This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft File: TOmGBryaXUQHT_jL7cvbz8NfBWI.mft (raw, json) Hash identifier: KN1GwwTZrILynzulCKH331BuZc9q+CXZMRPf/F+RpNc= Subject key identifier: A5:74:7D:CF:9C:05:CC:6D:EF:8D:11:5C:5A:F6:27:C7:9B:7D:F5:88 Authority key identifier: 4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62 Certificate issuer: /CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562 Certificate serial: 019B3043218FFA4F16BB349A2617A4C665C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 07:01:04 +0000 Manifest this update: Thu 18 Dec 2025 07:01:04 +0000 Manifest next update: Fri 19 Dec 2025 07:01:04 +0000 Files and hashes: 1: TOmGBryaXUQHT_jL7cvbz8NfBWI.crl (hash: rmPFCn2vFCbXGOv7LfrLOlpYVt7K2tEuwVBT84og9O4=) 2: _2jPSPlgYJsD4ywwlbMtnQzhjck.roa (hash: dPt4vhrAZj1gNIW23Wk2/nT1GhYcZvAFuVHXtMeqVMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:21:8f:fa:4f:16:bb:34:9a:26:17:a4:c6:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562 Validity Not Before: Dec 18 07:01:04 2025 GMT Not After : Dec 19 07:01:04 2025 GMT Subject: CN=a5747dcf9c05cc6def8d115c5af627c79b7df588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3c:b0:44:68:68:6d:88:ae:c9:17:48:aa:9a: 0b:76:c7:79:f6:a9:84:df:39:05:3e:1b:6f:2b:3d: 41:9c:e0:0c:8b:63:71:33:ba:93:4f:6c:7a:cd:fe: f7:08:bf:b5:f0:80:17:d4:52:3b:0b:7a:91:93:8c: fa:5d:df:3e:f5:47:7e:b7:53:3c:c1:eb:ca:10:f4: 12:22:c6:bb:0a:5f:a5:7c:7e:05:5d:36:7b:d9:8c: 44:8e:34:06:a3:55:72:ca:61:ef:5d:4b:43:f0:05: 06:a5:ea:d5:30:86:84:67:24:d9:b1:e2:c3:ef:50: 3b:fa:50:86:5f:89:61:47:69:e2:38:7c:08:bd:c1: 61:57:2b:87:66:dc:d2:5a:cb:45:a0:80:17:93:5f: 6c:8a:28:00:15:81:8b:ae:0b:ad:cb:88:d9:30:ba: d8:79:44:f6:89:d5:94:47:1a:59:9a:77:77:ef:e2: ad:92:1c:52:95:09:fa:a3:20:4d:fb:2f:93:ca:bc: e6:4b:0c:cf:b9:db:33:11:4f:b6:15:73:de:d0:b9: e0:a8:94:09:2d:f4:cd:16:2f:c5:b7:e4:8a:97:44: 42:ab:b9:21:e4:b6:fc:b4:c1:d5:54:2d:e3:84:ad: fc:7d:84:56:c2:fe:cc:76:ef:22:3b:5f:ff:b1:21: d5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:74:7D:CF:9C:05:CC:6D:EF:8D:11:5C:5A:F6:27:C7:9B:7D:F5:88 X509v3 Authority Key Identifier: keyid:4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:47:21:62:48:c1:c6:d9:29:30:3f:e3:02:e4:7e:40:58:fd: 41:73:32:a4:5a:a5:ea:c0:17:e5:f8:32:a7:ca:a1:de:7a:46: e2:64:27:cf:34:60:c6:c4:2e:33:c4:39:0f:76:37:6f:9e:08: fd:76:00:71:03:c7:d3:6d:e2:1d:58:2f:04:a3:7d:f2:37:87: db:76:e6:48:ef:8d:2f:40:35:0b:b9:09:43:9c:28:50:b0:da: 58:13:d6:bd:a9:ec:8c:8d:45:00:6f:b6:77:3b:2e:95:96:82: 1c:b6:29:db:bb:38:e6:d7:65:ff:22:f0:4e:03:09:0c:68:a6: e5:b1:78:28:68:e7:34:b9:63:36:9a:c4:f6:27:bf:43:45:cb: 43:3b:14:44:6e:6d:38:3d:97:02:5c:0f:b5:3c:53:7a:f6:f3: 87:46:15:5f:78:fa:29:54:62:1c:9a:bd:e4:57:bd:cd:06:95: dc:2a:6c:0b:eb:9b:14:fa:6a:10:46:8f:12:4d:6c:f8:05:eb: 18:74:f3:c3:25:12:69:aa:d7:fa:6e:0b:72:fc:8c:ec:8a:f3: 0f:70:77:dd:e5:96:e5:6f:25:80:2d:55:23:63:1b:3d:a5:00: 32:22:32:f3:ae:a6:ec:40:20:79:4b:14:50:ee:09:d8:e3:10: ac:78:0a:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQyGP+k8WuzSaJhekxmXAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTk4NjA2YmM5YTVkNDQwNzRmZjhjYmVkY2JkYmNmYzM1 ZjA1NjIwHhcNMjUxMjE4MDcwMTA0WhcNMjUxMjE5MDcwMTA0WjAzMTEwLwYDVQQD EyhhNTc0N2RjZjljMDVjYzZkZWY4ZDExNWM1YWY2MjdjNzliN2RmNTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDywRGhobYiuyRdIqpoLdsd59qmE 3zkFPhtvKz1BnOAMi2NxM7qTT2x6zf73CL+18IAX1FI7C3qRk4z6Xd8+9Ud+t1M8 wevKEPQSIsa7Cl+lfH4FXTZ72YxEjjQGo1VyymHvXUtD8AUGperVMIaEZyTZseLD 71A7+lCGX4lhR2niOHwIvcFhVyuHZtzSWstFoIAXk19siigAFYGLrguty4jZMLrY eUT2idWURxpZmnd37+KtkhxSlQn6oyBN+y+TyrzmSwzPudszEU+2FXPe0LngqJQJ LfTNFi/Ft+SKl0RCq7kh5Lb8tMHVVC3jhK38fYRWwv7Mdu8iO1//sSHViwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKV0fc+cBcxt740RXFr2J8ebffWIMB8GA1UdIwQY MBaAFEzphga8ml1EB0/4y+3L28/DXwViMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9tR0JyeWFYVVFIVF9qTDdjdmJ6OE5mQldJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNzllZDUtZDI1My00MjU1LTkwMTct ODhkZjEyNWJhNjYzLzEvVE9tR0JyeWFYVVFIVF9qTDdjdmJ6OE5mQldJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNzllZDUtZDI1My00MjU1LTkwMTctODhkZjEyNWJhNjYz LzEvVE9tR0JyeWFYVVFIVF9qTDdjdmJ6OE5mQldJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkchYkjB xtkpMD/jAuR+QFj9QXMypFql6sAX5fgyp8qh3npG4mQnzzRgxsQuM8Q5D3Y3b54I /XYAcQPH023iHVgvBKN98jeH23bmSO+NL0A1C7kJQ5woULDaWBPWvansjI1FAG+2 dzsulZaCHLYp27s45tdl/yLwTgMJDGim5bF4KGjnNLljNprE9ie/Q0XLQzsURG5t OD2XAlwPtTxTevbzh0YVX3j6KVRiHJq95Fe9zQaV3CpsC+ubFPpqEEaPEk1s+AXr GHTzwyUSaarX+m4LcvyM7IrzD3B33eWW5W8lgC1VI2MbPaUAMiIy866m7EAgeUsU UO4J2OMQrHgK3Q== -----END CERTIFICATE-----Generated at Thu Dec 18 09:31:12 2025 by rpki-client