (hash: FgzvVUL28rYxcaIK8c4YP+ZNrmGFqrNKlv9zOeTK/II=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:50:f0:77:38:8f:f4:5d:b8:7f:f0:1d:e2:92:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba Validity Not Before: Dec 20 03:01:17 2025 GMT Not After : Dec 21 03:01:17 2025 GMT Subject: CN=a2a2772a993846d049a18178cc58415fcefd2875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7c:b3:3e:2d:8b:7d:cf:23:f2:38:7b:e2:85: c8:d2:24:9d:fe:da:58:af:df:5e:3b:65:dd:36:c9: 13:41:c5:d7:be:a7:ea:78:3d:89:82:9b:30:2e:c6: 7a:16:bd:b2:aa:03:5f:41:fe:fb:85:c7:27:85:f0: b9:02:35:31:92:42:49:8c:85:3f:6e:1c:42:3b:12: 47:79:79:0e:7e:21:91:67:d9:32:e9:8d:f8:89:7e: eb:a7:1e:c8:7d:69:96:9f:af:01:74:0a:f6:0f:b2: 30:49:9e:45:9d:2b:f0:3d:ae:f6:c5:ed:c5:06:bc: 4b:cb:d7:c5:e3:a3:42:c7:42:21:01:17:d6:de:e8: 2b:85:db:81:0d:62:3b:98:bd:b5:c5:2c:07:64:05: ae:20:4a:28:39:e4:dd:c7:37:d9:8c:fb:df:ba:58: 28:93:ff:48:53:d8:5b:49:ef:d2:6f:44:f5:43:76: 5f:d3:c3:4d:2e:aa:af:b8:13:4d:44:46:4c:ad:0d: 0b:c1:e5:15:92:ed:cd:e0:80:a3:d4:50:69:6f:fb: f4:45:2e:08:12:8a:9e:0e:ac:62:ce:aa:7e:c6:d8: 05:bf:b2:5c:75:86:79:0d:b8:09:e3:bc:48:38:6c: e1:de:b9:7b:c8:25:46:ed:7f:d6:90:e4:7d:1a:a9: 19:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A2:77:2A:99:38:46:D0:49:A1:81:78:CC:58:41:5F:CE:FD:28:75 X509v3 Authority Key Identifier: keyid:4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:66:19:58:5c:10:cf:cc:89:96:81:1f:a7:5a:56:24:a1:3a: f6:37:4e:b8:13:62:84:87:ef:72:21:6b:ee:5a:3a:dc:83:4d: 5b:42:39:e2:b3:65:57:b9:02:84:bc:8a:46:c6:1e:86:b8:35: 4f:31:8a:a7:91:20:a2:80:de:49:23:18:d7:a3:68:f2:17:6c: 63:40:f0:54:d3:07:0b:61:10:39:10:65:7d:f1:50:63:9e:3c: cb:31:09:57:fc:22:74:b3:48:d5:0a:7e:03:ea:0a:1d:25:ea: 2c:c8:41:26:53:ff:be:12:c2:6d:61:e4:ad:d4:47:38:80:27: a1:8e:7e:8a:80:26:c0:b1:64:ab:69:8f:a9:78:d0:0a:ad:55: 02:5c:cc:04:d0:30:b0:2a:76:53:0b:80:2d:19:da:fb:c3:2a: dc:91:20:4f:15:dc:11:f3:47:cd:41:1d:70:49:ad:24:39:b8: f4:a0:30:2b:40:e3:f4:9e:29:0c:8c:ec:d3:30:c6:2b:71:eb: 97:6e:b7:71:97:12:65:c3:9d:dc:80:be:95:89:52:71:e4:73: 0f:3b:67:65:df:29:8e:98:6e:b0:7e:1f:14:12:0f:cf:e0:65: c2:8a:67:14:18:98:c9:11:2f:b9:f3:6d:4c:be:57:2d:ee:3c: 49:32:cd:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tFDwdziP9F24f/Ad4pJ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNjliNDAyYjY3ZDc1OTM2ZjQ1ZGM4YmM1NGI4NjgxNGUw NjM2YmEwHhcNMjUxMjIwMDMwMTE3WhcNMjUxMjIxMDMwMTE3WjAzMTEwLwYDVQQD EyhhMmEyNzcyYTk5Mzg0NmQwNDlhMTgxNzhjYzU4NDE1ZmNlZmQyODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnyzPi2Lfc8j8jh74oXI0iSd/tpY r99eO2XdNskTQcXXvqfqeD2JgpswLsZ6Fr2yqgNfQf77hccnhfC5AjUxkkJJjIU/ bhxCOxJHeXkOfiGRZ9ky6Y34iX7rpx7IfWmWn68BdAr2D7IwSZ5FnSvwPa72xe3F BrxLy9fF46NCx0IhARfW3ugrhduBDWI7mL21xSwHZAWuIEooOeTdxzfZjPvfulgo k/9IU9hbSe/Sb0T1Q3Zf08NNLqqvuBNNREZMrQ0LweUVku3N4ICj1FBpb/v0RS4I EoqeDqxizqp+xtgFv7JcdYZ5DbgJ47xIOGzh3rl7yCVG7X/WkOR9GqkZ1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKidyqZOEbQSaGBeMxYQV/O/Sh1MB8GA1UdIwQY MBaAFE5ptAK2fXWTb0Xci8VLhoFOBja6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG1tMEFyWjlkWk52UmR5THhVdUdnVTRHTnJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ODlhYjUtMzBkMi00NmEzLThjNTQt MTZiNDE5NmZhMjk0LzEvVG1tMEFyWjlkWk52UmR5THhVdUdnVTRHTnJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82ODlhYjUtMzBkMi00NmEzLThjNTQtMTZiNDE5NmZhMjk0 LzEvVG1tMEFyWjlkWk52UmR5THhVdUdnVTRHTnJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWYZWFwQ z8yJloEfp1pWJKE69jdOuBNihIfvciFr7lo63INNW0I54rNlV7kChLyKRsYehrg1 TzGKp5EgooDeSSMY16No8hdsY0DwVNMHC2EQORBlffFQY548yzEJV/widLNI1Qp+ A+oKHSXqLMhBJlP/vhLCbWHkrdRHOIAnoY5+ioAmwLFkq2mPqXjQCq1VAlzMBNAw sCp2UwuALRna+8Mq3JEgTxXcEfNHzUEdcEmtJDm49KAwK0Dj9J4pDIzs0zDGK3Hr l263cZcSZcOd3IC+lYlSceRzDztnZd8pjphusH4fFBIPz+BlwopnFBiYyREvufNt TL5XLe48STLN2Q== -----END CERTIFICATE-----Generated at Sat Dec 20 07:31:42 2025 by rpki-client