This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft File: temngBMLfFKwEP1xOL8LcjviB8M.mft (raw, json) Hash identifier: 3eLgtKD44GYHF9omGPVMxpTUuTcUjB64AhSN/71xiNg= Subject key identifier: FD:96:E6:35:28:20:0F:22:4E:76:BB:9C:4B:9C:E8:CA:28:F5:B2:75 Authority key identifier: B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3 Certificate issuer: /CN=b5e9a780130b7c52b010fd7138bf0b723be207c3 Certificate serial: 019B5976EFF9E9F2D3E24A5A5AE5CE61BFEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft Manifest number: 069A Signing time: Fri 26 Dec 2025 07:02:05 +0000 Manifest this update: Fri 26 Dec 2025 07:02:05 +0000 Manifest next update: Sat 27 Dec 2025 07:02:05 +0000 Files and hashes: 1: KrjmV6dA9ju5vRf_FpDJeVff1Zg.roa (hash: 0t4qGhYAlNNMecASk36kf27GCM4uwfcfNK8pYxGSBbg=) 2: temngBMLfFKwEP1xOL8LcjviB8M.crl (hash: RBAzKdPhIxJusjQJCsaMBhrI1K2soWPwzzFsrUB7WuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:ef:f9:e9:f2:d3:e2:4a:5a:5a:e5:ce:61:bf:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5e9a780130b7c52b010fd7138bf0b723be207c3 Validity Not Before: Dec 26 07:02:05 2025 GMT Not After : Dec 27 07:02:05 2025 GMT Subject: CN=fd96e63528200f224e76bb9c4b9ce8ca28f5b275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b5:81:87:46:4b:83:dd:ed:0f:84:69:c7:67: 5d:47:59:07:c8:4b:e1:2c:0e:a3:5a:4d:57:53:ff: b7:89:6d:0a:d2:8c:36:be:00:4e:4c:e5:11:59:9e: 08:26:9e:16:fa:80:a1:4c:0e:d4:8d:a8:19:3d:99: 3a:36:61:f5:5e:a7:fd:5b:a7:fc:e0:4e:f2:e8:ad: c7:67:dc:e0:93:ba:c9:78:b5:3e:43:24:9d:03:b1: 90:cf:85:a9:ca:fb:91:0e:b2:d7:8c:db:eb:d4:e1: a8:20:94:53:7f:ed:89:d6:54:e3:74:7e:ec:bf:d7: bf:42:71:4f:c7:30:9f:09:f2:95:c9:7f:9b:bc:26: f5:f4:09:fc:11:af:34:b9:ee:f2:dc:f2:d8:de:d7: 7b:72:7d:26:91:8f:8d:cc:5f:48:ec:74:25:54:00: d3:27:a3:8b:d8:e7:cb:0b:55:a8:df:81:fe:51:0a: bc:63:47:55:3c:68:8b:7d:f0:1f:31:32:84:60:58: 32:47:51:5b:f0:ae:7f:be:14:ef:e7:eb:31:26:97: 3d:5f:31:3f:94:71:6b:bc:c8:ad:95:1f:1e:54:75: 13:2a:8b:95:37:a9:4b:87:bd:04:ca:62:6c:a1:66: 5a:78:df:83:de:46:32:bd:b3:b1:6d:e8:c3:e9:43: 5c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:96:E6:35:28:20:0F:22:4E:76:BB:9C:4B:9C:E8:CA:28:F5:B2:75 X509v3 Authority Key Identifier: keyid:B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:12:27:8c:b6:7a:ab:a0:69:42:ef:80:19:2c:8b:05:74:0c: a0:61:d4:44:b6:b1:d6:68:5c:ab:e1:76:84:8a:2d:5a:cc:dd: 9a:3e:65:bb:43:cf:41:ab:d9:ab:86:6a:46:3d:cc:31:78:97: 69:90:6e:46:33:6e:b0:c2:a5:07:1a:5e:79:41:1f:d6:94:5d: ce:bd:eb:5b:20:82:90:63:66:69:79:a5:8d:5f:dd:9f:14:90: a1:5f:2d:bc:3f:8f:79:32:4e:47:01:b3:cd:7e:bb:37:36:f7: 9b:e3:02:da:08:95:63:af:c8:12:6b:19:86:61:ae:11:ab:ef: 30:70:e6:9c:af:46:b8:a0:fb:bf:93:c5:48:52:f4:a3:51:25: dd:78:0e:65:c1:3c:eb:2f:46:4d:c5:93:ed:26:4e:20:e4:1c: fb:b3:95:45:65:96:51:f8:7a:50:f5:6f:38:72:47:b9:85:e0: 7c:f1:66:68:49:83:b9:0c:98:0a:d9:2f:ce:6e:3a:af:10:be: ef:19:53:52:6a:dd:8d:fb:8f:6c:e3:58:88:20:56:59:c8:21: f9:0a:c8:70:ef:04:dc:52:ef:a6:f9:fa:10:e4:00:22:5a:70: 1e:e4:15:5e:94:5b:b2:a3:39:81:6b:8e:20:97:4f:9e:c9:e2: e4:fa:f3:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdu/56fLT4kpaWuXOYb/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZTlhNzgwMTMwYjdjNTJiMDEwZmQ3MTM4YmYwYjcyM2Jl MjA3YzMwHhcNMjUxMjI2MDcwMjA1WhcNMjUxMjI3MDcwMjA1WjAzMTEwLwYDVQQD EyhmZDk2ZTYzNTI4MjAwZjIyNGU3NmJiOWM0YjljZThjYTI4ZjViMjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7WBh0ZLg93tD4Rpx2ddR1kHyEvh LA6jWk1XU/+3iW0K0ow2vgBOTOURWZ4IJp4W+oChTA7UjagZPZk6NmH1Xqf9W6f8 4E7y6K3HZ9zgk7rJeLU+QySdA7GQz4WpyvuRDrLXjNvr1OGoIJRTf+2J1lTjdH7s v9e/QnFPxzCfCfKVyX+bvCb19An8Ea80ue7y3PLY3td7cn0mkY+NzF9I7HQlVADT J6OL2OfLC1Wo34H+UQq8Y0dVPGiLffAfMTKEYFgyR1Fb8K5/vhTv5+sxJpc9XzE/ lHFrvMitlR8eVHUTKouVN6lLh70EymJsoWZaeN+D3kYyvbOxbejD6UNcmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2W5jUoIA8iTna7nEuc6Moo9bJ1MB8GA1UdIwQY MBaAFLXpp4ATC3xSsBD9cTi/C3I74gfDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGVtbmdCTUxmRkt3RVAxeE9MOExjanZpQjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zYjAwMDktZjE1Mi00ZDljLWFmOTYt YTVlNWQwMDg0NzAxLzEvdGVtbmdCTUxmRkt3RVAxeE9MOExjanZpQjhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8zYjAwMDktZjE1Mi00ZDljLWFmOTYtYTVlNWQwMDg0NzAx LzEvdGVtbmdCTUxmRkt3RVAxeE9MOExjanZpQjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxInjLZ6 q6BpQu+AGSyLBXQMoGHURLax1mhcq+F2hIotWszdmj5lu0PPQavZq4ZqRj3MMXiX aZBuRjNusMKlBxpeeUEf1pRdzr3rWyCCkGNmaXmljV/dnxSQoV8tvD+PeTJORwGz zX67Nzb3m+MC2giVY6/IEmsZhmGuEavvMHDmnK9GuKD7v5PFSFL0o1El3XgOZcE8 6y9GTcWT7SZOIOQc+7OVRWWWUfh6UPVvOHJHuYXgfPFmaEmDuQyYCtkvzm46rxC+ 7xlTUmrdjfuPbONYiCBWWcgh+QrIcO8E3FLvpvn6EOQAIlpwHuQVXpRbsqM5gWuO IJdPnsni5Prz9A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:08:50 2025 by rpki-client