This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft File: TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft (raw, json) Hash identifier: ycPsLdrSJZkX7aKcSGhyCL3GZWD8j4DUAaL8IdRJFJQ= Subject key identifier: 7E:63:0C:B8:5E:47:DD:83:D8:04:04:D7:97:59:89:E7:7F:4A:22:F6 Authority key identifier: 4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19 Certificate issuer: /CN=4c61d118479b5222ef0f864167cac5b4c07cc219 Certificate serial: 019B345698CCCEC90EE4B98C262CBC2F6536 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 02:00:48 +0000 Manifest this update: Fri 19 Dec 2025 02:00:48 +0000 Manifest next update: Sat 20 Dec 2025 02:00:48 +0000 Files and hashes: 1: TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl (hash: L0l2Ah4z6UMEjlUXtPoMCROg6kNYSByJpyGyrAbfcC4=) 2: tbYt8CsTUjvQCfPmxRHFnIb3gng.roa (hash: Wb48gd6AG1NXeN5IWX1LXBtrKALPG/kRfuLTU0uD7B0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:98:cc:ce:c9:0e:e4:b9:8c:26:2c:bc:2f:65:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c61d118479b5222ef0f864167cac5b4c07cc219 Validity Not Before: Dec 19 02:00:48 2025 GMT Not After : Dec 20 02:00:48 2025 GMT Subject: CN=7e630cb85e47dd83d80404d7975989e77f4a22f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:94:f9:21:af:31:df:43:1f:4f:7a:e8:23:89: 4e:a8:c7:e6:3c:59:05:c7:d5:c2:54:a2:d0:ad:e0: d3:94:d3:b1:5c:04:4a:5d:91:1b:0e:91:35:c5:04: ef:3f:a1:3f:c9:0b:01:67:2e:1e:cc:89:08:37:59: ad:09:37:46:a7:8f:c1:17:fb:e4:7b:fe:a1:4d:a2: 4e:29:fe:67:57:c5:7e:f3:1b:87:89:18:0e:20:d4: 93:92:67:ba:56:d5:e4:72:9c:75:5d:df:07:b1:cc: de:91:06:f3:c1:74:67:1c:2f:1b:8e:d2:52:05:b6: 99:dd:bc:e8:3f:cc:3f:b1:cc:3d:38:c9:b3:de:84: c3:14:6c:8d:04:1c:a2:2d:fa:c1:7a:72:03:b4:bd: 14:66:7d:2a:98:4a:88:ac:3d:60:1f:98:c9:6c:75: a0:18:86:08:49:5d:cc:f4:50:6d:2c:b4:c2:13:22: 73:23:bc:3c:7b:89:c1:46:51:60:fa:b4:c3:36:1b: 61:71:1a:0b:13:a1:cd:98:13:a5:d2:14:26:06:00: a3:9b:33:25:b6:20:57:d1:5e:c3:c9:39:dd:a9:af: fa:9a:a2:c2:ba:ca:0d:c1:96:2c:44:e4:46:24:3e: 3d:ee:87:ec:f4:22:64:ce:57:3e:e0:60:69:ef:f9: f0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:63:0C:B8:5E:47:DD:83:D8:04:04:D7:97:59:89:E7:7F:4A:22:F6 X509v3 Authority Key Identifier: keyid:4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:bf:ee:f0:12:cb:7b:a4:6a:3c:c9:26:06:41:7c:ba:6f:33: 31:ed:73:c8:03:77:d9:62:fc:c1:70:f1:c7:d0:65:71:d6:9c: 0d:13:cf:a3:b7:d4:f7:15:7d:d6:a2:e9:a3:88:46:5e:f6:8a: 09:95:e6:2a:6f:9e:8a:35:13:e2:4d:03:2b:51:a1:ce:72:2e: aa:4e:a7:49:2d:5d:a6:b7:9f:8a:90:8a:bf:c9:34:39:7b:21: c8:e6:8b:f1:7a:89:5b:da:f8:12:bd:b0:bf:e2:93:99:d4:03: 38:e2:93:79:b6:e0:2f:1e:ad:23:b1:4b:7d:97:f5:bd:c6:e3: 72:6b:d2:7b:c9:06:e2:b5:50:ac:4b:44:f3:46:38:2f:73:49: 9f:b9:a2:73:ba:27:11:ca:08:59:08:52:63:96:9e:ad:a8:d0: 0b:1a:2f:c0:9f:80:6c:e1:d1:d9:04:98:d1:b6:96:ac:56:5a: 45:36:27:c4:19:32:de:28:90:8d:c4:9d:b8:6d:7d:8a:36:50: d4:1c:f2:00:38:9a:dc:90:da:8b:a3:23:d2:10:e5:9e:76:cc: 07:74:4c:0d:e7:94:ac:12:42:d7:6f:bc:b0:cb:4c:db:ee:31: 0e:69:95:f6:26:2a:d6:65:cd:da:75:8a:3e:ac:62:a9:31:de: da:25:fe:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VpjMzskO5LmMJiy8L2U2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNjFkMTE4NDc5YjUyMjJlZjBmODY0MTY3Y2FjNWI0YzA3 Y2MyMTkwHhcNMjUxMjE5MDIwMDQ4WhcNMjUxMjIwMDIwMDQ4WjAzMTEwLwYDVQQD Eyg3ZTYzMGNiODVlNDdkZDgzZDgwNDA0ZDc5NzU5ODllNzdmNGEyMmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupT5Ia8x30MfT3roI4lOqMfmPFkF x9XCVKLQreDTlNOxXARKXZEbDpE1xQTvP6E/yQsBZy4ezIkIN1mtCTdGp4/BF/vk e/6hTaJOKf5nV8V+8xuHiRgOINSTkme6VtXkcpx1Xd8HsczekQbzwXRnHC8bjtJS BbaZ3bzoP8w/scw9OMmz3oTDFGyNBByiLfrBenIDtL0UZn0qmEqIrD1gH5jJbHWg GIYISV3M9FBtLLTCEyJzI7w8e4nBRlFg+rTDNhthcRoLE6HNmBOl0hQmBgCjmzMl tiBX0V7DyTndqa/6mqLCusoNwZYsRORGJD497ofs9CJkzlc+4GBp7/nwawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5jDLheR92D2AQE15dZied/SiL2MB8GA1UdIwQY MBaAFExh0RhHm1Ii7w+GQWfKxbTAfMIZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEdIUkdFZWJVaUx2RDRaQlo4ckZ0TUI4d2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82ZTlkZmQtY2U0Ny00ZTYxLWEzMTUt ZTVhYTc0NzAwZjlkLzEvVEdIUkdFZWJVaUx2RDRaQlo4ckZ0TUI4d2hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC82ZTlkZmQtY2U0Ny00ZTYxLWEzMTUtZTVhYTc0NzAwZjlk LzEvVEdIUkdFZWJVaUx2RDRaQlo4ckZ0TUI4d2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7/u8BLL e6RqPMkmBkF8um8zMe1zyAN32WL8wXDxx9BlcdacDRPPo7fU9xV91qLpo4hGXvaK CZXmKm+eijUT4k0DK1GhznIuqk6nSS1dprefipCKv8k0OXshyOaL8XqJW9r4Er2w v+KTmdQDOOKTebbgLx6tI7FLfZf1vcbjcmvSe8kG4rVQrEtE80Y4L3NJn7mic7on EcoIWQhSY5aerajQCxovwJ+AbOHR2QSY0baWrFZaRTYnxBky3iiQjcSduG19ijZQ 1BzyADia3JDai6Mj0hDlnnbMB3RMDeeUrBJC12+8sMtM2+4xDmmV9iYq1mXN2nWK PqxiqTHe2iX+2w== -----END CERTIFICATE-----Generated at Fri Dec 19 06:19:09 2025 by rpki-client