This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft File: TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json) Hash identifier: ph6DUqCrbtut9poy1622NI8edk3jclP/lOcRn3MKjcE= Subject key identifier: 93:C5:21:C5:4E:0A:A7:1F:44:BB:10:0F:AF:99:52:26:E8:25:DD:CE Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56 Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656 Certificate serial: 019B2BC1E3F0895792643008BC3FA8E1DC78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 10:01:25 +0000 Manifest this update: Wed 17 Dec 2025 10:01:25 +0000 Manifest next update: Thu 18 Dec 2025 10:01:25 +0000 Files and hashes: 1: LHdFFtkhND-G29Bb5TNwX3ZX6HI.roa (hash: 5JCuzcczihsYGo60q4ytQ60HO2vUMA1Wb8XrWH6WiqE=) 2: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: kyU5l4fBtabmhyfiEdwAQxfAx5Pow0kkokXBwOOGRNs=) 3: VYrJyKdSTfJ9aOSPJMCRhItn6O0.roa (hash: EVl6QPoQm24Wnsg0W0HBnWjfCtTCiCv6xfCekdHCwzI=) 4: XGm_swis7gPqLxLCw4_WpqKe8Ac.roa (hash: HuoRGpzlvzmJtj6Rn/56OaSHzb/3wfWOGTlv62srzB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:e3:f0:89:57:92:64:30:08:bc:3f:a8:e1:dc:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656 Validity Not Before: Dec 17 10:01:25 2025 GMT Not After : Dec 18 10:01:25 2025 GMT Subject: CN=93c521c54e0aa71f44bb100faf995226e825ddce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:bc:5f:01:78:cb:49:da:4b:08:04:44:c1: f9:4f:de:b4:be:fb:c3:9e:db:9f:2d:bc:fa:62:5b: 1e:a5:a1:09:9c:4a:f4:19:31:25:73:41:7a:21:d6: 02:b0:ff:7a:69:ed:37:59:50:1b:51:37:fe:3e:4f: 17:e0:c9:56:71:1c:9e:93:d9:65:ea:83:40:f6:23: 59:07:51:87:a7:e4:c1:92:83:e7:08:66:44:9f:32: d2:de:71:e4:48:1c:0a:e4:68:61:7b:41:23:bc:33: 1c:b7:66:74:12:bb:09:56:e6:d9:0c:ef:e6:26:91: c0:9c:d3:b1:c7:e4:ef:8c:93:a6:5d:e3:c3:23:32: b8:62:c4:6e:f4:f9:3e:97:48:78:14:62:fb:19:6c: 2d:ef:0e:52:9e:6c:81:09:37:d2:04:df:82:05:2f: e8:2e:a3:6a:e4:b5:93:02:59:d1:9e:db:f1:d5:bb: 10:1f:f1:03:68:ac:af:55:2f:39:9b:a8:c5:9d:27: 7a:0e:d5:79:fa:17:e5:e7:4a:20:37:0b:78:0a:5b: ae:57:9c:7b:6f:3b:15:74:f3:79:f4:5c:b1:e5:a0: e4:b0:e0:0e:ac:36:55:f2:2c:de:8f:db:9c:97:4c: f6:37:26:0a:53:16:d3:1f:bf:24:75:c2:b2:6e:1e: 8b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C5:21:C5:4E:0A:A7:1F:44:BB:10:0F:AF:99:52:26:E8:25:DD:CE X509v3 Authority Key Identifier: keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:9e:95:f8:c6:7d:b2:26:04:d9:11:be:2a:f2:1c:99:3b:9d: 9b:47:48:af:79:b1:3b:8b:11:7e:cd:dd:a0:5d:55:c1:ed:40: 36:1a:92:6a:bf:74:e1:c9:2b:26:4b:b8:c5:eb:35:2c:e3:ac: 56:3b:e3:fa:20:15:c8:94:85:e0:7c:ed:0f:ce:d9:96:1d:35: 67:28:93:84:cc:56:c9:55:94:26:13:b0:60:95:ac:3c:fa:a5: b1:92:28:a5:2a:35:22:94:8e:7d:0f:bc:f8:60:be:35:ed:df: eb:93:eb:08:ea:67:56:ec:36:e8:4a:08:06:8e:a1:fc:42:24: 36:b2:64:1c:9d:07:b8:37:e4:c8:92:aa:37:27:50:39:46:be: 21:39:6e:40:2c:81:4d:83:eb:f3:3c:e4:9b:0a:7d:bf:07:12: 79:3d:b2:3e:b1:27:15:8d:36:0e:ed:50:15:6a:4e:8f:dd:64: 9a:1d:5c:0b:c8:ea:48:0a:d5:7f:7b:71:9f:53:fb:fe:78:fa: 33:7e:d6:45:41:36:bf:7b:d2:4e:30:0f:fa:88:a8:f4:63:fc: d5:0a:21:98:3f:87:1a:8d:79:30:b2:f9:c6:04:40:b0:92:a1: 29:09:85:15:89:23:1f:0b:c8:a3:48:d7:e2:8c:33:3d:74:c7: 0b:24:65:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwePwiVeSZDAIvD+o4dx4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjY2M2MDQ5NWIyYTM0ZDg5MjExY2MxYzc5NTI0ZWFiNjFi YTE2NTYwHhcNMjUxMjE3MTAwMTI1WhcNMjUxMjE4MTAwMTI1WjAzMTEwLwYDVQQD Eyg5M2M1MjFjNTRlMGFhNzFmNDRiYjEwMGZhZjk5NTIyNmU4MjVkZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQO8XwF4y0naSwgERMH5T960vvvD ntufLbz6YlsepaEJnEr0GTElc0F6IdYCsP96ae03WVAbUTf+Pk8X4MlWcRyek9ll 6oNA9iNZB1GHp+TBkoPnCGZEnzLS3nHkSBwK5Ghhe0EjvDMct2Z0ErsJVubZDO/m JpHAnNOxx+TvjJOmXePDIzK4YsRu9Pk+l0h4FGL7GWwt7w5SnmyBCTfSBN+CBS/o LqNq5LWTAlnRntvx1bsQH/EDaKyvVS85m6jFnSd6DtV5+hfl50ogNwt4CluuV5x7 bzsVdPN59Fyx5aDksOAOrDZV8izej9ucl0z2NyYKUxbTH78kdcKybh6LCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPFIcVOCqcfRLsQD6+ZUiboJd3OMB8GA1UdIwQY MBaAFEzMYElbKjTYkhHMHHlSTqthuhZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUt Njk4MDlkOGI5YzIwLzEvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUtNjk4MDlkOGI5YzIw LzEvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZ6V+MZ9 siYE2RG+KvIcmTudm0dIr3mxO4sRfs3doF1Vwe1ANhqSar904ckrJku4xes1LOOs Vjvj+iAVyJSF4HztD87Zlh01ZyiThMxWyVWUJhOwYJWsPPqlsZIopSo1IpSOfQ+8 +GC+Ne3f65PrCOpnVuw26EoIBo6h/EIkNrJkHJ0HuDfkyJKqNydQOUa+ITluQCyB TYPr8zzkmwp9vwcSeT2yPrEnFY02Du1QFWpOj91kmh1cC8jqSArVf3txn1P7/nj6 M37WRUE2v3vSTjAP+oio9GP81QohmD+HGo15MLL5xgRAsJKhKQmFFYkjHwvIo0jX 4owzPXTHCyRlBg== -----END CERTIFICATE-----Generated at Wed Dec 17 18:36:19 2025 by rpki-client