This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft File: tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft (raw, json) Hash identifier: Y9DKQrqF8O3PQR85E0yBn7oWKv6KEUWwi3ULV9AXEis= Subject key identifier: 40:8C:1C:B1:C4:6C:9A:02:9B:DC:55:40:37:0F:35:F8:EA:78:0C:C8 Authority key identifier: B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2 Certificate issuer: /CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2 Certificate serial: 019B3D59C62FA9D74A77F54C710DF9F1D71F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft Manifest number: 0A29 Signing time: Sat 20 Dec 2025 20:00:52 +0000 Manifest this update: Sat 20 Dec 2025 20:00:52 +0000 Manifest next update: Sun 21 Dec 2025 20:00:52 +0000 Files and hashes: 1: P4_VmIDFfqYiDiPBdVVMzIA4LMY.roa (hash: fbL8P+MktK6PkeO1KtnH7o+BeC/FNslw8AAfJjr38OY=) 2: WKELc_W8mdXUUZ324MSWDeu1wXI.roa (hash: 0tteI0ps1fiC7XdrvhsFyeYnjz3rCzmXkLHL3vxN7GA=) 3: tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl (hash: S5Xbhu/UUUgrMrlUwVvXInBX3loLuA97Fx76Z7mHkwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:c6:2f:a9:d7:4a:77:f5:4c:71:0d:f9:f1:d7:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2 Validity Not Before: Dec 20 20:00:52 2025 GMT Not After : Dec 21 20:00:52 2025 GMT Subject: CN=408c1cb1c46c9a029bdc5540370f35f8ea780cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c9:4c:37:17:dd:8b:4f:4a:da:99:32:ac:15: 6b:f1:8f:8d:98:4e:ae:19:49:28:26:59:5d:3d:14: 90:ba:7b:e1:8f:07:19:6f:69:69:a7:7d:08:52:6e: 6d:05:cf:cc:f4:41:72:c4:5e:ba:76:75:70:6f:7b: a0:3b:16:da:6b:87:dd:d8:d9:15:a7:45:97:58:58: 75:e5:4d:dc:5a:16:b8:cc:fe:f5:04:93:34:70:78: 06:57:2b:b5:6e:f7:6d:cc:28:4e:de:91:02:b9:e8: e1:97:c1:b9:f0:72:7b:b3:b0:08:ef:9a:db:4d:49: 20:d8:82:7b:73:94:3a:a2:d1:28:49:74:e0:17:a6: d8:8d:08:33:71:8e:b2:a9:2a:ed:ce:58:7f:35:5f: 0e:73:b1:2e:ad:02:74:d9:d5:07:aa:8c:c7:c9:78: 6e:5c:1b:b4:98:85:b2:95:c3:bf:f1:2b:9b:32:c0: be:24:b8:4d:42:41:72:f0:ee:f1:dd:34:34:bc:58: b4:b9:20:57:82:f2:4b:6d:14:2c:08:5b:87:ad:5c: 55:0d:49:8f:ce:c2:16:d1:0c:48:a6:5e:d6:bd:86: 6b:82:6e:a1:04:eb:ac:9a:75:99:05:a3:88:bf:78: 59:51:99:36:1f:90:72:92:75:24:c8:80:ba:c4:26: 58:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8C:1C:B1:C4:6C:9A:02:9B:DC:55:40:37:0F:35:F8:EA:78:0C:C8 X509v3 Authority Key Identifier: keyid:B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:f3:82:83:dd:ec:8f:b1:29:17:a5:14:82:b4:c2:9a:58:4f: 36:2b:23:e5:9e:5d:c7:ef:87:2b:5f:bd:27:2e:ea:70:bf:e6: ca:ad:8d:fd:e4:e4:ba:eb:36:7e:e9:89:38:db:20:ca:06:d7: 0d:3f:e3:6a:96:a3:2a:ff:f2:b3:9e:54:40:b4:0b:64:23:67: c8:22:16:36:e4:6a:e1:43:1c:76:c0:4e:a4:1e:41:e8:17:6e: 72:fc:63:b6:db:ba:ad:3f:f6:5a:59:5e:07:1b:20:45:d2:73: 01:ab:b0:52:04:4a:b5:fb:18:0f:44:c0:8b:da:59:04:8e:9b: d9:e8:00:76:50:5e:75:03:d6:62:3f:c7:c9:f3:e8:9e:bf:89: a0:93:5b:f7:60:eb:b3:87:4e:dc:c3:bd:a4:c9:d7:b5:a4:11: f2:38:fd:41:bb:4b:a4:7b:8d:dc:48:8a:7d:9e:48:10:1b:05: bc:91:f2:26:24:b7:38:11:c0:82:7e:70:00:6d:eb:88:20:0c: 66:78:65:4b:f8:07:62:16:19:56:b1:a4:db:07:2a:5e:29:54: ca:a5:ec:f1:39:28:64:ed:33:96:e2:a4:90:1b:28:71:25:c6: e9:a6:6d:81:d2:bf:ff:04:c8:6a:27:cd:ca:dd:b1:14:ed:17: 61:18:e1:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WcYvqddKd/VMcQ358dcfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1M2Q5ZjFiYzNmMGQ5MGI2ZGNkMWU5ZjZmZDFlNTA2MTg4 ZWE3YzIwHhcNMjUxMjIwMjAwMDUyWhcNMjUxMjIxMjAwMDUyWjAzMTEwLwYDVQQD Eyg0MDhjMWNiMWM0NmM5YTAyOWJkYzU1NDAzNzBmMzVmOGVhNzgwY2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmslMNxfdi09K2pkyrBVr8Y+NmE6u GUkoJlldPRSQunvhjwcZb2lpp30IUm5tBc/M9EFyxF66dnVwb3ugOxbaa4fd2NkV p0WXWFh15U3cWha4zP71BJM0cHgGVyu1bvdtzChO3pECuejhl8G58HJ7s7AI75rb TUkg2IJ7c5Q6otEoSXTgF6bYjQgzcY6yqSrtzlh/NV8Oc7EurQJ02dUHqozHyXhu XBu0mIWylcO/8SubMsC+JLhNQkFy8O7x3TQ0vFi0uSBXgvJLbRQsCFuHrVxVDUmP zsIW0QxIpl7WvYZrgm6hBOusmnWZBaOIv3hZUZk2H5ByknUkyIC6xCZY3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECMHLHEbJoCm9xVQDcPNfjqeAzIMB8GA1UdIwQY MBaAFLU9nxvD8NkLbc0en2/R5QYYjqfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZTNkNjQtZjI5MC00ODkzLTlhNDAt YzllMTQxMzMzZDU4LzEvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8wZTNkNjQtZjI5MC00ODkzLTlhNDAtYzllMTQxMzMzZDU4 LzEvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPOCg93s j7EpF6UUgrTCmlhPNisj5Z5dx++HK1+9Jy7qcL/myq2N/eTkuus2fumJONsgygbX DT/japajKv/ys55UQLQLZCNnyCIWNuRq4UMcdsBOpB5B6Bducvxjttu6rT/2Wlle BxsgRdJzAauwUgRKtfsYD0TAi9pZBI6b2egAdlBedQPWYj/HyfPonr+JoJNb92Dr s4dO3MO9pMnXtaQR8jj9QbtLpHuN3EiKfZ5IEBsFvJHyJiS3OBHAgn5wAG3riCAM ZnhlS/gHYhYZVrGk2wcqXilUyqXs8TkoZO0zluKkkBsocSXG6aZtgdK//wTIaifN yt2xFO0XYRjhmQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:53:08 2025 by rpki-client