This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft File: TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json) Hash identifier: jbyNjZ5xxnAqhu31BcxVIgg2MW02kxoW+YQmwNJUIJE= Subject key identifier: 74:E7:AD:BD:1F:88:C6:5A:48:5A:CD:C8:A5:8A:65:E0:E3:2D:87:FB Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56 Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656 Certificate serial: 019B3757C4A25E01FFA6E3959C133186259B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 16:00:57 +0000 Manifest this update: Fri 19 Dec 2025 16:00:57 +0000 Manifest next update: Sat 20 Dec 2025 16:00:57 +0000 Files and hashes: 1: LHdFFtkhND-G29Bb5TNwX3ZX6HI.roa (hash: 5JCuzcczihsYGo60q4ytQ60HO2vUMA1Wb8XrWH6WiqE=) 2: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: 78BSzcdm6ahiZzh4FBQfUOHGvw1hDNsuMMTb4cZ9+28=) 3: VYrJyKdSTfJ9aOSPJMCRhItn6O0.roa (hash: EVl6QPoQm24Wnsg0W0HBnWjfCtTCiCv6xfCekdHCwzI=) 4: XGm_swis7gPqLxLCw4_WpqKe8Ac.roa (hash: HuoRGpzlvzmJtj6Rn/56OaSHzb/3wfWOGTlv62srzB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:c4:a2:5e:01:ff:a6:e3:95:9c:13:31:86:25:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656 Validity Not Before: Dec 19 16:00:57 2025 GMT Not After : Dec 20 16:00:57 2025 GMT Subject: CN=74e7adbd1f88c65a485acdc8a58a65e0e32d87fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b4:5b:de:42:ae:a3:74:71:36:66:de:ab:0d: 67:ff:ed:f6:c2:61:bd:7a:a8:60:eb:e0:e9:cb:31: 1c:e1:26:22:40:95:49:88:2f:1f:e2:dd:e0:28:08: 4d:94:cd:5d:34:28:66:d4:ca:c8:c5:2f:de:88:e5: 87:e6:05:ef:92:2e:92:40:2f:86:9b:41:4b:30:18: 53:a6:b7:d1:85:4f:bf:ae:1a:1d:43:53:c4:af:f3: 7e:4e:fa:9b:bd:f8:4a:b5:5e:10:ff:b1:2c:04:a6: e0:9d:19:35:b3:5c:e2:81:87:c0:6a:12:85:a1:b9: e3:67:14:f9:5c:de:76:38:18:e4:d6:a4:06:54:fa: 59:e0:b6:83:6e:46:c9:7a:77:5c:90:76:da:c1:fc: 1d:98:bd:51:3c:2d:63:89:62:ba:b4:21:5d:40:a5: f1:0e:bf:5f:07:b3:ac:e9:bb:a7:38:20:5a:7c:4f: dc:fd:e4:ca:ad:3e:45:7f:8f:bb:d8:7c:c3:7e:e4: cf:2b:34:bd:c4:4f:eb:9f:ed:69:43:11:f8:4e:a7: 83:e4:06:f1:e4:66:5a:2f:55:9f:63:9c:ff:a9:61: d6:67:d7:cd:61:13:82:08:d2:d7:3f:a3:e5:9d:b4: 46:55:5a:93:b3:8a:e2:03:01:a7:58:42:78:04:99: 04:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E7:AD:BD:1F:88:C6:5A:48:5A:CD:C8:A5:8A:65:E0:E3:2D:87:FB X509v3 Authority Key Identifier: keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:8a:bd:a2:6d:1d:94:96:12:9b:2a:9e:49:4e:69:29:59:a4: e8:71:fc:6a:30:37:41:f3:31:70:b3:6b:3e:b4:2b:e7:86:21: f4:22:8a:1d:9c:0f:cf:62:2c:91:e1:f8:cf:0a:54:37:3a:e7: 2e:a1:90:a6:68:07:2a:42:a6:0b:e0:a3:97:cd:c3:4b:98:1f: 52:ac:0e:d8:e3:72:34:52:35:c2:ab:ab:d0:db:d8:c0:38:0c: aa:55:58:f6:14:43:a7:14:c4:6f:cd:22:38:38:d3:60:e7:da: 80:de:ad:25:27:eb:c7:49:8d:fe:e4:6d:2b:cb:85:5d:7e:ed: 12:eb:95:b3:06:4b:a2:97:ca:57:6e:6d:68:eb:72:cd:97:58: 2c:f3:01:d1:c6:40:f1:e8:58:cb:7a:09:80:60:79:54:01:e8: 35:2a:2c:c8:e9:32:11:3c:16:41:1d:fc:48:0e:4c:cc:f2:24: 8c:6b:97:08:9d:52:e2:d6:ec:c1:b4:f1:25:8e:53:fa:e4:68: 8c:62:08:ca:07:61:0a:a7:84:6a:12:14:2b:13:53:e1:5a:a9: 9c:b9:fa:42:d2:7c:bc:4e:39:79:b8:80:ad:25:7b:69:84:01: 32:8b:bf:76:33:be:6b:e6:36:aa:fc:65:23:f0:67:22:56:88: 54:3b:8e:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V8SiXgH/puOVnBMxhiWbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjY2M2MDQ5NWIyYTM0ZDg5MjExY2MxYzc5NTI0ZWFiNjFi YTE2NTYwHhcNMjUxMjE5MTYwMDU3WhcNMjUxMjIwMTYwMDU3WjAzMTEwLwYDVQQD Eyg3NGU3YWRiZDFmODhjNjVhNDg1YWNkYzhhNThhNjVlMGUzMmQ4N2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7Rb3kKuo3RxNmbeqw1n/+32wmG9 eqhg6+DpyzEc4SYiQJVJiC8f4t3gKAhNlM1dNChm1MrIxS/eiOWH5gXvki6SQC+G m0FLMBhTprfRhU+/rhodQ1PEr/N+TvqbvfhKtV4Q/7EsBKbgnRk1s1zigYfAahKF obnjZxT5XN52OBjk1qQGVPpZ4LaDbkbJendckHbawfwdmL1RPC1jiWK6tCFdQKXx Dr9fB7Os6bunOCBafE/c/eTKrT5Ff4+72HzDfuTPKzS9xE/rn+1pQxH4TqeD5Abx 5GZaL1WfY5z/qWHWZ9fNYROCCNLXP6PlnbRGVVqTs4riAwGnWEJ4BJkEdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTnrb0fiMZaSFrNyKWKZeDjLYf7MB8GA1UdIwQY MBaAFEzMYElbKjTYkhHMHHlSTqthuhZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUt Njk4MDlkOGI5YzIwLzEvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUtNjk4MDlkOGI5YzIw LzEvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwoq9om0d lJYSmyqeSU5pKVmk6HH8ajA3QfMxcLNrPrQr54Yh9CKKHZwPz2IskeH4zwpUNzrn LqGQpmgHKkKmC+Cjl83DS5gfUqwO2ONyNFI1wqur0NvYwDgMqlVY9hRDpxTEb80i ODjTYOfagN6tJSfrx0mN/uRtK8uFXX7tEuuVswZLopfKV25taOtyzZdYLPMB0cZA 8ehYy3oJgGB5VAHoNSosyOkyETwWQR38SA5MzPIkjGuXCJ1S4tbswbTxJY5T+uRo jGIIygdhCqeEahIUKxNT4VqpnLn6QtJ8vE45ebiArSV7aYQBMou/djO+a+Y2qvxl I/BnIlaIVDuOmw== -----END CERTIFICATE-----Generated at Sat Dec 20 02:01:40 2025 by rpki-client