This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft File: TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft (raw, json) Hash identifier: zFTODy0Piay1km+IDlB+idCKJL6z2DfSC/RBKMI4UcA= Subject key identifier: CC:72:35:21:61:B6:B7:5E:56:5D:3C:F0:4F:56:65:3C:66:E5:2C:EF Authority key identifier: 4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE Certificate issuer: /CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee Certificate serial: 019AF209AD0BB15CDF6929659D11990E5F00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft Manifest number: 1316 Signing time: Sat 06 Dec 2025 05:01:51 +0000 Manifest this update: Sat 06 Dec 2025 05:01:51 +0000 Manifest next update: Sun 07 Dec 2025 05:01:51 +0000 Files and hashes: 1: TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl (hash: 1bHJQtgy57zAUQnVO9G2Db0cEosXVRGRyhxitFKQLko=) 2: j-betU5F3fuYYNREFl5I-_t74ng.roa (hash: ThVTYZ7pBXxFoxAK1y8K2Bay/CDdSEmxPkT01D83Maw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:ad:0b:b1:5c:df:69:29:65:9d:11:99:0e:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee Validity Not Before: Dec 6 05:01:51 2025 GMT Not After : Dec 7 05:01:51 2025 GMT Subject: CN=cc72352161b6b75e565d3cf04f56653c66e52cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b3:b1:7b:bd:31:4a:6d:34:98:43:c9:b1:78: e1:a5:92:de:98:7f:5e:21:d6:a9:81:8d:ca:de:8b: ce:e8:f5:5c:b6:62:d7:de:96:9b:30:7f:db:44:93: d3:b1:69:b7:c3:b3:a9:45:31:1d:5c:29:c2:81:dd: 09:11:c4:4b:7c:f1:cb:2f:ad:ad:80:15:ef:d4:22: c2:31:bb:46:91:c7:39:cf:04:26:14:c1:2e:6c:2d: 37:08:a2:26:59:73:14:76:a2:4d:54:66:fb:23:a5: 1f:71:c6:d4:f6:c2:87:1a:05:b2:e3:42:fb:7a:bc: 27:37:d5:47:b7:13:99:c8:6a:00:c6:aa:19:18:55: 25:ab:18:ea:d3:44:40:84:ae:c9:79:e5:86:b8:be: d0:ae:d9:b1:19:5d:a6:eb:59:51:b5:06:84:b9:06: c4:be:42:22:51:26:e7:29:f9:ea:09:ae:60:bf:c2: 62:96:41:1e:33:2a:ef:6d:f7:aa:28:af:3a:12:4f: 06:92:a6:66:3f:08:81:21:bf:42:33:51:0a:bb:95: 27:a3:d2:01:17:ed:0a:a9:2f:a4:b0:5a:a2:71:ef: dd:c1:7a:b0:59:35:88:99:97:a1:c4:ce:75:68:9f: 27:8a:48:93:ca:bd:03:99:50:2c:16:e7:aa:1a:67: 29:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:72:35:21:61:B6:B7:5E:56:5D:3C:F0:4F:56:65:3C:66:E5:2C:EF X509v3 Authority Key Identifier: keyid:4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:30:3e:08:1c:7f:0a:6f:f6:68:04:8a:6b:1a:a9:78:ed:54: e8:d3:d7:1d:9d:db:b6:fe:46:d7:0d:88:79:ae:d4:f4:45:01: eb:b4:97:d2:ea:b5:3c:07:b1:5a:b9:07:c6:45:77:5f:fd:13: 4f:6b:24:79:27:ee:55:ce:9d:21:6d:e8:02:d5:e4:25:e9:39: 98:9d:52:16:1f:56:ed:65:63:f2:44:52:d6:2b:ea:44:64:10: e0:c1:9d:63:ad:f4:94:b9:68:cc:8a:2a:4a:c6:0d:2f:0f:f6: 3c:d8:d5:d4:0d:4a:2a:12:be:b2:0a:ac:63:d9:35:73:51:64: 78:e6:ff:1c:cd:6c:b3:aa:aa:6c:3d:48:da:a8:05:c9:c1:b7: 35:b7:26:b6:48:7e:45:69:ba:7e:2c:0b:83:bf:d3:d6:cd:f7: 6c:fa:58:97:06:ef:07:8b:67:0c:ae:24:5d:5c:b7:96:f6:49: 30:6b:de:23:c8:f6:85:74:3f:15:17:45:b2:52:dc:2b:31:a2: 18:e8:e9:30:ff:88:d6:2d:aa:80:47:05:88:24:0b:18:b2:f6: 13:1f:42:d5:81:bf:87:d7:53:0d:84:4c:af:0f:24:a4:6e:73: f0:a3:28:a4:d0:a6:35:84:07:55:3b:34:7e:a8:46:52:05:7c: b4:b2:1d:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCa0LsVzfaSllnRGZDl8AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYjkzMmJjNjBlOWZkMTE4NmY4ZmE2YmQ3MTNjMjA3Mjlh ZTczZWUwHhcNMjUxMjA2MDUwMTUxWhcNMjUxMjA3MDUwMTUxWjAzMTEwLwYDVQQD EyhjYzcyMzUyMTYxYjZiNzVlNTY1ZDNjZjA0ZjU2NjUzYzY2ZTUyY2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7Oxe70xSm00mEPJsXjhpZLemH9e IdapgY3K3ovO6PVctmLX3pabMH/bRJPTsWm3w7OpRTEdXCnCgd0JEcRLfPHLL62t gBXv1CLCMbtGkcc5zwQmFMEubC03CKImWXMUdqJNVGb7I6UfccbU9sKHGgWy40L7 erwnN9VHtxOZyGoAxqoZGFUlqxjq00RAhK7JeeWGuL7QrtmxGV2m61lRtQaEuQbE vkIiUSbnKfnqCa5gv8JilkEeMyrvbfeqKK86Ek8GkqZmPwiBIb9CM1EKu5Uno9IB F+0KqS+ksFqice/dwXqwWTWImZehxM51aJ8nikiTyr0DmVAsFueqGmcpoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxyNSFhtrdeVl088E9WZTxm5SzvMB8GA1UdIwQY MBaAFEy5Mrxg6f0Rhvj6a9cTwgcprnPuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVExreXZHRHBfUkdHLVBwcjF4UENCeW11Yy00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNDM4OTItNzgwYy00MzJhLTg4MmYt MWUwZDdjNDJkYTc2LzEvVExreXZHRHBfUkdHLVBwcjF4UENCeW11Yy00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8zNDM4OTItNzgwYy00MzJhLTg4MmYtMWUwZDdjNDJkYTc2 LzEvVExreXZHRHBfUkdHLVBwcjF4UENCeW11Yy00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjA+CBx/ Cm/2aASKaxqpeO1U6NPXHZ3btv5G1w2Iea7U9EUB67SX0uq1PAexWrkHxkV3X/0T T2skeSfuVc6dIW3oAtXkJek5mJ1SFh9W7WVj8kRS1ivqRGQQ4MGdY630lLlozIoq SsYNLw/2PNjV1A1KKhK+sgqsY9k1c1FkeOb/HM1ss6qqbD1I2qgFycG3Nbcmtkh+ RWm6fiwLg7/T1s33bPpYlwbvB4tnDK4kXVy3lvZJMGveI8j2hXQ/FRdFslLcKzGi GOjpMP+I1i2qgEcFiCQLGLL2Ex9C1YG/h9dTDYRMrw8kpG5z8KMopNCmNYQHVTs0 fqhGUgV8tLIdbg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:01 2025 by rpki-client