This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft File: TMC300XPrlNH086YtCQbkA5KnvM.mft (raw, json) Hash identifier: fV4s4B6qIoidjg0hRDKgqaegReyqmS+aK/r7d4eYxEk= Subject key identifier: 67:88:EC:87:E7:96:8B:73:BA:04:DD:23:61:BB:60:C6:99:76:06:86 Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3 Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3 Certificate serial: 019AF31D5FE25EDE8D3B23AA6DAF999B3CC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft Manifest number: 08D5 Signing time: Sat 06 Dec 2025 10:02:59 +0000 Manifest this update: Sat 06 Dec 2025 10:02:59 +0000 Manifest next update: Sun 07 Dec 2025 10:02:59 +0000 Files and hashes: 1: TMC300XPrlNH086YtCQbkA5KnvM.crl (hash: oLshjXqoNfVdGa4uuxwMDrTzkKtD1eVo74gGFDkKOyU=) 2: Vh_JUxD0F48NbjyYRcDhXuGyEXI.roa (hash: RX3aXV1jt4pV7znP3Nr6a04cOEHqVMLgDW/kqRB9jNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:5f:e2:5e:de:8d:3b:23:aa:6d:af:99:9b:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3 Validity Not Before: Dec 6 10:02:59 2025 GMT Not After : Dec 7 10:02:59 2025 GMT Subject: CN=6788ec87e7968b73ba04dd2361bb60c699760686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c1:a2:9c:55:a5:eb:0c:ac:0f:77:21:bd:73: 59:f8:20:4f:83:97:5f:60:8f:63:76:44:69:12:47: 66:e1:11:cc:58:57:63:4d:eb:ed:47:b7:39:d5:ca: 7a:b8:82:5f:e8:ab:7c:9a:fa:6a:3d:3f:f3:6d:74: c1:63:86:d4:8a:25:9d:91:fd:c3:d7:76:57:fb:0a: 7a:5f:fe:e4:fa:a6:ee:3f:0a:ee:95:86:83:2e:1e: 43:58:49:b9:ca:cc:73:25:87:91:1e:1b:6b:e9:4a: f5:74:c6:7d:e1:2a:6d:68:c9:f1:8f:f7:d2:f4:12: ad:99:6a:d7:27:eb:aa:c3:6f:13:2e:3b:e8:33:ff: 44:15:69:a9:ec:5d:b0:e7:49:fb:7e:9c:3b:22:b7: 43:a1:60:b0:9d:ff:03:a3:c3:da:c9:a9:17:41:a7: 27:d3:c9:30:3d:1e:8c:85:a5:34:d7:0d:c1:ee:7a: c8:34:3d:82:b0:e4:25:4a:6d:b9:e8:08:e7:db:f8: ab:79:fa:36:2d:ba:ff:85:33:d3:9b:0c:2f:fb:53: 5b:91:7c:f9:4e:80:04:e9:d2:99:d6:81:a2:7e:44: bb:47:ea:f8:5d:fa:53:e4:a6:61:10:76:bb:72:30: dd:3d:d2:3d:e8:65:18:fa:26:1b:0c:44:89:3d:70: ee:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:88:EC:87:E7:96:8B:73:BA:04:DD:23:61:BB:60:C6:99:76:06:86 X509v3 Authority Key Identifier: keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:15:f8:a7:bb:79:02:d2:4d:28:c4:86:67:4e:c5:36:f8:42: c7:49:fa:00:4a:42:07:cb:1b:42:72:e1:d1:21:4c:c6:48:a4: 41:6f:02:aa:38:85:0f:5f:18:b2:1e:23:34:58:7f:36:f9:de: a5:23:e9:fa:d9:72:bb:fc:8c:f9:30:9b:cb:3b:98:e9:b6:c3: ed:b6:8e:50:3e:a1:6b:34:5e:f9:f0:06:98:56:c2:84:c0:63: af:62:ff:04:d6:d7:bd:08:aa:31:88:61:5a:fe:a9:68:e3:9d: 44:2b:4f:a4:81:24:20:4c:1d:37:dc:86:41:96:e1:25:b8:f4: 79:70:ce:ce:3f:03:f0:8b:17:30:44:78:ed:06:35:f4:39:eb: 2a:3d:9b:a8:e3:10:ee:71:99:73:1d:a8:d9:cf:ba:ea:32:f4: f8:82:aa:70:f0:86:37:16:1f:79:15:76:94:0b:67:30:92:d3: 66:9b:ec:59:e3:bd:93:65:77:4e:92:cf:75:4d:bd:60:c6:45: c7:53:c9:ed:19:e9:d9:a1:ee:52:81:fb:7a:c4:12:9a:d1:0b: 09:88:03:aa:06:93:d0:b9:37:ee:06:2e:fd:9d:a8:62:94:bb: 6d:66:e7:c6:ad:eb:c2:f3:f7:9e:75:42:a7:49:0c:52:db:e0: 3f:bf:e8:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHV/iXt6NOyOqba+ZmzzAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYzBiN2QzNDVjZmFlNTM0N2QzY2U5OGI0MjQxYjkwMGU0 YTllZjMwHhcNMjUxMjA2MTAwMjU5WhcNMjUxMjA3MTAwMjU5WjAzMTEwLwYDVQQD Eyg2Nzg4ZWM4N2U3OTY4YjczYmEwNGRkMjM2MWJiNjBjNjk5NzYwNjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsGinFWl6wysD3chvXNZ+CBPg5df YI9jdkRpEkdm4RHMWFdjTevtR7c51cp6uIJf6Kt8mvpqPT/zbXTBY4bUiiWdkf3D 13ZX+wp6X/7k+qbuPwrulYaDLh5DWEm5ysxzJYeRHhtr6Ur1dMZ94SptaMnxj/fS 9BKtmWrXJ+uqw28TLjvoM/9EFWmp7F2w50n7fpw7IrdDoWCwnf8Do8PayakXQacn 08kwPR6MhaU01w3B7nrIND2CsOQlSm256Ajn2/irefo2Lbr/hTPTmwwv+1NbkXz5 ToAE6dKZ1oGifkS7R+r4XfpT5KZhEHa7cjDdPdI96GUY+iYbDESJPXDuDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeI7IfnlotzugTdI2G7YMaZdgaGMB8GA1UdIwQY MBaAFEzAt9NFz65TR9POmLQkG5AOSp7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNmQzNzAtZjYzMi00Y2ExLThiOTYt MWJlMzI1ZjdhMmUzLzEvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xNmQzNzAtZjYzMi00Y2ExLThiOTYtMWJlMzI1ZjdhMmUz LzEvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBX4p7t5 AtJNKMSGZ07FNvhCx0n6AEpCB8sbQnLh0SFMxkikQW8CqjiFD18Ysh4jNFh/Nvne pSPp+tlyu/yM+TCbyzuY6bbD7baOUD6hazRe+fAGmFbChMBjr2L/BNbXvQiqMYhh Wv6paOOdRCtPpIEkIEwdN9yGQZbhJbj0eXDOzj8D8IsXMER47QY19DnrKj2bqOMQ 7nGZcx2o2c+66jL0+IKqcPCGNxYfeRV2lAtnMJLTZpvsWeO9k2V3TpLPdU29YMZF x1PJ7Rnp2aHuUoH7esQSmtELCYgDqgaT0Lk37gYu/Z2oYpS7bWbnxq3rwvP3nnVC p0kMUtvgP7/otA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:59:50 2025 by rpki-client