This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft File: TOmGBryaXUQHT_jL7cvbz8NfBWI.mft (raw, json) Hash identifier: VlmJ7S7pdVJS76dt58S4K7ieML7BLcR4F2Uui8PByFQ= Subject key identifier: 14:29:7A:98:17:BD:3B:E8:8E:B3:33:F5:F8:E0:A7:7D:F9:EE:15:6C Authority key identifier: 4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62 Certificate issuer: /CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562 Certificate serial: 019B37FD0BA8E233455239BA57DABD4FAA46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 19:01:28 +0000 Manifest this update: Fri 19 Dec 2025 19:01:28 +0000 Manifest next update: Sat 20 Dec 2025 19:01:28 +0000 Files and hashes: 1: TOmGBryaXUQHT_jL7cvbz8NfBWI.crl (hash: RLatCRdCJESZGy0IQYB2totH01ZnvuPV22pe214Xl0I=) 2: _2jPSPlgYJsD4ywwlbMtnQzhjck.roa (hash: dPt4vhrAZj1gNIW23Wk2/nT1GhYcZvAFuVHXtMeqVMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 19:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fd:0b:a8:e2:33:45:52:39:ba:57:da:bd:4f:aa:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562 Validity Not Before: Dec 19 19:01:28 2025 GMT Not After : Dec 20 19:01:28 2025 GMT Subject: CN=14297a9817bd3be88eb333f5f8e0a77df9ee156c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:68:84:a6:fa:a1:ff:06:80:8b:02:f0:a2:47: b7:32:6e:67:25:73:67:98:03:9c:f4:54:a9:0f:46: 33:22:65:99:93:71:3b:1a:58:85:8a:14:09:db:37: 03:85:39:c7:b5:f4:c1:a3:23:08:c3:09:b6:a6:37: 1e:37:3f:eb:95:6b:33:12:3f:6e:d0:6b:98:24:ab: 4b:a4:5d:9a:02:a6:8c:58:9a:07:2b:48:4d:87:39: 90:de:be:67:76:3b:22:bf:f5:b7:e3:ee:99:56:6d: a9:38:78:16:47:7c:e1:80:c2:e3:25:75:fe:73:d0: 78:25:85:d4:f4:31:6b:eb:b5:b2:80:6d:05:47:ec: 46:cf:29:5e:cc:a6:c0:ab:a0:dd:82:6c:c2:68:f4: 07:db:38:e3:32:b9:dd:72:1d:97:71:7b:e8:bf:20: 98:4b:92:3a:3e:b7:97:9f:4a:6d:ff:20:7d:ac:23: 19:82:ea:31:5e:6b:5f:b5:32:13:70:89:ba:28:b1: 38:56:fb:c7:7f:cb:60:61:2e:8f:20:5e:6b:13:39: 6c:74:a7:da:78:e4:79:2f:04:4b:69:e2:01:57:ba: 34:31:93:0a:be:52:80:c8:49:ad:95:23:b7:9f:c6: 4c:d9:5a:0a:64:27:e1:4e:8d:32:b0:2b:65:aa:71: 01:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:29:7A:98:17:BD:3B:E8:8E:B3:33:F5:F8:E0:A7:7D:F9:EE:15:6C X509v3 Authority Key Identifier: keyid:4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:58:fe:d1:62:1c:1f:23:f3:fb:f5:e1:28:25:9d:c7:35:c9: d6:b8:4a:b2:47:b4:0b:1b:af:f7:ed:78:de:96:b3:a9:66:8c: 76:18:13:60:f5:4a:77:1d:46:a3:15:e0:45:71:1f:27:3f:90: a4:09:0e:19:ea:57:c1:30:f9:c0:89:5c:16:e6:c9:c0:44:ed: 5e:3a:5f:aa:98:d5:31:2b:39:52:01:8e:df:ef:6e:27:a6:84: 03:7b:6b:cc:85:9d:e8:76:c6:e4:36:d1:c3:3c:3b:20:21:ba: 06:79:95:54:ca:fe:a8:f4:03:a9:52:ee:41:f2:e6:88:62:f1: 24:cd:6b:b5:56:d5:6a:44:e2:d3:a6:8c:8d:dc:cf:08:40:af: 3f:a5:4e:59:4d:9a:e7:9f:3c:f6:c0:87:3b:ee:6b:0e:b7:ce: d3:b8:ee:8d:74:80:64:dc:b0:3a:7c:5c:98:8d:0c:7a:5d:5f: 9c:79:8f:97:d9:b5:0e:56:35:90:2b:89:53:aa:b5:fa:28:6a: f1:e9:cf:00:ea:9d:9a:d0:ad:6c:a6:d5:6c:ad:63:b8:b4:69: 36:25:8d:11:82:f2:bc:f9:57:fe:44:3e:2d:2a:52:0a:1e:17: e3:40:af:3a:13:49:94:2d:47:68:7b:1e:1a:4e:fe:87:c5:bd: e4:b2:77:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/Quo4jNFUjm6V9q9T6pGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTk4NjA2YmM5YTVkNDQwNzRmZjhjYmVkY2JkYmNmYzM1 ZjA1NjIwHhcNMjUxMjE5MTkwMTI4WhcNMjUxMjIwMTkwMTI4WjAzMTEwLwYDVQQD EygxNDI5N2E5ODE3YmQzYmU4OGViMzMzZjVmOGUwYTc3ZGY5ZWUxNTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2iEpvqh/waAiwLwoke3Mm5nJXNn mAOc9FSpD0YzImWZk3E7GliFihQJ2zcDhTnHtfTBoyMIwwm2pjceNz/rlWszEj9u 0GuYJKtLpF2aAqaMWJoHK0hNhzmQ3r5ndjsiv/W34+6ZVm2pOHgWR3zhgMLjJXX+ c9B4JYXU9DFr67WygG0FR+xGzylezKbAq6DdgmzCaPQH2zjjMrndch2XcXvovyCY S5I6PreXn0pt/yB9rCMZguoxXmtftTITcIm6KLE4VvvHf8tgYS6PIF5rEzlsdKfa eOR5LwRLaeIBV7o0MZMKvlKAyEmtlSO3n8ZM2VoKZCfhTo0ysCtlqnEBuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQpepgXvTvojrMz9fjgp3357hVsMB8GA1UdIwQY MBaAFEzphga8ml1EB0/4y+3L28/DXwViMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9tR0JyeWFYVVFIVF9qTDdjdmJ6OE5mQldJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNzllZDUtZDI1My00MjU1LTkwMTct ODhkZjEyNWJhNjYzLzEvVE9tR0JyeWFYVVFIVF9qTDdjdmJ6OE5mQldJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNzllZDUtZDI1My00MjU1LTkwMTctODhkZjEyNWJhNjYz LzEvVE9tR0JyeWFYVVFIVF9qTDdjdmJ6OE5mQldJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVj+0WIc HyPz+/XhKCWdxzXJ1rhKske0Cxuv9+143pazqWaMdhgTYPVKdx1GoxXgRXEfJz+Q pAkOGepXwTD5wIlcFubJwETtXjpfqpjVMSs5UgGO3+9uJ6aEA3trzIWd6HbG5DbR wzw7ICG6BnmVVMr+qPQDqVLuQfLmiGLxJM1rtVbVakTi06aMjdzPCECvP6VOWU2a 55889sCHO+5rDrfO07jujXSAZNywOnxcmI0Mel1fnHmPl9m1DlY1kCuJU6q1+ihq 8enPAOqdmtCtbKbVbK1juLRpNiWNEYLyvPlX/kQ+LSpSCh4X40CvOhNJlC1HaHse Gk7+h8W95LJ3qQ== -----END CERTIFICATE-----Generated at Sat Dec 20 04:45:12 2025 by rpki-client