This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft File: TmROKYPFxQTYAPLQWCsYLrq_JIc.mft (raw, json) Hash identifier: +fYUpaGFTPU7ARsv2Mwy6eA4g6DRp0FdW2RVeK7d1ks= Subject key identifier: 95:76:54:FC:5C:53:BA:C0:5F:68:84:83:0A:C5:49:41:4D:2B:A9:30 Authority key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87 Certificate issuer: /CN=4e644e2983c5c504d800f2d0582b182ebabf2487 Certificate serial: 019B59764ECE98230DB837301A10AD710F63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft Manifest number: 0A59 Signing time: Fri 26 Dec 2025 07:01:24 +0000 Manifest this update: Fri 26 Dec 2025 07:01:24 +0000 Manifest next update: Sat 27 Dec 2025 07:01:24 +0000 Files and hashes: 1: TmROKYPFxQTYAPLQWCsYLrq_JIc.crl (hash: mBy+OOyCOMW8+i1G97t2XKjnMC867GB+du9F2PoCxb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:4e:ce:98:23:0d:b8:37:30:1a:10:ad:71:0f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e644e2983c5c504d800f2d0582b182ebabf2487 Validity Not Before: Dec 26 07:01:24 2025 GMT Not After : Dec 27 07:01:24 2025 GMT Subject: CN=957654fc5c53bac05f6884830ac549414d2ba930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:74:3b:40:97:77:4c:04:cd:fe:80:db:7b:97: 4d:a1:c9:0b:a2:09:7a:03:c9:1a:a8:62:42:6d:68: 6d:d0:de:e3:2b:87:5a:ab:e7:51:96:43:40:cf:1e: 7c:9a:04:7d:d9:87:00:31:88:be:2d:98:bf:cf:29: 88:61:91:cf:d9:25:19:60:0e:37:67:ea:a7:b6:52: c8:02:d2:78:e4:f5:43:0b:6f:7c:12:c7:ed:b9:a2: c4:de:25:c3:98:09:55:99:af:c4:bb:63:9e:cd:68: a0:14:ec:4c:9d:37:54:74:49:35:6c:dd:ba:26:31: 77:7e:89:09:bb:a4:ba:41:d7:f7:07:36:34:ed:12: a0:85:ea:00:33:45:b4:70:b7:52:c7:09:5a:26:f3: 35:bf:aa:50:f6:50:df:74:5e:e7:e5:53:e1:00:2c: d7:55:33:c1:3c:e4:23:8e:a4:40:20:9c:49:02:6f: d3:dd:c4:bc:65:ce:b5:fb:fb:c6:84:8a:d9:2c:bd: 55:f1:5c:d2:74:f1:87:fa:b4:34:2c:42:80:99:93: ba:be:36:d7:61:c8:ba:5b:0a:e7:25:c5:56:2a:a8: fa:36:1f:a6:51:8a:d6:d6:1d:98:32:27:24:82:e0: 20:81:f3:3b:58:eb:d4:9b:92:40:86:c0:7d:5a:c6: d6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:76:54:FC:5C:53:BA:C0:5F:68:84:83:0A:C5:49:41:4D:2B:A9:30 X509v3 Authority Key Identifier: keyid:4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:85:44:09:b1:94:c8:88:79:47:a0:dc:b3:cf:64:6b:2b:20: 51:d0:2a:b7:47:fb:83:af:2e:9a:24:5d:17:57:fa:e9:87:eb: a2:94:db:e3:44:cc:9e:43:ac:70:40:bd:98:bd:96:85:82:45: 88:5a:ca:4d:7b:06:87:0c:69:af:a0:54:5d:f0:d4:14:8d:e4: 9c:32:a2:07:6d:eb:44:77:49:6e:ed:2a:14:b9:dd:4b:42:cf: 36:96:83:5e:7d:03:c7:62:6d:8f:a0:76:7f:ca:26:41:72:03: d9:b9:cb:4b:6f:ce:b7:0d:83:61:e2:b0:73:10:74:a2:77:d9: 91:a3:f3:52:76:a4:8d:27:b4:66:76:18:91:09:8b:a5:07:16: 71:31:29:ab:18:4d:8f:c5:d7:12:dc:23:f3:97:b3:65:16:2b: e7:6a:b5:18:09:d0:56:e5:73:03:2b:b8:0c:65:cd:3f:7c:7e: ce:bb:0c:13:e7:ab:d4:e8:65:0c:45:e3:bb:03:8c:33:fe:bf: 34:57:35:ae:5b:13:9d:f3:9a:6c:74:2e:7e:d3:7a:a6:4e:f6: ca:55:a4:89:0e:0d:e6:8d:0c:5a:75:87:73:db:f2:7e:e9:a6: d7:2a:de:71:59:d8:83:d4:3d:18:13:1c:7d:c5:01:fa:f1:0e: 5e:8e:ab:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdk7OmCMNuDcwGhCtcQ9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNjQ0ZTI5ODNjNWM1MDRkODAwZjJkMDU4MmIxODJlYmFi ZjI0ODcwHhcNMjUxMjI2MDcwMTI0WhcNMjUxMjI3MDcwMTI0WjAzMTEwLwYDVQQD Eyg5NTc2NTRmYzVjNTNiYWMwNWY2ODg0ODMwYWM1NDk0MTRkMmJhOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXQ7QJd3TATN/oDbe5dNockLogl6 A8kaqGJCbWht0N7jK4daq+dRlkNAzx58mgR92YcAMYi+LZi/zymIYZHP2SUZYA43 Z+qntlLIAtJ45PVDC298EsftuaLE3iXDmAlVma/Eu2OezWigFOxMnTdUdEk1bN26 JjF3fokJu6S6Qdf3BzY07RKgheoAM0W0cLdSxwlaJvM1v6pQ9lDfdF7n5VPhACzX VTPBPOQjjqRAIJxJAm/T3cS8Zc61+/vGhIrZLL1V8VzSdPGH+rQ0LEKAmZO6vjbX Yci6WwrnJcVWKqj6Nh+mUYrW1h2YMickguAggfM7WOvUm5JAhsB9WsbWdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJV2VPxcU7rAX2iEgwrFSUFNK6kwMB8GA1UdIwQY MBaAFE5kTimDxcUE2ADy0FgrGC66vySHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jMGU2YTItOGIyMC00NDgwLWE4YWIt YjM4OGM1NzcwZTA0LzEvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9jMGU2YTItOGIyMC00NDgwLWE4YWItYjM4OGM1NzcwZTA0 LzEvVG1ST0tZUEZ4UVRZQVBMUVdDc1lMcnFfSkljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYVECbGU yIh5R6Dcs89kaysgUdAqt0f7g68umiRdF1f66YfropTb40TMnkOscEC9mL2WhYJF iFrKTXsGhwxpr6BUXfDUFI3knDKiB23rRHdJbu0qFLndS0LPNpaDXn0Dx2Jtj6B2 f8omQXID2bnLS2/Otw2DYeKwcxB0onfZkaPzUnakjSe0ZnYYkQmLpQcWcTEpqxhN j8XXEtwj85ezZRYr52q1GAnQVuVzAyu4DGXNP3x+zrsME+er1OhlDEXjuwOMM/6/ NFc1rlsTnfOabHQuftN6pk72ylWkiQ4N5o0MWnWHc9vyfumm1yrecVnYg9Q9GBMc fcUB+vEOXo6rrA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:02 2025 by rpki-client