This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft File: Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft (raw, json) Hash identifier: Vcg7kAgQvdrfwfBhezIyaM2TCLOSfks4mf2vS1cJuRM= Subject key identifier: 27:01:96:C6:73:A3:FB:B9:BD:CF:2B:D9:B8:29:87:59:F7:5F:A9:54 Authority key identifier: 4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8 Certificate issuer: /CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8 Certificate serial: 019AF19AF1F0CE88A427A542AB00588DF9C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft Manifest number: 052A Signing time: Sat 06 Dec 2025 03:00:54 +0000 Manifest this update: Sat 06 Dec 2025 03:00:54 +0000 Manifest next update: Sun 07 Dec 2025 03:00:54 +0000 Files and hashes: 1: Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl (hash: 4CyZFjhb4xO3NLNcQSaB/ufcMlPECiudU0Sw2dNXV1Y=) 2: dRB7xJtajjzk6UoGyoSGsT51giI.roa (hash: YcmDNZ/enUR0rChrVz40koeNmEa+q2s38R7f9KQbajo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f1:f0:ce:88:a4:27:a5:42:ab:00:58:8d:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8 Validity Not Before: Dec 6 03:00:54 2025 GMT Not After : Dec 7 03:00:54 2025 GMT Subject: CN=270196c673a3fbb9bdcf2bd9b8298759f75fa954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:72:4d:66:1f:b6:80:75:54:9e:7a:bc:be:77: 1c:97:0e:0c:86:d9:e5:07:f8:c9:d9:b1:4c:70:0f: e9:c4:07:cd:85:8a:3a:25:4c:ad:0f:34:80:c0:d3: bb:aa:85:7c:a0:85:52:4a:e9:bd:8a:25:49:39:54: 60:23:1c:b1:ab:c1:ba:d1:ac:43:9f:c9:d1:28:6f: 86:cf:c5:8a:53:32:c7:e8:01:31:0f:ee:b2:09:2e: fe:5d:f2:a0:4e:b8:57:67:3c:6e:19:54:13:c1:35: 0c:94:93:92:cf:61:3f:3b:fc:db:3e:3e:f6:cd:43: d5:62:88:62:d4:37:31:b6:f3:1c:ce:44:1e:8a:e8: 96:a0:e7:83:bf:b9:4c:82:f7:ff:81:85:23:09:42: a1:f1:61:3d:77:5f:32:88:90:a1:92:4e:92:8a:e2: e3:bb:90:ac:c1:c5:f9:53:c0:2c:6c:45:b2:73:f0: 78:ac:87:4a:12:03:03:ea:38:28:79:bf:a3:9f:a1: d4:14:2e:21:22:73:0e:54:84:14:77:c0:96:72:8d: 01:bb:dd:d6:9f:39:f6:ab:26:e3:38:61:66:6c:8f: 78:50:d7:82:49:5a:41:78:01:fc:82:2c:9a:59:41: cd:6d:c2:1a:d5:27:3f:28:2a:e8:e4:0d:98:ed:e4: bd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:01:96:C6:73:A3:FB:B9:BD:CF:2B:D9:B8:29:87:59:F7:5F:A9:54 X509v3 Authority Key Identifier: keyid:4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ef:d6:cc:30:93:00:4f:ea:99:ad:f0:7c:87:de:42:cb:da: 44:c3:e3:d3:5f:f6:70:db:69:24:7e:b3:70:69:cf:06:39:d9: fd:46:b5:ad:1b:dc:7a:1c:c0:12:79:48:26:71:9c:64:10:33: af:fe:4a:1b:40:a6:c7:de:74:e7:05:7b:af:bf:7a:95:14:fe: ba:ff:9e:a3:2a:3e:fc:83:51:b2:54:44:33:dc:c3:5b:db:43: 9d:1a:c9:47:a4:e8:9e:ef:3f:5b:08:d0:38:f2:1b:17:7e:32: 0f:7a:8a:ae:33:65:8e:ca:1f:e8:aa:5d:48:48:8a:d7:6f:d5: 43:10:11:d2:4c:e1:0e:cc:d5:3d:1f:ac:c4:f3:90:dd:52:01: d5:23:c1:48:e7:90:22:5a:0e:aa:0b:d8:32:ba:8b:23:64:3d: b5:0d:bf:89:c9:2f:a2:c8:50:a2:bf:fc:fd:a6:d1:08:46:6d: 02:a5:e8:91:3f:ee:fe:f3:b5:f4:35:b3:29:68:01:4c:61:fc: 21:8a:14:20:71:b9:96:a4:30:73:d0:27:bc:85:07:98:5f:31: 18:c1:97:40:32:0d:d6:8e:6d:75:cc:3d:2b:31:8e:52:49:98: c8:48:fb:3e:2b:dc:3c:3b:68:54:13:e7:3b:0d:5c:66:90:45: 04:4f:a2:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvHwzoikJ6VCqwBYjfnAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNmIzMmQ5ZDNlYmM2ZWU0OWJkNmZhNmNkOTBlNGY1Yzdk NTQ0ZTgwHhcNMjUxMjA2MDMwMDU0WhcNMjUxMjA3MDMwMDU0WjAzMTEwLwYDVQQD EygyNzAxOTZjNjczYTNmYmI5YmRjZjJiZDliODI5ODc1OWY3NWZhOTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXJNZh+2gHVUnnq8vncclw4Mhtnl B/jJ2bFMcA/pxAfNhYo6JUytDzSAwNO7qoV8oIVSSum9iiVJOVRgIxyxq8G60axD n8nRKG+Gz8WKUzLH6AExD+6yCS7+XfKgTrhXZzxuGVQTwTUMlJOSz2E/O/zbPj72 zUPVYohi1DcxtvMczkQeiuiWoOeDv7lMgvf/gYUjCUKh8WE9d18yiJChkk6SiuLj u5CswcX5U8AsbEWyc/B4rIdKEgMD6jgoeb+jn6HUFC4hInMOVIQUd8CWco0Bu93W nzn2qybjOGFmbI94UNeCSVpBeAH8giyaWUHNbcIa1Sc/KCro5A2Y7eS9HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcBlsZzo/u5vc8r2bgph1n3X6lUMB8GA1UdIwQY MBaAFE5rMtnT68buSb1vps2Q5PXH1UToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG1zeTJkUHJ4dTVKdlctbXpaRGs5Y2ZWUk9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82Mjc0ZDctOGQxYy00OTNiLTljMjIt MDk2ZWUyOWQ5OTdkLzEvVG1zeTJkUHJ4dTVKdlctbXpaRGs5Y2ZWUk9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82Mjc0ZDctOGQxYy00OTNiLTljMjItMDk2ZWUyOWQ5OTdk LzEvVG1zeTJkUHJ4dTVKdlctbXpaRGs5Y2ZWUk9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+/WzDCT AE/qma3wfIfeQsvaRMPj01/2cNtpJH6zcGnPBjnZ/Ua1rRvcehzAEnlIJnGcZBAz r/5KG0Cmx9505wV7r796lRT+uv+eoyo+/INRslREM9zDW9tDnRrJR6Tonu8/WwjQ OPIbF34yD3qKrjNljsof6KpdSEiK12/VQxAR0kzhDszVPR+sxPOQ3VIB1SPBSOeQ IloOqgvYMrqLI2Q9tQ2/ickvoshQor/8/abRCEZtAqXokT/u/vO19DWzKWgBTGH8 IYoUIHG5lqQwc9AnvIUHmF8xGMGXQDIN1o5tdcw9KzGOUkmYyEj7PivcPDtoVBPn Ow1cZpBFBE+iDA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:11 2025 by rpki-client