This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft File: TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json) Hash identifier: 1DlBJwQzdBeCDVm8POGbWG396QdenOJA/eY6FGnHtBU= Subject key identifier: DA:AE:C0:0F:E1:62:1F:A0:27:C8:5B:7B:BE:7B:B6:FB:B4:46:3A:07 Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78 Certificate issuer: /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078 Certificate serial: 019AF1D1C16DA6B28C421122DBE5C27F2772 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 04:00:46 +0000 Manifest this update: Sat 06 Dec 2025 04:00:46 +0000 Manifest next update: Sun 07 Dec 2025 04:00:46 +0000 Files and hashes: 1: 1LkKTJE8VWFRjFVsY2vc5JNxUyo.roa (hash: gqvXE5VHGf5Er/eIvJDh+DnQ30d/N/LUShz/R2QWX8s=) 2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: EtSJc2I3cpu0OYKu+kljqyzg+EbDrQEWPigOD3dqCEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c1:6d:a6:b2:8c:42:11:22:db:e5:c2:7f:27:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078 Validity Not Before: Dec 6 04:00:46 2025 GMT Not After : Dec 7 04:00:46 2025 GMT Subject: CN=daaec00fe1621fa027c85b7bbe7bb6fbb4463a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ab:e7:6b:3e:a6:bf:9b:3e:2e:82:2a:8c:38: f6:7e:60:88:ca:77:36:7b:04:6b:67:ab:59:ba:cc: 5c:94:31:95:25:11:ab:e0:3d:a4:fe:34:ad:eb:78: a6:3b:91:21:bf:49:ad:1d:5e:b6:43:3b:95:35:8f: 86:41:66:84:b9:a5:88:b4:d4:fd:35:43:90:18:7c: f4:6e:44:72:17:7c:ea:84:f8:d1:ff:02:4b:8b:99: ff:98:36:43:d4:ca:f4:fa:e6:35:db:09:a7:8c:23: 4c:09:4c:b6:8d:e9:be:ac:7d:7e:eb:7b:5f:ef:e3: 52:9e:8c:1d:0c:be:82:e9:81:dc:8c:14:83:23:5d: 10:16:6f:cc:0d:c4:2a:24:ec:c9:54:02:b8:0c:28: a4:3b:d2:22:9b:e9:2b:56:1c:5b:f2:a4:b9:1d:90: 14:3a:64:30:45:03:11:04:71:b0:ea:45:76:ba:83: 76:70:2f:22:ba:05:01:ff:47:c2:bf:99:5e:26:7f: 55:b7:c8:6b:da:5c:f9:60:d5:48:68:0d:4e:48:2a: ea:0a:5b:0b:91:60:c8:fa:7b:c1:59:0f:57:51:5c: cd:2e:6c:f6:fd:c2:9a:bc:85:7f:29:c3:46:5f:99: 65:b9:51:62:a3:e2:25:1d:47:8f:cb:ee:fe:b2:c7: 0a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AE:C0:0F:E1:62:1F:A0:27:C8:5B:7B:BE:7B:B6:FB:B4:46:3A:07 X509v3 Authority Key Identifier: keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:29:60:64:b1:61:57:98:ff:7c:57:e0:46:b0:24:be:2d:ac: ce:08:83:43:e5:3b:8c:35:c3:f1:12:97:11:00:31:6c:ed:ea: 55:89:ce:b2:36:f2:b2:93:1c:f7:4d:66:ce:98:96:c6:ef:3d: 2f:11:79:43:38:79:2b:ff:91:73:fe:f9:71:63:40:8b:52:13: 85:0b:66:55:52:9e:ab:1d:d3:7d:f0:8a:7d:78:b8:b4:22:5a: f1:45:14:16:ea:35:01:b4:e5:e4:db:28:92:b7:f7:63:13:c0: 6d:f5:b2:c6:23:be:21:85:b6:74:ae:7c:17:22:ec:b7:99:36: c6:a6:98:fb:b4:c9:60:16:b3:3d:f9:32:1c:fc:43:1b:1b:e2: 42:9a:9b:32:1c:30:82:e0:a3:81:3b:29:99:2a:55:36:37:69: b0:17:9c:99:33:33:80:b5:02:84:8c:1a:29:ca:5c:1e:88:70: 8f:1d:0d:3e:63:24:7d:73:46:9d:19:f3:88:d8:a6:6c:14:b7: 7a:d8:b4:c7:2e:11:9b:d7:ca:51:ae:48:3a:e5:b4:59:70:99: 2a:4a:3c:30:b9:cc:5d:46:6d:f6:25:a5:79:b3:05:c5:c7:d9: 0c:b7:94:2f:bb:1b:62:19:eb:6c:6f:c4:ed:a5:d7:6c:bc:80: 89:94:3e:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cFtprKMQhEi2+XCfydyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjOTMyMTNkODhmYTg3NGViNDQ2MGUyYzVjZjFiYjFhOTFk YTkwNzgwHhcNMjUxMjA2MDQwMDQ2WhcNMjUxMjA3MDQwMDQ2WjAzMTEwLwYDVQQD EyhkYWFlYzAwZmUxNjIxZmEwMjdjODViN2JiZTdiYjZmYmI0NDYzYTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKvnaz6mv5s+LoIqjDj2fmCIync2 ewRrZ6tZusxclDGVJRGr4D2k/jSt63imO5Ehv0mtHV62QzuVNY+GQWaEuaWItNT9 NUOQGHz0bkRyF3zqhPjR/wJLi5n/mDZD1Mr0+uY12wmnjCNMCUy2jem+rH1+63tf 7+NSnowdDL6C6YHcjBSDI10QFm/MDcQqJOzJVAK4DCikO9Iim+krVhxb8qS5HZAU OmQwRQMRBHGw6kV2uoN2cC8iugUB/0fCv5leJn9Vt8hr2lz5YNVIaA1OSCrqClsL kWDI+nvBWQ9XUVzNLmz2/cKavIV/KcNGX5lluVFio+IlHUePy+7+sscKRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNquwA/hYh+gJ8hbe757tvu0RjoHMB8GA1UdIwQY MBaAFEyTIT2I+odOtEYOLFzxuxqR2pB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEpNaFBZajZoMDYwUmc0c1hQRzdHcEhha0hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lNGU2OTYtOWQ3OC00MTRjLWFmNDAt Y2Y1NmM2NmEwYWMwLzEvVEpNaFBZajZoMDYwUmc0c1hQRzdHcEhha0hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9lNGU2OTYtOWQ3OC00MTRjLWFmNDAtY2Y1NmM2NmEwYWMw LzEvVEpNaFBZajZoMDYwUmc0c1hQRzdHcEhha0hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMilgZLFh V5j/fFfgRrAkvi2szgiDQ+U7jDXD8RKXEQAxbO3qVYnOsjbyspMc901mzpiWxu89 LxF5Qzh5K/+Rc/75cWNAi1IThQtmVVKeqx3TffCKfXi4tCJa8UUUFuo1AbTl5Nso krf3YxPAbfWyxiO+IYW2dK58FyLst5k2xqaY+7TJYBazPfkyHPxDGxviQpqbMhww guCjgTspmSpVNjdpsBecmTMzgLUChIwaKcpcHohwjx0NPmMkfXNGnRnziNimbBS3 eti0xy4Rm9fKUa5IOuW0WXCZKko8MLnMXUZt9iWlebMFxcfZDLeUL7sbYhnrbG/E 7aXXbLyAiZQ+mg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:36 2025 by rpki-client