This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft File: TMC300XPrlNH086YtCQbkA5KnvM.mft (raw, json) Hash identifier: 0gFCvT8BLhVE5h6FkOPOss1NXSF9qsg+U2G3Np82KqI= Subject key identifier: AE:92:8E:B0:03:93:42:70:6E:11:95:9D:A4:0B:26:56:5A:15:BA:DC Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3 Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3 Certificate serial: 019BF7D14832B6D20196394453ED63210C6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft Manifest number: 095D Signing time: Mon 26 Jan 2026 01:00:46 +0000 Manifest this update: Mon 26 Jan 2026 01:00:46 +0000 Manifest next update: Tue 27 Jan 2026 01:00:46 +0000 Files and hashes: 1: 1aYS2JbbLwT9mgu0YtM6O3Vi_LY.roa (hash: x1EiPgAx+RF6WvuwNGH5p6RU1UgQGwRFO+MejwXodn0=) 2: TMC300XPrlNH086YtCQbkA5KnvM.crl (hash: BV0DmLJHP0qSw5a0Dh0oZwvcdvQv4e+8sKCIg0LWGHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:48:32:b6:d2:01:96:39:44:53:ed:63:21:0c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3 Validity Not Before: Jan 26 01:00:46 2026 GMT Not After : Jan 27 01:00:46 2026 GMT Subject: CN=ae928eb0039342706e11959da40b26565a15badc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4b:1d:2b:4a:fc:2c:3d:d5:14:a5:70:a8:bf: 3e:81:6a:cf:42:ac:f2:5d:1d:83:31:20:45:b5:c7: b4:24:34:a0:53:72:28:da:bd:99:4e:6d:04:48:1a: ab:18:fd:41:ab:2c:0d:58:a6:e3:24:3f:d9:9f:d5: b5:20:40:76:9d:90:ae:6c:ef:e6:cc:df:0c:6f:cd: 90:5a:95:05:51:70:7a:78:be:b1:7f:a2:be:cf:81: 7a:46:f7:08:86:18:e1:00:73:41:fd:1f:51:1c:22: a9:04:42:53:22:2b:18:72:ef:4e:4b:8a:fd:01:6d: d8:23:de:a0:40:5a:c3:92:b9:cb:63:e1:c2:6e:cf: a8:50:4a:09:c2:9b:af:be:46:0b:5b:f8:13:6c:0d: 30:ab:63:2c:b3:b4:1d:d8:b1:92:6d:e1:a9:56:9f: b2:b2:40:29:eb:2a:01:71:13:72:13:ec:68:2c:2a: 7d:48:96:1b:a2:37:50:07:34:d0:5c:60:39:19:d2: 3a:a7:c3:56:20:50:5b:02:1b:c1:3a:19:07:d5:c7: e5:57:f6:56:53:41:3e:85:86:5d:ef:a4:76:3e:7c: 94:d6:db:f7:93:98:4c:72:13:8b:a4:c4:f9:ae:00: 63:34:b5:55:b9:08:03:ad:0d:29:c5:4f:8a:78:23: 97:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:92:8E:B0:03:93:42:70:6E:11:95:9D:A4:0B:26:56:5A:15:BA:DC X509v3 Authority Key Identifier: keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:d2:f0:86:e9:91:c1:12:f7:5b:33:a9:19:f3:af:4c:a8:9e: ce:74:91:ec:b7:e5:84:3d:8d:72:7d:3b:9c:cb:1d:5b:51:85: b7:8f:66:35:92:37:03:02:ee:fc:a6:c6:3c:93:85:57:a3:ab: 67:08:26:f6:16:26:37:75:c4:01:83:6d:03:48:5b:2f:cb:a7: e9:46:41:54:15:41:1c:5f:0a:eb:c5:ab:3c:01:e9:d2:50:6c: df:9a:9d:f6:41:54:2a:d9:c0:ca:d6:c5:04:93:50:1e:59:e7: 9c:b3:e8:4b:c0:50:aa:c0:98:c0:8e:26:99:eb:66:cf:66:fa: 37:54:2c:0d:ee:be:27:10:63:d2:6c:60:5b:41:88:74:99:21: 7f:69:3b:e5:4c:8a:23:ce:aa:51:8e:65:bf:3a:fe:6f:ba:de: 7e:b1:55:02:07:17:c5:9b:24:1a:a8:65:7f:15:d6:e5:6d:e0: bb:15:09:bd:ed:da:82:70:5d:b1:14:8c:d2:21:05:57:b4:10: 28:fb:45:59:19:90:23:de:7f:53:90:6b:54:30:df:8e:fc:06: d4:cf:33:b0:76:22:48:2a:5c:c8:20:9a:34:7c:16:55:a2:c3: 4f:ed:ea:94:52:b5:8c:8d:d5:fa:56:bf:ae:fe:c3:1b:59:ed: 0a:e4:56:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30UgyttIBljlEU+1jIQxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYzBiN2QzNDVjZmFlNTM0N2QzY2U5OGI0MjQxYjkwMGU0 YTllZjMwHhcNMjYwMTI2MDEwMDQ2WhcNMjYwMTI3MDEwMDQ2WjAzMTEwLwYDVQQD EyhhZTkyOGViMDAzOTM0MjcwNmUxMTk1OWRhNDBiMjY1NjVhMTViYWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUsdK0r8LD3VFKVwqL8+gWrPQqzy XR2DMSBFtce0JDSgU3Io2r2ZTm0ESBqrGP1BqywNWKbjJD/Zn9W1IEB2nZCubO/m zN8Mb82QWpUFUXB6eL6xf6K+z4F6RvcIhhjhAHNB/R9RHCKpBEJTIisYcu9OS4r9 AW3YI96gQFrDkrnLY+HCbs+oUEoJwpuvvkYLW/gTbA0wq2Mss7Qd2LGSbeGpVp+y skAp6yoBcRNyE+xoLCp9SJYbojdQBzTQXGA5GdI6p8NWIFBbAhvBOhkH1cflV/ZW U0E+hYZd76R2PnyU1tv3k5hMchOLpMT5rgBjNLVVuQgDrQ0pxU+KeCOX0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6SjrADk0JwbhGVnaQLJlZaFbrcMB8GA1UdIwQY MBaAFEzAt9NFz65TR9POmLQkG5AOSp7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNmQzNzAtZjYzMi00Y2ExLThiOTYt MWJlMzI1ZjdhMmUzLzEvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xNmQzNzAtZjYzMi00Y2ExLThiOTYtMWJlMzI1ZjdhMmUz LzEvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNLwhumR wRL3WzOpGfOvTKieznSR7LflhD2Ncn07nMsdW1GFt49mNZI3AwLu/KbGPJOFV6Or Zwgm9hYmN3XEAYNtA0hbL8un6UZBVBVBHF8K68WrPAHp0lBs35qd9kFUKtnAytbF BJNQHlnnnLPoS8BQqsCYwI4mmetmz2b6N1QsDe6+JxBj0mxgW0GIdJkhf2k75UyK I86qUY5lvzr+b7refrFVAgcXxZskGqhlfxXW5W3guxUJve3agnBdsRSM0iEFV7QQ KPtFWRmQI95/U5BrVDDfjvwG1M8zsHYiSCpcyCCaNHwWVaLDT+3qlFK1jI3V+la/ rv7DG1ntCuRWsQ== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:28 2026 by rpki-client