This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft File: TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft (raw, json) Hash identifier: Z5j6P+cLFxrUf1vyiKvropLa/3aJKZRk9o8aQZDDfGc= Subject key identifier: 5F:FE:EF:CC:4B:4B:5F:C7:08:3D:44:07:FB:85:33:96:EE:BB:2D:CC Authority key identifier: 4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE Certificate issuer: /CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee Certificate serial: 019B4136D5E126E6D9B852E39E12D18F2FF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft Manifest number: 133F Signing time: Sun 21 Dec 2025 14:01:11 +0000 Manifest this update: Sun 21 Dec 2025 14:01:11 +0000 Manifest next update: Mon 22 Dec 2025 14:01:11 +0000 Files and hashes: 1: TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl (hash: W3EApi+XKgJf7+x6A7uE6Q6e2+64UsT+QAIQqeAqlrA=) 2: j-betU5F3fuYYNREFl5I-_t74ng.roa (hash: ThVTYZ7pBXxFoxAK1y8K2Bay/CDdSEmxPkT01D83Maw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:d5:e1:26:e6:d9:b8:52:e3:9e:12:d1:8f:2f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee Validity Not Before: Dec 21 14:01:11 2025 GMT Not After : Dec 22 14:01:11 2025 GMT Subject: CN=5ffeefcc4b4b5fc7083d4407fb853396eebb2dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c7:80:f7:4d:ea:39:bc:a6:4f:3a:5a:be:a8: 8c:52:ad:21:1e:a4:f5:ba:46:8d:1e:05:ca:8c:72: 5a:33:c0:9a:62:22:92:73:41:52:f7:d8:ab:fd:c1: b2:b7:63:8f:08:5f:77:51:83:96:ce:9f:f6:63:c0: 1a:cc:8e:fa:7e:a9:ea:14:ee:eb:c6:5f:b7:bf:d6: 71:52:2c:39:ea:25:14:fa:a2:21:e8:0c:cc:8b:0a: 72:5a:55:44:93:76:1c:1d:23:6c:06:b5:89:92:ca: 55:be:f5:7a:44:a1:81:17:b5:f1:19:b8:85:86:d8: c3:f4:93:e6:f5:96:eb:03:da:e7:f2:f5:5e:fd:68: ce:4c:59:33:3c:5b:d2:cb:7c:7f:66:18:38:e7:cf: 9f:6f:4d:81:b7:fe:55:77:71:16:f4:02:88:d7:70: 95:a2:55:6a:4a:33:f0:5b:5e:9e:c4:58:99:51:21: c4:f5:07:9d:da:78:9c:99:f7:2c:34:a3:d2:33:c4: 46:27:39:54:13:7e:0d:22:56:e5:a1:8e:01:17:0f: 43:f6:eb:4e:01:88:c1:93:e8:0e:3c:86:45:c6:d3: 1f:7b:96:58:2c:55:0b:27:05:cf:86:78:de:dc:6d: 97:67:4b:53:3d:f5:49:aa:12:fe:c0:b5:1e:68:3b: 37:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FE:EF:CC:4B:4B:5F:C7:08:3D:44:07:FB:85:33:96:EE:BB:2D:CC X509v3 Authority Key Identifier: keyid:4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d8:0a:6e:26:42:75:53:c2:62:1b:4d:9a:22:11:6f:a3:7c: 77:06:98:ec:c0:90:40:b9:15:8e:bc:2e:96:81:5d:1e:b6:86: 77:e6:3c:0b:03:1b:e4:e2:3c:c5:58:8f:22:aa:97:b5:56:dc: 27:84:8c:66:29:08:5c:4a:c4:56:ff:00:54:a0:4e:b1:0a:cf: 02:9a:02:51:f6:99:6e:8c:ef:39:0b:ab:94:8a:f5:7f:d9:d6: fb:36:07:be:89:84:e1:34:9c:43:11:47:6b:54:f1:5c:b3:f7: b4:03:06:e4:21:f5:70:5b:7d:47:d5:00:27:94:02:a8:c9:d1: eb:1b:da:a7:c2:5c:99:af:81:cd:bb:15:19:ce:36:2b:fb:a9: 82:49:4f:81:2c:02:35:fd:09:2a:ee:6c:89:c9:fc:c5:e6:98: 58:ed:2e:89:f8:b4:44:ad:23:94:91:4e:9f:4f:f0:0a:f0:f6: 98:e6:d2:98:1a:ab:f2:d5:29:07:a0:e9:32:89:ef:48:ed:7c: d8:3c:d8:f3:45:5f:13:12:4d:48:d2:ca:19:30:3f:75:ab:65: 32:b3:6d:2d:be:c1:d3:fd:b0:2c:3a:90:fd:9a:74:5e:b2:78: fa:d1:b0:66:f3:97:c7:75:a6:55:4a:c1:8d:36:37:98:0e:6c: 16:7a:54:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNtXhJubZuFLjnhLRjy/0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYjkzMmJjNjBlOWZkMTE4NmY4ZmE2YmQ3MTNjMjA3Mjlh ZTczZWUwHhcNMjUxMjIxMTQwMTExWhcNMjUxMjIyMTQwMTExWjAzMTEwLwYDVQQD Eyg1ZmZlZWZjYzRiNGI1ZmM3MDgzZDQ0MDdmYjg1MzM5NmVlYmIyZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqseA903qObymTzpavqiMUq0hHqT1 ukaNHgXKjHJaM8CaYiKSc0FS99ir/cGyt2OPCF93UYOWzp/2Y8AazI76fqnqFO7r xl+3v9ZxUiw56iUU+qIh6AzMiwpyWlVEk3YcHSNsBrWJkspVvvV6RKGBF7XxGbiF htjD9JPm9ZbrA9rn8vVe/WjOTFkzPFvSy3x/Zhg458+fb02Bt/5Vd3EW9AKI13CV olVqSjPwW16exFiZUSHE9Qed2nicmfcsNKPSM8RGJzlUE34NIlbloY4BFw9D9utO AYjBk+gOPIZFxtMfe5ZYLFULJwXPhnje3G2XZ0tTPfVJqhL+wLUeaDs3/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/+78xLS1/HCD1EB/uFM5buuy3MMB8GA1UdIwQY MBaAFEy5Mrxg6f0Rhvj6a9cTwgcprnPuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVExreXZHRHBfUkdHLVBwcjF4UENCeW11Yy00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNDM4OTItNzgwYy00MzJhLTg4MmYt MWUwZDdjNDJkYTc2LzEvVExreXZHRHBfUkdHLVBwcjF4UENCeW11Yy00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8zNDM4OTItNzgwYy00MzJhLTg4MmYtMWUwZDdjNDJkYTc2 LzEvVExreXZHRHBfUkdHLVBwcjF4UENCeW11Yy00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONgKbiZC dVPCYhtNmiIRb6N8dwaY7MCQQLkVjrwuloFdHraGd+Y8CwMb5OI8xViPIqqXtVbc J4SMZikIXErEVv8AVKBOsQrPApoCUfaZbozvOQurlIr1f9nW+zYHvomE4TScQxFH a1TxXLP3tAMG5CH1cFt9R9UAJ5QCqMnR6xvap8Jcma+BzbsVGc42K/upgklPgSwC Nf0JKu5sicn8xeaYWO0uifi0RK0jlJFOn0/wCvD2mObSmBqr8tUpB6DpMonvSO18 2DzY80VfExJNSNLKGTA/datlMrNtLb7B0/2wLDqQ/Zp0XrJ4+tGwZvOXx3WmVUrB jTY3mA5sFnpUHg== -----END CERTIFICATE-----Generated at Sun Dec 21 21:10:17 2025 by rpki-client