This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft File: Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft (raw, json) Hash identifier: YZgrhQKd4VYoun4f9Tq0X8HJebUo7/YBMtO2hqejRb8= Subject key identifier: 0B:61:D1:85:F1:E1:9E:9F:E8:BA:69:09:74:50:A2:D6:E5:2A:78:D2 Authority key identifier: 4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8 Certificate issuer: /CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8 Certificate serial: 019B40C8A63AFE8E709562C7F6DC0C1EECEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft Manifest number: 0553 Signing time: Sun 21 Dec 2025 12:00:49 +0000 Manifest this update: Sun 21 Dec 2025 12:00:49 +0000 Manifest next update: Mon 22 Dec 2025 12:00:49 +0000 Files and hashes: 1: Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl (hash: y4bORnZvkcz4hBWqyCCVloVujRseSefHpF/EAlXwGFw=) 2: dRB7xJtajjzk6UoGyoSGsT51giI.roa (hash: YcmDNZ/enUR0rChrVz40koeNmEa+q2s38R7f9KQbajo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:a6:3a:fe:8e:70:95:62:c7:f6:dc:0c:1e:ec:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8 Validity Not Before: Dec 21 12:00:49 2025 GMT Not After : Dec 22 12:00:49 2025 GMT Subject: CN=0b61d185f1e19e9fe8ba69097450a2d6e52a78d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d1:3b:f2:d7:33:43:af:ae:c2:ed:15:c8:cd: 3b:65:9d:c5:7c:24:75:b8:66:d8:ac:24:af:78:e0: cf:f1:31:6b:fa:3b:cd:2e:e8:39:4d:7b:53:e8:b5: c3:83:80:65:ca:db:80:8d:2f:8a:41:e7:dd:60:1c: 6e:db:1d:d6:03:bc:43:00:4e:d5:dc:94:4e:8d:24: eb:34:f6:ea:2e:f3:47:ed:10:8c:c7:85:a2:0b:72: 29:09:f9:87:a8:f6:c9:91:e1:9e:b5:01:f0:31:3e: 77:82:03:71:87:bb:17:79:1a:85:96:eb:d5:46:7a: fa:0c:41:21:7a:38:42:4a:31:5d:d6:7a:69:9d:aa: 37:da:ec:55:ac:cb:0f:d7:8c:62:c5:dd:a5:e4:b7: 6b:9e:3c:81:49:cc:2b:40:f4:84:6f:cd:7e:c8:a0: 86:f0:2b:df:03:08:2d:75:fa:19:41:4b:88:98:46: 5b:68:28:2f:dd:7e:16:f7:4b:a6:e8:e5:64:c6:ca: c1:27:c7:48:06:e0:1e:9e:99:27:51:31:62:07:f3: 96:d1:8c:a8:98:f1:dd:b8:3a:ef:b9:c8:cd:9a:64: d8:18:d3:c8:d1:2f:b4:56:8e:23:a9:3f:55:d3:92: 08:62:cf:5d:12:58:56:d8:ba:ac:a1:23:8f:c4:70: 09:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:61:D1:85:F1:E1:9E:9F:E8:BA:69:09:74:50:A2:D6:E5:2A:78:D2 X509v3 Authority Key Identifier: keyid:4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:bf:1f:74:57:c8:f6:97:97:62:54:3c:5c:8b:79:2e:81:48: 7c:44:aa:49:80:62:73:77:a5:59:1c:a0:50:de:ce:23:10:18: 71:14:7a:12:98:00:3e:cf:04:7d:4d:cc:36:71:2f:cf:4c:da: 84:e8:1b:0e:c3:dc:78:53:5c:1b:f2:2f:92:97:e9:16:1a:57: 59:6e:df:9b:46:3e:83:28:58:4a:62:7a:16:de:12:52:71:0e: bf:52:b5:d6:93:95:fb:93:0f:6f:71:3a:d5:f5:ce:ca:11:76: db:02:ef:3f:3e:88:df:b3:09:64:bd:92:6b:ec:71:64:6b:cb: bc:ef:72:21:f7:df:41:3b:f7:5b:b3:75:3c:f0:ad:17:d5:dd: ef:1f:7f:aa:c4:2e:25:ac:4a:ad:75:f5:9b:9b:ec:57:20:84: d2:d8:d7:0a:1c:de:9f:99:17:6e:53:a6:a0:d5:d4:26:0d:af: 63:c3:64:67:a0:1a:30:65:fd:c0:d7:4a:46:e3:0e:5a:e1:ab: 98:48:fa:db:a7:dc:78:a7:80:fe:25:c2:60:26:91:de:0b:4a: 95:07:14:8e:e2:ac:f4:4f:f8:7b:55:3f:fe:a3:de:b9:76:db: 5e:c4:20:fd:46:e4:16:c2:87:47:3a:28:4a:eb:dc:8c:47:ac: 68:22:93:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyKY6/o5wlWLH9twMHuzvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNmIzMmQ5ZDNlYmM2ZWU0OWJkNmZhNmNkOTBlNGY1Yzdk NTQ0ZTgwHhcNMjUxMjIxMTIwMDQ5WhcNMjUxMjIyMTIwMDQ5WjAzMTEwLwYDVQQD EygwYjYxZDE4NWYxZTE5ZTlmZThiYTY5MDk3NDUwYTJkNmU1MmE3OGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtE78tczQ6+uwu0VyM07ZZ3FfCR1 uGbYrCSveODP8TFr+jvNLug5TXtT6LXDg4BlytuAjS+KQefdYBxu2x3WA7xDAE7V 3JROjSTrNPbqLvNH7RCMx4WiC3IpCfmHqPbJkeGetQHwMT53ggNxh7sXeRqFluvV Rnr6DEEhejhCSjFd1nppnao32uxVrMsP14xixd2l5LdrnjyBScwrQPSEb81+yKCG 8CvfAwgtdfoZQUuImEZbaCgv3X4W90um6OVkxsrBJ8dIBuAenpknUTFiB/OW0Yyo mPHduDrvucjNmmTYGNPI0S+0Vo4jqT9V05IIYs9dElhW2LqsoSOPxHAJvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAth0YXx4Z6f6LppCXRQotblKnjSMB8GA1UdIwQY MBaAFE5rMtnT68buSb1vps2Q5PXH1UToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG1zeTJkUHJ4dTVKdlctbXpaRGs5Y2ZWUk9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82Mjc0ZDctOGQxYy00OTNiLTljMjIt MDk2ZWUyOWQ5OTdkLzEvVG1zeTJkUHJ4dTVKdlctbXpaRGs5Y2ZWUk9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82Mjc0ZDctOGQxYy00OTNiLTljMjItMDk2ZWUyOWQ5OTdk LzEvVG1zeTJkUHJ4dTVKdlctbXpaRGs5Y2ZWUk9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYr8fdFfI 9peXYlQ8XIt5LoFIfESqSYBic3elWRygUN7OIxAYcRR6EpgAPs8EfU3MNnEvz0za hOgbDsPceFNcG/IvkpfpFhpXWW7fm0Y+gyhYSmJ6Ft4SUnEOv1K11pOV+5MPb3E6 1fXOyhF22wLvPz6I37MJZL2Sa+xxZGvLvO9yIfffQTv3W7N1PPCtF9Xd7x9/qsQu JaxKrXX1m5vsVyCE0tjXChzen5kXblOmoNXUJg2vY8NkZ6AaMGX9wNdKRuMOWuGr mEj626fceKeA/iXCYCaR3gtKlQcUjuKs9E/4e1U//qPeuXbbXsQg/UbkFsKHRzoo SuvcjEesaCKTFQ== -----END CERTIFICATE-----Generated at Sun Dec 21 20:54:01 2025 by rpki-client