This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft File: TmIrxVBoe20O9geIzq2w_IIKOB8.mft (raw, json) Hash identifier: m3SCi8EqhGPPE4W8J2LC3UcJB/fhVmPXEdwPmRtmP4c= Subject key identifier: E0:BE:F8:B7:96:46:FE:8D:2D:8D:37:80:8D:36:DF:A5:CB:19:2C:BB Authority key identifier: 4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F Certificate issuer: /CN=4e622bc550687b6d0ef60788ceadb0fc820a381f Certificate serial: 019B6F8F7F2187C99B8EB9AA01E8561FEE36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft Manifest number: 0AE8 Signing time: Tue 30 Dec 2025 14:00:33 +0000 Manifest this update: Tue 30 Dec 2025 14:00:33 +0000 Manifest next update: Wed 31 Dec 2025 14:00:33 +0000 Files and hashes: 1: TmIrxVBoe20O9geIzq2w_IIKOB8.crl (hash: 9VbkznYQa8ZKfF4h8z1MB9sKvRDc8mSfK94X7gsxsmM=) 2: t4aglK9u5BBs2nCD-lvEdZGnyNE.roa (hash: poJOpqUdh9mquobj4xZre8xkqBntoXYzhaUhNLYqXsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 14:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:8f:7f:21:87:c9:9b:8e:b9:aa:01:e8:56:1f:ee:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e622bc550687b6d0ef60788ceadb0fc820a381f Validity Not Before: Dec 30 14:00:33 2025 GMT Not After : Dec 31 14:00:33 2025 GMT Subject: CN=e0bef8b79646fe8d2d8d37808d36dfa5cb192cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c5:86:76:49:2c:1f:28:51:50:c6:d2:e0:f2: d1:da:d2:aa:17:6e:e1:75:8d:9f:b1:0c:ad:22:ef: bb:a7:c3:9a:0e:8e:5f:e0:76:dd:d0:c2:c4:f5:70: 1e:49:4c:d3:eb:2e:82:d5:32:76:68:c8:60:2b:92: 69:19:4a:ad:b2:82:8c:c6:79:38:b7:2a:dc:0a:f6: ad:2f:2d:7b:d9:8a:94:71:8a:6a:8f:84:64:ee:13: 25:4c:47:bb:1f:8e:88:72:c2:0d:81:99:06:d9:5e: 2f:0c:cb:8f:e9:dd:1d:a7:4a:69:3b:be:53:a2:56: c2:b9:8f:a1:0e:f3:de:89:23:d7:7d:cb:2b:c7:a9: e3:5e:a2:29:19:46:a2:df:64:21:b2:9c:70:63:10: b5:9d:f3:6a:fb:e5:a7:f6:a5:3e:dc:04:e3:8d:69: 8e:08:10:92:ad:16:02:40:08:1c:17:64:0a:d7:85: 4f:14:d7:9b:52:5e:44:13:2f:9e:aa:03:ec:97:f9: 0a:9f:d8:e5:e1:e0:88:9c:8a:74:d4:3c:d3:2e:69: 10:92:94:a9:8d:2e:ea:db:01:83:48:40:7f:39:e1: e1:99:af:b8:35:47:88:b3:e3:87:38:f9:68:8f:aa: eb:0d:49:e2:f2:38:a4:96:e6:ba:58:d5:83:4e:ea: e8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BE:F8:B7:96:46:FE:8D:2D:8D:37:80:8D:36:DF:A5:CB:19:2C:BB X509v3 Authority Key Identifier: keyid:4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:f4:0c:26:69:0b:61:26:5b:5f:6e:ae:9c:c8:13:df:0b:0c: 46:e8:e6:02:44:f3:8f:8f:f6:88:d5:1f:b5:e0:7d:fd:2d:d1: 3e:42:8b:55:57:33:74:17:fb:f2:3c:dc:4e:b1:98:51:5b:61: 9c:5e:53:c1:3d:26:73:b9:a3:d4:37:92:55:56:eb:73:08:f1: f4:47:fe:25:c7:2a:39:b2:fe:a5:10:8b:a5:4e:72:27:65:f7: 31:66:29:a6:b2:84:59:d8:03:cd:5f:ba:5c:bd:b8:07:e9:eb: 23:67:48:76:bb:75:28:d0:06:f9:e0:c1:d8:bf:99:47:95:46: f3:a1:cd:75:ed:30:88:a3:68:9e:cb:0a:b7:de:92:8a:f0:c8: 84:a4:94:1c:2a:30:4e:b4:b3:f9:c7:b4:80:08:3b:6f:6d:c8: 72:d2:fe:32:9c:66:21:ec:de:ee:ad:5a:71:bb:fd:94:cf:23: 0c:14:e3:1a:41:41:10:bf:68:2c:c8:d0:9c:a8:08:55:aa:c4: 46:51:27:13:41:07:9a:8a:6f:ec:e1:65:8f:00:a3:29:cf:92: 6c:6e:d4:2c:78:de:b8:ee:af:db:e6:84:ca:67:6d:50:06:82: e9:a3:34:9a:e3:44:5a:45:ca:23:32:f5:79:93:f9:24:ca:9b: 84:42:70:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvj38hh8mbjrmqAehWH+42MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNjIyYmM1NTA2ODdiNmQwZWY2MDc4OGNlYWRiMGZjODIw YTM4MWYwHhcNMjUxMjMwMTQwMDMzWhcNMjUxMjMxMTQwMDMzWjAzMTEwLwYDVQQD EyhlMGJlZjhiNzk2NDZmZThkMmQ4ZDM3ODA4ZDM2ZGZhNWNiMTkyY2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMWGdkksHyhRUMbS4PLR2tKqF27h dY2fsQytIu+7p8OaDo5f4Hbd0MLE9XAeSUzT6y6C1TJ2aMhgK5JpGUqtsoKMxnk4 tyrcCvatLy172YqUcYpqj4Rk7hMlTEe7H46IcsINgZkG2V4vDMuP6d0dp0ppO75T olbCuY+hDvPeiSPXfcsrx6njXqIpGUai32QhspxwYxC1nfNq++Wn9qU+3ATjjWmO CBCSrRYCQAgcF2QK14VPFNebUl5EEy+eqgPsl/kKn9jl4eCInIp01DzTLmkQkpSp jS7q2wGDSEB/OeHhma+4NUeIs+OHOPloj6rrDUni8jiklua6WNWDTurozwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOC++LeWRv6NLY03gI0236XLGSy7MB8GA1UdIwQY MBaAFE5iK8VQaHttDvYHiM6tsPyCCjgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jYTRjMzQtMjcwNC00ZjgyLWJmZjgt YTdjY2QwMDk4NDc3LzEvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jYTRjMzQtMjcwNC00ZjgyLWJmZjgtYTdjY2QwMDk4NDc3 LzEvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/QMJmkL YSZbX26unMgT3wsMRujmAkTzj4/2iNUfteB9/S3RPkKLVVczdBf78jzcTrGYUVth nF5TwT0mc7mj1DeSVVbrcwjx9Ef+JccqObL+pRCLpU5yJ2X3MWYpprKEWdgDzV+6 XL24B+nrI2dIdrt1KNAG+eDB2L+ZR5VG86HNde0wiKNonssKt96SivDIhKSUHCow TrSz+ce0gAg7b23IctL+MpxmIeze7q1acbv9lM8jDBTjGkFBEL9oLMjQnKgIVarE RlEnE0EHmopv7OFljwCjKc+SbG7ULHjeuO6v2+aEymdtUAaC6aM0muNEWkXKIzL1 eZP5JMqbhEJw7w== -----END CERTIFICATE-----Generated at Wed Dec 31 00:08:20 2025 by rpki-client