This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft File: TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json) Hash identifier: n8yi343Jeps/qTx2GXGr1vYQHtTUThb+WxkYwYD/DYw= Subject key identifier: 6D:49:72:F9:71:79:13:19:5B:2F:4A:95:73:97:AB:98:A8:DC:89:6A Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56 Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656 Certificate serial: 019B0ECA0A3DED14B2480FE54877782FE5F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 19:01:20 +0000 Manifest this update: Thu 11 Dec 2025 19:01:20 +0000 Manifest next update: Fri 12 Dec 2025 19:01:20 +0000 Files and hashes: 1: LHdFFtkhND-G29Bb5TNwX3ZX6HI.roa (hash: 5JCuzcczihsYGo60q4ytQ60HO2vUMA1Wb8XrWH6WiqE=) 2: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: a76DRPiHIekceWsGHT1JCRMoWy1EOQc7+X1aIOh7pHA=) 3: VYrJyKdSTfJ9aOSPJMCRhItn6O0.roa (hash: EVl6QPoQm24Wnsg0W0HBnWjfCtTCiCv6xfCekdHCwzI=) 4: XGm_swis7gPqLxLCw4_WpqKe8Ac.roa (hash: HuoRGpzlvzmJtj6Rn/56OaSHzb/3wfWOGTlv62srzB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:ca:0a:3d:ed:14:b2:48:0f:e5:48:77:78:2f:e5:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656 Validity Not Before: Dec 11 19:01:20 2025 GMT Not After : Dec 12 19:01:20 2025 GMT Subject: CN=6d4972f9717913195b2f4a957397ab98a8dc896a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c2:1c:f7:9d:19:eb:27:ee:5f:e7:08:a7:2e: 7e:ac:ea:50:91:9b:f4:b9:3c:43:25:f6:97:41:94: be:3b:99:7a:72:4a:21:45:ef:81:24:6c:79:14:fe: f7:11:b2:4f:ee:ea:30:a8:b8:f1:b0:89:d2:5e:36: 05:67:bc:ac:74:e8:62:41:e3:d5:23:e3:fd:78:2d: b5:86:72:d7:bd:1b:72:3b:38:3c:7b:6b:ad:81:28: 5c:87:dc:46:4a:cb:9a:30:ef:37:02:bf:c8:77:5b: bf:9d:03:8c:5f:e5:2f:58:7e:03:56:99:bf:75:48: cc:d5:51:f8:34:2f:60:5b:8a:7a:19:38:52:33:0e: 2c:5e:84:1d:f7:9c:f8:f9:a5:ff:79:4f:c0:dd:6f: eb:a0:de:f4:ae:a4:9b:36:26:d8:71:ad:5d:be:4a: 8d:7f:48:65:23:80:ac:c3:26:9e:da:e8:f3:61:86: 89:a2:ef:ce:f5:dc:ba:49:31:14:b4:9c:0c:81:f9: 8d:8d:d6:4f:55:43:64:78:a3:54:1d:8b:42:7f:ec: 3c:c0:a2:93:c0:88:53:b2:20:b1:23:01:f6:ab:b3: 4e:fc:5e:8a:6e:9c:84:f8:1c:5f:b8:0d:fe:98:73: 86:47:df:c0:a5:77:20:0a:e6:2b:9e:62:ef:2a:39: d1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:49:72:F9:71:79:13:19:5B:2F:4A:95:73:97:AB:98:A8:DC:89:6A X509v3 Authority Key Identifier: keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:66:4a:e9:6b:de:ab:9a:98:27:ad:4b:4d:ff:f2:83:b1:14: 0d:55:f1:08:cc:21:63:a4:65:f5:65:6d:96:bf:5d:45:f5:09: bd:4c:06:bb:3e:3d:ef:49:9a:ad:61:bd:00:e4:72:b3:3d:a7: fa:a9:c6:a0:49:0d:e1:85:cb:4c:20:26:0a:8f:c3:ed:69:69: b5:30:a9:ab:20:76:3c:b5:48:29:2a:9a:a6:f1:f8:c8:d0:71: 12:0b:cd:f8:42:95:ef:0b:05:8c:b2:2e:50:21:e2:cf:cf:74: a9:b8:7b:17:d4:c6:2e:1f:68:9d:01:14:09:fa:38:1e:97:c6: 82:f5:4b:14:03:53:55:91:f3:99:af:a8:f6:32:c1:1b:bb:8e: df:4c:85:db:5b:a7:bc:0c:93:cd:9f:69:ea:bc:70:46:80:1b: 24:01:68:0c:0f:27:f6:e2:0b:46:65:ab:0e:4b:dd:e0:fa:a3: 84:5b:8d:8c:f0:2f:4f:5f:5d:fb:aa:6d:f9:c6:41:e3:23:59: 34:ba:42:9f:8d:05:61:f9:ac:e9:49:e5:f7:31:37:c4:44:07: 51:82:c1:93:52:0c:6f:9c:b7:80:ed:6c:41:fe:f9:17:fb:e5: 00:d5:fd:8d:e3:e8:21:84:6e:85:0d:c0:b9:6e:16:5a:49:39: d1:1b:6f:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOygo97RSySA/lSHd4L+X0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjY2M2MDQ5NWIyYTM0ZDg5MjExY2MxYzc5NTI0ZWFiNjFi YTE2NTYwHhcNMjUxMjExMTkwMTIwWhcNMjUxMjEyMTkwMTIwWjAzMTEwLwYDVQQD Eyg2ZDQ5NzJmOTcxNzkxMzE5NWIyZjRhOTU3Mzk3YWI5OGE4ZGM4OTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsIc950Z6yfuX+cIpy5+rOpQkZv0 uTxDJfaXQZS+O5l6ckohRe+BJGx5FP73EbJP7uowqLjxsInSXjYFZ7ysdOhiQePV I+P9eC21hnLXvRtyOzg8e2utgShch9xGSsuaMO83Ar/Id1u/nQOMX+UvWH4DVpm/ dUjM1VH4NC9gW4p6GThSMw4sXoQd95z4+aX/eU/A3W/roN70rqSbNibYca1dvkqN f0hlI4Cswyae2ujzYYaJou/O9dy6STEUtJwMgfmNjdZPVUNkeKNUHYtCf+w8wKKT wIhTsiCxIwH2q7NO/F6KbpyE+BxfuA3+mHOGR9/ApXcgCuYrnmLvKjnRxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1JcvlxeRMZWy9KlXOXq5io3IlqMB8GA1UdIwQY MBaAFEzMYElbKjTYkhHMHHlSTqthuhZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUt Njk4MDlkOGI5YzIwLzEvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUtNjk4MDlkOGI5YzIw LzEvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2ZK6Wve q5qYJ61LTf/yg7EUDVXxCMwhY6Rl9WVtlr9dRfUJvUwGuz4970marWG9AORysz2n +qnGoEkN4YXLTCAmCo/D7WlptTCpqyB2PLVIKSqapvH4yNBxEgvN+EKV7wsFjLIu UCHiz890qbh7F9TGLh9onQEUCfo4HpfGgvVLFANTVZHzma+o9jLBG7uO30yF21un vAyTzZ9p6rxwRoAbJAFoDA8n9uILRmWrDkvd4PqjhFuNjPAvT19d+6pt+cZB4yNZ NLpCn40FYfms6Unl9zE3xEQHUYLBk1IMb5y3gO1sQf75F/vlANX9jePoIYRuhQ3A uW4WWkk50Rtv2Q== -----END CERTIFICATE-----Generated at Thu Dec 11 23:06:09 2025 by rpki-client