This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft File: TmIrxVBoe20O9geIzq2w_IIKOB8.mft (raw, json) Hash identifier: qLVF1C3pmUkg24pACYuV9AKOyCH4Dq84xOmWE2/BbHE= Subject key identifier: 50:E8:E6:EB:6F:CC:66:D2:D9:15:59:58:BB:2F:14:6B:22:63:8C:77 Authority key identifier: 4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F Certificate issuer: /CN=4e622bc550687b6d0ef60788ceadb0fc820a381f Certificate serial: 019AF208B8869EA49ED19A54BC361D365620 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft Manifest number: 0AA7 Signing time: Sat 06 Dec 2025 05:00:49 +0000 Manifest this update: Sat 06 Dec 2025 05:00:49 +0000 Manifest next update: Sun 07 Dec 2025 05:00:49 +0000 Files and hashes: 1: TmIrxVBoe20O9geIzq2w_IIKOB8.crl (hash: 5ZthnM1YJDGoJEsgot3q3Do3TjwZpUNEj/6dCT7xuos=) 2: t4aglK9u5BBs2nCD-lvEdZGnyNE.roa (hash: poJOpqUdh9mquobj4xZre8xkqBntoXYzhaUhNLYqXsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b8:86:9e:a4:9e:d1:9a:54:bc:36:1d:36:56:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e622bc550687b6d0ef60788ceadb0fc820a381f Validity Not Before: Dec 6 05:00:49 2025 GMT Not After : Dec 7 05:00:49 2025 GMT Subject: CN=50e8e6eb6fcc66d2d9155958bb2f146b22638c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:51:b1:e2:cc:ce:46:1a:99:b5:86:22:7c:80: 6c:fa:1a:64:ed:fb:7f:07:7a:b0:42:e3:57:8c:cf: 65:55:11:51:db:c4:3e:e7:37:4d:58:44:25:55:3c: ed:1a:e2:ca:ec:35:cb:ca:56:4b:8f:91:52:92:62: 21:85:cb:65:c9:1b:74:e3:b1:03:ec:dc:1d:38:af: 81:60:c8:6e:81:7b:d9:61:c6:67:25:45:e5:8a:1f: 62:d8:5c:8b:33:6a:55:7b:86:33:46:04:ed:15:d5: f9:21:f9:b1:b9:e9:1a:4a:80:53:32:86:a3:a5:e8: b7:da:21:5f:1b:48:61:56:76:c4:54:4d:f8:07:4c: 8e:11:1a:db:b0:96:93:78:72:44:c2:d7:f7:22:df: 39:43:62:fe:bf:e1:8e:a9:29:84:33:aa:88:de:6c: 26:a3:a0:c8:bd:de:5a:77:62:25:4f:db:c5:04:6d: 7f:be:d6:81:c6:47:e0:1e:78:01:38:ec:12:ff:bc: 09:54:14:16:f3:80:a0:08:92:08:f7:dd:87:a1:9f: 46:a0:c1:b6:81:c9:c6:55:6b:c2:57:4d:b7:d1:2b: bf:ea:7c:d9:d8:8f:30:5a:92:f1:4b:e0:dc:ac:fc: 63:c6:8c:d7:60:78:89:90:a9:e5:85:96:f4:58:f8: 54:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E8:E6:EB:6F:CC:66:D2:D9:15:59:58:BB:2F:14:6B:22:63:8C:77 X509v3 Authority Key Identifier: keyid:4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:1b:fa:c8:49:d6:bc:a2:26:5b:0a:61:90:f2:ec:63:79:82: 4e:8c:60:af:db:0a:79:cf:97:e6:c3:88:cf:df:93:dc:cd:c2: b4:d7:0d:f9:3f:43:d1:8d:6b:e7:c4:3c:e6:9c:02:d0:e6:bb: 90:dc:a6:ca:7e:2f:5d:2c:43:52:b6:63:a9:3e:ef:2b:12:48: eb:d1:83:f1:a6:57:8e:46:e2:24:db:74:4d:36:51:59:25:c0: 91:7b:a0:19:ef:e8:0b:cd:3d:9e:46:eb:00:f1:7d:dc:c0:ef: e5:e0:21:e6:e2:ee:aa:43:76:99:96:96:2a:7e:0e:1e:28:3d: 97:cd:0d:66:db:87:a7:0f:a7:25:fa:bd:3a:1b:e8:07:29:89: 99:a9:17:d0:83:7a:31:1b:47:1a:36:c3:fd:23:7b:38:a5:06: 50:67:f0:03:d3:43:7f:b4:af:d4:a0:33:59:fa:9f:5f:f5:45: 73:b0:0e:05:9f:de:26:a1:85:09:8a:97:bf:46:5d:70:70:6d: b5:2a:e6:e8:fe:3d:1a:e4:1b:44:bb:01:7b:1d:bc:0d:bb:61: a1:25:7d:f5:8e:30:ca:85:d8:f0:58:36:46:6c:d8:da:f2:9d: f5:00:9d:62:f5:20:b8:72:e0:9d:24:23:d6:21:97:13:2f:83: 00:b5:99:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLiGnqSe0ZpUvDYdNlYgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNjIyYmM1NTA2ODdiNmQwZWY2MDc4OGNlYWRiMGZjODIw YTM4MWYwHhcNMjUxMjA2MDUwMDQ5WhcNMjUxMjA3MDUwMDQ5WjAzMTEwLwYDVQQD Eyg1MGU4ZTZlYjZmY2M2NmQyZDkxNTU5NThiYjJmMTQ2YjIyNjM4Yzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFGx4szORhqZtYYifIBs+hpk7ft/ B3qwQuNXjM9lVRFR28Q+5zdNWEQlVTztGuLK7DXLylZLj5FSkmIhhctlyRt047ED 7NwdOK+BYMhugXvZYcZnJUXlih9i2FyLM2pVe4YzRgTtFdX5IfmxuekaSoBTMoaj pei32iFfG0hhVnbEVE34B0yOERrbsJaTeHJEwtf3It85Q2L+v+GOqSmEM6qI3mwm o6DIvd5ad2IlT9vFBG1/vtaBxkfgHngBOOwS/7wJVBQW84CgCJII992HoZ9GoMG2 gcnGVWvCV0230Su/6nzZ2I8wWpLxS+DcrPxjxozXYHiJkKnlhZb0WPhU7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDo5utvzGbS2RVZWLsvFGsiY4x3MB8GA1UdIwQY MBaAFE5iK8VQaHttDvYHiM6tsPyCCjgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jYTRjMzQtMjcwNC00ZjgyLWJmZjgt YTdjY2QwMDk4NDc3LzEvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jYTRjMzQtMjcwNC00ZjgyLWJmZjgtYTdjY2QwMDk4NDc3 LzEvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxv6yEnW vKImWwphkPLsY3mCToxgr9sKec+X5sOIz9+T3M3CtNcN+T9D0Y1r58Q85pwC0Oa7 kNymyn4vXSxDUrZjqT7vKxJI69GD8aZXjkbiJNt0TTZRWSXAkXugGe/oC809nkbr APF93MDv5eAh5uLuqkN2mZaWKn4OHig9l80NZtuHpw+nJfq9OhvoBymJmakX0IN6 MRtHGjbD/SN7OKUGUGfwA9NDf7Sv1KAzWfqfX/VFc7AOBZ/eJqGFCYqXv0ZdcHBt tSrm6P49GuQbRLsBex28DbthoSV99Y4wyoXY8Fg2RmzY2vKd9QCdYvUguHLgnSQj 1iGXEy+DALWZyg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:13 2025 by rpki-client