This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft File: TOmGBryaXUQHT_jL7cvbz8NfBWI.mft (raw, json) Hash identifier: AmYhYiXsAkBj9Lxiy+Qp87Ki5Ho5L8fRrMZwInWudys= Subject key identifier: CE:91:42:5E:84:6D:14:31:8F:08:98:00:C3:27:2A:80:66:47:C2:CA Authority key identifier: 4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62 Certificate issuer: /CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562 Certificate serial: 019AF276783E8D7453E104E2161F8C531709 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 07:00:41 +0000 Manifest this update: Sat 06 Dec 2025 07:00:41 +0000 Manifest next update: Sun 07 Dec 2025 07:00:41 +0000 Files and hashes: 1: TOmGBryaXUQHT_jL7cvbz8NfBWI.crl (hash: ygBTC6YtmuthqhQqW9rmzhTElE5H4qIUk+RtKNrMSF0=) 2: _2jPSPlgYJsD4ywwlbMtnQzhjck.roa (hash: dPt4vhrAZj1gNIW23Wk2/nT1GhYcZvAFuVHXtMeqVMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:78:3e:8d:74:53:e1:04:e2:16:1f:8c:53:17:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562 Validity Not Before: Dec 6 07:00:41 2025 GMT Not After : Dec 7 07:00:41 2025 GMT Subject: CN=ce91425e846d14318f089800c3272a806647c2ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5a:60:ff:6b:db:eb:2a:59:59:23:6b:cb:ee: ee:2d:44:03:42:1b:58:40:08:26:a6:d6:68:6d:93: 37:d2:ee:0e:c2:d9:69:90:84:27:4d:49:7b:44:41: 58:62:c4:ca:9b:33:a2:aa:c6:c8:34:ed:52:f9:29: 3a:b8:1f:bd:6d:72:15:e9:40:b6:d6:44:34:61:bc: ff:4a:b0:8d:7d:be:c6:c0:f9:1b:82:bf:ac:b3:e1: 99:b6:0f:b5:df:4c:0f:31:18:ac:c2:89:44:99:a0: c7:45:27:b5:b5:10:65:89:3a:7a:76:ea:a7:d7:43: c2:0b:fc:99:0a:fc:0b:4f:2e:ed:18:76:29:01:c7: c9:5f:51:ec:6a:10:55:72:9c:f6:ed:56:05:b8:b1: 33:76:3b:9e:76:05:9b:d2:da:b7:fe:5b:7a:b3:d9: 8c:09:74:5e:a5:7b:fc:4c:70:d9:f0:b2:85:ca:b2: 7d:1c:ba:be:76:69:fd:13:79:40:c1:59:b0:26:25: d8:98:a2:95:ac:4a:65:3a:21:65:7c:a0:24:6f:75: 36:d6:91:dd:d6:bb:f7:af:10:a3:b3:75:01:0b:7a: a1:9c:7f:ad:c7:0e:3d:85:f0:1f:19:c0:1d:2a:ba: 12:42:a1:8c:12:72:10:23:40:7b:f1:c5:d1:99:5b: 66:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:91:42:5E:84:6D:14:31:8F:08:98:00:C3:27:2A:80:66:47:C2:CA X509v3 Authority Key Identifier: keyid:4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:3a:ed:a1:e8:de:6a:fa:2c:58:5b:e7:17:07:10:b3:ca:f5: 1e:76:f7:5f:e7:86:da:95:e2:eb:8a:65:9c:e1:81:e7:87:4a: 7d:a5:ab:35:29:ff:4e:27:b8:16:b7:cc:f9:da:cc:bc:40:d4: 3e:b4:f5:93:47:b9:7b:f5:39:4d:f8:1e:ae:ba:d0:f1:1f:0e: a3:4d:98:89:83:7c:7f:75:8f:e0:51:66:24:5d:d2:20:e6:d5: ee:3b:5b:11:b7:35:86:95:b7:7c:13:6d:9d:10:f1:7d:8a:bc: f9:cb:5f:15:35:ba:c8:90:02:fa:31:4c:bf:47:44:8c:3c:71: 47:8e:26:26:98:0f:46:5d:79:90:33:4b:92:2a:c8:e8:6a:64: b1:01:7f:3f:cf:91:63:46:d3:2a:ef:97:be:a2:69:ce:18:73: 95:0a:c1:e7:b8:c4:4d:11:ba:9f:a3:6b:e4:bd:d8:82:27:7f: 2c:78:48:0f:5a:fb:d3:58:05:64:d8:fa:df:71:f7:67:05:47: 1e:9b:ce:38:50:49:a8:93:10:3d:99:62:76:b5:cd:98:d3:4c: 2e:f1:03:b3:e4:44:f5:e9:89:ca:e7:18:f8:71:8d:e9:3d:db: 1d:0d:09:52:a2:26:10:6b:60:57:6d:ed:75:9c:fc:76:70:a2: b6:c4:df:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydng+jXRT4QTiFh+MUxcJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTk4NjA2YmM5YTVkNDQwNzRmZjhjYmVkY2JkYmNmYzM1 ZjA1NjIwHhcNMjUxMjA2MDcwMDQxWhcNMjUxMjA3MDcwMDQxWjAzMTEwLwYDVQQD EyhjZTkxNDI1ZTg0NmQxNDMxOGYwODk4MDBjMzI3MmE4MDY2NDdjMmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1pg/2vb6ypZWSNry+7uLUQDQhtY QAgmptZobZM30u4OwtlpkIQnTUl7REFYYsTKmzOiqsbINO1S+Sk6uB+9bXIV6UC2 1kQ0Ybz/SrCNfb7GwPkbgr+ss+GZtg+130wPMRiswolEmaDHRSe1tRBliTp6duqn 10PCC/yZCvwLTy7tGHYpAcfJX1HsahBVcpz27VYFuLEzdjuedgWb0tq3/lt6s9mM CXRepXv8THDZ8LKFyrJ9HLq+dmn9E3lAwVmwJiXYmKKVrEplOiFlfKAkb3U21pHd 1rv3rxCjs3UBC3qhnH+txw49hfAfGcAdKroSQqGMEnIQI0B78cXRmVtmzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6RQl6EbRQxjwiYAMMnKoBmR8LKMB8GA1UdIwQY MBaAFEzphga8ml1EB0/4y+3L28/DXwViMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9tR0JyeWFYVVFIVF9qTDdjdmJ6OE5mQldJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNzllZDUtZDI1My00MjU1LTkwMTct ODhkZjEyNWJhNjYzLzEvVE9tR0JyeWFYVVFIVF9qTDdjdmJ6OE5mQldJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNzllZDUtZDI1My00MjU1LTkwMTctODhkZjEyNWJhNjYz LzEvVE9tR0JyeWFYVVFIVF9qTDdjdmJ6OE5mQldJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjrtoeje avosWFvnFwcQs8r1Hnb3X+eG2pXi64plnOGB54dKfaWrNSn/Tie4FrfM+drMvEDU PrT1k0e5e/U5TfgerrrQ8R8Oo02YiYN8f3WP4FFmJF3SIObV7jtbEbc1hpW3fBNt nRDxfYq8+ctfFTW6yJAC+jFMv0dEjDxxR44mJpgPRl15kDNLkirI6GpksQF/P8+R Y0bTKu+XvqJpzhhzlQrB57jETRG6n6Nr5L3Ygid/LHhID1r701gFZNj633H3ZwVH HpvOOFBJqJMQPZlidrXNmNNMLvEDs+RE9emJyucY+HGN6T3bHQ0JUqImEGtgV23t dZz8dnCitsTfJg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:48:01 2025 by rpki-client