This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft File: Tm_7mQbuvrofWxpVju1jcvZTzoY.mft (raw, json) Hash identifier: LbBzy9NVu3XqMLvyDBXlAHQyrDDtkWPEEDmLRLzTzjw= Subject key identifier: 47:BA:EC:21:E6:A4:CF:83:AC:2B:AA:23:06:89:46:0A:F1:DF:DC:F7 Authority key identifier: 4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86 Certificate issuer: /CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86 Certificate serial: 019B3720E1372E0029DA6E1A52B4CF959AE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 15:01:00 +0000 Manifest this update: Fri 19 Dec 2025 15:01:00 +0000 Manifest next update: Sat 20 Dec 2025 15:01:00 +0000 Files and hashes: 1: Tm_7mQbuvrofWxpVju1jcvZTzoY.crl (hash: 5uWtgnwYgbPjcDkCqlcF5RRl4+xmKVX15H+MZXJ0icc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:e1:37:2e:00:29:da:6e:1a:52:b4:cf:95:9a:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86 Validity Not Before: Dec 19 15:01:00 2025 GMT Not After : Dec 20 15:01:00 2025 GMT Subject: CN=47baec21e6a4cf83ac2baa230689460af1dfdcf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b7:55:b2:a0:5b:94:bf:cc:a0:f9:de:fa:ba: 48:b2:cb:7b:90:df:e1:e1:1a:84:2d:80:cf:bc:93: 34:aa:47:ca:69:d7:76:51:3f:fd:29:24:08:bd:34: b6:e5:34:ec:a8:bc:39:ca:d3:71:0a:5d:52:b2:5c: 9b:1f:b5:38:44:9d:f1:7f:9a:ff:04:df:5f:6e:c1: 4b:38:b9:f3:47:73:60:1c:72:06:1e:1d:69:d6:08: 83:a0:83:54:5e:21:a5:e0:a8:f0:5f:81:01:1f:e7: f9:b5:82:d6:a0:e3:67:8b:67:8a:e3:cc:44:90:f7: 46:96:a6:95:97:68:d7:7c:2a:78:80:a3:da:de:09: e6:8a:49:e9:2a:00:18:8c:6a:0a:02:6a:a8:10:47: 59:3f:69:68:81:6c:96:18:c1:8f:3d:2c:35:51:3f: 2e:3f:dd:f8:c4:64:be:80:21:11:c9:30:69:09:0b: 80:3c:f5:2b:f9:19:a4:24:9d:9b:45:c7:67:0e:ae: d6:f2:21:54:99:12:6c:b3:86:02:a1:7c:f6:62:7e: 3e:4c:98:db:82:c8:f1:41:bb:76:04:24:ff:67:94: 26:6d:4a:32:2b:9f:6f:ea:11:aa:dc:22:17:06:a5: cc:a3:52:ea:c1:8b:01:e3:d5:13:30:0f:3c:fd:7c: 22:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BA:EC:21:E6:A4:CF:83:AC:2B:AA:23:06:89:46:0A:F1:DF:DC:F7 X509v3 Authority Key Identifier: keyid:4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:15:6b:50:bd:a1:dd:58:61:d0:6b:c4:d3:aa:79:bf:e1:34: d0:a3:3f:07:41:94:56:a9:bc:36:07:da:5f:62:86:15:1b:0e: 00:33:8a:4a:eb:b3:8b:a4:65:b0:3c:6c:2e:76:66:ba:60:5f: bd:8f:61:72:f2:2a:a6:c8:13:eb:39:40:3b:95:54:41:fb:ec: 6e:bc:9d:29:da:7a:1c:fc:0f:f0:41:df:c3:19:4a:22:84:d9: d3:1b:b2:0a:96:e2:8c:f5:7a:e6:91:d9:24:3f:9b:fe:2c:14: 9c:4d:20:73:d7:3f:e7:d9:b2:3b:ed:a6:8d:a3:38:66:f4:12: 66:10:7b:e1:4b:da:20:c5:18:f4:c0:2a:9f:3f:11:19:72:e3: 38:5f:a7:bd:2e:22:78:44:93:0b:e7:df:25:a4:98:ce:60:8b: 06:47:02:08:71:26:39:e7:2c:f2:65:07:58:b9:f5:ac:fd:cf: 0d:1b:7c:2e:2e:ac:75:93:ec:d5:2e:f1:ac:25:f7:08:f1:b6: 01:74:a5:65:db:d0:b3:ec:e3:9e:2a:e5:80:1b:83:aa:54:79: 58:f9:de:37:29:41:a5:ea:3e:e8:92:ee:e3:76:e0:14:08:88: c2:2c:a5:77:78:87:2a:8d:2b:67:0a:10:22:a5:6f:fe:76:95: aa:0f:81:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IOE3LgAp2m4aUrTPlZrkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNmZmYjk5MDZlZWJlYmExZjViMWE1NThlZWQ2MzcyZjY1 M2NlODYwHhcNMjUxMjE5MTUwMTAwWhcNMjUxMjIwMTUwMTAwWjAzMTEwLwYDVQQD Eyg0N2JhZWMyMWU2YTRjZjgzYWMyYmFhMjMwNjg5NDYwYWYxZGZkY2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbdVsqBblL/MoPne+rpIsst7kN/h 4RqELYDPvJM0qkfKadd2UT/9KSQIvTS25TTsqLw5ytNxCl1SslybH7U4RJ3xf5r/ BN9fbsFLOLnzR3NgHHIGHh1p1giDoINUXiGl4KjwX4EBH+f5tYLWoONni2eK48xE kPdGlqaVl2jXfCp4gKPa3gnmiknpKgAYjGoKAmqoEEdZP2logWyWGMGPPSw1UT8u P934xGS+gCERyTBpCQuAPPUr+RmkJJ2bRcdnDq7W8iFUmRJss4YCoXz2Yn4+TJjb gsjxQbt2BCT/Z5QmbUoyK59v6hGq3CIXBqXMo1LqwYsB49UTMA88/XwiFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEe67CHmpM+DrCuqIwaJRgrx39z3MB8GA1UdIwQY MBaAFE5v+5kG7r66H1saVY7tY3L2U86GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xOTgwYmQtMDc1My00MTYxLWI2ZjUt OWM3MmUxNTdhYmIzLzEvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8xOTgwYmQtMDc1My00MTYxLWI2ZjUtOWM3MmUxNTdhYmIz LzEvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvBVrUL2h 3Vhh0GvE06p5v+E00KM/B0GUVqm8NgfaX2KGFRsOADOKSuuzi6RlsDxsLnZmumBf vY9hcvIqpsgT6zlAO5VUQfvsbrydKdp6HPwP8EHfwxlKIoTZ0xuyCpbijPV65pHZ JD+b/iwUnE0gc9c/59myO+2mjaM4ZvQSZhB74UvaIMUY9MAqnz8RGXLjOF+nvS4i eESTC+ffJaSYzmCLBkcCCHEmOecs8mUHWLn1rP3PDRt8Li6sdZPs1S7xrCX3CPG2 AXSlZdvQs+zjnirlgBuDqlR5WPneNylBpeo+6JLu43bgFAiIwiyld3iHKo0rZwoQ IqVv/naVqg+Bmw== -----END CERTIFICATE-----Generated at Sat Dec 20 00:17:27 2025 by rpki-client