This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft File: tmDXgyCGDV7-cp4gi160sqvr4Hg.mft (raw, json) Hash identifier: Tm4FYGRT2eKZGbbH3oEe2goWYkzqHX704wkilTSxWCE= Subject key identifier: D9:CF:27:C3:91:AE:D4:08:DA:C5:C9:C2:57:EB:AB:8F:9C:FC:33:E4 Authority key identifier: B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78 Certificate issuer: /CN=b660d78320860d5efe729e208b5eb4b2abebe078 Certificate serial: 019AF23FBB9A9103D0934C8058DABE1475B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft Manifest number: 0D14 Signing time: Sat 06 Dec 2025 06:00:54 +0000 Manifest this update: Sat 06 Dec 2025 06:00:54 +0000 Manifest next update: Sun 07 Dec 2025 06:00:54 +0000 Files and hashes: 1: H_s46FVu3VtqmBdzQOsgFtOpwm4.roa (hash: xXfRZ05adaRJT3b+JBMiwuYhoS+v9eiqRiPqJaWYY3s=) 2: tmDXgyCGDV7-cp4gi160sqvr4Hg.crl (hash: 7zyGbVPwu9Hy96xV0XJSMq8R6MefmSKyihavTe3obmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:bb:9a:91:03:d0:93:4c:80:58:da:be:14:75:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b660d78320860d5efe729e208b5eb4b2abebe078 Validity Not Before: Dec 6 06:00:54 2025 GMT Not After : Dec 7 06:00:54 2025 GMT Subject: CN=d9cf27c391aed408dac5c9c257ebab8f9cfc33e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d2:5f:09:2e:f2:12:24:f0:b9:7c:7e:c5:bf: 5b:42:e3:b9:bf:c0:13:91:a0:15:66:79:d6:6f:a7: df:91:7e:52:d1:ab:4c:94:38:02:72:b2:42:22:16: f7:d0:b2:38:9a:ff:2d:88:f0:7f:4f:ba:ac:5e:6c: 01:5f:9d:6d:fc:45:35:14:08:8b:f3:3f:a1:47:49: 70:0f:57:17:a7:75:60:c2:ee:a0:f4:d7:0b:4a:54: 8f:19:74:1b:0b:17:20:cf:82:95:d6:3a:56:ff:0a: ca:2a:44:42:79:71:12:0d:c6:71:cc:41:6a:90:13: 18:d5:f0:27:34:c0:96:bb:38:91:75:5c:12:ea:3e: cd:ac:8e:ae:15:28:72:95:68:d1:02:7f:a3:22:86: f6:8f:3b:f7:3e:a4:68:6a:c3:57:58:24:5b:83:b1: db:eb:9d:5f:3c:9f:30:7c:d8:9e:c1:1f:c6:14:89: 45:54:47:75:d2:ea:02:c2:b7:8f:21:38:f6:87:5b: e7:d9:48:48:2c:94:77:0f:2a:53:b5:85:9e:80:6b: 0b:1e:e4:e2:93:08:0d:6d:a2:44:d1:56:ab:ba:11: 09:f6:c5:2c:12:d4:f9:a0:be:60:32:5d:6d:09:51: 9c:08:0a:6a:96:4f:d4:c5:f4:7e:05:f3:d5:46:0b: 51:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CF:27:C3:91:AE:D4:08:DA:C5:C9:C2:57:EB:AB:8F:9C:FC:33:E4 X509v3 Authority Key Identifier: keyid:B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f3:62:1a:72:6d:16:26:59:d9:92:c7:93:d9:b6:2b:10:76: ca:f6:28:24:ac:b4:57:d4:3c:28:8f:e2:36:e3:57:24:39:de: f9:8a:1a:07:9c:37:df:fe:dd:50:62:9f:15:79:8e:80:bd:c3: a6:8a:d5:6b:6a:7c:d4:e1:ce:5f:19:fe:b5:5a:dd:0b:f7:e7: b9:51:89:24:a3:65:d8:ae:b5:29:d3:d7:34:fe:90:db:8a:97: e1:72:60:e2:3f:0e:91:71:73:f8:75:db:5e:5d:2e:91:e0:02: 3b:3e:8e:ef:7d:a3:d0:a1:89:7b:2d:06:dc:9e:dc:c6:5d:14: 1d:cf:07:54:13:fa:6f:25:a4:2e:b8:68:e3:58:37:2a:a3:fa: 52:09:ed:3c:75:60:a1:c0:48:f6:e1:21:5b:4d:35:43:91:3a: 98:8f:6d:ff:ae:d9:32:f2:64:25:d7:3b:6d:45:ee:55:f3:8b: e6:1d:86:a3:17:79:26:6a:12:f3:b3:33:1c:29:31:58:52:54: cc:05:03:65:53:da:bd:49:2a:77:da:20:34:0c:06:b2:54:bc: 8c:b7:ef:82:9f:17:e0:3c:6e:d0:1c:25:69:1d:8c:c7:a9:53: 7a:17:23:7e:b1:cc:86:37:76:8d:b7:d7:03:a6:2e:ce:81:e0: 03:d2:39:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7uakQPQk0yAWNq+FHWyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NjBkNzgzMjA4NjBkNWVmZTcyOWUyMDhiNWViNGIyYWJl YmUwNzgwHhcNMjUxMjA2MDYwMDU0WhcNMjUxMjA3MDYwMDU0WjAzMTEwLwYDVQQD EyhkOWNmMjdjMzkxYWVkNDA4ZGFjNWM5YzI1N2ViYWI4ZjljZmMzM2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptJfCS7yEiTwuXx+xb9bQuO5v8AT kaAVZnnWb6ffkX5S0atMlDgCcrJCIhb30LI4mv8tiPB/T7qsXmwBX51t/EU1FAiL 8z+hR0lwD1cXp3Vgwu6g9NcLSlSPGXQbCxcgz4KV1jpW/wrKKkRCeXESDcZxzEFq kBMY1fAnNMCWuziRdVwS6j7NrI6uFShylWjRAn+jIob2jzv3PqRoasNXWCRbg7Hb 651fPJ8wfNiewR/GFIlFVEd10uoCwrePITj2h1vn2UhILJR3DypTtYWegGsLHuTi kwgNbaJE0VaruhEJ9sUsEtT5oL5gMl1tCVGcCApqlk/UxfR+BfPVRgtRKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnPJ8ORrtQI2sXJwlfrq4+c/DPkMB8GA1UdIwQY MBaAFLZg14Mghg1e/nKeIItetLKr6+B4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG1EWGd5Q0dEVjctY3A0Z2kxNjBzcXZyNEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9kYWYyMTItZjAwOS00YmQ0LTg3NGQt NjI0YzNlNzg4Y2RmLzEvdG1EWGd5Q0dEVjctY3A0Z2kxNjBzcXZyNEhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9kYWYyMTItZjAwOS00YmQ0LTg3NGQtNjI0YzNlNzg4Y2Rm LzEvdG1EWGd5Q0dEVjctY3A0Z2kxNjBzcXZyNEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfNiGnJt FiZZ2ZLHk9m2KxB2yvYoJKy0V9Q8KI/iNuNXJDne+YoaB5w33/7dUGKfFXmOgL3D porVa2p81OHOXxn+tVrdC/fnuVGJJKNl2K61KdPXNP6Q24qX4XJg4j8OkXFz+HXb Xl0ukeACOz6O732j0KGJey0G3J7cxl0UHc8HVBP6byWkLrho41g3KqP6UgntPHVg ocBI9uEhW001Q5E6mI9t/67ZMvJkJdc7bUXuVfOL5h2Goxd5JmoS87MzHCkxWFJU zAUDZVPavUkqd9ogNAwGslS8jLfvgp8X4Dxu0BwlaR2Mx6lTehcjfrHMhjd2jbfX A6YuzoHgA9I5oA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:34 2025 by rpki-client