This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft File: temngBMLfFKwEP1xOL8LcjviB8M.mft (raw, json) Hash identifier: 0ev9SMyAJ/NectVpNu1ZS93oDShZv4WkYFKpfgXrTMU= Subject key identifier: 18:56:2E:9B:E0:06:08:FE:8D:0A:4A:BD:54:A1:F2:60:B1:A0:BA:A9 Authority key identifier: B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3 Certificate issuer: /CN=b5e9a780130b7c52b010fd7138bf0b723be207c3 Certificate serial: 019AF50B27691A933835510253BDE132DFC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft Manifest number: 0666 Signing time: Sat 06 Dec 2025 19:02:20 +0000 Manifest this update: Sat 06 Dec 2025 19:02:20 +0000 Manifest next update: Sun 07 Dec 2025 19:02:20 +0000 Files and hashes: 1: KrjmV6dA9ju5vRf_FpDJeVff1Zg.roa (hash: 0t4qGhYAlNNMecASk36kf27GCM4uwfcfNK8pYxGSBbg=) 2: temngBMLfFKwEP1xOL8LcjviB8M.crl (hash: FMkhzTY2sN4hlU4z2lzYaTRPNF6eez7g8TEIBI4Etb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:27:69:1a:93:38:35:51:02:53:bd:e1:32:df:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5e9a780130b7c52b010fd7138bf0b723be207c3 Validity Not Before: Dec 6 19:02:20 2025 GMT Not After : Dec 7 19:02:20 2025 GMT Subject: CN=18562e9be00608fe8d0a4abd54a1f260b1a0baa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:28:48:b1:8e:b5:50:92:ea:5b:0e:aa:fb:5d: 87:a7:0d:28:9b:89:6f:e8:b5:24:0f:87:33:7b:91: 7c:b5:72:90:12:00:c4:35:1d:0b:9e:e4:f2:b2:5f: 2b:2a:bd:ee:5c:b3:59:a2:57:e9:f0:7a:0c:07:7a: f6:f0:08:d0:83:ce:7b:90:7e:54:16:97:4c:63:91: fd:e6:08:d5:eb:b7:1c:f1:05:32:3b:b1:3a:67:f3: ae:eb:f3:83:85:8f:87:2f:53:24:8a:e5:be:cd:10: e7:59:f8:df:5b:24:82:75:31:fd:6f:15:75:9e:bb: ca:97:1c:e1:22:9b:d8:d9:04:3e:6c:f0:76:63:25: 13:86:8b:c4:f0:c0:2b:34:35:11:63:d5:2d:ef:f2: b7:ea:01:1f:0a:86:d4:b3:97:92:14:74:9f:c2:09: 70:e5:27:00:a5:c7:ad:e9:16:7c:a0:71:5c:65:f8: 54:d4:36:e6:a6:09:b5:25:12:51:4d:36:67:ff:e3: 70:15:30:0f:69:a8:50:7c:85:e3:f2:08:eb:70:fa: e3:85:5c:85:e5:6b:da:b4:2a:b5:3d:da:a8:85:19: d0:94:87:67:8c:fe:6f:b3:1f:20:e9:26:5e:50:06: 0b:36:d5:7d:7c:64:cd:7d:ad:86:24:5a:d5:ab:b6: 67:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:56:2E:9B:E0:06:08:FE:8D:0A:4A:BD:54:A1:F2:60:B1:A0:BA:A9 X509v3 Authority Key Identifier: keyid:B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a7:0f:08:a8:e9:d8:1d:e0:73:33:0e:55:a2:92:a3:35:64: 64:4c:f9:29:9d:d5:7c:3f:cf:d9:cf:71:c9:e6:6a:77:40:ef: 6c:7e:f9:8a:f0:9a:eb:49:4d:eb:53:1f:42:2a:58:98:49:29: 4d:c4:21:3e:de:e6:5d:1f:2f:1f:6e:ac:d8:3f:64:cc:1c:11: af:2b:09:21:76:90:67:b3:67:02:72:b3:24:56:c5:dd:86:9f: 54:e4:31:01:99:b4:b1:ea:d7:d6:72:58:b8:70:ad:9c:2f:70: 48:60:38:87:40:d2:53:d7:b4:11:6a:db:5d:be:be:2d:58:b0: 75:da:5e:bf:7c:56:bf:81:ce:41:27:0b:12:6b:6f:20:ba:18: f2:91:dd:be:7e:2f:23:f4:9e:72:15:37:fc:2c:bc:ac:91:c7: 99:1a:3c:07:54:7b:75:6c:c5:5d:9d:db:6f:f5:41:7c:5d:39: fc:6b:6e:13:1c:1d:19:3b:e5:a3:4e:c8:a5:3d:6f:1b:dd:3a: 5a:25:95:2c:0d:d4:6b:5c:0d:16:13:73:7b:cb:46:b9:32:87: a7:b1:fc:52:6a:fe:37:b9:ce:e0:b4:be:78:40:65:da:a6:6f: db:23:6f:1b:d1:4e:8a:f9:d3:fe:d0:7f:79:40:00:58:88:1b: 71:b9:f9:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CydpGpM4NVECU73hMt/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZTlhNzgwMTMwYjdjNTJiMDEwZmQ3MTM4YmYwYjcyM2Jl MjA3YzMwHhcNMjUxMjA2MTkwMjIwWhcNMjUxMjA3MTkwMjIwWjAzMTEwLwYDVQQD EygxODU2MmU5YmUwMDYwOGZlOGQwYTRhYmQ1NGExZjI2MGIxYTBiYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ihIsY61UJLqWw6q+12Hpw0om4lv 6LUkD4cze5F8tXKQEgDENR0LnuTysl8rKr3uXLNZolfp8HoMB3r28AjQg857kH5U FpdMY5H95gjV67cc8QUyO7E6Z/Ou6/ODhY+HL1MkiuW+zRDnWfjfWySCdTH9bxV1 nrvKlxzhIpvY2QQ+bPB2YyUThovE8MArNDURY9Ut7/K36gEfCobUs5eSFHSfwglw 5ScApcet6RZ8oHFcZfhU1Dbmpgm1JRJRTTZn/+NwFTAPaahQfIXj8gjrcPrjhVyF 5WvatCq1PdqohRnQlIdnjP5vsx8g6SZeUAYLNtV9fGTNfa2GJFrVq7ZnpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhWLpvgBgj+jQpKvVSh8mCxoLqpMB8GA1UdIwQY MBaAFLXpp4ATC3xSsBD9cTi/C3I74gfDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGVtbmdCTUxmRkt3RVAxeE9MOExjanZpQjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zYjAwMDktZjE1Mi00ZDljLWFmOTYt YTVlNWQwMDg0NzAxLzEvdGVtbmdCTUxmRkt3RVAxeE9MOExjanZpQjhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8zYjAwMDktZjE1Mi00ZDljLWFmOTYtYTVlNWQwMDg0NzAx LzEvdGVtbmdCTUxmRkt3RVAxeE9MOExjanZpQjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATacPCKjp 2B3gczMOVaKSozVkZEz5KZ3VfD/P2c9xyeZqd0DvbH75ivCa60lN61MfQipYmEkp TcQhPt7mXR8vH26s2D9kzBwRrysJIXaQZ7NnAnKzJFbF3YafVOQxAZm0serX1nJY uHCtnC9wSGA4h0DSU9e0EWrbXb6+LViwddpev3xWv4HOQScLEmtvILoY8pHdvn4v I/SechU3/Cy8rJHHmRo8B1R7dWzFXZ3bb/VBfF05/GtuExwdGTvlo07IpT1vG906 WiWVLA3Ua1wNFhNze8tGuTKHp7H8Umr+N7nO4LS+eEBl2qZv2yNvG9FOivnT/tB/ eUAAWIgbcbn5hA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:40:49 2025 by rpki-client