This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json) Hash identifier: 7FIGgeX0iEb5H1NrKwLKasCE1J1SMc6PVXDSMft3dM8= Subject key identifier: 0F:5B:60:86:EE:DB:D5:95:C1:C6:0F:A7:A6:91:4F:00:19:D0:EA:09 Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38 Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38 Certificate serial: 019AF276CD7DE126CDAA0F5285561F31A433 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:01:03 +0000 Manifest this update: Sat 06 Dec 2025 07:01:03 +0000 Manifest next update: Sun 07 Dec 2025 07:01:03 +0000 Files and hashes: 1: RV8paaJ3goMy9MfTaatO8nD3vp0.roa (hash: e4c5enruS1aSsE+Y/GCFoVHc8KGnXiS/8gSNbBU+Ybc=) 2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: B+v++rNYm3inIIYnnxoEZEo+87iORi3s+ChVGtFmKTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:cd:7d:e1:26:cd:aa:0f:52:85:56:1f:31:a4:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38 Validity Not Before: Dec 6 07:01:03 2025 GMT Not After : Dec 7 07:01:03 2025 GMT Subject: CN=0f5b6086eedbd595c1c60fa7a6914f0019d0ea09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:82:c7:90:4c:23:42:30:8c:c6:88:80:0a:9e: 44:9e:48:2e:24:24:1e:c0:73:69:b5:b3:c8:47:ff: 01:2c:89:ea:db:89:c8:59:56:3a:1c:b5:f0:eb:1a: a0:de:b9:f9:6e:58:42:ad:c5:69:49:a8:8e:62:74: a8:3d:79:f1:e2:01:08:82:bf:ce:61:33:ca:6b:33: db:9d:91:4c:24:b2:ff:92:c7:6b:80:a6:63:d4:b3: d4:72:f3:b4:69:a9:80:95:a7:e0:f5:cd:3e:90:f0: 17:47:34:2f:56:84:8f:fe:fe:40:7a:d5:01:71:e5: c9:9c:8f:16:71:5e:bb:69:45:2d:fd:c6:36:19:ff: ad:4d:a9:d0:1e:ae:b8:f2:e0:1f:3c:10:65:90:5f: 9f:70:76:d1:be:48:97:6e:6c:4c:4b:17:8c:ed:43: 5f:16:ce:14:0e:60:a9:0d:e0:57:f5:13:c5:27:54: 96:66:79:2f:87:4e:ca:72:50:8c:be:b3:a3:7d:40: 0a:c0:52:58:09:7c:60:5f:8d:6c:5f:f7:28:e7:43: 65:c0:6a:dd:7e:a7:90:9e:eb:7a:68:cf:eb:35:10: 76:cb:69:6c:a6:6b:34:d7:1d:85:ed:67:74:c6:38: b0:75:89:b7:79:58:d7:7f:9a:8e:62:e8:39:cc:3e: 85:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5B:60:86:EE:DB:D5:95:C1:C6:0F:A7:A6:91:4F:00:19:D0:EA:09 X509v3 Authority Key Identifier: keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c6:12:69:76:47:72:f6:1f:24:e4:bb:93:b0:b4:7d:d6:d4: ac:d0:43:a5:de:e6:13:1e:a7:52:b5:e5:19:6f:0c:81:07:22: a2:5d:a3:2f:28:ef:04:08:cc:b3:b9:87:f0:75:02:1a:03:41: 28:fc:a0:ef:f6:22:39:b1:94:42:e9:62:ab:22:16:ed:b6:c9: b3:df:39:b4:23:05:4b:37:3a:46:89:d1:cc:4f:df:9a:da:a0: 9b:d9:f6:56:2f:07:7b:be:30:a0:4b:b4:9c:a3:f3:c4:92:bd: 84:0e:bc:50:02:66:eb:13:3e:52:3c:93:30:1f:21:2d:89:4d: d7:2a:c7:59:40:58:a1:18:f2:0f:c8:47:29:ac:d2:2d:20:6d: d6:95:40:33:07:af:18:cc:03:48:5b:02:0c:47:e0:a3:18:c3: d9:0f:5c:9e:f3:e3:bb:35:39:89:64:1c:11:ab:a7:25:94:ab: 04:5b:8b:d3:20:d7:f4:cb:d6:80:c6:24:15:d9:a4:58:47:ec: 24:1f:b7:d3:f3:e0:f1:7e:a6:24:d7:17:fd:68:f2:84:2f:01: 11:cf:0e:3a:62:27:15:0e:40:59:5a:49:fa:7b:5d:59:a5:f5: 5f:14:21:e9:8f:9f:88:c2:e7:be:4c:b7:21:88:b7:ff:62:02: f8:d1:8d:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryds194SbNqg9ShVYfMaQzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMjFjYjliMmY4YzVkZTlkYWEzMDg4OWQ5ZTIzOTQ1Mzdi YTNlMzgwHhcNMjUxMjA2MDcwMTAzWhcNMjUxMjA3MDcwMTAzWjAzMTEwLwYDVQQD EygwZjViNjA4NmVlZGJkNTk1YzFjNjBmYTdhNjkxNGYwMDE5ZDBlYTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYLHkEwjQjCMxoiACp5EnkguJCQe wHNptbPIR/8BLInq24nIWVY6HLXw6xqg3rn5blhCrcVpSaiOYnSoPXnx4gEIgr/O YTPKazPbnZFMJLL/ksdrgKZj1LPUcvO0aamAlafg9c0+kPAXRzQvVoSP/v5AetUB ceXJnI8WcV67aUUt/cY2Gf+tTanQHq648uAfPBBlkF+fcHbRvkiXbmxMSxeM7UNf Fs4UDmCpDeBX9RPFJ1SWZnkvh07KclCMvrOjfUAKwFJYCXxgX41sX/co50NlwGrd fqeQnut6aM/rNRB2y2lspms01x2F7Wd0xjiwdYm3eVjXf5qOYug5zD6FyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9bYIbu29WVwcYPp6aRTwAZ0OoJMB8GA1UdIwQY MBaAFE0hy5svjF3p2qMIidniOUU3uj44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kOTk0ZGQtZGU1Mi00NjEyLWIwZmUt MTQ5ODcyNDNhYzU2LzEvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9kOTk0ZGQtZGU1Mi00NjEyLWIwZmUtMTQ5ODcyNDNhYzU2 LzEvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsYSaXZH cvYfJOS7k7C0fdbUrNBDpd7mEx6nUrXlGW8MgQciol2jLyjvBAjMs7mH8HUCGgNB KPyg7/YiObGUQuliqyIW7bbJs985tCMFSzc6RonRzE/fmtqgm9n2Vi8He74woEu0 nKPzxJK9hA68UAJm6xM+UjyTMB8hLYlN1yrHWUBYoRjyD8hHKazSLSBt1pVAMwev GMwDSFsCDEfgoxjD2Q9cnvPjuzU5iWQcEaunJZSrBFuL0yDX9MvWgMYkFdmkWEfs JB+30/Pg8X6mJNcX/WjyhC8BEc8OOmInFQ5AWVpJ+ntdWaX1XxQh6Y+fiMLnvky3 IYi3/2IC+NGNPA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:08 2025 by rpki-client