This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft File: Tm32g40DOAFB635O5V3AXYcGHck.mft (raw, json) Hash identifier: CC6pQwkYWXhsIwX7FmZ0ZUAxecyIdoytxO2NZ+n3NCo= Subject key identifier: BD:B9:57:37:35:09:35:A2:97:4F:11:43:BF:65:62:2D:38:68:89:29 Authority key identifier: 4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9 Certificate issuer: /CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9 Certificate serial: 019AF3C039942731FF6B003F13B2BA17B37E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft Manifest number: 11B0 Signing time: Sat 06 Dec 2025 13:00:52 +0000 Manifest this update: Sat 06 Dec 2025 13:00:52 +0000 Manifest next update: Sun 07 Dec 2025 13:00:52 +0000 Files and hashes: 1: 6zGLvq4k5vmzCBWK5uxpgKx-SpM.roa (hash: d72RjXOy3TrPnzNgu1Y/cwJXn9F8xvKoAfaZ+LW3oR4=) 2: Tm32g40DOAFB635O5V3AXYcGHck.crl (hash: 8E8acusxZLG3MdL4JfQzpxmTawBH6dHSLeGHUoyRR8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:39:94:27:31:ff:6b:00:3f:13:b2:ba:17:b3:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9 Validity Not Before: Dec 6 13:00:52 2025 GMT Not After : Dec 7 13:00:52 2025 GMT Subject: CN=bdb95737350935a2974f1143bf65622d38688929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:44:56:81:38:8b:a6:37:b4:3d:cb:73:3b:27: 56:41:c1:7c:53:60:f9:39:f9:11:55:5f:08:55:47: 6d:48:98:6c:5e:0b:a1:f9:1c:53:e2:c2:86:84:db: cb:07:58:95:be:d8:18:8b:80:07:05:0d:95:5a:fa: ca:b2:d9:87:f9:94:6a:e0:ef:a4:ad:e3:0a:5b:9b: 6b:ac:b7:c6:7f:10:30:44:42:42:1d:de:1f:39:a2: 77:f6:af:e2:00:db:a3:9e:0e:34:9c:61:1b:fb:33: cc:48:f7:6d:e6:98:e6:0d:de:6a:d2:a3:ba:db:34: db:2c:19:25:7a:f7:6a:94:0b:7e:b5:98:22:b4:34: f2:11:a7:42:64:89:c4:25:23:8e:69:70:f3:ec:c1: e7:f3:7e:f1:03:de:44:fc:71:08:f9:3d:6d:b9:f0: 91:cc:b8:fc:83:b0:1f:02:2b:9e:c3:d5:05:5a:73: fb:19:8e:83:3c:98:d4:71:95:87:82:39:70:98:34: 47:9e:51:a1:d0:b8:11:59:c2:66:f4:a5:8a:b7:f3: 51:d3:c9:c5:0f:97:01:e6:35:87:4e:55:e0:d5:85: 95:96:c4:88:80:83:47:cd:77:7e:cb:53:c3:d1:be: c9:e1:26:8c:1c:58:36:47:0c:50:c6:b5:1e:02:7c: 79:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B9:57:37:35:09:35:A2:97:4F:11:43:BF:65:62:2D:38:68:89:29 X509v3 Authority Key Identifier: keyid:4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:89:9c:c0:94:81:ac:a6:87:7a:c6:64:c0:20:7f:7a:e7:37: 1b:85:5e:76:66:02:18:79:91:43:c4:7a:36:a8:e1:27:de:9e: 5e:08:07:55:aa:d2:50:a5:92:29:cb:82:d1:3a:48:28:2f:0c: f9:c4:a9:99:31:34:ad:2e:21:15:f8:fd:9a:57:d4:f2:59:1a: b4:63:41:4a:1f:99:da:7c:3d:10:fc:99:a4:89:da:58:fc:e7: e2:7b:21:32:8d:35:54:29:44:71:6f:6c:a5:f4:b9:1a:2b:af: 39:2f:ed:b5:a3:3a:6a:b4:d6:a1:9f:d1:a1:a6:2e:98:8e:20: 8e:b1:7f:b7:f1:5f:1c:bc:00:2a:ec:2d:fd:6a:ef:df:75:2b: f5:93:c6:17:c0:8c:cc:7c:5e:d0:9a:6a:f2:46:49:30:07:11: ac:24:05:c9:f4:30:c0:b7:f4:01:9e:26:53:db:0c:13:29:c8: d6:fe:78:ee:96:d0:e4:83:78:c7:7c:6f:71:c2:d8:48:f0:b3: d1:53:a8:e0:f5:70:a2:81:2b:5b:2b:01:87:ae:1e:86:63:08: e6:9b:49:1f:25:3d:53:4a:ec:64:b8:bb:a0:1b:8a:f4:ce:db: 57:56:4d:de:0a:3f:62:8e:4e:e8:ca:a8:44:5d:00:81:b8:5f: 33:23:75:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwDmUJzH/awA/E7K6F7N+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNmRmNjgzOGQwMzM4MDE0MWViN2U0ZWU1NWRjMDVkODcw NjFkYzkwHhcNMjUxMjA2MTMwMDUyWhcNMjUxMjA3MTMwMDUyWjAzMTEwLwYDVQQD EyhiZGI5NTczNzM1MDkzNWEyOTc0ZjExNDNiZjY1NjIyZDM4Njg4OTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArERWgTiLpje0PctzOydWQcF8U2D5 OfkRVV8IVUdtSJhsXguh+RxT4sKGhNvLB1iVvtgYi4AHBQ2VWvrKstmH+ZRq4O+k reMKW5trrLfGfxAwREJCHd4fOaJ39q/iANujng40nGEb+zPMSPdt5pjmDd5q0qO6 2zTbLBklevdqlAt+tZgitDTyEadCZInEJSOOaXDz7MHn837xA95E/HEI+T1tufCR zLj8g7AfAiuew9UFWnP7GY6DPJjUcZWHgjlwmDRHnlGh0LgRWcJm9KWKt/NR08nF D5cB5jWHTlXg1YWVlsSIgINHzXd+y1PD0b7J4SaMHFg2RwxQxrUeAnx5cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL25Vzc1CTWil08RQ79lYi04aIkpMB8GA1UdIwQY MBaAFE5t9oONAzgBQet+TuVdwF2HBh3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG0zMmc0MERPQUZCNjM1TzVWM0FYWWNHSGNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi82ZWViNWMtZDI1MS00NzBhLWE3Y2Qt MzE4MzYyMDA0ZThhLzEvVG0zMmc0MERPQUZCNjM1TzVWM0FYWWNHSGNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi82ZWViNWMtZDI1MS00NzBhLWE3Y2QtMzE4MzYyMDA0ZThh LzEvVG0zMmc0MERPQUZCNjM1TzVWM0FYWWNHSGNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgImcwJSB rKaHesZkwCB/euc3G4VedmYCGHmRQ8R6NqjhJ96eXggHVarSUKWSKcuC0TpIKC8M +cSpmTE0rS4hFfj9mlfU8lkatGNBSh+Z2nw9EPyZpInaWPzn4nshMo01VClEcW9s pfS5GiuvOS/ttaM6arTWoZ/RoaYumI4gjrF/t/FfHLwAKuwt/Wrv33Ur9ZPGF8CM zHxe0Jpq8kZJMAcRrCQFyfQwwLf0AZ4mU9sMEynI1v547pbQ5IN4x3xvccLYSPCz 0VOo4PVwooErWysBh64ehmMI5ptJHyU9U0rsZLi7oBuK9M7bV1ZN3go/Yo5O6Mqo RF0AgbhfMyN1kw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:39:17 2025 by rpki-client