This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft File: TgfHPboamfW7wV94xjkKqZwmmCQ.mft (raw, json) Hash identifier: mE4S9pNT94c5qSn5cTrz1kwse6lVH2BCP4kFR7jsBEQ= Subject key identifier: AA:DB:02:F5:81:48:95:9A:FB:E0:34:9F:2C:02:DA:C4:CD:AF:C3:EF Authority key identifier: 4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24 Certificate issuer: /CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824 Certificate serial: 019AF50B7875709C8BAAA6635A2C952EF42E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft Manifest number: 152A Signing time: Sat 06 Dec 2025 19:02:40 +0000 Manifest this update: Sat 06 Dec 2025 19:02:40 +0000 Manifest next update: Sun 07 Dec 2025 19:02:40 +0000 Files and hashes: 1: TgfHPboamfW7wV94xjkKqZwmmCQ.crl (hash: RxF0Ua/1J5amfamnTF2dJKsv1RNAIMHsKacvOK3Zdok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:78:75:70:9c:8b:aa:a6:63:5a:2c:95:2e:f4:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824 Validity Not Before: Dec 6 19:02:40 2025 GMT Not After : Dec 7 19:02:40 2025 GMT Subject: CN=aadb02f58148959afbe0349f2c02dac4cdafc3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7c:0d:10:ea:28:cf:a5:ba:97:5e:4d:ef:df: 02:77:4c:c7:92:ef:28:27:c1:e0:a6:04:b1:50:93: 81:01:1b:41:f7:64:e2:0f:7f:8a:eb:58:f4:4f:18: 91:c8:74:3b:48:32:8d:33:c8:01:6a:9f:e8:f1:28: e3:bf:64:34:86:10:db:0e:85:9a:1a:b7:9f:42:aa: 51:43:4a:0b:4c:7e:02:7b:18:39:7c:05:89:d7:e8: e3:f2:5e:b9:8e:d8:aa:9d:27:cc:41:45:a8:71:0b: 07:2f:a7:1b:75:24:fc:56:36:06:0a:54:a8:fe:0b: 12:c2:95:21:ba:63:66:c1:d8:13:b2:85:2b:b7:24: 22:d7:af:1f:1a:6e:78:84:e9:3d:da:9d:82:d4:39: d7:0b:8f:f2:79:f5:3c:02:49:90:da:6e:c8:bc:24: 1c:9e:cc:90:a0:cf:c1:d0:c0:3e:cd:37:d9:b5:04: 10:84:cb:21:47:cf:97:d0:f0:00:12:31:75:76:28: 55:c6:ce:d8:54:78:ca:14:48:2b:64:38:7d:29:40: 3b:d7:55:42:f6:e8:e3:20:37:f7:81:c4:15:3f:15: 92:2e:9a:b8:f8:3a:a5:dd:1c:15:69:35:fe:8c:b8: 30:f4:a9:1c:1c:c1:c0:7d:a4:61:8d:63:3e:09:50: 66:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DB:02:F5:81:48:95:9A:FB:E0:34:9F:2C:02:DA:C4:CD:AF:C3:EF X509v3 Authority Key Identifier: keyid:4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:66:ef:0a:3b:e5:14:37:ca:e3:69:02:b2:62:1d:73:93:5d: f4:2a:46:ca:98:27:e4:37:fd:68:e5:a9:98:dd:cc:2a:09:6a: 30:d9:6a:66:4d:32:39:13:32:53:3e:73:5f:9e:14:61:ff:0e: f7:01:41:9c:34:80:2c:94:85:d0:f2:76:c5:de:5f:24:71:88: 02:ea:35:6c:8e:f4:13:6f:ac:e9:4f:f5:ab:95:0a:c5:18:3d: 8f:5f:62:73:35:ac:7d:cf:a5:b9:df:aa:6e:db:7d:82:a3:b8: ab:29:d5:a7:8a:c3:20:3c:20:39:8b:ac:e4:c7:c6:be:78:a0: 11:e2:65:98:fd:56:0b:06:28:60:47:d5:6b:3d:a6:fd:d9:30: 5a:d2:b7:f3:1e:75:a0:21:c9:ef:c5:6b:31:65:45:b0:df:fa: 18:4a:39:4e:85:04:9e:17:02:0e:18:9f:c4:51:4d:ad:b6:3c: 5b:19:07:7d:1a:30:87:40:cd:6b:44:6f:42:b0:ef:24:ba:91: 38:bb:01:20:eb:1b:5c:92:95:41:c1:ba:86:c5:b1:76:ff:e5: 8d:ea:b1:bc:38:34:6d:a2:51:4f:fe:5b:ac:23:44:46:1e:72: 7d:16:8a:7e:4d:70:a8:31:13:7b:3f:19:6b:da:49:c1:fa:57: 7a:d5:00:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C3h1cJyLqqZjWiyVLvQuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMDdjNzNkYmExYTk5ZjViYmMxNWY3OGM2MzkwYWE5OWMy Njk4MjQwHhcNMjUxMjA2MTkwMjQwWhcNMjUxMjA3MTkwMjQwWjAzMTEwLwYDVQQD EyhhYWRiMDJmNTgxNDg5NTlhZmJlMDM0OWYyYzAyZGFjNGNkYWZjM2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnwNEOooz6W6l15N798Cd0zHku8o J8HgpgSxUJOBARtB92TiD3+K61j0TxiRyHQ7SDKNM8gBap/o8Sjjv2Q0hhDbDoWa GrefQqpRQ0oLTH4Cexg5fAWJ1+jj8l65jtiqnSfMQUWocQsHL6cbdST8VjYGClSo /gsSwpUhumNmwdgTsoUrtyQi168fGm54hOk92p2C1DnXC4/yefU8AkmQ2m7IvCQc nsyQoM/B0MA+zTfZtQQQhMshR8+X0PAAEjF1dihVxs7YVHjKFEgrZDh9KUA711VC 9ujjIDf3gcQVPxWSLpq4+Dql3RwVaTX+jLgw9KkcHMHAfaRhjWM+CVBm6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrbAvWBSJWa++A0nywC2sTNr8PvMB8GA1UdIwQY MBaAFE4Hxz26Gpn1u8FfeMY5CqmcJpgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGdmSFBib2FtZlc3d1Y5NHhqa0txWndtbUNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xZjFlN2ItNTkwNy00OGMxLTkwZmQt NTYwMjcxMmJhYTViLzEvVGdmSFBib2FtZlc3d1Y5NHhqa0txWndtbUNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8xZjFlN2ItNTkwNy00OGMxLTkwZmQtNTYwMjcxMmJhYTVi LzEvVGdmSFBib2FtZlc3d1Y5NHhqa0txWndtbUNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmbvCjvl FDfK42kCsmIdc5Nd9CpGypgn5Df9aOWpmN3MKglqMNlqZk0yORMyUz5zX54UYf8O 9wFBnDSALJSF0PJ2xd5fJHGIAuo1bI70E2+s6U/1q5UKxRg9j19iczWsfc+lud+q btt9gqO4qynVp4rDIDwgOYus5MfGvnigEeJlmP1WCwYoYEfVaz2m/dkwWtK38x51 oCHJ78VrMWVFsN/6GEo5ToUEnhcCDhifxFFNrbY8WxkHfRowh0DNa0RvQrDvJLqR OLsBIOsbXJKVQcG6hsWxdv/ljeqxvDg0baJRT/5brCNERh5yfRaKfk1wqDETez8Z a9pJwfpXetUA9w== -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:00 2025 by rpki-client