This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft File: tme4cki-Ko4zew55BX2JQHmMd5o.mft (raw, json) Hash identifier: umjXvZg7LTR6ow8miICajOKUFTwvihvGFKZHapt+zRU= Subject key identifier: 84:D6:80:3A:0A:D9:3F:86:E1:C0:01:32:1B:49:81:65:78:82:BB:F2 Authority key identifier: B6:67:B8:72:48:BE:2A:8E:33:7B:0E:79:05:7D:89:40:79:8C:77:9A Certificate issuer: /CN=b667b87248be2a8e337b0e79057d8940798c779a Certificate serial: 019AF3C0B8911A828CEAC8F3AE12C39151F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tme4cki-Ko4zew55BX2JQHmMd5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft Manifest number: 0491 Signing time: Sat 06 Dec 2025 13:01:24 +0000 Manifest this update: Sat 06 Dec 2025 13:01:24 +0000 Manifest next update: Sun 07 Dec 2025 13:01:24 +0000 Files and hashes: 1: tme4cki-Ko4zew55BX2JQHmMd5o.crl (hash: zQbRnd5dQYAhJeiDHbgamrcelrHfz0aBEhGlvUquQ3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft rsync://rpki.ripe.net/repository/DEFAULT/tme4cki-Ko4zew55BX2JQHmMd5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:b8:91:1a:82:8c:ea:c8:f3:ae:12:c3:91:51:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b667b87248be2a8e337b0e79057d8940798c779a Validity Not Before: Dec 6 13:01:24 2025 GMT Not After : Dec 7 13:01:24 2025 GMT Subject: CN=84d6803a0ad93f86e1c001321b4981657882bbf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:86:17:96:be:fe:81:b6:a2:90:2a:8a:f5:bf: c9:a5:d7:b0:59:bd:b6:40:9b:5f:b2:4a:e1:dc:67: a3:67:c5:6f:31:44:d6:48:7f:e4:74:16:a4:2d:3a: 9f:44:ed:07:d4:13:30:3d:e2:15:d0:91:5c:97:1b: f6:98:79:68:6d:9f:5e:e2:6f:8e:c3:3e:44:85:66: 9c:3c:f7:1c:ed:95:2a:92:01:1d:85:2c:a4:5a:ed: 4c:e9:af:9e:19:fc:d5:b5:9a:4a:34:6d:d3:7a:4a: 17:72:b8:95:77:80:b6:b8:fd:e3:61:82:eb:b3:a3: 0f:17:36:c9:a8:8e:a8:7c:04:df:6e:2d:3c:da:9f: c5:8b:d3:13:e5:91:88:97:19:7a:d6:4a:b4:dd:b7: 91:8a:d6:22:7d:80:96:87:69:98:47:19:ff:1c:1c: c4:a9:e2:1b:54:b5:a3:26:17:62:ba:0a:28:c2:e9: d3:69:14:4e:b6:b4:47:78:7f:e1:f3:98:0a:1d:86: 6c:35:38:3d:4b:b6:9f:5f:08:cf:6c:a6:57:92:7e: 6d:88:fc:d5:ec:9a:43:19:ba:d4:df:31:67:05:c7: 7e:7b:fd:bb:e2:bb:da:46:45:3c:b2:6b:76:b7:0d: 5a:ae:0f:d0:14:09:6e:3a:1f:9d:72:51:0c:59:40: 5d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D6:80:3A:0A:D9:3F:86:E1:C0:01:32:1B:49:81:65:78:82:BB:F2 X509v3 Authority Key Identifier: keyid:B6:67:B8:72:48:BE:2A:8E:33:7B:0E:79:05:7D:89:40:79:8C:77:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tme4cki-Ko4zew55BX2JQHmMd5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a9:00:b1:76:51:d4:b4:d9:87:e7:47:91:3a:9d:89:e1:3f: 86:99:49:7a:03:eb:7c:97:28:7c:2d:b3:81:fe:6f:eb:31:25: ad:b9:ac:d3:04:b2:3e:19:0f:b4:d8:eb:a7:c7:e9:73:40:aa: b4:7a:cc:7c:ed:b8:da:2f:f2:0a:96:e1:ec:01:fa:a5:a4:5b: 4c:ac:5d:70:53:bd:d5:14:d8:2e:cc:e7:02:6b:19:3c:be:54: 45:a5:09:a0:ff:51:28:2a:d3:2d:4f:af:09:0e:56:a1:ec:80: 65:75:7b:60:c4:20:b9:91:30:05:44:31:d2:25:a7:b4:62:06: b1:3e:e3:56:ee:2e:78:21:74:30:2e:36:b0:01:d2:ed:a0:56: 39:4a:a7:2d:69:66:06:76:07:5c:1d:7a:51:65:8a:cb:fe:28: 12:96:c2:fb:a8:21:ee:c8:ad:15:98:76:df:06:8f:a0:06:b6: db:98:11:da:da:41:94:e9:16:83:a8:3d:42:a9:20:d2:ec:6a: a3:b3:ce:67:40:bc:44:0f:28:60:61:a1:d7:3b:80:ef:8c:f8: c4:e1:6e:da:0d:fc:0e:1a:75:ca:37:68:df:57:ae:0a:6f:23: 8c:13:a3:4c:e7:3d:8e:b1:0c:36:5c:63:20:93:03:54:41:1c: 5a:23:b0:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwLiRGoKM6sjzrhLDkVH2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NjdiODcyNDhiZTJhOGUzMzdiMGU3OTA1N2Q4OTQwNzk4 Yzc3OWEwHhcNMjUxMjA2MTMwMTI0WhcNMjUxMjA3MTMwMTI0WjAzMTEwLwYDVQQD Eyg4NGQ2ODAzYTBhZDkzZjg2ZTFjMDAxMzIxYjQ5ODE2NTc4ODJiYmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIYXlr7+gbaikCqK9b/JpdewWb22 QJtfskrh3GejZ8VvMUTWSH/kdBakLTqfRO0H1BMwPeIV0JFclxv2mHlobZ9e4m+O wz5EhWacPPcc7ZUqkgEdhSykWu1M6a+eGfzVtZpKNG3TekoXcriVd4C2uP3jYYLr s6MPFzbJqI6ofATfbi082p/Fi9MT5ZGIlxl61kq03beRitYifYCWh2mYRxn/HBzE qeIbVLWjJhdiugoowunTaRROtrRHeH/h85gKHYZsNTg9S7afXwjPbKZXkn5tiPzV 7JpDGbrU3zFnBcd+e/274rvaRkU8smt2tw1arg/QFAluOh+dclEMWUBdQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITWgDoK2T+G4cABMhtJgWV4grvyMB8GA1UdIwQY MBaAFLZnuHJIviqOM3sOeQV9iUB5jHeaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG1lNGNraS1LbzR6ZXc1NUJYMkpRSG1NZDVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hZDIyNzMtZmE1Yy00N2Q5LThjM2Ut OGM5MmIzODBhZTU4LzEvdG1lNGNraS1LbzR6ZXc1NUJYMkpRSG1NZDVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9hZDIyNzMtZmE1Yy00N2Q5LThjM2UtOGM5MmIzODBhZTU4 LzEvdG1lNGNraS1LbzR6ZXc1NUJYMkpRSG1NZDVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6kAsXZR 1LTZh+dHkTqdieE/hplJegPrfJcofC2zgf5v6zElrbms0wSyPhkPtNjrp8fpc0Cq tHrMfO242i/yCpbh7AH6paRbTKxdcFO91RTYLsznAmsZPL5URaUJoP9RKCrTLU+v CQ5WoeyAZXV7YMQguZEwBUQx0iWntGIGsT7jVu4ueCF0MC42sAHS7aBWOUqnLWlm BnYHXB16UWWKy/4oEpbC+6gh7sitFZh23waPoAa225gR2tpBlOkWg6g9Qqkg0uxq o7POZ0C8RA8oYGGh1zuA74z4xOFu2g38Dhp1yjdo31euCm8jjBOjTOc9jrEMNlxj IJMDVEEcWiOwog== -----END CERTIFICATE-----Generated at Sat Dec 6 17:35:11 2025 by rpki-client