This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft File: TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft (raw, json) Hash identifier: JYYZ90wHis1kVNR1WXBVf+QX20D9pSEgHtkt4NPECqk= Subject key identifier: DE:22:ED:29:3F:36:EC:69:23:17:11:77:75:B1:CE:BF:8A:28:23:5A Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76 Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976 Certificate serial: 019AF3C08B81809CF3D679B0FFAE652772D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 13:01:13 +0000 Manifest this update: Sat 06 Dec 2025 13:01:13 +0000 Manifest next update: Sun 07 Dec 2025 13:01:13 +0000 Files and hashes: 1: TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl (hash: c7wdnbYQvG93hwdJrBW6RkvoWW56KLKP4LzbQj7PPLQ=) 2: bs1HYE5HpmfRDe1IWRWlAw4_YbQ.roa (hash: /9wCX+4PJTuFTnMcFlhOot3PdJrbFSkbu3ySPd314JY=) 3: kvulLtgS7l9j5cL5cr_z1UEgt1M.roa (hash: lwycUBIUeNB/fogCEgMYVAepQLASER5k8Ye40EXBAoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:8b:81:80:9c:f3:d6:79:b0:ff:ae:65:27:72:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976 Validity Not Before: Dec 6 13:01:13 2025 GMT Not After : Dec 7 13:01:13 2025 GMT Subject: CN=de22ed293f36ec692317117775b1cebf8a28235a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:17:ad:dd:3e:5b:c1:d1:de:cd:59:8b:25:16: 46:eb:47:80:d2:43:30:36:ec:95:b9:6c:8d:76:1b: 90:c6:ac:a7:38:4b:7e:40:4a:7b:47:5a:73:a5:95: cc:45:9a:b0:12:73:b1:66:7a:d2:a1:ea:b6:ad:0e: 6b:9a:77:c8:be:d6:10:ec:6f:34:e1:4b:b9:22:5b: e6:5b:3b:27:ef:a9:01:f5:71:67:18:e8:c7:ff:fe: 4e:09:aa:34:d3:52:87:29:ec:13:cf:65:73:d1:cb: b9:c1:bb:df:4d:63:2d:a9:ba:81:e7:e4:b2:10:8e: 5f:0d:5e:5c:20:7c:35:4a:23:34:02:e5:bc:78:28: e0:ab:a5:db:12:df:c2:0f:e9:ef:e3:83:9f:58:c6: 8c:7b:37:44:90:8c:39:e2:49:e1:fd:94:02:f9:ed: c6:d1:2d:3a:3d:17:a4:0f:48:9d:3a:cf:04:b4:a3: 7a:61:53:0e:a4:20:4d:07:16:6b:7f:8d:92:3d:3d: 7b:01:e5:56:6e:ed:b0:ca:d3:bb:83:e6:9c:b4:be: 03:b3:a9:86:fc:9f:55:f0:f0:1b:0c:6c:ca:3b:a7: d5:df:dc:2b:60:72:af:0d:f5:36:51:08:6a:dc:d3: f1:22:e0:f0:cd:ba:31:1d:22:4f:35:5d:d5:13:7c: 6d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:22:ED:29:3F:36:EC:69:23:17:11:77:75:B1:CE:BF:8A:28:23:5A X509v3 Authority Key Identifier: keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c8:42:80:4a:89:48:76:4f:12:40:b3:f9:e1:6c:e9:d5:47: 9c:40:77:04:bd:4d:4a:d9:1d:f4:c2:1e:6d:7f:1d:31:a8:ef: dc:f8:52:cd:fb:a9:bd:94:33:ce:d6:16:99:43:20:30:fa:65: 50:a9:e6:90:17:91:41:f3:2e:5e:98:7b:5d:92:1d:e6:16:a4: 9e:6f:b7:77:09:96:c3:8b:70:75:ed:bc:26:75:cd:3e:aa:fe: bc:c3:19:46:82:0b:51:1c:c4:8c:7f:b8:77:63:8f:5f:c0:b3: 38:8f:93:00:7a:f2:27:c4:5c:5d:f0:60:07:08:8c:e8:f8:f4: de:8a:ee:50:87:6b:ef:ed:e6:8b:3d:22:ea:2d:7e:14:68:2a: bf:e5:21:70:af:96:5f:64:73:7a:ff:cc:62:5b:19:2b:a1:00: 9f:42:e1:21:32:d8:f2:c7:14:56:7c:35:78:10:a5:15:35:55: 4e:81:ba:57:30:fe:77:60:ef:5a:92:06:d2:7a:32:d2:dc:37: 99:de:1e:1b:84:30:0f:83:1a:5e:53:90:38:69:28:00:43:02: 17:3b:99:e5:79:42:4d:df:29:76:18:4e:69:90:05:a6:aa:ef: 85:82:9d:c4:7f:88:5a:28:3d:35:3c:9b:5a:8f:02:3a:70:94: fc:f8:5c:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwIuBgJzz1nmw/65lJ3LSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjY2JjNWUwNDVlYWE1Zjc2MmE5MTQ2MjQ0YzE5MjQ4YjYy YmE5NzYwHhcNMjUxMjA2MTMwMTEzWhcNMjUxMjA3MTMwMTEzWjAzMTEwLwYDVQQD EyhkZTIyZWQyOTNmMzZlYzY5MjMxNzExNzc3NWIxY2ViZjhhMjgyMzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxet3T5bwdHezVmLJRZG60eA0kMw NuyVuWyNdhuQxqynOEt+QEp7R1pzpZXMRZqwEnOxZnrSoeq2rQ5rmnfIvtYQ7G80 4Uu5IlvmWzsn76kB9XFnGOjH//5OCao001KHKewTz2Vz0cu5wbvfTWMtqbqB5+Sy EI5fDV5cIHw1SiM0AuW8eCjgq6XbEt/CD+nv44OfWMaMezdEkIw54knh/ZQC+e3G 0S06PRekD0idOs8EtKN6YVMOpCBNBxZrf42SPT17AeVWbu2wytO7g+actL4Ds6mG /J9V8PAbDGzKO6fV39wrYHKvDfU2UQhq3NPxIuDwzboxHSJPNV3VE3xtqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4i7Sk/NuxpIxcRd3Wxzr+KKCNaMB8GA1UdIwQY MBaAFEzLxeBF6qX3YqkUYkTBkki2K6l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDct YTdjNTlkZGNmNzZiLzEvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDctYTdjNTlkZGNmNzZi LzEvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8hCgEqJ SHZPEkCz+eFs6dVHnEB3BL1NStkd9MIebX8dMajv3PhSzfupvZQzztYWmUMgMPpl UKnmkBeRQfMuXph7XZId5haknm+3dwmWw4twde28JnXNPqr+vMMZRoILURzEjH+4 d2OPX8CzOI+TAHryJ8RcXfBgBwiM6Pj03oruUIdr7+3miz0i6i1+FGgqv+UhcK+W X2Rzev/MYlsZK6EAn0LhITLY8scUVnw1eBClFTVVToG6VzD+d2DvWpIG0noy0tw3 md4eG4QwD4MaXlOQOGkoAEMCFzuZ5XlCTd8pdhhOaZAFpqrvhYKdxH+IWig9NTyb Wo8COnCU/Phc6g== -----END CERTIFICATE-----Generated at Sat Dec 6 15:38:01 2025 by rpki-client