This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft File: TmROKYPFxQTYAPLQWCsYLrq_JIc.mft (raw, json) Hash identifier: QB9/an8C2TyBAkCIpLVJlsvRvHs1TU2b2YqRZG29alI= Subject key identifier: 9A:20:92:61:9D:86:34:F3:EF:F0:09:0C:99:EB:74:05:F6:78:F3:42 Authority key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87 Certificate issuer: /CN=4e644e2983c5c504d800f2d0582b182ebabf2487 Certificate serial: 019B32D7946688AAAA66B955B2D4A3583F2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft Manifest number: 0A45 Signing time: Thu 18 Dec 2025 19:02:27 +0000 Manifest this update: Thu 18 Dec 2025 19:02:27 +0000 Manifest next update: Fri 19 Dec 2025 19:02:27 +0000 Files and hashes: 1: TmROKYPFxQTYAPLQWCsYLrq_JIc.crl (hash: hjmMW7d3HpX4sTFZnnZ+TxT7cNz+QB/0ChH5YYT1Ujg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:94:66:88:aa:aa:66:b9:55:b2:d4:a3:58:3f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e644e2983c5c504d800f2d0582b182ebabf2487 Validity Not Before: Dec 18 19:02:27 2025 GMT Not After : Dec 19 19:02:27 2025 GMT Subject: CN=9a2092619d8634f3eff0090c99eb7405f678f342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:23:9d:a2:eb:90:8c:52:56:45:4c:30:fd:a7: bf:7b:76:23:1b:4a:d1:42:d4:6d:61:ff:89:c1:b4: ce:dd:64:be:da:5e:04:d0:38:e2:6a:7f:74:c9:48: 4b:cf:6d:0b:8d:1e:ca:36:14:5e:7b:c5:37:8f:21: 3e:81:a9:30:0d:1c:d0:63:83:02:e0:ab:b6:de:65: ac:af:f2:e7:2f:c9:fa:7f:5f:d4:25:d8:95:db:07: da:11:bd:3c:e6:09:55:c3:db:94:95:00:f8:73:9d: 65:5f:99:e0:dc:d9:66:2d:52:29:02:7a:29:c3:9d: a4:cb:27:35:ea:59:49:92:0b:28:77:83:4a:ef:29: 42:c0:43:50:65:fb:2b:ca:31:da:be:66:1a:97:4a: c9:68:58:dc:18:3e:ad:10:47:04:70:5d:7d:fa:7b: 2d:15:56:a6:db:81:bf:c2:8c:a1:ba:2a:08:00:49: c4:49:c7:15:1b:13:49:5d:70:d7:62:f3:ea:9a:1d: 64:1c:d8:a8:1f:12:48:96:a3:b8:f8:a5:5a:93:6e: c3:1f:3b:43:be:d6:ab:bd:6a:e7:7c:c6:51:c9:7a: 51:67:e7:8b:6e:1b:32:57:14:89:52:9d:a7:79:5e: bd:c8:89:5a:d5:3e:84:a9:c6:94:a0:d0:48:8e:94: e0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:20:92:61:9D:86:34:F3:EF:F0:09:0C:99:EB:74:05:F6:78:F3:42 X509v3 Authority Key Identifier: keyid:4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:66:94:4b:ac:5d:cb:e6:c2:9b:3f:f4:d2:33:6f:19:6c:20: 9e:18:21:c6:ee:b5:b6:1d:1e:0d:44:33:4b:7a:c0:9b:17:9c: 03:20:b4:57:5d:98:4d:fe:46:b5:73:e5:4c:12:11:03:26:c2: ce:05:71:ce:64:a4:9b:f6:cc:eb:4c:ab:e7:da:55:10:fe:00: d8:33:6b:6e:29:12:a6:88:58:82:ff:7e:60:29:0a:9a:f1:56: e4:3c:eb:41:7f:da:c9:db:5e:cd:1b:72:25:de:28:03:66:38: a8:f8:f7:d0:ba:f0:b3:fd:c0:e0:0b:31:6d:bb:80:4a:48:c8: 9a:88:de:09:99:14:56:16:f5:3e:6e:75:ac:70:32:75:20:07: 06:02:63:46:41:4d:58:41:db:93:fa:62:42:53:ba:d8:19:3e: 86:46:38:80:d3:50:75:3a:ba:9a:41:33:0f:03:c7:13:8a:ab: c5:41:f9:38:46:26:4a:e1:24:b4:34:ad:d9:83:77:1a:4f:a4: 66:21:d6:b3:18:3a:3f:f5:6e:a5:62:ae:9d:b6:ee:42:2c:fa: fb:52:9f:ef:45:3f:20:c6:35:1e:b9:a5:e3:23:41:2c:4d:00: 3a:8c:e8:ef:f0:4f:fd:13:21:eb:b4:33:de:18:7b:6d:d0:ed: b8:a4:bf:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy15RmiKqqZrlVstSjWD8tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNjQ0ZTI5ODNjNWM1MDRkODAwZjJkMDU4MmIxODJlYmFi ZjI0ODcwHhcNMjUxMjE4MTkwMjI3WhcNMjUxMjE5MTkwMjI3WjAzMTEwLwYDVQQD Eyg5YTIwOTI2MTlkODYzNGYzZWZmMDA5MGM5OWViNzQwNWY2NzhmMzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6COdouuQjFJWRUww/ae/e3YjG0rR QtRtYf+JwbTO3WS+2l4E0Djian90yUhLz20LjR7KNhRee8U3jyE+gakwDRzQY4MC 4Ku23mWsr/LnL8n6f1/UJdiV2wfaEb085glVw9uUlQD4c51lX5ng3NlmLVIpAnop w52kyyc16llJkgsod4NK7ylCwENQZfsryjHavmYal0rJaFjcGD6tEEcEcF19+nst FVam24G/woyhuioIAEnESccVGxNJXXDXYvPqmh1kHNioHxJIlqO4+KVak27DHztD vtarvWrnfMZRyXpRZ+eLbhsyVxSJUp2neV69yIla1T6EqcaUoNBIjpTgFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJogkmGdhjTz7/AJDJnrdAX2ePNCMB8GA1UdIwQY MBaAFE5kTimDxcUE2ADy0FgrGC66vySHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jMGU2YTItOGIyMC00NDgwLWE4YWIt YjM4OGM1NzcwZTA0LzEvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9jMGU2YTItOGIyMC00NDgwLWE4YWItYjM4OGM1NzcwZTA0 LzEvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmaUS6xd y+bCmz/00jNvGWwgnhghxu61th0eDUQzS3rAmxecAyC0V12YTf5GtXPlTBIRAybC zgVxzmSkm/bM60yr59pVEP4A2DNrbikSpohYgv9+YCkKmvFW5DzrQX/aydtezRty Jd4oA2Y4qPj30Lrws/3A4AsxbbuASkjImojeCZkUVhb1Pm51rHAydSAHBgJjRkFN WEHbk/piQlO62Bk+hkY4gNNQdTq6mkEzDwPHE4qrxUH5OEYmSuEktDSt2YN3Gk+k ZiHWsxg6P/VupWKunbbuQiz6+1Kf70U/IMY1Hrml4yNBLE0AOozo7/BP/RMh67Qz 3hh7bdDtuKS/UA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:10:52 2025 by rpki-client