This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft File: tmdL-ORX4pV-7k9R-Le0TFfbmio.mft (raw, json) Hash identifier: p6fYiCwGd6fsaVLqCjuuJ4pdFpdHLu7hVx4MbCxNoGw= Subject key identifier: C7:87:78:7C:F2:0E:27:10:59:2C:45:38:A5:DA:FE:1C:FF:11:24:3E Authority key identifier: B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A Certificate issuer: /CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a Certificate serial: 019AF653A3EB1DE05E4FF3BD9C4E10FE4A15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft Manifest number: 115E Signing time: Sun 07 Dec 2025 01:01:07 +0000 Manifest this update: Sun 07 Dec 2025 01:01:07 +0000 Manifest next update: Mon 08 Dec 2025 01:01:07 +0000 Files and hashes: 1: tmdL-ORX4pV-7k9R-Le0TFfbmio.crl (hash: V6sGxkqyTxH2wGgpdWP4d2h6rkewH5BNpjgmaZDL1V4=) 2: tyBiH_k1-T3tg2PjNihavpjVNFg.roa (hash: +MCpw/+jgYqZnXSoZlFEXezP/GiLWQcwVakj6OdX0hc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:a3:eb:1d:e0:5e:4f:f3:bd:9c:4e:10:fe:4a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a Validity Not Before: Dec 7 01:01:07 2025 GMT Not After : Dec 8 01:01:07 2025 GMT Subject: CN=c787787cf20e2710592c4538a5dafe1cff11243e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:53:d2:a8:c6:db:6a:cb:c6:be:cd:21:13:65: 7d:94:aa:74:7b:29:c2:14:cd:b6:84:6a:3f:2d:c4: 4c:6a:ef:39:bd:a6:6a:f1:f9:05:74:d6:b7:34:78: 1e:1f:18:fe:a1:10:11:5b:fa:fd:6c:62:73:75:6d: 8c:41:5a:79:59:c3:e6:2f:59:62:fe:e1:de:a1:30: d2:65:5f:45:2d:96:ef:d5:28:f7:b4:a4:7f:e8:61: d8:71:c8:fb:0a:7b:0d:cc:f9:84:ef:cc:4b:15:6e: c3:3d:d2:3e:05:67:ec:ff:43:24:4e:96:d9:c6:1c: 24:f0:e3:7a:cf:f3:cb:53:fc:b9:db:3c:55:83:34: 54:51:0c:c6:cb:8f:59:a5:3b:84:10:bd:14:af:bf: 1b:29:f8:6d:d9:67:8a:26:88:37:db:e1:9b:6f:3b: e4:0d:5c:a4:5f:6e:dc:de:d8:68:ee:6b:32:6d:95: 47:df:b8:55:af:f3:d9:89:1a:48:bb:11:16:02:bb: 8f:26:cf:bb:36:9d:c5:fb:57:07:49:59:d7:2b:a7: 8e:2b:2b:80:1d:29:e2:08:8c:21:26:e7:fc:de:55: 8c:fe:2b:17:4b:32:d2:de:4e:d9:ec:8c:bc:49:0e: ff:b3:c5:b9:dc:a8:69:e6:c0:7f:0e:c0:4f:d6:5a: 01:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:87:78:7C:F2:0E:27:10:59:2C:45:38:A5:DA:FE:1C:FF:11:24:3E X509v3 Authority Key Identifier: keyid:B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2b:9a:16:da:f0:b2:f6:0a:45:b6:f7:1d:df:b3:31:33:27: 17:b2:65:ee:a1:4e:d2:19:79:b6:3d:e2:88:17:41:a8:6e:f9: 6c:7e:08:7f:bb:44:34:f2:19:1e:aa:72:41:41:a3:09:30:b8: 8d:16:cf:48:ab:7a:3a:e5:bf:06:c1:a8:02:23:19:fb:bc:b9: 5c:2c:fd:c4:e8:f7:d3:ae:a8:f4:f4:8c:e1:e8:24:68:dd:47: 5d:6d:40:79:8f:92:a6:3b:a0:f8:65:9d:56:ab:5e:7f:f0:f8: 13:07:e7:ef:ba:26:b5:38:f3:5c:e4:fc:11:33:16:86:1a:e1: e4:09:6f:ed:96:23:fb:01:51:d4:66:9c:8c:dd:85:57:14:63: f4:fa:81:d8:33:70:48:ea:50:c2:de:e8:fb:32:08:89:ac:f5: 9e:d0:d3:27:dc:6f:0d:e5:d5:09:15:e1:5f:ce:fc:24:cd:d9: 2f:cc:32:0e:f6:81:c0:4a:7d:61:e9:7a:f3:ce:10:be:4e:ec: a5:c7:a6:e1:91:72:98:13:25:f0:7a:76:c5:14:32:01:50:3b: c5:11:5f:27:25:38:57:29:21:49:6c:f3:1e:21:54:40:fb:41: a8:0e:72:ff:75:2a:1b:ed:d5:69:66:b2:b2:86:cb:31:99:59: 36:64:d3:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U6PrHeBeT/O9nE4Q/koVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2Njc0YmY4ZTQ1N2UyOTU3ZWVlNGY1MWY4YjdiNDRjNTdk YjlhMmEwHhcNMjUxMjA3MDEwMTA3WhcNMjUxMjA4MDEwMTA3WjAzMTEwLwYDVQQD EyhjNzg3Nzg3Y2YyMGUyNzEwNTkyYzQ1MzhhNWRhZmUxY2ZmMTEyNDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFPSqMbbasvGvs0hE2V9lKp0eynC FM22hGo/LcRMau85vaZq8fkFdNa3NHgeHxj+oRARW/r9bGJzdW2MQVp5WcPmL1li /uHeoTDSZV9FLZbv1Sj3tKR/6GHYccj7CnsNzPmE78xLFW7DPdI+BWfs/0MkTpbZ xhwk8ON6z/PLU/y52zxVgzRUUQzGy49ZpTuEEL0Ur78bKfht2WeKJog32+Gbbzvk DVykX27c3tho7msybZVH37hVr/PZiRpIuxEWAruPJs+7Np3F+1cHSVnXK6eOKyuA HSniCIwhJuf83lWM/isXSzLS3k7Z7Iy8SQ7/s8W53Khp5sB/DsBP1loBPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeHeHzyDicQWSxFOKXa/hz/ESQ+MB8GA1UdIwQY MBaAFLZnS/jkV+KVfu5PUfi3tExX25oqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG1kTC1PUlg0cFYtN2s5Ui1MZTBURmZibWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi82OTMzMWMtYWVhMi00MjM3LTg0MDAt NjIyMTQwM2RiNThiLzEvdG1kTC1PUlg0cFYtN2s5Ui1MZTBURmZibWlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi82OTMzMWMtYWVhMi00MjM3LTg0MDAtNjIyMTQwM2RiNThi LzEvdG1kTC1PUlg0cFYtN2s5Ui1MZTBURmZibWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCuaFtrw svYKRbb3Hd+zMTMnF7Jl7qFO0hl5tj3iiBdBqG75bH4If7tENPIZHqpyQUGjCTC4 jRbPSKt6OuW/BsGoAiMZ+7y5XCz9xOj3066o9PSM4egkaN1HXW1AeY+Spjug+GWd Vqtef/D4Ewfn77omtTjzXOT8ETMWhhrh5Alv7ZYj+wFR1GacjN2FVxRj9PqB2DNw SOpQwt7o+zIIiaz1ntDTJ9xvDeXVCRXhX878JM3ZL8wyDvaBwEp9Yel6884Qvk7s pcem4ZFymBMl8Hp2xRQyAVA7xRFfJyU4VykhSWzzHiFUQPtBqA5y/3UqG+3VaWay sobLMZlZNmTT/g== -----END CERTIFICATE-----Generated at Sun Dec 7 02:43:31 2025 by rpki-client