This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft File: TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json) Hash identifier: T/0LQFG3sWpJQQEE8P3R0Ill2FhEbkQ1+nRtcqSzwj4= Subject key identifier: 2E:9C:11:AA:E2:EF:EC:23:84:32:E7:F0:3F:42:7C:D9:12:F2:2A:32 Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78 Certificate issuer: /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078 Certificate serial: 019B5A1ACA8B49E23DA5D299F31C385B9B3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 10:01:03 +0000 Manifest this update: Fri 26 Dec 2025 10:01:03 +0000 Manifest next update: Sat 27 Dec 2025 10:01:03 +0000 Files and hashes: 1: 1LkKTJE8VWFRjFVsY2vc5JNxUyo.roa (hash: gqvXE5VHGf5Er/eIvJDh+DnQ30d/N/LUShz/R2QWX8s=) 2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: Vf6gVp6RDNCVrc8gbO0rEjPfrtdcdj4LigIp57q+elg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 10:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:ca:8b:49:e2:3d:a5:d2:99:f3:1c:38:5b:9b:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078 Validity Not Before: Dec 26 10:01:03 2025 GMT Not After : Dec 27 10:01:03 2025 GMT Subject: CN=2e9c11aae2efec238432e7f03f427cd912f22a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c6:b8:36:66:13:72:a0:cf:00:13:ad:57:d1: ce:f6:d0:8a:08:4d:b9:6d:20:3e:8c:f0:54:21:a8: 70:e5:b3:64:e1:a6:44:50:e6:d0:43:4b:38:1c:48: 6f:d3:41:a3:0d:04:53:bb:3d:9b:1c:6a:6e:32:8a: 6c:a9:7c:8a:4d:69:d2:9a:05:99:df:fa:ad:f1:60: 4a:81:d6:a5:3e:68:d1:e1:e9:e9:98:a8:62:9a:a8: f9:20:26:28:ef:04:cf:cc:4d:b3:fc:45:d0:95:a3: 16:96:da:e0:68:f5:ce:26:ba:c1:57:2b:49:b3:41: 80:44:21:70:6c:f9:86:f8:2c:74:70:cc:7d:e6:70: 81:66:75:f8:93:9f:20:5c:ae:b2:a2:58:7c:da:14: 1f:7b:c6:aa:a8:b6:18:65:9a:3d:73:fb:f6:ae:d3: e7:4f:8c:c3:bf:0c:44:43:15:b2:89:db:f0:75:a7: 30:cf:dc:2d:71:8b:f2:6b:b6:59:be:84:b0:2e:14: 76:e6:77:b4:6f:15:9b:15:6c:28:11:1e:a4:9b:8a: 84:3c:3b:12:a1:52:f4:93:8f:03:b0:2b:51:3c:e4: 7a:15:85:0b:53:1e:1e:73:16:65:49:82:26:a1:d4: 36:0a:c4:fb:cc:ec:ec:09:38:55:35:fb:03:77:cc: 2f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9C:11:AA:E2:EF:EC:23:84:32:E7:F0:3F:42:7C:D9:12:F2:2A:32 X509v3 Authority Key Identifier: keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:29:64:e5:47:b2:82:6e:29:8e:fa:3f:db:46:5b:81:24:c0: cd:65:01:59:07:1f:2e:89:a3:95:9c:40:5f:f9:74:fe:e3:54: 4d:41:e2:f8:36:c9:72:1d:cc:43:6b:49:fd:f3:28:9e:9f:dd: ac:1e:b2:01:24:9d:6f:30:f2:67:4f:95:1c:3b:53:08:b3:8b: 7b:9a:32:4a:fd:88:5a:9d:7c:50:76:d9:91:5a:95:46:83:d0: d1:60:ce:01:e6:13:20:5e:85:e7:ae:67:4e:50:b9:57:3b:9b: a1:ae:df:b8:7f:cc:ea:26:16:61:b0:8a:3d:0a:0d:63:03:66: 70:87:71:dd:60:a4:cb:1e:41:3a:4c:ac:c9:b3:b6:7b:2d:0e: a9:4f:77:d9:84:12:29:4f:15:3b:fc:2e:7f:0a:a9:67:8b:d3: c6:65:cc:94:fc:a6:6d:50:2a:f6:15:f5:3b:96:c8:a9:69:fc: 47:43:92:10:bb:5b:86:d5:d6:a5:44:56:05:36:cc:7a:22:45: 2c:43:7d:e8:cc:c7:57:f8:b9:c6:da:47:70:78:17:0b:d0:2e: 63:f5:30:6f:f5:ba:66:f7:d1:3f:c2:34:30:8f:c6:24:cf:a6: 7a:a2:b5:c8:bb:86:fc:3d:1a:20:81:76:fa:bd:d8:5e:7f:9e: ea:d5:f4:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGsqLSeI9pdKZ8xw4W5s8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjOTMyMTNkODhmYTg3NGViNDQ2MGUyYzVjZjFiYjFhOTFk YTkwNzgwHhcNMjUxMjI2MTAwMTAzWhcNMjUxMjI3MTAwMTAzWjAzMTEwLwYDVQQD EygyZTljMTFhYWUyZWZlYzIzODQzMmU3ZjAzZjQyN2NkOTEyZjIyYTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsa4NmYTcqDPABOtV9HO9tCKCE25 bSA+jPBUIahw5bNk4aZEUObQQ0s4HEhv00GjDQRTuz2bHGpuMopsqXyKTWnSmgWZ 3/qt8WBKgdalPmjR4enpmKhimqj5ICYo7wTPzE2z/EXQlaMWltrgaPXOJrrBVytJ s0GARCFwbPmG+Cx0cMx95nCBZnX4k58gXK6yolh82hQfe8aqqLYYZZo9c/v2rtPn T4zDvwxEQxWyidvwdacwz9wtcYvya7ZZvoSwLhR25ne0bxWbFWwoER6km4qEPDsS oVL0k48DsCtRPOR6FYULUx4ecxZlSYImodQ2CsT7zOzsCThVNfsDd8wvzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6cEari7+wjhDLn8D9CfNkS8ioyMB8GA1UdIwQY MBaAFEyTIT2I+odOtEYOLFzxuxqR2pB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEpNaFBZajZoMDYwUmc0c1hQRzdHcEhha0hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lNGU2OTYtOWQ3OC00MTRjLWFmNDAt Y2Y1NmM2NmEwYWMwLzEvVEpNaFBZajZoMDYwUmc0c1hQRzdHcEhha0hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9lNGU2OTYtOWQ3OC00MTRjLWFmNDAtY2Y1NmM2NmEwYWMw LzEvVEpNaFBZajZoMDYwUmc0c1hQRzdHcEhha0hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuylk5Uey gm4pjvo/20ZbgSTAzWUBWQcfLomjlZxAX/l0/uNUTUHi+DbJch3MQ2tJ/fMonp/d rB6yASSdbzDyZ0+VHDtTCLOLe5oySv2IWp18UHbZkVqVRoPQ0WDOAeYTIF6F565n TlC5Vzuboa7fuH/M6iYWYbCKPQoNYwNmcIdx3WCkyx5BOkysybO2ey0OqU932YQS KU8VO/wufwqpZ4vTxmXMlPymbVAq9hX1O5bIqWn8R0OSELtbhtXWpURWBTbMeiJF LEN96MzHV/i5xtpHcHgXC9AuY/Uwb/W6ZvfRP8I0MI/GJM+meqK1yLuG/D0aIIF2 +r3YXn+e6tX0mQ== -----END CERTIFICATE-----Generated at Fri Dec 26 17:42:45 2025 by rpki-client