This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft File: tUSbCOpqJn33NmpolcfJJMLxkm0.mft (raw, json) Hash identifier: pP9VAumDis7uxVEzwhwdy8NBN5r2wnQ8B7O6HDfY3gw= Subject key identifier: E9:AC:C4:AC:CE:58:E2:C7:8C:CB:BF:98:DD:EF:54:79:F3:BC:BB:4A Authority key identifier: B5:44:9B:08:EA:6A:26:7D:F7:36:6A:68:95:C7:C9:24:C2:F1:92:6D Certificate issuer: /CN=b5449b08ea6a267df7366a6895c7c924c2f1926d Certificate serial: 019B4A042E419435D69D4503B9B96EC5104C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft Manifest number: 032F Signing time: Tue 23 Dec 2025 07:02:26 +0000 Manifest this update: Tue 23 Dec 2025 07:02:26 +0000 Manifest next update: Wed 24 Dec 2025 07:02:26 +0000 Files and hashes: 1: 12VZdcmHAZ40OHT9mrIrMjn0594.roa (hash: ET8sgbp54z2ReDcdD/bnaoyAnFdtN16gcR5nsUzXKcM=) 2: tUSbCOpqJn33NmpolcfJJMLxkm0.crl (hash: RLafNQAzEpVh6WIHgZ0XvG9V+LumTisBgTviGf5sDZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.crl rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:04:2e:41:94:35:d6:9d:45:03:b9:b9:6e:c5:10:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5449b08ea6a267df7366a6895c7c924c2f1926d Validity Not Before: Dec 23 07:02:26 2025 GMT Not After : Dec 24 07:02:26 2025 GMT Subject: CN=e9acc4acce58e2c78ccbbf98ddef5479f3bcbb4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b3:07:b9:b3:8a:de:53:e6:1f:28:08:d6:78: ba:71:3b:7d:c4:1f:aa:32:79:ba:25:b5:5d:a0:2b: 91:66:6b:6f:8d:7c:11:70:6e:64:0b:92:89:a6:05: 2c:61:90:d2:8a:73:fd:26:14:8d:81:50:72:a5:30: 4c:76:e1:f5:4e:77:fe:c8:7b:6b:2a:15:1a:03:b9: fe:fd:36:87:68:3b:78:5f:f9:03:ab:ea:16:fd:92: 4b:c2:d1:b4:95:75:f4:44:8a:34:35:72:9b:7a:11: 51:61:b8:dd:ad:7e:5e:09:78:6a:86:30:be:7a:df: 08:4c:2a:a9:db:ac:59:be:85:41:1c:59:be:51:70: 9b:4b:f7:1b:c7:51:0c:45:c4:0d:e8:b5:59:aa:ad: 2c:bb:6c:71:35:ce:a8:b0:41:9b:87:e6:c3:09:d6: e7:8a:08:7e:9a:7d:29:c8:29:e5:89:7c:65:91:ed: b6:d6:ca:bf:60:8b:ea:4f:0e:5f:ab:76:b9:6f:bd: 18:89:38:23:d2:88:ba:9c:f7:47:e0:55:15:f9:94: 1c:77:04:7e:89:d0:65:6e:3e:78:17:7d:e0:bf:4a: a9:51:da:10:61:71:18:d2:55:84:6b:82:15:d8:58: 41:8f:13:1a:57:8e:66:37:14:f7:10:b3:7e:78:d9: d7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AC:C4:AC:CE:58:E2:C7:8C:CB:BF:98:DD:EF:54:79:F3:BC:BB:4A X509v3 Authority Key Identifier: keyid:B5:44:9B:08:EA:6A:26:7D:F7:36:6A:68:95:C7:C9:24:C2:F1:92:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:71:1c:24:07:a5:4a:ed:79:43:b2:06:5d:75:5b:f6:a6:4a: 89:6d:ff:05:00:1e:31:12:c7:72:6f:c8:8c:85:90:31:c3:56: 7e:f4:a9:81:f0:4d:2d:24:d4:e3:54:1f:79:24:82:1f:1c:7d: 87:53:f3:e1:6e:6d:57:67:4b:e9:b9:97:fe:ed:0d:2b:55:6c: 10:b8:77:43:ce:b5:ec:75:92:a7:d3:d6:de:2c:d7:1b:0f:45: 58:fb:8d:e4:9f:08:bc:be:75:b3:8a:a3:6c:3f:6a:9d:77:07: 53:2a:e0:29:d7:c2:d8:82:c0:2c:d7:37:e2:2b:1f:b8:78:41: f7:9a:48:cf:73:5b:48:90:46:e9:ed:67:6c:9f:23:74:e2:3b: 63:55:99:cd:03:c0:0a:c3:ca:b1:58:23:b5:6c:7f:25:c4:af: 17:00:ed:33:e5:4d:82:31:41:f0:e2:49:90:36:49:2e:bc:50: 42:bc:ba:17:3a:b3:3d:ad:fb:17:1e:bd:15:96:ac:0f:34:87: 56:00:a2:35:7a:26:07:f5:c4:f7:ea:e1:b6:e7:ba:8b:7b:40: 96:2a:e6:05:b9:4a:45:83:ce:8e:8d:82:5e:d2:56:87:f1:ca: 51:ef:13:31:77:43:88:1f:73:1d:95:02:9a:28:48:39:65:8f: e0:c0:e3:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKBC5BlDXWnUUDubluxRBMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDQ5YjA4ZWE2YTI2N2RmNzM2NmE2ODk1YzdjOTI0YzJm MTkyNmQwHhcNMjUxMjIzMDcwMjI2WhcNMjUxMjI0MDcwMjI2WjAzMTEwLwYDVQQD EyhlOWFjYzRhY2NlNThlMmM3OGNjYmJmOThkZGVmNTQ3OWYzYmNiYjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rMHubOK3lPmHygI1ni6cTt9xB+q Mnm6JbVdoCuRZmtvjXwRcG5kC5KJpgUsYZDSinP9JhSNgVBypTBMduH1Tnf+yHtr KhUaA7n+/TaHaDt4X/kDq+oW/ZJLwtG0lXX0RIo0NXKbehFRYbjdrX5eCXhqhjC+ et8ITCqp26xZvoVBHFm+UXCbS/cbx1EMRcQN6LVZqq0su2xxNc6osEGbh+bDCdbn igh+mn0pyCnliXxlke221sq/YIvqTw5fq3a5b70YiTgj0oi6nPdH4FUV+ZQcdwR+ idBlbj54F33gv0qpUdoQYXEY0lWEa4IV2FhBjxMaV45mNxT3ELN+eNnXBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmsxKzOWOLHjMu/mN3vVHnzvLtKMB8GA1UdIwQY MBaAFLVEmwjqaiZ99zZqaJXHySTC8ZJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVTYkNPcHFKbjMzTm1wb2xjZkpKTUx4a20wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82YzBiNTQtYjA2ZS00ZDQ0LTgxMjAt MzcwYjg2ODhmZWFmLzEvdFVTYkNPcHFKbjMzTm1wb2xjZkpKTUx4a20wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy82YzBiNTQtYjA2ZS00ZDQ0LTgxMjAtMzcwYjg2ODhmZWFm LzEvdFVTYkNPcHFKbjMzTm1wb2xjZkpKTUx4a20wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHEcJAel Su15Q7IGXXVb9qZKiW3/BQAeMRLHcm/IjIWQMcNWfvSpgfBNLSTU41QfeSSCHxx9 h1Pz4W5tV2dL6bmX/u0NK1VsELh3Q8617HWSp9PW3izXGw9FWPuN5J8IvL51s4qj bD9qnXcHUyrgKdfC2ILALNc34isfuHhB95pIz3NbSJBG6e1nbJ8jdOI7Y1WZzQPA CsPKsVgjtWx/JcSvFwDtM+VNgjFB8OJJkDZJLrxQQry6FzqzPa37Fx69FZasDzSH VgCiNXomB/XE9+rhtue6i3tAlirmBblKRYPOjo2CXtJWh/HKUe8TMXdDiB9zHZUC mihIOWWP4MDjYA== -----END CERTIFICATE-----Generated at Tue Dec 23 09:04:35 2025 by rpki-client