This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json) Hash identifier: Wrl+B+m73gV87QAvJ3UP1efEz4YoXn/mHhKA2IRxvEw= Subject key identifier: 62:95:AD:32:1A:60:98:57:F8:B9:E5:AA:FD:CA:36:EE:23:52:E0:8F Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38 Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38 Certificate serial: 019B37FD10D783F861758EAAFEBF042C768B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 19:01:30 +0000 Manifest this update: Fri 19 Dec 2025 19:01:30 +0000 Manifest next update: Sat 20 Dec 2025 19:01:30 +0000 Files and hashes: 1: RV8paaJ3goMy9MfTaatO8nD3vp0.roa (hash: e4c5enruS1aSsE+Y/GCFoVHc8KGnXiS/8gSNbBU+Ybc=) 2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: 8rNNmSNoFETt2dMts99FvFKLdyIEzw8aaPciizbEPKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fd:10:d7:83:f8:61:75:8e:aa:fe:bf:04:2c:76:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38 Validity Not Before: Dec 19 19:01:30 2025 GMT Not After : Dec 20 19:01:30 2025 GMT Subject: CN=6295ad321a609857f8b9e5aafdca36ee2352e08f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c5:60:c5:c7:30:b7:90:63:f7:0f:94:bc:52: 98:ce:d0:06:cc:00:95:d9:c1:5b:44:ca:e9:9c:50: 20:38:45:08:76:00:a0:c3:11:44:67:17:d3:90:1c: 17:f0:c7:c1:f4:38:05:c1:e8:fa:ba:13:93:cd:b9: 9a:82:8c:b1:f1:e0:75:4b:f1:81:c8:c5:72:6c:02: 92:83:72:1c:44:bf:21:54:5b:c3:0b:a2:6f:10:e8: d8:42:bc:cf:30:98:d7:db:e2:66:bf:ec:db:e6:2e: 27:6c:98:c3:34:4b:dc:04:cc:93:2f:46:83:8a:37: 3f:e9:3a:22:b8:f8:6b:a3:29:b2:56:dd:1a:b3:16: ec:35:24:78:03:dd:5c:75:a3:ce:0a:0b:3c:f1:fc: 66:c7:96:78:f1:23:90:d3:e2:f3:8c:de:ee:ab:db: 04:8f:3f:9f:f3:f9:87:d2:7f:93:80:4d:1f:0f:82: ea:04:2b:bb:66:22:f9:27:10:70:5b:cc:ae:d6:e0: cd:71:01:4d:85:d3:f7:53:5c:2e:94:be:44:e2:ec: c5:3a:7f:c6:83:fd:c5:dc:bc:24:4f:e9:85:36:b4: af:d6:2e:87:8a:b1:cb:62:5d:cb:f2:b2:0c:33:0f: 38:c7:9b:25:24:83:5c:ef:4c:58:18:18:88:18:25: 88:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:95:AD:32:1A:60:98:57:F8:B9:E5:AA:FD:CA:36:EE:23:52:E0:8F X509v3 Authority Key Identifier: keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:2c:97:79:ee:26:0e:2f:7e:6a:d0:28:d5:79:be:98:98:5e: 4c:67:3f:f2:e9:7e:a9:68:a8:c3:f3:7f:7a:b4:85:8e:e6:13: 8b:c9:6c:47:cb:38:56:9d:1b:42:de:0a:d8:dd:10:74:12:58: ef:cd:3e:28:61:d6:24:fd:f6:8f:e6:06:dc:8b:9d:2e:d1:24: e7:67:1f:21:f5:ef:ad:33:f6:9a:4f:d0:a5:60:b5:0f:74:4a: a7:f2:84:8b:b5:87:dd:4c:26:0c:33:07:9b:a2:a9:cd:bf:27: 96:66:79:a8:0b:54:1d:74:1c:99:20:80:fd:be:f4:de:54:38: ed:98:c6:cf:6d:bc:82:24:8a:d9:22:d0:14:ee:54:2d:fe:cc: cc:8c:5b:18:e4:9c:61:5b:bf:11:ba:2c:ef:f6:36:83:1e:e9: cd:e5:26:04:25:92:17:eb:62:38:d4:09:c8:2d:2e:99:c0:c3: 0c:10:81:3e:91:0b:f8:25:10:b3:4a:77:a9:94:c9:19:01:89: b6:b1:35:c3:28:93:2a:ff:51:c9:4c:6a:f6:70:2b:77:6a:23: e8:84:39:cc:34:26:8d:e7:ae:6f:1f:f8:7b:15:86:fe:bf:45: 88:85:52:85:24:9a:c6:fc:bb:15:e5:e1:65:2b:0f:7d:c9:cb: 1c:a5:3a:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/RDXg/hhdY6q/r8ELHaLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMjFjYjliMmY4YzVkZTlkYWEzMDg4OWQ5ZTIzOTQ1Mzdi YTNlMzgwHhcNMjUxMjE5MTkwMTMwWhcNMjUxMjIwMTkwMTMwWjAzMTEwLwYDVQQD Eyg2Mjk1YWQzMjFhNjA5ODU3ZjhiOWU1YWFmZGNhMzZlZTIzNTJlMDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcVgxccwt5Bj9w+UvFKYztAGzACV 2cFbRMrpnFAgOEUIdgCgwxFEZxfTkBwX8MfB9DgFwej6uhOTzbmagoyx8eB1S/GB yMVybAKSg3IcRL8hVFvDC6JvEOjYQrzPMJjX2+Jmv+zb5i4nbJjDNEvcBMyTL0aD ijc/6ToiuPhroymyVt0asxbsNSR4A91cdaPOCgs88fxmx5Z48SOQ0+LzjN7uq9sE jz+f8/mH0n+TgE0fD4LqBCu7ZiL5JxBwW8yu1uDNcQFNhdP3U1wulL5E4uzFOn/G g/3F3LwkT+mFNrSv1i6HirHLYl3L8rIMMw84x5slJINc70xYGBiIGCWIzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKVrTIaYJhX+Lnlqv3KNu4jUuCPMB8GA1UdIwQY MBaAFE0hy5svjF3p2qMIidniOUU3uj44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kOTk0ZGQtZGU1Mi00NjEyLWIwZmUt MTQ5ODcyNDNhYzU2LzEvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9kOTk0ZGQtZGU1Mi00NjEyLWIwZmUtMTQ5ODcyNDNhYzU2 LzEvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyyXee4m Di9+atAo1Xm+mJheTGc/8ul+qWiow/N/erSFjuYTi8lsR8s4Vp0bQt4K2N0QdBJY 780+KGHWJP32j+YG3IudLtEk52cfIfXvrTP2mk/QpWC1D3RKp/KEi7WH3UwmDDMH m6Kpzb8nlmZ5qAtUHXQcmSCA/b703lQ47ZjGz228giSK2SLQFO5ULf7MzIxbGOSc YVu/Ebos7/Y2gx7pzeUmBCWSF+tiONQJyC0umcDDDBCBPpEL+CUQs0p3qZTJGQGJ trE1wyiTKv9RyUxq9nArd2oj6IQ5zDQmjeeubx/4exWG/r9FiIVShSSaxvy7FeXh ZSsPfcnLHKU64g== -----END CERTIFICATE-----Generated at Sat Dec 20 01:48:15 2025 by rpki-client