This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft File: TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json) Hash identifier: xF0om9Uw4Zsqf5p2meD+zGogLXZxGegiNp6RoNkviuU= Subject key identifier: 3D:08:4A:19:B2:12:7E:79:3B:D6:48:A4:90:8F:25:DD:C8:DC:15:52 Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56 Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656 Certificate serial: 019AF1D1AC81A90B1150C953C16A758EA9DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:00:41 +0000 Manifest this update: Sat 06 Dec 2025 04:00:41 +0000 Manifest next update: Sun 07 Dec 2025 04:00:41 +0000 Files and hashes: 1: LHdFFtkhND-G29Bb5TNwX3ZX6HI.roa (hash: 5JCuzcczihsYGo60q4ytQ60HO2vUMA1Wb8XrWH6WiqE=) 2: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: zBwaFVXJImVw2Anv2zUfkYf8KVjSuigU4Tz1Ed2He8c=) 3: VYrJyKdSTfJ9aOSPJMCRhItn6O0.roa (hash: EVl6QPoQm24Wnsg0W0HBnWjfCtTCiCv6xfCekdHCwzI=) 4: XGm_swis7gPqLxLCw4_WpqKe8Ac.roa (hash: HuoRGpzlvzmJtj6Rn/56OaSHzb/3wfWOGTlv62srzB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ac:81:a9:0b:11:50:c9:53:c1:6a:75:8e:a9:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656 Validity Not Before: Dec 6 04:00:41 2025 GMT Not After : Dec 7 04:00:41 2025 GMT Subject: CN=3d084a19b2127e793bd648a4908f25ddc8dc1552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e7:a0:85:a6:cb:2c:1e:f2:35:f9:a9:7b:1c: 35:6e:a0:3e:77:2c:21:87:35:f8:61:b3:e6:89:fa: 48:54:66:6e:3c:73:00:00:a0:8e:ef:33:58:e9:e3: 84:46:e7:f5:02:9e:48:7e:58:6d:20:3c:81:ee:05: 18:b8:41:d0:c6:45:fc:a1:e8:96:1a:31:9d:37:64: 08:de:ab:de:42:46:2a:5f:a9:06:76:65:37:65:d2: b9:4b:5b:75:e1:ce:19:00:c6:be:53:ee:d0:a9:47: 9f:3e:a7:18:25:7f:5d:74:3e:24:f8:e2:fd:e0:42: bf:87:c7:63:45:87:56:e2:bc:6d:ce:3b:6c:db:e2: 65:00:56:e8:fc:e3:57:a1:82:31:b8:3c:e2:a1:1a: cc:8e:4b:2c:31:8d:c7:07:ab:61:49:0e:94:a7:4c: 9c:f1:4b:0e:3f:7f:a6:e1:6a:07:2d:48:e2:b2:3d: d6:fa:4d:08:14:70:74:71:a2:b6:0c:17:4b:2c:6f: fd:8c:e7:ea:18:e6:3e:d6:be:c5:46:e0:56:a7:12: 07:60:fe:a2:af:ae:1c:62:5a:1a:0b:81:27:0b:97: 53:84:fd:8d:04:b7:7a:50:19:4b:55:8f:57:fa:b3: 68:ed:42:b0:7a:68:28:fe:52:9f:c7:c7:29:75:64: 38:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:08:4A:19:B2:12:7E:79:3B:D6:48:A4:90:8F:25:DD:C8:DC:15:52 X509v3 Authority Key Identifier: keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:4f:73:a4:08:5c:57:2a:a4:93:d8:df:70:8a:cb:cf:90:f5: 00:d4:63:47:10:18:0a:53:a2:bb:82:ec:8d:17:f7:24:7f:f3: f7:6c:5b:da:68:c7:75:da:84:a4:00:9c:54:cc:96:36:3f:bd: 96:34:c1:9f:6a:74:31:e3:f3:6c:fc:e9:be:4a:e8:d7:58:a7: 89:60:a8:78:88:c3:ef:33:b5:56:98:43:88:28:b1:2f:a9:3f: 06:c5:90:0d:f0:7b:d1:9a:a7:b4:e3:b2:f8:67:b0:3c:e6:be: 7c:7a:c8:8d:60:1f:42:9a:5e:d3:ea:1e:29:da:58:aa:08:a5: ce:04:77:fd:d3:fc:a3:cb:1e:22:14:35:34:5c:5c:e9:a9:08: b7:fd:83:52:12:3d:fd:8e:6e:44:e6:d9:57:6b:fa:2b:35:9c: 57:ef:fc:d2:91:fd:33:7a:d2:df:ea:fd:b3:18:82:9b:e3:de: 1f:77:d8:88:33:14:58:af:57:a2:0d:bb:b8:32:68:b6:f0:48: 1c:75:47:a4:06:ad:a1:79:dc:b0:6a:00:ba:01:29:94:44:a2: f9:2a:fc:93:c4:de:8f:69:7b:0f:36:60:b3:fa:81:53:73:17: e9:c5:80:13:91:09:01:c3:ab:e9:86:ae:d8:b3:97:38:d1:02: f5:b9:99:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ayBqQsRUMlTwWp1jqnfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjY2M2MDQ5NWIyYTM0ZDg5MjExY2MxYzc5NTI0ZWFiNjFi YTE2NTYwHhcNMjUxMjA2MDQwMDQxWhcNMjUxMjA3MDQwMDQxWjAzMTEwLwYDVQQD EygzZDA4NGExOWIyMTI3ZTc5M2JkNjQ4YTQ5MDhmMjVkZGM4ZGMxNTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOeghabLLB7yNfmpexw1bqA+dywh hzX4YbPmifpIVGZuPHMAAKCO7zNY6eOERuf1Ap5IflhtIDyB7gUYuEHQxkX8oeiW GjGdN2QI3qveQkYqX6kGdmU3ZdK5S1t14c4ZAMa+U+7QqUefPqcYJX9ddD4k+OL9 4EK/h8djRYdW4rxtzjts2+JlAFbo/ONXoYIxuDzioRrMjkssMY3HB6thSQ6Up0yc 8UsOP3+m4WoHLUjisj3W+k0IFHB0caK2DBdLLG/9jOfqGOY+1r7FRuBWpxIHYP6i r64cYloaC4EnC5dThP2NBLd6UBlLVY9X+rNo7UKwemgo/lKfx8cpdWQ4GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0IShmyEn55O9ZIpJCPJd3I3BVSMB8GA1UdIwQY MBaAFEzMYElbKjTYkhHMHHlSTqthuhZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUt Njk4MDlkOGI5YzIwLzEvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUtNjk4MDlkOGI5YzIw LzEvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaE9zpAhc Vyqkk9jfcIrLz5D1ANRjRxAYClOiu4LsjRf3JH/z92xb2mjHddqEpACcVMyWNj+9 ljTBn2p0MePzbPzpvkro11iniWCoeIjD7zO1VphDiCixL6k/BsWQDfB70ZqntOOy +GewPOa+fHrIjWAfQppe0+oeKdpYqgilzgR3/dP8o8seIhQ1NFxc6akIt/2DUhI9 /Y5uRObZV2v6KzWcV+/80pH9M3rS3+r9sxiCm+PeH3fYiDMUWK9Xog27uDJotvBI HHVHpAatoXncsGoAugEplESi+Sr8k8Tej2l7DzZgs/qBU3MX6cWAE5EJAcOr6Yau 2LOXONEC9bmZNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:55:51 2025 by rpki-client