This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft File: TMC300XPrlNH086YtCQbkA5KnvM.mft (raw, json) Hash identifier: LziVKpWfP7KEGsLn9JhmXJdYqJvlNbJspn+PhDkjd90= Subject key identifier: DF:C6:43:F1:68:98:56:4A:64:92:A4:33:48:59:6B:04:42:19:9B:93 Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3 Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3 Certificate serial: 019B3C7FC6F40CE2FD3C455C62198E9D3810 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft Manifest number: 08FB Signing time: Sat 20 Dec 2025 16:02:45 +0000 Manifest this update: Sat 20 Dec 2025 16:02:45 +0000 Manifest next update: Sun 21 Dec 2025 16:02:45 +0000 Files and hashes: 1: TMC300XPrlNH086YtCQbkA5KnvM.crl (hash: OOtBGj7hMfJWpkzhIFmAvSNIABm074UiS0vDCxQRG0o=) 2: Vh_JUxD0F48NbjyYRcDhXuGyEXI.roa (hash: RX3aXV1jt4pV7znP3Nr6a04cOEHqVMLgDW/kqRB9jNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:c6:f4:0c:e2:fd:3c:45:5c:62:19:8e:9d:38:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3 Validity Not Before: Dec 20 16:02:45 2025 GMT Not After : Dec 21 16:02:45 2025 GMT Subject: CN=dfc643f16898564a6492a43348596b0442199b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:38:78:46:3c:89:36:60:56:f8:8a:22:13:0b: a8:c0:52:05:98:9a:6b:1e:8e:6e:aa:cc:ba:92:cd: ce:d9:1c:cd:d9:3f:59:ec:ab:5c:97:cb:18:13:00: 0b:33:47:0a:0c:34:5d:5c:df:87:54:61:51:38:26: 46:78:47:93:c3:26:cd:14:be:b8:5c:39:35:24:2d: 02:d4:d9:d2:d9:e9:28:b2:1a:b0:ec:07:da:e0:19: 54:d1:a7:ab:ce:58:cc:81:ea:b8:7f:54:6e:68:ee: df:61:cf:c4:8d:03:42:a9:45:95:f6:02:2e:9c:2e: 74:13:a6:c3:48:0a:5c:10:6c:3b:b4:59:ff:aa:07: eb:de:df:66:6e:23:45:f3:48:b0:bc:00:ef:63:dc: 22:f2:2f:d7:4e:e4:b6:dd:92:42:be:23:6e:2a:ab: 53:ce:0b:34:1e:96:1e:5d:4b:25:55:61:30:26:fa: 81:12:8c:37:ae:e2:8b:9f:66:57:f1:00:0e:bf:0f: 01:4d:cb:5e:e8:d4:d8:43:f1:ac:e7:5d:9d:77:1b: cc:25:a4:83:55:c2:e5:95:c2:e0:e7:ed:dd:ec:15: eb:46:2a:4c:8d:e2:b8:0f:ab:ee:8d:34:03:12:d9: b1:f0:64:e7:4c:c1:40:ea:24:6e:16:31:05:40:d0: 7f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C6:43:F1:68:98:56:4A:64:92:A4:33:48:59:6B:04:42:19:9B:93 X509v3 Authority Key Identifier: keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:01:dd:24:46:cb:83:96:c2:fc:19:49:5a:99:19:e0:7d:d5: 90:bf:4f:74:fa:9f:43:19:91:ef:d4:d8:52:61:27:32:73:11: 17:5e:69:08:78:f8:3c:f6:06:15:25:b0:ad:f1:1f:3b:c6:56: 32:2c:bd:04:85:be:6d:a2:a8:4d:57:c4:db:73:09:c5:3a:b8: 71:38:fb:21:0f:da:d2:6b:4b:cd:c1:35:8a:70:4a:43:ea:9c: 77:dc:18:01:64:44:61:fe:37:44:05:24:fc:c9:95:c6:38:4b: 11:ac:94:e3:0d:e9:35:7b:07:81:b9:9c:66:5f:c3:33:d9:95: f5:82:83:72:79:a9:12:53:05:93:18:0c:50:ad:48:14:aa:d7: 35:9f:d4:de:70:22:3a:d0:af:e2:3d:f8:4c:95:e3:ca:b6:4e: c0:97:13:1b:cd:e0:4b:16:dd:c8:b4:14:25:2e:e6:c1:67:b8: 1a:6b:42:c4:64:b3:da:16:6f:1e:21:0a:3f:43:62:f7:df:cc: 90:76:52:e4:51:29:13:9e:2f:9b:65:82:a2:d6:a5:d8:fc:a8: df:81:7c:89:b4:62:3d:44:8f:bc:c5:e7:7a:1a:9c:3e:b9:17: 85:2f:17:98:97:54:1b:f5:a1:26:3d:2c:48:28:13:07:6c:5e: ff:71:38:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f8b0DOL9PEVcYhmOnTgQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYzBiN2QzNDVjZmFlNTM0N2QzY2U5OGI0MjQxYjkwMGU0 YTllZjMwHhcNMjUxMjIwMTYwMjQ1WhcNMjUxMjIxMTYwMjQ1WjAzMTEwLwYDVQQD EyhkZmM2NDNmMTY4OTg1NjRhNjQ5MmE0MzM0ODU5NmIwNDQyMTk5YjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTh4RjyJNmBW+IoiEwuowFIFmJpr Ho5uqsy6ks3O2RzN2T9Z7Ktcl8sYEwALM0cKDDRdXN+HVGFROCZGeEeTwybNFL64 XDk1JC0C1NnS2ekoshqw7Afa4BlU0aerzljMgeq4f1RuaO7fYc/EjQNCqUWV9gIu nC50E6bDSApcEGw7tFn/qgfr3t9mbiNF80iwvADvY9wi8i/XTuS23ZJCviNuKqtT zgs0HpYeXUslVWEwJvqBEow3ruKLn2ZX8QAOvw8BTcte6NTYQ/Gs512ddxvMJaSD VcLllcLg5+3d7BXrRipMjeK4D6vujTQDEtmx8GTnTMFA6iRuFjEFQNB/lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/GQ/FomFZKZJKkM0hZawRCGZuTMB8GA1UdIwQY MBaAFEzAt9NFz65TR9POmLQkG5AOSp7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNmQzNzAtZjYzMi00Y2ExLThiOTYt MWJlMzI1ZjdhMmUzLzEvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xNmQzNzAtZjYzMi00Y2ExLThiOTYtMWJlMzI1ZjdhMmUz LzEvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgHdJEbL g5bC/BlJWpkZ4H3VkL9PdPqfQxmR79TYUmEnMnMRF15pCHj4PPYGFSWwrfEfO8ZW Miy9BIW+baKoTVfE23MJxTq4cTj7IQ/a0mtLzcE1inBKQ+qcd9wYAWREYf43RAUk /MmVxjhLEayU4w3pNXsHgbmcZl/DM9mV9YKDcnmpElMFkxgMUK1IFKrXNZ/U3nAi OtCv4j34TJXjyrZOwJcTG83gSxbdyLQUJS7mwWe4GmtCxGSz2hZvHiEKP0Ni99/M kHZS5FEpE54vm2WCotal2Pyo34F8ibRiPUSPvMXnehqcPrkXhS8XmJdUG/WhJj0s SCgTB2xe/3E4qg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:34:26 2025 by rpki-client