This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft File: TgTgpximE5qcZfDUiGu4JxTaZoI.mft (raw, json) Hash identifier: W8r6yMyg//9ZTYQ0x2RRZNXPnK1f7Bmxru55dl817wY= Subject key identifier: 0B:18:EC:94:31:D9:7B:F4:2A:E7:EF:57:91:07:6F:3D:B1:6F:59:3E Authority key identifier: 4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82 Certificate issuer: /CN=4e04e0a718a6139a9c65f0d4886bb82714da6682 Certificate serial: 019AF12EE743DF061F3C34ABBD4F4938CBBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:02:54 +0000 Manifest this update: Sat 06 Dec 2025 01:02:54 +0000 Manifest next update: Sun 07 Dec 2025 01:02:54 +0000 Files and hashes: 1: TgTgpximE5qcZfDUiGu4JxTaZoI.crl (hash: UGf3TT4sywevV+DSWJrIGy+TcshrR0B4BbllSePyTd8=) 2: _DVbXJIlrc4WueVJodx5_dUQQGU.roa (hash: qLnLYdx/R1C59idEfb9lAoJsSeK5qnRHJhL7xW0LEkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:e7:43:df:06:1f:3c:34:ab:bd:4f:49:38:cb:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e04e0a718a6139a9c65f0d4886bb82714da6682 Validity Not Before: Dec 6 01:02:54 2025 GMT Not After : Dec 7 01:02:54 2025 GMT Subject: CN=0b18ec9431d97bf42ae7ef5791076f3db16f593e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e0:d5:c8:88:b1:9e:58:c6:56:d8:5c:1b:b7: 2f:52:3e:b6:20:79:97:3c:dc:2e:f2:9b:de:c0:86: ba:05:30:77:4d:37:24:a3:d1:8f:e8:e9:04:1b:4f: 29:58:90:14:f2:d1:5b:e8:64:07:0f:1d:17:ef:ef: 9e:62:b2:3b:58:5b:88:d1:cf:45:27:99:25:e8:32: d1:24:4d:0b:58:4e:0a:fc:46:f7:39:e6:d5:8e:9c: e1:88:27:6e:4a:e4:1f:3f:b6:ad:01:9b:4c:0f:e1: e6:12:c2:2b:cb:9a:39:0b:27:42:d8:68:83:62:29: 70:37:d2:58:1b:88:95:01:58:01:35:1e:da:86:4a: 29:9c:07:93:b2:47:cf:dd:cb:c5:31:5d:38:bb:d9: e8:2f:5c:c3:7b:00:dc:e6:e3:d9:0f:38:33:91:42: b0:a4:16:bc:e3:48:35:e7:ee:8b:ad:f9:a8:95:18: b0:50:09:60:cc:c0:17:64:c9:73:b3:0f:15:82:9e: 2d:47:b9:81:a8:15:33:c9:d6:3e:2e:8f:c4:bb:59: 99:e9:99:ca:2d:0d:f5:c6:b1:ed:23:d5:26:2e:0a: fe:cc:8d:d8:19:27:a2:a9:b4:af:4d:8e:ae:9a:91: fa:e6:01:b9:a0:28:a7:4b:96:21:c0:ed:ce:06:82: a0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:18:EC:94:31:D9:7B:F4:2A:E7:EF:57:91:07:6F:3D:B1:6F:59:3E X509v3 Authority Key Identifier: keyid:4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:42:d4:88:1a:15:f9:dc:83:e4:5a:ea:b6:b4:4d:3c:97:69: 32:b1:f5:e0:96:d1:1b:35:54:95:21:eb:d4:4e:48:31:22:ca: ed:76:8d:5c:eb:46:10:f8:4b:0b:9c:d2:1e:68:a8:e8:76:af: d3:ea:8d:ab:8b:ee:e4:4c:93:72:55:94:14:77:76:18:5f:d3: ba:e0:d2:9f:a1:ab:b8:d5:1f:9d:d2:9e:35:37:bd:52:3f:ef: 69:fd:cb:a2:dc:b8:bc:59:ed:97:b1:fd:02:55:2e:43:61:da: 8d:ab:3b:81:e7:4b:a1:86:d4:3d:41:20:d6:d8:93:c5:b3:b7: 2d:ed:59:e3:f4:3c:d3:e4:4d:1f:d9:99:b7:2f:bb:9e:a8:80: cf:4f:52:e4:71:f5:b0:26:b7:da:d2:9f:4f:1c:95:93:07:7c: f7:2f:8f:11:a1:e8:e4:cd:2e:a8:2d:eb:a4:db:83:03:20:4d: 2b:9f:94:0a:2e:f6:14:5f:9b:0c:c9:8b:d6:29:0e:b3:bf:83: a2:51:c3:10:75:5a:1e:4b:18:08:e3:b2:43:07:1b:1b:4a:af: 0b:b2:2e:e8:3e:87:93:a8:84:a5:fe:2c:0b:eb:64:ed:1b:aa: 06:27:eb:31:2a:e1:b2:49:3f:c4:07:1e:e0:c6:b5:a3:2c:46: 7f:1e:60:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLudD3wYfPDSrvU9JOMu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMDRlMGE3MThhNjEzOWE5YzY1ZjBkNDg4NmJiODI3MTRk YTY2ODIwHhcNMjUxMjA2MDEwMjU0WhcNMjUxMjA3MDEwMjU0WjAzMTEwLwYDVQQD EygwYjE4ZWM5NDMxZDk3YmY0MmFlN2VmNTc5MTA3NmYzZGIxNmY1OTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuDVyIixnljGVthcG7cvUj62IHmX PNwu8pvewIa6BTB3TTcko9GP6OkEG08pWJAU8tFb6GQHDx0X7++eYrI7WFuI0c9F J5kl6DLRJE0LWE4K/Eb3OebVjpzhiCduSuQfP7atAZtMD+HmEsIry5o5CydC2GiD YilwN9JYG4iVAVgBNR7ahkopnAeTskfP3cvFMV04u9noL1zDewDc5uPZDzgzkUKw pBa840g15+6LrfmolRiwUAlgzMAXZMlzsw8Vgp4tR7mBqBUzydY+Lo/Eu1mZ6ZnK LQ31xrHtI9UmLgr+zI3YGSeiqbSvTY6umpH65gG5oCinS5YhwO3OBoKgAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsY7JQx2Xv0KufvV5EHbz2xb1k+MB8GA1UdIwQY MBaAFE4E4KcYphOanGXw1IhruCcU2maCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGdUZ3B4aW1FNXFjWmZEVWlHdTRKeFRhWm9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YWZlYWItMDJiOS00ZWJkLWJmYTIt OGU4MGI0OTZhMDNlLzEvVGdUZ3B4aW1FNXFjWmZEVWlHdTRKeFRhWm9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80YWZlYWItMDJiOS00ZWJkLWJmYTItOGU4MGI0OTZhMDNl LzEvVGdUZ3B4aW1FNXFjWmZEVWlHdTRKeFRhWm9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOULUiBoV +dyD5FrqtrRNPJdpMrH14JbRGzVUlSHr1E5IMSLK7XaNXOtGEPhLC5zSHmio6Hav 0+qNq4vu5EyTclWUFHd2GF/TuuDSn6GruNUfndKeNTe9Uj/vaf3Loty4vFntl7H9 AlUuQ2Hajas7gedLoYbUPUEg1tiTxbO3Le1Z4/Q80+RNH9mZty+7nqiAz09S5HH1 sCa32tKfTxyVkwd89y+PEaHo5M0uqC3rpNuDAyBNK5+UCi72FF+bDMmL1ikOs7+D olHDEHVaHksYCOOyQwcbG0qvC7Iu6D6Hk6iEpf4sC+tk7RuqBifrMSrhskk/xAce 4Ma1oyxGfx5gkA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:24 2025 by rpki-client