This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft File: TMC300XPrlNH086YtCQbkA5KnvM.mft (raw, json) Hash identifier: 18MlNUhkCz2R+yqBRHFl1a/c3gttZDmAgsU2JPqZm00= Subject key identifier: 88:D1:72:07:39:AE:4C:50:EB:34:90:C8:83:FC:23:D8:50:47:E4:0B Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3 Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3 Certificate serial: 019B5D534DA21A2CFABB284E8FAFCBEAA725 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft Manifest number: 090C Signing time: Sat 27 Dec 2025 01:01:38 +0000 Manifest this update: Sat 27 Dec 2025 01:01:38 +0000 Manifest next update: Sun 28 Dec 2025 01:01:38 +0000 Files and hashes: 1: TMC300XPrlNH086YtCQbkA5KnvM.crl (hash: tZnwlfXVskgsCn49ONRJXIAGtx81Q0HS93uY8Skbd/o=) 2: Vh_JUxD0F48NbjyYRcDhXuGyEXI.roa (hash: RX3aXV1jt4pV7znP3Nr6a04cOEHqVMLgDW/kqRB9jNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:4d:a2:1a:2c:fa:bb:28:4e:8f:af:cb:ea:a7:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3 Validity Not Before: Dec 27 01:01:38 2025 GMT Not After : Dec 28 01:01:38 2025 GMT Subject: CN=88d1720739ae4c50eb3490c883fc23d85047e40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6a:f9:d5:b4:57:9a:84:93:18:5e:62:5d:a7: 09:31:1c:2c:ce:59:08:08:d7:23:37:76:b7:e1:5a: 7b:6c:99:fb:c7:c8:66:c7:86:79:c0:a9:9e:c4:d0: 05:53:00:a2:47:6b:db:8d:cb:b8:ec:1c:4e:80:90: 49:ce:a6:74:41:5a:16:14:89:a5:8f:67:1f:84:b6: ae:f1:92:63:11:46:b1:f6:5c:e0:e8:f5:00:ce:c1: e9:35:0a:01:89:96:db:d2:06:b3:67:0e:6f:da:a0: 8b:04:0c:5b:a4:32:19:2c:f1:58:85:44:51:2d:88: e7:b2:c7:eb:08:2e:1d:5d:58:98:97:e5:61:9a:18: 69:21:1c:0e:d0:ec:57:0e:8b:5c:5d:b6:5a:1f:dc: 52:b3:0d:ec:09:99:37:f1:78:7e:69:85:a4:00:7b: 59:e7:c8:cd:c0:17:c6:b3:0f:f4:ce:c8:eb:47:1e: c5:fa:45:9f:f3:72:74:56:3a:a6:94:19:f3:22:4a: 91:99:18:69:9b:d1:56:99:5f:d2:05:df:ca:80:28: 61:25:8d:e9:1f:5e:1c:b1:72:95:75:50:5e:9a:eb: b9:cf:1e:b9:7c:af:12:4f:9d:2a:82:7a:9c:ee:8b: c4:2a:02:33:b2:b8:69:a5:bf:af:8c:0f:f6:1d:04: ff:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D1:72:07:39:AE:4C:50:EB:34:90:C8:83:FC:23:D8:50:47:E4:0B X509v3 Authority Key Identifier: keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d1:01:b8:65:14:fa:2b:3f:bc:f1:2d:46:20:0d:38:5c:5d: 0c:ac:dd:2f:c8:55:77:e1:4b:d1:c7:2b:73:e3:fc:6c:ae:79: ff:7b:b1:80:83:e4:24:7c:09:cd:91:ae:fd:6c:72:4a:15:c3: 8d:bb:09:11:8a:f7:a2:2c:b6:41:f3:f7:e9:b8:06:18:84:a9: 11:e4:19:47:63:b0:9b:75:7a:7a:ed:cd:1b:a0:04:e8:5d:5a: a0:06:86:1c:f4:62:99:f2:03:ef:b7:8a:09:e9:5d:36:5d:c9: e1:aa:d1:24:7f:7a:7f:d2:b2:3d:94:ac:99:f0:b2:74:30:6e: 88:19:30:8b:01:46:d3:01:0c:5f:3b:90:5b:8e:d0:88:d8:a0: 79:8a:a7:44:ee:d3:1c:7d:d1:15:5b:5c:15:64:2d:85:c2:23: cb:fd:05:7c:00:b2:f3:55:a5:32:f5:eb:5b:6a:0c:e9:c3:c9: ac:06:4a:53:07:79:05:1e:83:48:10:a6:20:42:3c:c9:7e:f1: 55:0c:0f:13:7c:0d:bc:2f:90:83:09:e5:57:eb:5e:80:db:cb: 6b:19:19:c2:82:14:15:d8:49:18:46:b1:f8:43:94:1b:c8:b2: dc:50:e5:16:b8:f4:35:c8:d3:83:bf:5b:d8:7d:8b:f7:8c:df: a1:d0:7c:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU02iGiz6uyhOj6/L6qclMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYzBiN2QzNDVjZmFlNTM0N2QzY2U5OGI0MjQxYjkwMGU0 YTllZjMwHhcNMjUxMjI3MDEwMTM4WhcNMjUxMjI4MDEwMTM4WjAzMTEwLwYDVQQD Eyg4OGQxNzIwNzM5YWU0YzUwZWIzNDkwYzg4M2ZjMjNkODUwNDdlNDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWr51bRXmoSTGF5iXacJMRwszlkI CNcjN3a34Vp7bJn7x8hmx4Z5wKmexNAFUwCiR2vbjcu47BxOgJBJzqZ0QVoWFIml j2cfhLau8ZJjEUax9lzg6PUAzsHpNQoBiZbb0gazZw5v2qCLBAxbpDIZLPFYhURR LYjnssfrCC4dXViYl+VhmhhpIRwO0OxXDotcXbZaH9xSsw3sCZk38Xh+aYWkAHtZ 58jNwBfGsw/0zsjrRx7F+kWf83J0VjqmlBnzIkqRmRhpm9FWmV/SBd/KgChhJY3p H14csXKVdVBemuu5zx65fK8ST50qgnqc7ovEKgIzsrhppb+vjA/2HQT/OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjRcgc5rkxQ6zSQyIP8I9hQR+QLMB8GA1UdIwQY MBaAFEzAt9NFz65TR9POmLQkG5AOSp7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNmQzNzAtZjYzMi00Y2ExLThiOTYt MWJlMzI1ZjdhMmUzLzEvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xNmQzNzAtZjYzMi00Y2ExLThiOTYtMWJlMzI1ZjdhMmUz LzEvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtEBuGUU +is/vPEtRiANOFxdDKzdL8hVd+FL0ccrc+P8bK55/3uxgIPkJHwJzZGu/WxyShXD jbsJEYr3oiy2QfP36bgGGISpEeQZR2Owm3V6eu3NG6AE6F1aoAaGHPRimfID77eK CeldNl3J4arRJH96f9KyPZSsmfCydDBuiBkwiwFG0wEMXzuQW47QiNigeYqnRO7T HH3RFVtcFWQthcIjy/0FfACy81WlMvXrW2oM6cPJrAZKUwd5BR6DSBCmIEI8yX7x VQwPE3wNvC+QgwnlV+tegNvLaxkZwoIUFdhJGEax+EOUG8iy3FDlFrj0NcjTg79b 2H2L94zfodB81Q== -----END CERTIFICATE-----Generated at Sat Dec 27 04:51:04 2025 by rpki-client