This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft File: TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft (raw, json) Hash identifier: Sjh7FEaAg5XZrZpGX8RjXl6YntUJ/ov6QwD53y6DwJA= Subject key identifier: 97:D7:5A:BE:3F:29:84:86:7D:0E:8B:7B:1E:20:27:E3:1E:BF:32:C3 Authority key identifier: 4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19 Certificate issuer: /CN=4c61d118479b5222ef0f864167cac5b4c07cc219 Certificate serial: 019B3268791F74A23774727B1D31153A496D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 17:01:06 +0000 Manifest this update: Thu 18 Dec 2025 17:01:06 +0000 Manifest next update: Fri 19 Dec 2025 17:01:06 +0000 Files and hashes: 1: TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl (hash: +K34tvEnnLAvKxVRkH47GZJvHptlSP+LW3fxvSMHS68=) 2: tbYt8CsTUjvQCfPmxRHFnIb3gng.roa (hash: Wb48gd6AG1NXeN5IWX1LXBtrKALPG/kRfuLTU0uD7B0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:79:1f:74:a2:37:74:72:7b:1d:31:15:3a:49:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c61d118479b5222ef0f864167cac5b4c07cc219 Validity Not Before: Dec 18 17:01:06 2025 GMT Not After : Dec 19 17:01:06 2025 GMT Subject: CN=97d75abe3f2984867d0e8b7b1e2027e31ebf32c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:13:81:a8:db:c2:1f:3a:54:d5:a5:93:e5:2c: ad:6a:7d:44:f7:8a:8a:3d:3a:78:f4:e1:65:98:8f: 33:eb:80:5b:82:b9:e2:4f:79:73:be:fc:83:b0:49: 20:c3:f4:13:1c:05:60:47:96:ba:82:db:10:6d:96: 70:e1:2d:54:67:05:be:11:8e:44:a2:63:71:ff:cc: bc:eb:7f:13:1f:40:64:86:c8:a5:72:ef:88:a5:6c: 0f:32:1d:a7:bf:f1:7a:4f:b7:52:c2:11:c0:7e:4a: 4f:12:4f:49:fb:20:71:86:62:f0:5d:cd:de:7c:a8: ed:9a:bd:5d:52:35:18:f3:f0:0a:ab:42:e6:f4:94: 49:9e:a3:80:d0:32:de:b9:dc:7a:04:10:ab:98:62: 58:7c:de:b2:75:b4:56:01:c5:9f:47:3f:60:1c:b1: 65:09:44:66:12:c3:e9:e2:e8:96:49:4c:85:bd:bc: 22:24:02:ed:f4:36:6d:be:7b:21:4a:2e:b9:31:7c: 9f:ba:46:ae:0a:66:0d:78:28:e8:2d:5a:f2:53:87: 2d:8f:53:bd:e5:19:77:86:eb:61:78:03:24:6f:c2: 95:6f:31:3f:95:2d:3b:8f:57:52:39:10:9e:52:3e: 6d:cc:fb:6a:ee:64:20:3e:b7:cf:71:52:0f:ab:65: 62:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D7:5A:BE:3F:29:84:86:7D:0E:8B:7B:1E:20:27:E3:1E:BF:32:C3 X509v3 Authority Key Identifier: keyid:4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:de:86:45:94:4a:ec:0c:6d:34:62:0b:a8:8d:68:83:93:77: c4:91:87:f1:92:51:46:0c:f4:2d:8c:b9:56:63:76:ba:a9:8f: ab:1c:bd:11:ed:34:06:67:9a:b4:5f:dd:7b:68:7c:9f:b6:92: 61:41:0b:c6:fa:d0:5a:e3:07:fd:02:4f:d8:e4:ea:1d:2b:66: 63:c6:2b:23:c5:4c:75:2a:14:f3:0e:1d:c6:70:ea:28:58:1b: c2:18:56:d1:1c:30:c1:8d:f8:89:54:1e:4a:7f:ad:f7:d2:84: f3:24:19:d0:42:56:96:82:78:be:35:13:8e:f8:0c:15:a5:e7: d3:bb:fe:ff:0a:30:8b:cb:c4:dc:b7:b9:80:99:bb:50:3d:fa: cf:3a:33:d1:66:40:71:49:79:c1:0b:f8:36:44:45:c1:f6:4d: 29:ef:b5:52:75:e8:36:97:e3:09:0d:ef:63:51:7a:09:3c:55: fd:c9:b2:bf:74:6e:85:eb:c1:76:ae:fb:e4:85:7b:77:db:09: 83:85:dd:bf:a1:43:ee:b9:bd:b9:ab:17:a2:f3:df:a7:76:69: bc:9a:ca:3f:11:20:77:8f:f2:79:5d:97:23:d3:17:c3:6a:4e: 00:cf:78:ad:36:8d:51:85:50:70:cc:c6:bf:73:84:c5:ff:00: 44:11:39:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaHkfdKI3dHJ7HTEVOkltMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNjFkMTE4NDc5YjUyMjJlZjBmODY0MTY3Y2FjNWI0YzA3 Y2MyMTkwHhcNMjUxMjE4MTcwMTA2WhcNMjUxMjE5MTcwMTA2WjAzMTEwLwYDVQQD Eyg5N2Q3NWFiZTNmMjk4NDg2N2QwZThiN2IxZTIwMjdlMzFlYmYzMmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhOBqNvCHzpU1aWT5Sytan1E94qK PTp49OFlmI8z64BbgrniT3lzvvyDsEkgw/QTHAVgR5a6gtsQbZZw4S1UZwW+EY5E omNx/8y8638TH0Bkhsilcu+IpWwPMh2nv/F6T7dSwhHAfkpPEk9J+yBxhmLwXc3e fKjtmr1dUjUY8/AKq0Lm9JRJnqOA0DLeudx6BBCrmGJYfN6ydbRWAcWfRz9gHLFl CURmEsPp4uiWSUyFvbwiJALt9DZtvnshSi65MXyfukauCmYNeCjoLVryU4ctj1O9 5Rl3hutheAMkb8KVbzE/lS07j1dSORCeUj5tzPtq7mQgPrfPcVIPq2ViqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfXWr4/KYSGfQ6Lex4gJ+MevzLDMB8GA1UdIwQY MBaAFExh0RhHm1Ii7w+GQWfKxbTAfMIZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEdIUkdFZWJVaUx2RDRaQlo4ckZ0TUI4d2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82ZTlkZmQtY2U0Ny00ZTYxLWEzMTUt ZTVhYTc0NzAwZjlkLzEvVEdIUkdFZWJVaUx2RDRaQlo4ckZ0TUI4d2hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC82ZTlkZmQtY2U0Ny00ZTYxLWEzMTUtZTVhYTc0NzAwZjlk LzEvVEdIUkdFZWJVaUx2RDRaQlo4ckZ0TUI4d2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADN6GRZRK 7AxtNGILqI1og5N3xJGH8ZJRRgz0LYy5VmN2uqmPqxy9Ee00BmeatF/de2h8n7aS YUELxvrQWuMH/QJP2OTqHStmY8YrI8VMdSoU8w4dxnDqKFgbwhhW0RwwwY34iVQe Sn+t99KE8yQZ0EJWloJ4vjUTjvgMFaXn07v+/wowi8vE3Le5gJm7UD36zzoz0WZA cUl5wQv4NkRFwfZNKe+1UnXoNpfjCQ3vY1F6CTxV/cmyv3RuhevBdq775IV7d9sJ g4Xdv6FD7rm9uasXovPfp3ZpvJrKPxEgd4/yeV2XI9MXw2pOAM94rTaNUYVQcMzG v3OExf8ARBE5ZQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:33:12 2025 by rpki-client