This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft File: tPM_b9KbrwPMTUha9fa3DaawCZ8.mft (raw, json) Hash identifier: buiATOToHkCzPW15HR8CkGF9pzKfIFBVLpSAhmvA1Bk= Subject key identifier: 12:D3:D0:9B:FD:CD:F3:A7:E9:2F:8D:EF:75:A5:A4:09:0E:AC:AD:F1 Authority key identifier: B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F Certificate issuer: /CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f Certificate serial: 019B2F9E9CBD02755CAE318DC696929A8433 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft Manifest number: 105A Signing time: Thu 18 Dec 2025 04:01:22 +0000 Manifest this update: Thu 18 Dec 2025 04:01:22 +0000 Manifest next update: Fri 19 Dec 2025 04:01:22 +0000 Files and hashes: 1: tPM_b9KbrwPMTUha9fa3DaawCZ8.crl (hash: 5tu46iDlhPHymQ4M23xNPlCGXPUSMGvh4rjJbCTCev8=) 2: tYPVw8LB8i24cvigRIjHBmA1vkA.roa (hash: PLxJfAKIcmuKybJlU2Vop9ZELJyvcamyBgkEBw419jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:9c:bd:02:75:5c:ae:31:8d:c6:96:92:9a:84:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f Validity Not Before: Dec 18 04:01:22 2025 GMT Not After : Dec 19 04:01:22 2025 GMT Subject: CN=12d3d09bfdcdf3a7e92f8def75a5a4090eacadf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8c:9e:56:fb:79:31:3e:43:13:37:cf:47:4e: 74:45:42:f7:f2:51:e9:99:59:e9:db:10:8f:1f:38: 23:c4:6c:91:15:2a:22:33:4d:e7:91:12:c5:18:ee: ab:8b:51:77:c6:22:da:c5:7e:7c:f8:86:c6:d8:bd: c5:74:60:85:17:18:77:54:fa:e5:0d:13:f1:0a:08: b8:46:d9:d1:fc:cf:a8:47:bd:72:62:d9:92:ab:65: b0:fa:b9:54:61:a3:6b:66:d2:d3:00:93:8b:e2:6c: e7:ae:70:78:da:5e:55:6f:1f:b8:69:30:08:67:a0: 63:45:85:37:02:06:d1:c1:fa:21:0c:e1:66:d8:d8: f8:9e:1e:f9:5f:22:45:c7:b5:e4:35:01:df:dd:85: 45:a1:76:9b:37:56:f3:a2:93:5c:ad:9f:4d:87:46: 43:64:5d:e9:91:25:d7:27:ed:53:cf:77:0a:3e:11: 82:82:9e:9e:0a:50:8e:8c:eb:95:a3:c3:4b:8f:11: ed:a5:86:da:ae:85:70:30:a5:76:11:4f:03:77:91: d9:64:3a:3b:b5:24:d0:bf:95:7b:67:8a:e7:90:7a: 6b:b5:3c:13:a6:23:41:fc:6e:c2:bd:a4:b1:76:92: b1:40:03:16:01:74:e6:d1:2c:85:c9:ed:0e:77:d2: 4b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D3:D0:9B:FD:CD:F3:A7:E9:2F:8D:EF:75:A5:A4:09:0E:AC:AD:F1 X509v3 Authority Key Identifier: keyid:B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:0d:6c:cb:82:f8:a7:9f:c2:37:5c:b7:25:4a:db:f7:8a:82: 8e:b3:61:4a:84:e1:00:c9:73:e3:26:80:9d:f1:9a:de:93:45: 34:f8:73:05:32:50:7a:13:be:bc:60:61:6d:87:71:31:25:dd: 0a:f3:31:8e:80:19:ce:93:7a:cd:83:dd:36:42:d6:d6:91:0a: b0:fb:09:3a:00:03:be:d4:08:f0:42:82:30:f8:9d:ac:cd:12: b7:88:d0:07:2d:92:3e:ac:6e:44:22:c9:f3:60:25:74:8a:82: 8e:aa:2f:0f:8f:91:e6:ec:9b:1d:23:a2:ab:62:c7:65:75:8b: 39:73:76:b2:28:7c:3b:19:4b:82:98:4a:e2:01:3c:b1:d4:4b: 54:af:60:6d:07:6d:22:d1:5b:40:d6:c5:d3:fb:63:b9:71:eb: 20:d3:9d:20:55:8d:d7:b9:d0:0c:7c:4c:4d:8a:38:24:8e:fa: f1:f9:83:f7:cd:41:39:08:5b:0b:6c:0c:05:56:a3:33:f3:00: 62:f1:0e:6b:11:f1:f8:d4:1c:87:d3:f1:a4:12:3f:d3:7f:8f: 90:c2:64:77:96:84:00:64:7a:0e:13:16:18:9d:7b:79:3c:5e: 1a:48:94:15:b8:2d:fc:7f:56:49:5e:23:73:23:ea:22:36:53: a6:1b:4f:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnpy9AnVcrjGNxpaSmoQzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZjMzZjZmZDI5YmFmMDNjYzRkNDg1YWY1ZjZiNzBkYTZi MDA5OWYwHhcNMjUxMjE4MDQwMTIyWhcNMjUxMjE5MDQwMTIyWjAzMTEwLwYDVQQD EygxMmQzZDA5YmZkY2RmM2E3ZTkyZjhkZWY3NWE1YTQwOTBlYWNhZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4yeVvt5MT5DEzfPR050RUL38lHp mVnp2xCPHzgjxGyRFSoiM03nkRLFGO6ri1F3xiLaxX58+IbG2L3FdGCFFxh3VPrl DRPxCgi4RtnR/M+oR71yYtmSq2Ww+rlUYaNrZtLTAJOL4mznrnB42l5Vbx+4aTAI Z6BjRYU3AgbRwfohDOFm2Nj4nh75XyJFx7XkNQHf3YVFoXabN1bzopNcrZ9Nh0ZD ZF3pkSXXJ+1Tz3cKPhGCgp6eClCOjOuVo8NLjxHtpYbaroVwMKV2EU8Dd5HZZDo7 tSTQv5V7Z4rnkHprtTwTpiNB/G7CvaSxdpKxQAMWAXTm0SyFye0Od9JLcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLT0Jv9zfOn6S+N73WlpAkOrK3xMB8GA1UdIwQY MBaAFLTzP2/Sm68DzE1IWvX2tw2msAmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85MGE1Y2YtZTQ4NC00YmIyLWEyODUt NmE0OWI1YTMxMjk0LzEvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC85MGE1Y2YtZTQ4NC00YmIyLWEyODUtNmE0OWI1YTMxMjk0 LzEvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnA1sy4L4 p5/CN1y3JUrb94qCjrNhSoThAMlz4yaAnfGa3pNFNPhzBTJQehO+vGBhbYdxMSXd CvMxjoAZzpN6zYPdNkLW1pEKsPsJOgADvtQI8EKCMPidrM0St4jQBy2SPqxuRCLJ 82AldIqCjqovD4+R5uybHSOiq2LHZXWLOXN2sih8OxlLgphK4gE8sdRLVK9gbQdt ItFbQNbF0/tjuXHrINOdIFWN17nQDHxMTYo4JI768fmD981BOQhbC2wMBVajM/MA YvEOaxHx+NQch9PxpBI/03+PkMJkd5aEAGR6DhMWGJ17eTxeGkiUFbgt/H9WSV4j cyPqIjZTphtP9A== -----END CERTIFICATE-----Generated at Thu Dec 18 11:33:45 2025 by rpki-client