This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft File: tPM_b9KbrwPMTUha9fa3DaawCZ8.mft (raw, json) Hash identifier: 6LjNuGVs8130xzHtCbqKlX/pVCIRLdarAEmAyeAHKaU= Subject key identifier: E7:BA:EE:66:46:14:1B:AF:65:E5:29:D6:A4:4B:09:39:2A:80:A0:32 Authority key identifier: B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F Certificate issuer: /CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f Certificate serial: 019B5A1A5B79E2D32F7B095B887521EB77D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft Manifest number: 1070 Signing time: Fri 26 Dec 2025 10:00:35 +0000 Manifest this update: Fri 26 Dec 2025 10:00:35 +0000 Manifest next update: Sat 27 Dec 2025 10:00:35 +0000 Files and hashes: 1: tPM_b9KbrwPMTUha9fa3DaawCZ8.crl (hash: dyPn/grXfj4N8KJ3I5EI8kiT+3s10cYmOsqfA5DuJaQ=) 2: tYPVw8LB8i24cvigRIjHBmA1vkA.roa (hash: PLxJfAKIcmuKybJlU2Vop9ZELJyvcamyBgkEBw419jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:5b:79:e2:d3:2f:7b:09:5b:88:75:21:eb:77:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f Validity Not Before: Dec 26 10:00:35 2025 GMT Not After : Dec 27 10:00:35 2025 GMT Subject: CN=e7baee6646141baf65e529d6a44b09392a80a032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c7:88:af:30:9c:04:2c:00:6a:fb:b8:b4:35: 81:3e:0c:fd:a0:71:3d:d5:8e:c8:27:b0:16:9a:36: a3:df:86:6e:97:0a:f6:32:b4:39:6e:14:d3:61:7b: 1b:51:90:50:6b:e9:91:b1:15:8f:cb:92:9b:6f:70: 35:2d:4d:58:59:30:07:e3:31:39:a7:b2:83:1a:fc: 80:80:59:b0:8c:94:98:8c:78:bb:0a:b6:f9:91:e2: 79:c5:0f:15:f2:47:e5:2e:9a:c8:f2:eb:5c:ea:d5: 04:27:c6:bf:4a:e3:c7:56:c0:99:cf:dc:c6:02:d5: 69:55:84:0a:f8:56:30:1a:8b:2b:e6:18:cf:65:f4: be:d6:f9:4a:00:7a:5c:9f:48:22:07:85:86:50:b9: 96:60:6f:08:96:ea:77:c9:e0:07:68:6d:96:13:5f: 9b:2a:11:7d:68:2e:4d:a4:12:13:5d:eb:3f:00:da: 9d:e3:ba:55:ab:c7:0a:c5:00:ee:58:51:fc:47:98: 98:72:0f:d1:6a:c8:31:95:5c:59:01:10:da:89:be: f4:66:fd:cc:a6:56:09:c9:c1:2c:87:a0:22:1a:eb: 9c:1e:ca:c7:24:59:6b:d8:b2:66:f7:f2:18:15:f3: f1:1b:25:a1:b3:2a:8a:0c:d8:09:a7:e6:6f:17:b6: 96:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BA:EE:66:46:14:1B:AF:65:E5:29:D6:A4:4B:09:39:2A:80:A0:32 X509v3 Authority Key Identifier: keyid:B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:b5:54:1f:d6:ae:6d:8b:1e:70:fc:5b:24:7b:7a:a7:74:fd: 96:0f:c5:3d:a8:3a:ea:0c:14:5d:48:64:a1:a1:67:ab:8c:42: f0:e9:96:47:0e:c2:4f:2e:37:db:22:bc:28:9b:07:5b:0d:43: f4:07:3b:6c:12:cc:0e:de:04:52:ce:dd:c9:42:a7:db:f2:b7: 6c:c1:f8:db:8a:34:6e:25:39:44:09:03:c1:83:b2:ce:a0:ca: 13:e5:10:53:0f:df:8d:21:f3:41:32:e9:d7:f2:e8:78:6f:35: 15:c9:86:ba:ca:40:1f:34:fe:6a:e0:32:d3:1a:70:96:54:11: f9:f2:55:7f:1b:87:e9:da:56:a5:a5:77:9c:a7:62:e8:75:9d: 19:9f:21:1e:55:72:fe:e3:8a:03:18:ae:f7:7d:ad:4f:79:24: 25:50:27:78:19:53:03:60:ea:70:09:6a:cd:93:b4:26:f4:75: e0:07:60:7d:c2:d2:b6:51:d4:ed:68:a0:12:f8:59:af:d8:12: 0b:84:69:ea:71:c7:d1:de:d5:66:78:dd:a3:fd:ff:9e:88:40: 3d:8f:d6:a2:83:5a:aa:bc:3b:21:02:e0:0b:e8:c4:8b:34:76: 1b:f6:98:8a:85:27:d4:b6:8b:1c:e7:71:ca:a8:63:b0:d7:7c: 9c:02:bd:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGlt54tMvewlbiHUh63fSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZjMzZjZmZDI5YmFmMDNjYzRkNDg1YWY1ZjZiNzBkYTZi MDA5OWYwHhcNMjUxMjI2MTAwMDM1WhcNMjUxMjI3MTAwMDM1WjAzMTEwLwYDVQQD EyhlN2JhZWU2NjQ2MTQxYmFmNjVlNTI5ZDZhNDRiMDkzOTJhODBhMDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnceIrzCcBCwAavu4tDWBPgz9oHE9 1Y7IJ7AWmjaj34Zulwr2MrQ5bhTTYXsbUZBQa+mRsRWPy5Kbb3A1LU1YWTAH4zE5 p7KDGvyAgFmwjJSYjHi7Crb5keJ5xQ8V8kflLprI8utc6tUEJ8a/SuPHVsCZz9zG AtVpVYQK+FYwGosr5hjPZfS+1vlKAHpcn0giB4WGULmWYG8Ilup3yeAHaG2WE1+b KhF9aC5NpBITXes/ANqd47pVq8cKxQDuWFH8R5iYcg/RasgxlVxZARDaib70Zv3M plYJycEsh6AiGuucHsrHJFlr2LJm9/IYFfPxGyWhsyqKDNgJp+ZvF7aWMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOe67mZGFBuvZeUp1qRLCTkqgKAyMB8GA1UdIwQY MBaAFLTzP2/Sm68DzE1IWvX2tw2msAmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85MGE1Y2YtZTQ4NC00YmIyLWEyODUt NmE0OWI1YTMxMjk0LzEvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC85MGE1Y2YtZTQ4NC00YmIyLWEyODUtNmE0OWI1YTMxMjk0 LzEvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLVUH9au bYsecPxbJHt6p3T9lg/FPag66gwUXUhkoaFnq4xC8OmWRw7CTy432yK8KJsHWw1D 9Ac7bBLMDt4EUs7dyUKn2/K3bMH424o0biU5RAkDwYOyzqDKE+UQUw/fjSHzQTLp 1/LoeG81FcmGuspAHzT+auAy0xpwllQR+fJVfxuH6dpWpaV3nKdi6HWdGZ8hHlVy /uOKAxiu932tT3kkJVAneBlTA2DqcAlqzZO0JvR14AdgfcLStlHU7WigEvhZr9gS C4Rp6nHH0d7VZnjdo/3/nohAPY/WooNaqrw7IQLgC+jEizR2G/aYioUn1LaLHOdx yqhjsNd8nAK9+Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:08 2025 by rpki-client