This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft File: TmROKYPFxQTYAPLQWCsYLrq_JIc.mft (raw, json) Hash identifier: 8/gS1fw0+7S7lno8gPgNE/rqAuzf+QiZjKRDyTPDhNI= Subject key identifier: B6:B0:CA:F2:BD:34:64:F5:96:5A:31:75:82:B6:7B:78:88:EA:19:16 Authority key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87 Certificate issuer: /CN=4e644e2983c5c504d800f2d0582b182ebabf2487 Certificate serial: 019AF12E58F12F998A4BF54227A1A7151307 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft Manifest number: 0A23 Signing time: Sat 06 Dec 2025 01:02:17 +0000 Manifest this update: Sat 06 Dec 2025 01:02:17 +0000 Manifest next update: Sun 07 Dec 2025 01:02:17 +0000 Files and hashes: 1: TmROKYPFxQTYAPLQWCsYLrq_JIc.crl (hash: 4s2cGX5UbbmWHOsG+sljMa9CcWf+/HRLqbcHzQriEQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:58:f1:2f:99:8a:4b:f5:42:27:a1:a7:15:13:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e644e2983c5c504d800f2d0582b182ebabf2487 Validity Not Before: Dec 6 01:02:17 2025 GMT Not After : Dec 7 01:02:17 2025 GMT Subject: CN=b6b0caf2bd3464f5965a317582b67b7888ea1916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:94:bf:61:43:d0:c1:e0:3c:c3:4a:0c:8b:92: c1:3a:37:37:1c:0b:55:ef:7c:41:89:c6:79:81:f9: 42:ac:9e:11:00:ea:9e:04:90:5b:7e:53:7d:03:73: 6e:39:f9:45:c5:ce:29:c9:a0:4b:56:51:40:57:6b: fe:24:0c:f7:7b:bd:99:ec:e6:5d:70:49:19:9c:86: 60:0e:61:04:c7:49:b0:33:81:8d:2c:2a:1d:46:20: 05:c9:e2:81:56:29:bd:3b:65:ad:12:0e:b3:9b:5b: 78:85:1b:3c:57:a8:b6:4b:e7:fb:93:3e:14:9f:9e: 86:fb:f5:e7:3c:ee:43:0d:ac:62:0f:32:65:e6:5e: b8:d3:8c:ca:a3:a0:f8:4c:b7:42:b0:a2:50:06:c5: 4f:d1:56:a9:8d:6e:67:00:75:63:95:0f:39:90:b6: eb:73:9c:f6:02:61:f4:00:f5:09:1e:20:69:2b:4d: d9:80:dc:06:9a:22:83:cd:d1:8a:38:bd:c2:68:0d: ab:55:2a:fc:26:39:a2:af:bd:69:7d:76:6f:04:d7: d7:29:d1:51:c6:f3:84:db:a5:cc:e2:a8:b3:09:71: 37:14:9a:23:09:de:3e:98:bc:78:88:b1:e2:31:b5: 36:b4:5a:31:a4:cd:f1:3c:5d:85:b3:ec:68:32:27: 22:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B0:CA:F2:BD:34:64:F5:96:5A:31:75:82:B6:7B:78:88:EA:19:16 X509v3 Authority Key Identifier: keyid:4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:4e:e8:6a:84:94:e3:be:7c:98:46:c5:08:75:4c:00:9d:6d: 6d:59:48:c1:e4:c4:e6:f6:90:ca:f8:f8:35:25:01:7f:81:36: 74:40:f6:85:16:f0:ab:8b:b0:9c:e8:c2:7c:6c:22:38:e4:c0: a9:96:6c:8f:91:0e:f5:0f:6b:30:44:65:a1:76:70:59:70:c3: ee:cf:dc:e6:4a:7c:da:b2:af:b8:32:2e:7d:2c:d6:82:7e:99: 10:c8:9c:14:1d:93:d0:67:42:63:52:8b:83:e5:62:ff:4e:8d: 63:46:41:f8:ef:02:15:82:53:30:92:81:cb:12:c1:ca:9c:33: f7:8b:74:59:74:c6:ce:84:c4:4d:04:ef:c9:58:44:47:e8:53: c0:22:1a:19:2d:9a:59:05:62:ad:b6:73:c5:53:a6:43:4a:b3: f0:7c:6f:cf:1a:6c:e1:2a:cf:c0:34:6b:2e:1d:0d:4f:85:d6: 31:49:96:57:aa:1d:78:17:27:de:77:cd:67:07:1e:da:45:df: 00:6c:84:16:0a:bf:5a:ae:d4:fd:54:fd:d6:54:78:9c:31:de: b2:e7:05:f4:da:6c:b5:9d:4a:0c:a9:3a:fd:5c:0d:08:2f:f1: 0e:01:a0:9d:f0:48:2c:42:08:84:66:f5:5a:0e:42:23:7f:3c: b3:5b:6e:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLljxL5mKS/VCJ6GnFRMHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNjQ0ZTI5ODNjNWM1MDRkODAwZjJkMDU4MmIxODJlYmFi ZjI0ODcwHhcNMjUxMjA2MDEwMjE3WhcNMjUxMjA3MDEwMjE3WjAzMTEwLwYDVQQD EyhiNmIwY2FmMmJkMzQ2NGY1OTY1YTMxNzU4MmI2N2I3ODg4ZWExOTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5S/YUPQweA8w0oMi5LBOjc3HAtV 73xBicZ5gflCrJ4RAOqeBJBbflN9A3NuOflFxc4pyaBLVlFAV2v+JAz3e72Z7OZd cEkZnIZgDmEEx0mwM4GNLCodRiAFyeKBVim9O2WtEg6zm1t4hRs8V6i2S+f7kz4U n56G+/XnPO5DDaxiDzJl5l6404zKo6D4TLdCsKJQBsVP0VapjW5nAHVjlQ85kLbr c5z2AmH0APUJHiBpK03ZgNwGmiKDzdGKOL3CaA2rVSr8Jjmir71pfXZvBNfXKdFR xvOE26XM4qizCXE3FJojCd4+mLx4iLHiMbU2tFoxpM3xPF2Fs+xoMiciRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLawyvK9NGT1lloxdYK2e3iI6hkWMB8GA1UdIwQY MBaAFE5kTimDxcUE2ADy0FgrGC66vySHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jMGU2YTItOGIyMC00NDgwLWE4YWIt YjM4OGM1NzcwZTA0LzEvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9jMGU2YTItOGIyMC00NDgwLWE4YWItYjM4OGM1NzcwZTA0 LzEvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN07oaoSU 4758mEbFCHVMAJ1tbVlIweTE5vaQyvj4NSUBf4E2dED2hRbwq4uwnOjCfGwiOOTA qZZsj5EO9Q9rMERloXZwWXDD7s/c5kp82rKvuDIufSzWgn6ZEMicFB2T0GdCY1KL g+Vi/06NY0ZB+O8CFYJTMJKByxLBypwz94t0WXTGzoTETQTvyVhER+hTwCIaGS2a WQVirbZzxVOmQ0qz8Hxvzxps4SrPwDRrLh0NT4XWMUmWV6odeBcn3nfNZwce2kXf AGyEFgq/Wq7U/VT91lR4nDHesucF9NpstZ1KDKk6/VwNCC/xDgGgnfBILEIIhGb1 Wg5CI388s1tu5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:46 2025 by rpki-client