This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft File: TgTgpximE5qcZfDUiGu4JxTaZoI.mft (raw, json) Hash identifier: MGLdf80vr/d/1MODhHls4i6UAr3XRBJmBSI/qcIDlT4= Subject key identifier: 0E:7D:EC:D8:8D:A8:6E:91:98:44:19:F3:6B:11:97:8C:90:8F:36:94 Authority key identifier: 4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82 Certificate issuer: /CN=4e04e0a718a6139a9c65f0d4886bb82714da6682 Certificate serial: 019B3C7DFE48D204CB2E7B52B9282281EFF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:00:48 +0000 Manifest this update: Sat 20 Dec 2025 16:00:48 +0000 Manifest next update: Sun 21 Dec 2025 16:00:48 +0000 Files and hashes: 1: TgTgpximE5qcZfDUiGu4JxTaZoI.crl (hash: oIbRq8PwI3DzFLFQM/EbfG0Uigk9KiYSxf5cWAGj+GI=) 2: _DVbXJIlrc4WueVJodx5_dUQQGU.roa (hash: qLnLYdx/R1C59idEfb9lAoJsSeK5qnRHJhL7xW0LEkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:fe:48:d2:04:cb:2e:7b:52:b9:28:22:81:ef:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e04e0a718a6139a9c65f0d4886bb82714da6682 Validity Not Before: Dec 20 16:00:48 2025 GMT Not After : Dec 21 16:00:48 2025 GMT Subject: CN=0e7decd88da86e91984419f36b11978c908f3694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:f1:fa:8f:50:b1:a9:5e:6d:c7:b6:0a:d2: d5:dd:63:d6:1f:72:63:8a:0c:54:14:23:e4:2b:cf: 80:14:58:39:38:e7:8c:23:d4:73:75:f3:7c:4e:ef: 3f:23:0f:7f:f1:d8:80:86:76:61:42:08:cd:6e:12: 97:30:86:ce:11:ce:97:d7:1f:ed:a7:58:09:c3:d3: d6:ca:57:15:8e:ac:5a:c6:39:4f:73:47:39:9d:29: 2a:f8:b4:c2:8c:57:7d:29:4d:a1:f6:26:30:f8:4a: 45:bc:c3:03:d2:a3:7b:01:4f:08:1f:e1:95:bd:55: 4f:3c:a1:51:c7:d6:d9:52:c4:82:78:c3:1d:20:54: 0e:18:a6:9a:56:0b:03:34:f3:31:5e:2d:3e:7c:bb: 2d:cc:6a:be:a8:96:64:f0:53:28:fc:28:29:0a:82: e1:6e:2e:ff:70:6b:87:cc:34:da:3c:04:c9:a3:09: d2:bc:df:b0:64:96:1c:56:c5:67:17:5b:4c:2e:a7: 05:de:37:53:c9:28:e5:15:56:a1:3f:82:ee:c5:8f: a9:f5:f1:4b:2c:9a:bc:b7:b5:2c:43:7b:80:ad:12: 29:b6:54:17:c1:e2:ce:91:6e:ba:fc:b2:47:69:56: 29:bf:2e:66:04:86:8c:e7:0a:b8:b3:16:e1:5d:e8: 03:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7D:EC:D8:8D:A8:6E:91:98:44:19:F3:6B:11:97:8C:90:8F:36:94 X509v3 Authority Key Identifier: keyid:4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:76:5f:1e:e9:d0:25:fe:ea:de:d4:3d:d3:b1:27:eb:2e:cd: 57:a2:47:77:d1:db:b4:cc:6e:0f:64:34:6d:ca:3d:94:92:d8: f0:f9:ab:76:04:b6:32:05:db:cc:c5:9e:63:75:2b:a0:37:81: 26:f8:f8:d8:03:d3:75:f7:26:cf:49:ab:66:e7:ec:3c:bc:2d: 88:1b:5d:59:de:8e:a6:5a:39:ca:5a:59:82:9a:8a:56:f3:00: 30:cb:f4:dc:b7:ca:c4:a3:cf:64:cc:17:cf:39:08:1a:b7:43: a4:82:79:eb:ce:e9:17:ed:84:b4:b0:0d:8c:b1:12:a7:d4:86: 7d:07:0a:ed:44:57:c5:c4:94:9a:9f:6c:76:a8:59:69:e7:bb: 67:dd:87:d2:2f:e2:22:18:ad:c0:b6:ca:cf:60:91:a4:5a:27: 75:c4:7b:60:94:09:f6:4e:df:b2:a3:13:3c:6f:8a:a1:82:db: 0c:a2:79:60:fb:2b:04:cb:ff:fe:39:c9:64:31:60:64:38:75: 4c:1e:8d:8c:dc:9e:7d:b4:98:35:72:47:fa:c5:04:e6:e3:2c: 26:dc:3c:f0:5d:56:1e:f5:b4:56:93:6b:39:41:39:67:f7:b9: ae:c0:7b:fc:6b:7e:69:dc:50:61:a6:03:95:fb:6e:cb:7b:0d: 95:a3:e4:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ff5I0gTLLntSuSgige/0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMDRlMGE3MThhNjEzOWE5YzY1ZjBkNDg4NmJiODI3MTRk YTY2ODIwHhcNMjUxMjIwMTYwMDQ4WhcNMjUxMjIxMTYwMDQ4WjAzMTEwLwYDVQQD EygwZTdkZWNkODhkYTg2ZTkxOTg0NDE5ZjM2YjExOTc4YzkwOGYzNjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstvx+o9Qsalebce2CtLV3WPWH3Jj igxUFCPkK8+AFFg5OOeMI9RzdfN8Tu8/Iw9/8diAhnZhQgjNbhKXMIbOEc6X1x/t p1gJw9PWylcVjqxaxjlPc0c5nSkq+LTCjFd9KU2h9iYw+EpFvMMD0qN7AU8IH+GV vVVPPKFRx9bZUsSCeMMdIFQOGKaaVgsDNPMxXi0+fLstzGq+qJZk8FMo/CgpCoLh bi7/cGuHzDTaPATJownSvN+wZJYcVsVnF1tMLqcF3jdTySjlFVahP4LuxY+p9fFL LJq8t7UsQ3uArRIptlQXweLOkW66/LJHaVYpvy5mBIaM5wq4sxbhXegDLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA597NiNqG6RmEQZ82sRl4yQjzaUMB8GA1UdIwQY MBaAFE4E4KcYphOanGXw1IhruCcU2maCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGdUZ3B4aW1FNXFjWmZEVWlHdTRKeFRhWm9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YWZlYWItMDJiOS00ZWJkLWJmYTIt OGU4MGI0OTZhMDNlLzEvVGdUZ3B4aW1FNXFjWmZEVWlHdTRKeFRhWm9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80YWZlYWItMDJiOS00ZWJkLWJmYTItOGU4MGI0OTZhMDNl LzEvVGdUZ3B4aW1FNXFjWmZEVWlHdTRKeFRhWm9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXZfHunQ Jf7q3tQ907En6y7NV6JHd9HbtMxuD2Q0bco9lJLY8PmrdgS2MgXbzMWeY3UroDeB Jvj42APTdfcmz0mrZufsPLwtiBtdWd6Oplo5ylpZgpqKVvMAMMv03LfKxKPPZMwX zzkIGrdDpIJ5687pF+2EtLANjLESp9SGfQcK7URXxcSUmp9sdqhZaee7Z92H0i/i IhitwLbKz2CRpFondcR7YJQJ9k7fsqMTPG+KoYLbDKJ5YPsrBMv//jnJZDFgZDh1 TB6NjNyefbSYNXJH+sUE5uMsJtw88F1WHvW0VpNrOUE5Z/e5rsB7/Gt+adxQYaYD lftuy3sNlaPkCg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:15:46 2025 by rpki-client