This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft File: TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft (raw, json) Hash identifier: CJNJdzujv+5nrbX9RzZ2rUdAONSXx21x1/+yFDoHehA= Subject key identifier: A8:FF:26:19:0D:68:C2:F8:A4:42:0A:CD:86:80:B3:78:02:B2:FF:21 Authority key identifier: 4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19 Certificate issuer: /CN=4c61d118479b5222ef0f864167cac5b4c07cc219 Certificate serial: 019AF0BF27AE0A5962B56C8FF520F167469C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:00:50 +0000 Manifest this update: Fri 05 Dec 2025 23:00:50 +0000 Manifest next update: Sat 06 Dec 2025 23:00:50 +0000 Files and hashes: 1: TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl (hash: VKw4bEDw5P4AbJQhfpWZwhgcHzA5wY5RRQZJlchXcR4=) 2: tbYt8CsTUjvQCfPmxRHFnIb3gng.roa (hash: Wb48gd6AG1NXeN5IWX1LXBtrKALPG/kRfuLTU0uD7B0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:27:ae:0a:59:62:b5:6c:8f:f5:20:f1:67:46:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c61d118479b5222ef0f864167cac5b4c07cc219 Validity Not Before: Dec 5 23:00:50 2025 GMT Not After : Dec 6 23:00:50 2025 GMT Subject: CN=a8ff26190d68c2f8a4420acd8680b37802b2ff21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:87:f9:15:9b:24:10:54:35:ba:27:7c:62:d4: dd:df:52:44:91:6f:62:96:ab:7c:64:fe:86:12:d9: bd:92:8a:46:f3:5b:fa:18:a8:6b:16:f3:a9:9f:b0: 8f:0c:09:23:fc:32:0d:2a:64:c2:11:8b:6e:21:34: 6e:51:20:d2:b9:fa:53:06:b0:7e:7c:44:03:dc:59: 64:14:a3:36:54:2e:3f:5f:f3:9e:3a:ce:97:01:aa: c9:7b:d9:be:1b:3a:54:f2:ef:87:5a:aa:15:3b:5f: b7:fc:d1:51:e9:2a:30:53:fe:0c:6b:22:ec:5c:32: e5:a9:49:77:03:7e:00:8c:87:de:c6:7d:30:6f:63: cc:84:87:34:ba:6f:99:a0:98:e4:07:12:95:39:16: 73:50:64:1e:da:1f:e3:4d:54:3f:e9:34:de:5e:c3: 7c:b3:22:8b:2d:ff:18:8d:e9:a8:02:2b:b2:78:9c: c1:b3:e8:d5:a5:fa:fa:cf:6c:77:0b:bb:66:cf:77: ad:1b:02:4d:8d:3f:7a:9b:b0:df:36:31:30:37:35: b4:d9:74:b4:10:33:1a:72:92:14:fc:73:cc:c4:5f: 0b:a2:9a:8c:8e:d5:e7:57:fa:c4:b6:b7:81:d0:5f: d8:87:8f:a8:d3:6a:1b:fe:26:29:b3:de:7e:a5:80: 7e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FF:26:19:0D:68:C2:F8:A4:42:0A:CD:86:80:B3:78:02:B2:FF:21 X509v3 Authority Key Identifier: keyid:4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:bb:fd:60:34:45:39:b7:b9:98:58:d1:20:b2:98:84:60:7a: 32:56:b6:f9:17:82:11:4c:46:02:76:62:71:87:db:68:81:63: ac:86:9d:aa:c9:31:a9:c4:22:15:8f:45:b7:c7:8b:2f:d7:b5: da:5d:bd:77:78:df:10:c2:33:ee:71:db:0d:cd:e3:a4:54:2c: 24:c3:57:d2:ed:8f:bb:85:99:72:60:57:dd:57:43:fe:9a:a5: 21:ff:4e:e1:1d:74:6c:e3:45:c4:4f:71:ab:25:24:c2:eb:c7: a1:bc:d9:63:b6:97:6c:ce:2a:6c:41:f7:38:15:94:1f:78:4a: 7b:16:b9:91:ac:d0:a4:17:69:0f:ec:a3:82:ef:65:e8:3f:bd: c9:25:d8:60:a2:66:f6:af:2d:97:fa:63:f7:86:2b:70:4d:e0: 17:57:82:7f:e3:36:3b:6a:9f:54:a2:95:ab:1f:d6:55:d4:55: a0:40:a1:8c:1b:23:fd:af:9f:86:96:6c:0c:4d:e0:e5:2d:09: 91:f1:23:48:7b:7e:af:6a:0a:96:2f:ab:49:bd:95:a0:18:9e: 2d:4f:6a:dd:f9:e0:ac:1f:38:75:35:19:e1:78:5d:11:c7:b4: 07:b2:ec:a4:cb:65:c9:7a:24:f0:93:62:34:b2:5d:de:e6:37: 67:6e:ef:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyeuCllitWyP9SDxZ0acMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNjFkMTE4NDc5YjUyMjJlZjBmODY0MTY3Y2FjNWI0YzA3 Y2MyMTkwHhcNMjUxMjA1MjMwMDUwWhcNMjUxMjA2MjMwMDUwWjAzMTEwLwYDVQQD EyhhOGZmMjYxOTBkNjhjMmY4YTQ0MjBhY2Q4NjgwYjM3ODAyYjJmZjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2of5FZskEFQ1uid8YtTd31JEkW9i lqt8ZP6GEtm9kopG81v6GKhrFvOpn7CPDAkj/DINKmTCEYtuITRuUSDSufpTBrB+ fEQD3FlkFKM2VC4/X/OeOs6XAarJe9m+GzpU8u+HWqoVO1+3/NFR6SowU/4MayLs XDLlqUl3A34AjIfexn0wb2PMhIc0um+ZoJjkBxKVORZzUGQe2h/jTVQ/6TTeXsN8 syKLLf8YjemoAiuyeJzBs+jVpfr6z2x3C7tmz3etGwJNjT96m7DfNjEwNzW02XS0 EDMacpIU/HPMxF8LopqMjtXnV/rEtreB0F/Yh4+o02ob/iYps95+pYB+hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKj/JhkNaML4pEIKzYaAs3gCsv8hMB8GA1UdIwQY MBaAFExh0RhHm1Ii7w+GQWfKxbTAfMIZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEdIUkdFZWJVaUx2RDRaQlo4ckZ0TUI4d2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82ZTlkZmQtY2U0Ny00ZTYxLWEzMTUt ZTVhYTc0NzAwZjlkLzEvVEdIUkdFZWJVaUx2RDRaQlo4ckZ0TUI4d2hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC82ZTlkZmQtY2U0Ny00ZTYxLWEzMTUtZTVhYTc0NzAwZjlk LzEvVEdIUkdFZWJVaUx2RDRaQlo4ckZ0TUI4d2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7v9YDRF Obe5mFjRILKYhGB6Mla2+ReCEUxGAnZicYfbaIFjrIadqskxqcQiFY9Ft8eLL9e1 2l29d3jfEMIz7nHbDc3jpFQsJMNX0u2Pu4WZcmBX3VdD/pqlIf9O4R10bONFxE9x qyUkwuvHobzZY7aXbM4qbEH3OBWUH3hKexa5kazQpBdpD+yjgu9l6D+9ySXYYKJm 9q8tl/pj94YrcE3gF1eCf+M2O2qfVKKVqx/WVdRVoEChjBsj/a+fhpZsDE3g5S0J kfEjSHt+r2oKli+rSb2VoBieLU9q3fngrB84dTUZ4XhdEce0B7LspMtlyXok8JNi NLJd3uY3Z27vFg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:24 2025 by rpki-client