This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft File: tmdL-ORX4pV-7k9R-Le0TFfbmio.mft (raw, json) Hash identifier: zMyaBqRprF1QtZJpQg3uFyvvAr6Y/TAUGHnK62CkBT8= Subject key identifier: 3B:57:A0:83:0B:EC:A7:51:CF:0E:E2:2A:7B:52:C6:21:50:C6:A0:FB Authority key identifier: B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A Certificate issuer: /CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a Certificate serial: 019B6843C942B6D22270380402F36791D8C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft Manifest number: 1199 Signing time: Mon 29 Dec 2025 04:00:31 +0000 Manifest this update: Mon 29 Dec 2025 04:00:31 +0000 Manifest next update: Tue 30 Dec 2025 04:00:31 +0000 Files and hashes: 1: tmdL-ORX4pV-7k9R-Le0TFfbmio.crl (hash: H3dGwscIIvI1cdY7RgYy4l6NZm/tP5alwnRtwziPGJE=) 2: tyBiH_k1-T3tg2PjNihavpjVNFg.roa (hash: +MCpw/+jgYqZnXSoZlFEXezP/GiLWQcwVakj6OdX0hc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:43:c9:42:b6:d2:22:70:38:04:02:f3:67:91:d8:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a Validity Not Before: Dec 29 04:00:31 2025 GMT Not After : Dec 30 04:00:31 2025 GMT Subject: CN=3b57a0830beca751cf0ee22a7b52c62150c6a0fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:62:3f:d7:df:f7:01:a5:41:53:34:67:9b:65: 04:81:32:2e:f2:97:fb:41:5c:0a:55:00:bc:2b:b7: 4f:58:45:2b:56:af:ce:7b:01:d2:ea:41:54:83:86: 08:27:dd:ec:1a:a1:8d:e1:0b:08:54:4c:62:11:a3: 8c:52:a3:6a:15:89:17:ab:28:06:53:81:1c:03:f8: 19:37:ce:bc:52:45:f4:27:7b:44:48:1f:19:07:ff: e9:38:d8:88:56:e4:97:7a:6a:fa:b3:fb:c0:42:16: cf:f0:d8:bf:fc:66:19:07:d8:5d:3a:ff:7f:8b:43: 9a:b5:f6:f3:19:4b:f8:67:fb:67:fa:0a:4e:18:e5: ca:20:4c:ba:6e:9d:2a:00:77:6f:24:b1:9f:44:29: 5e:8b:c6:a9:2f:40:f4:71:6c:b6:d1:d6:fd:8f:2f: de:2d:7e:f4:e6:7c:87:88:24:a6:4d:f0:07:8b:ec: 2b:9c:f2:93:5e:ad:61:fb:f5:41:37:4b:94:2b:c9: 7e:30:34:80:60:eb:d0:d1:ba:92:48:94:17:40:06: 95:76:8a:64:98:47:60:46:42:8a:45:0c:f7:a3:39: b5:65:ff:b2:ab:68:54:f7:95:71:68:1f:77:60:c1: 20:bf:64:0f:d3:6f:a7:e5:90:3f:ba:37:45:6d:6d: 3e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:57:A0:83:0B:EC:A7:51:CF:0E:E2:2A:7B:52:C6:21:50:C6:A0:FB X509v3 Authority Key Identifier: keyid:B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:37:23:ae:0f:9e:2c:96:bb:fd:98:e2:47:52:e1:de:b9:f4: fd:51:a8:12:13:d8:85:93:27:f1:66:a0:4f:e8:f2:56:f2:95: 0a:5c:c2:72:f2:a3:1e:c3:53:33:17:d2:de:fe:b9:12:2c:46: 0b:d2:7f:60:76:7c:52:db:f0:ea:8c:27:76:a0:fb:9e:7e:d6: 7e:54:d3:11:2d:ec:ad:39:ee:38:1f:24:7d:33:aa:e0:35:ea: 44:da:e1:08:2f:ab:82:c6:55:e3:55:1d:03:ff:32:54:c4:22: 94:a9:aa:d4:1a:58:6d:84:af:60:57:df:67:45:29:27:2a:b0: b0:bb:bb:a0:37:1b:89:34:5e:47:3c:72:5a:40:d7:b6:a6:a0: ce:d9:0b:e8:53:a5:59:a1:0c:41:75:6e:88:0b:b1:78:89:ef: 4c:fb:33:30:cf:c0:a6:b6:ab:c1:46:50:33:0c:23:0e:7f:ee: fa:4f:a1:1b:97:22:3d:de:24:ac:cf:d0:1e:fa:c3:6d:c5:f6: 26:1f:87:2e:30:3b:dc:4c:12:8e:ee:e9:15:97:15:80:38:6c: c4:e5:17:52:33:b4:cb:f3:9a:56:5d:57:2e:01:41:bd:e6:55: cb:45:89:e4:dd:29:45:98:7c:ae:13:08:63:92:a3:2f:6e:ac: ad:35:40:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoQ8lCttIicDgEAvNnkdjEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2Njc0YmY4ZTQ1N2UyOTU3ZWVlNGY1MWY4YjdiNDRjNTdk YjlhMmEwHhcNMjUxMjI5MDQwMDMxWhcNMjUxMjMwMDQwMDMxWjAzMTEwLwYDVQQD EygzYjU3YTA4MzBiZWNhNzUxY2YwZWUyMmE3YjUyYzYyMTUwYzZhMGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2I/19/3AaVBUzRnm2UEgTIu8pf7 QVwKVQC8K7dPWEUrVq/OewHS6kFUg4YIJ93sGqGN4QsIVExiEaOMUqNqFYkXqygG U4EcA/gZN868UkX0J3tESB8ZB//pONiIVuSXemr6s/vAQhbP8Ni//GYZB9hdOv9/ i0OatfbzGUv4Z/tn+gpOGOXKIEy6bp0qAHdvJLGfRClei8apL0D0cWy20db9jy/e LX705nyHiCSmTfAHi+wrnPKTXq1h+/VBN0uUK8l+MDSAYOvQ0bqSSJQXQAaVdopk mEdgRkKKRQz3ozm1Zf+yq2hU95VxaB93YMEgv2QP02+n5ZA/ujdFbW0+xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtXoIML7KdRzw7iKntSxiFQxqD7MB8GA1UdIwQY MBaAFLZnS/jkV+KVfu5PUfi3tExX25oqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG1kTC1PUlg0cFYtN2s5Ui1MZTBURmZibWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi82OTMzMWMtYWVhMi00MjM3LTg0MDAt NjIyMTQwM2RiNThiLzEvdG1kTC1PUlg0cFYtN2s5Ui1MZTBURmZibWlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi82OTMzMWMtYWVhMi00MjM3LTg0MDAtNjIyMTQwM2RiNThi LzEvdG1kTC1PUlg0cFYtN2s5Ui1MZTBURmZibWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzcjrg+e LJa7/ZjiR1Lh3rn0/VGoEhPYhZMn8WagT+jyVvKVClzCcvKjHsNTMxfS3v65EixG C9J/YHZ8Utvw6owndqD7nn7WflTTES3srTnuOB8kfTOq4DXqRNrhCC+rgsZV41Ud A/8yVMQilKmq1BpYbYSvYFffZ0UpJyqwsLu7oDcbiTReRzxyWkDXtqagztkL6FOl WaEMQXVuiAuxeInvTPszMM/AprarwUZQMwwjDn/u+k+hG5ciPd4krM/QHvrDbcX2 Jh+HLjA73EwSju7pFZcVgDhsxOUXUjO0y/OaVl1XLgFBveZVy0WJ5N0pRZh8rhMI Y5KjL26srTVAbg== -----END CERTIFICATE-----Generated at Mon Dec 29 05:22:14 2025 by rpki-client