This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft File: TmIrxVBoe20O9geIzq2w_IIKOB8.mft (raw, json) Hash identifier: Vg7n+S7uRIIY13gueDeoQ3AynNeydAmrKTaaPxrpkTU= Subject key identifier: A0:5D:53:72:E7:B6:B2:A0:33:4A:A7:FD:00:D7:33:40:68:06:15:56 Authority key identifier: 4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F Certificate issuer: /CN=4e622bc550687b6d0ef60788ceadb0fc820a381f Certificate serial: 019B620AF436ED98A049D5DAFE432624E50F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft Manifest number: 0AE1 Signing time: Sat 27 Dec 2025 23:00:43 +0000 Manifest this update: Sat 27 Dec 2025 23:00:43 +0000 Manifest next update: Sun 28 Dec 2025 23:00:43 +0000 Files and hashes: 1: TmIrxVBoe20O9geIzq2w_IIKOB8.crl (hash: JI70iOVsPJQCF6Eu0sQ53+wd6QYCsI1kYbgYp4lSikI=) 2: t4aglK9u5BBs2nCD-lvEdZGnyNE.roa (hash: poJOpqUdh9mquobj4xZre8xkqBntoXYzhaUhNLYqXsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0a:f4:36:ed:98:a0:49:d5:da:fe:43:26:24:e5:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e622bc550687b6d0ef60788ceadb0fc820a381f Validity Not Before: Dec 27 23:00:43 2025 GMT Not After : Dec 28 23:00:43 2025 GMT Subject: CN=a05d5372e7b6b2a0334aa7fd00d7334068061556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4a:34:ca:4c:fd:0d:79:4b:87:16:96:66:1a: f4:14:5c:39:3b:fa:8d:c9:17:47:b7:de:79:c5:33: 76:19:08:fe:67:b5:5c:a1:eb:25:41:a0:f7:25:b8: 64:7f:2f:36:39:fc:d8:a2:e6:d6:44:7a:59:17:e4: 4f:32:8a:61:05:65:9b:9c:6a:22:2a:a0:2f:b0:93: c6:28:d3:cf:e7:2c:28:22:d3:63:16:27:4a:31:34: c5:5b:3e:4e:e2:82:f0:4e:09:23:8c:a6:d8:b5:ed: 48:0e:bd:d5:aa:03:14:79:b9:46:ed:75:f7:37:d3: fa:da:9f:47:30:cb:d6:d0:b5:36:d8:3c:16:79:19: 48:88:8e:53:95:d1:5f:88:77:12:9b:14:a3:25:63: f7:8e:ac:7d:a5:da:a7:f7:a0:0c:8d:e4:2d:c6:35: 3e:a5:87:8a:f1:d2:48:2f:99:d0:12:6c:4c:1a:a1: d4:bd:0f:46:5c:83:b8:23:51:fa:03:91:1c:d6:5c: 20:52:2e:d0:e4:14:da:a8:88:cb:c4:78:6f:86:77: 6f:43:e1:1d:d7:52:b6:3c:9a:26:99:62:b8:f1:08: bc:41:8d:3a:4e:f4:84:8a:db:81:4d:8a:b5:23:96: 20:39:d4:42:7f:b9:e0:41:d6:92:2f:28:37:f2:13: a2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5D:53:72:E7:B6:B2:A0:33:4A:A7:FD:00:D7:33:40:68:06:15:56 X509v3 Authority Key Identifier: keyid:4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:21:fc:42:d2:82:58:96:61:96:b6:41:50:8b:28:49:20:c1: 9b:86:d5:cc:1d:23:5a:a8:a9:db:66:5f:03:a4:64:01:f6:15: 66:8f:c0:8d:55:53:a0:6f:82:9a:a7:1a:eb:91:e8:d3:e2:af: 0b:c9:32:22:1d:e3:30:7b:98:c7:db:3c:c0:3a:7e:5a:50:7a: b2:f5:bf:4a:1f:aa:49:7d:d5:d5:86:29:52:32:58:28:0e:69: 44:7d:fb:f2:7a:36:4e:5b:25:35:07:24:94:5b:85:e6:03:3d: fe:48:9e:e3:99:91:4e:ed:15:14:70:19:62:94:d9:60:fd:f9: ca:ab:f8:37:65:58:c3:6a:b1:1e:c0:38:b0:7e:11:37:9a:4d: ba:e6:22:03:5f:87:1f:d4:aa:40:b9:5a:d8:67:9f:62:66:a4: fe:ba:ff:0f:98:a2:16:6f:78:12:12:37:4c:a5:eb:3d:6c:cf: ac:0a:a3:e2:fd:c2:05:65:52:ee:e0:b5:9d:65:ad:1b:1e:ce: 67:b9:67:aa:0f:05:53:c1:71:c2:07:29:8e:e3:52:bc:d4:61: 44:70:2d:6a:9d:70:d0:5f:c1:fe:3f:68:4d:33:63:c2:60:c7: a5:39:bf:b5:c2:5f:ea:87:71:f5:9c:bb:e4:29:3d:ca:4d:52: 88:d3:b8:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiCvQ27ZigSdXa/kMmJOUPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNjIyYmM1NTA2ODdiNmQwZWY2MDc4OGNlYWRiMGZjODIw YTM4MWYwHhcNMjUxMjI3MjMwMDQzWhcNMjUxMjI4MjMwMDQzWjAzMTEwLwYDVQQD EyhhMDVkNTM3MmU3YjZiMmEwMzM0YWE3ZmQwMGQ3MzM0MDY4MDYxNTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEo0ykz9DXlLhxaWZhr0FFw5O/qN yRdHt955xTN2GQj+Z7VcoeslQaD3Jbhkfy82OfzYoubWRHpZF+RPMophBWWbnGoi KqAvsJPGKNPP5ywoItNjFidKMTTFWz5O4oLwTgkjjKbYte1IDr3VqgMUeblG7XX3 N9P62p9HMMvW0LU22DwWeRlIiI5TldFfiHcSmxSjJWP3jqx9pdqn96AMjeQtxjU+ pYeK8dJIL5nQEmxMGqHUvQ9GXIO4I1H6A5Ec1lwgUi7Q5BTaqIjLxHhvhndvQ+Ed 11K2PJommWK48Qi8QY06TvSEituBTYq1I5YgOdRCf7ngQdaSLyg38hOiQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBdU3LntrKgM0qn/QDXM0BoBhVWMB8GA1UdIwQY MBaAFE5iK8VQaHttDvYHiM6tsPyCCjgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jYTRjMzQtMjcwNC00ZjgyLWJmZjgt YTdjY2QwMDk4NDc3LzEvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jYTRjMzQtMjcwNC00ZjgyLWJmZjgtYTdjY2QwMDk4NDc3 LzEvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyH8QtKC WJZhlrZBUIsoSSDBm4bVzB0jWqip22ZfA6RkAfYVZo/AjVVToG+Cmqca65Ho0+Kv C8kyIh3jMHuYx9s8wDp+WlB6svW/Sh+qSX3V1YYpUjJYKA5pRH378no2TlslNQck lFuF5gM9/kie45mRTu0VFHAZYpTZYP35yqv4N2VYw2qxHsA4sH4RN5pNuuYiA1+H H9SqQLla2GefYmak/rr/D5iiFm94EhI3TKXrPWzPrAqj4v3CBWVS7uC1nWWtGx7O Z7lnqg8FU8FxwgcpjuNSvNRhRHAtap1w0F/B/j9oTTNjwmDHpTm/tcJf6odx9Zy7 5Ck9yk1SiNO4eQ== -----END CERTIFICATE-----Generated at Sun Dec 28 04:59:32 2025 by rpki-client