This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft File: TgTgpximE5qcZfDUiGu4JxTaZoI.mft (raw, json) Hash identifier: GjqezJQQOA+UfJIL+GpUZroOfWnpHafpq3V8GouIRUU= Subject key identifier: 75:FD:4D:EC:31:75:E2:05:13:25:5D:45:4A:9E:EB:6B:F9:10:2C:70 Authority key identifier: 4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82 Certificate issuer: /CN=4e04e0a718a6139a9c65f0d4886bb82714da6682 Certificate serial: 019B0E26417FB0443ACA016996CA3978B51B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 16:02:26 +0000 Manifest this update: Thu 11 Dec 2025 16:02:26 +0000 Manifest next update: Fri 12 Dec 2025 16:02:26 +0000 Files and hashes: 1: TgTgpximE5qcZfDUiGu4JxTaZoI.crl (hash: irHD8BOOSjL9wIRoZMHQ6dBkuojkGb1pUhlNkptiz14=) 2: _DVbXJIlrc4WueVJodx5_dUQQGU.roa (hash: qLnLYdx/R1C59idEfb9lAoJsSeK5qnRHJhL7xW0LEkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:41:7f:b0:44:3a:ca:01:69:96:ca:39:78:b5:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e04e0a718a6139a9c65f0d4886bb82714da6682 Validity Not Before: Dec 11 16:02:26 2025 GMT Not After : Dec 12 16:02:26 2025 GMT Subject: CN=75fd4dec3175e20513255d454a9eeb6bf9102c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:79:39:a9:16:6f:91:90:da:8e:70:d1:ab:99: 51:f5:9e:00:78:bc:53:f7:00:f7:b6:3f:ba:7e:de: 9d:e5:f1:ef:ac:bf:fc:43:be:ac:64:9e:33:ed:bb: 52:f9:a4:96:87:1b:85:4c:a9:52:cf:ca:46:bd:08: 97:fe:3e:36:39:47:38:dc:9f:89:66:01:c7:b8:e9: 4b:50:c5:24:79:ef:42:ae:05:32:59:b1:9e:3d:dc: c2:9c:b2:df:cb:8d:da:93:49:c0:93:fb:20:78:ff: 8e:cd:51:03:6a:63:9d:ce:59:75:4a:68:81:bd:0e: c5:ac:5c:4d:61:9a:0b:8c:4b:87:ea:92:84:5e:2c: 2a:64:43:35:32:43:58:0f:07:ac:e3:aa:36:70:3a: 13:2f:35:57:c2:40:f6:13:4c:74:5c:be:49:29:b6: 0d:4c:69:95:77:52:cc:7f:38:4a:19:33:d0:4e:08: fe:79:ee:10:a3:ac:70:35:c7:4e:53:2d:fd:94:ef: df:88:a7:e3:bf:8a:4a:01:0b:93:21:a7:5b:e9:4b: bd:c6:0c:7b:7c:bb:08:27:4b:e0:10:91:92:66:14: 55:a3:6b:41:96:09:d1:57:f7:62:15:d3:a5:2c:7b: 18:d5:cd:a9:ff:8c:cf:7f:73:30:85:ee:13:bb:60: df:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FD:4D:EC:31:75:E2:05:13:25:5D:45:4A:9E:EB:6B:F9:10:2C:70 X509v3 Authority Key Identifier: keyid:4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:b0:f5:f8:15:de:c0:19:86:ad:a8:7b:ad:62:f5:50:b5:0b: 49:87:54:2d:1a:f1:10:95:96:16:43:e4:0c:c5:62:2a:f9:78: 84:34:2e:4d:b8:63:1e:32:1c:a5:5c:c3:90:2c:8f:55:6d:b6: 1b:0d:c2:26:12:38:94:4e:7e:22:1b:95:f9:86:21:fd:56:fa: 14:27:02:7a:ba:78:73:c5:bd:0d:dd:c3:ef:cb:1c:d0:43:54: f1:a9:5c:19:2c:58:3a:29:b7:6b:a9:41:c6:13:64:f2:c8:d9: ef:58:92:98:b2:77:f8:da:35:21:c7:8f:20:52:b4:6b:f4:25: 00:fe:af:fc:7c:85:34:f1:04:e2:f9:f1:8a:1c:3d:1f:6e:d8: 58:b0:3c:ed:da:27:9b:69:38:04:76:31:25:ec:9e:f5:b3:b4: 5f:ef:75:75:fe:b2:9f:06:2b:8b:93:36:28:c0:0a:57:50:77: 33:c4:10:55:41:fd:03:ab:0c:5e:c5:77:25:37:54:fd:9f:33: b8:e4:aa:01:de:95:18:65:02:4d:cf:99:3e:0a:16:7d:8c:3a: ed:a3:b5:4a:d2:bd:a8:af:22:c9:00:1a:dd:ff:33:c4:71:ad: b9:9d:f8:86:12:c9:09:38:c9:fb:5a:9c:fd:c3:b9:a3:5f:d4: 5d:ba:dc:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJkF/sEQ6ygFplso5eLUbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMDRlMGE3MThhNjEzOWE5YzY1ZjBkNDg4NmJiODI3MTRk YTY2ODIwHhcNMjUxMjExMTYwMjI2WhcNMjUxMjEyMTYwMjI2WjAzMTEwLwYDVQQD Eyg3NWZkNGRlYzMxNzVlMjA1MTMyNTVkNDU0YTllZWI2YmY5MTAyYzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHk5qRZvkZDajnDRq5lR9Z4AeLxT 9wD3tj+6ft6d5fHvrL/8Q76sZJ4z7btS+aSWhxuFTKlSz8pGvQiX/j42OUc43J+J ZgHHuOlLUMUkee9CrgUyWbGePdzCnLLfy43ak0nAk/sgeP+OzVEDamOdzll1SmiB vQ7FrFxNYZoLjEuH6pKEXiwqZEM1MkNYDwes46o2cDoTLzVXwkD2E0x0XL5JKbYN TGmVd1LMfzhKGTPQTgj+ee4Qo6xwNcdOUy39lO/fiKfjv4pKAQuTIadb6Uu9xgx7 fLsIJ0vgEJGSZhRVo2tBlgnRV/diFdOlLHsY1c2p/4zPf3Mwhe4Tu2DfnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHX9TewxdeIFEyVdRUqe62v5ECxwMB8GA1UdIwQY MBaAFE4E4KcYphOanGXw1IhruCcU2maCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGdUZ3B4aW1FNXFjWmZEVWlHdTRKeFRhWm9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YWZlYWItMDJiOS00ZWJkLWJmYTIt OGU4MGI0OTZhMDNlLzEvVGdUZ3B4aW1FNXFjWmZEVWlHdTRKeFRhWm9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80YWZlYWItMDJiOS00ZWJkLWJmYTItOGU4MGI0OTZhMDNl LzEvVGdUZ3B4aW1FNXFjWmZEVWlHdTRKeFRhWm9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtbD1+BXe wBmGrah7rWL1ULULSYdULRrxEJWWFkPkDMViKvl4hDQuTbhjHjIcpVzDkCyPVW22 Gw3CJhI4lE5+IhuV+YYh/Vb6FCcCerp4c8W9Dd3D78sc0ENU8alcGSxYOim3a6lB xhNk8sjZ71iSmLJ3+No1IcePIFK0a/QlAP6v/HyFNPEE4vnxihw9H27YWLA87don m2k4BHYxJeye9bO0X+91df6ynwYri5M2KMAKV1B3M8QQVUH9A6sMXsV3JTdU/Z8z uOSqAd6VGGUCTc+ZPgoWfYw67aO1StK9qK8iyQAa3f8zxHGtuZ34hhLJCTjJ+1qc /cO5o1/UXbrcYg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:26:21 2025 by rpki-client