This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft File: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft (raw, json) Hash identifier: kFQ7L5bhD9G/NJEtM9HKTzKs6rDBppB+hTFuYDHoyAs= Subject key identifier: 23:E7:51:32:4E:14:DE:5B:E0:A0:6E:2E:B3:CB:31:8A:B6:5E:F3:83 Authority key identifier: 4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44 Certificate issuer: /CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44 Certificate serial: 019B3D5A12D440D07E5E3972CEF95F0A7F84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft Manifest number: 171B Signing time: Sat 20 Dec 2025 20:01:11 +0000 Manifest this update: Sat 20 Dec 2025 20:01:11 +0000 Manifest next update: Sun 21 Dec 2025 20:01:11 +0000 Files and hashes: 1: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl (hash: rOiShE00B9LrbtpYRvpwHQ7QrFDhEo2DxsLklgBTdaQ=) 2: pXY7p3AnqDJfjALLmtVHw8U2GfM.roa (hash: ZUNXce9TBnEjmUfFa15l+WlhliqRz/AO8NwAB4Sid60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:12:d4:40:d0:7e:5e:39:72:ce:f9:5f:0a:7f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44 Validity Not Before: Dec 20 20:01:11 2025 GMT Not After : Dec 21 20:01:11 2025 GMT Subject: CN=23e751324e14de5be0a06e2eb3cb318ab65ef383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:d7:1e:d0:10:95:0a:d6:60:58:ef:28:69: 70:fc:20:8a:59:06:2f:55:a2:4e:ca:6c:d9:b8:47: de:b4:87:1f:32:a6:41:52:3a:79:33:75:76:c2:c3: 2a:6c:5e:59:f7:68:55:c4:84:cf:8c:be:d4:6f:0a: 91:71:67:16:a2:a9:ba:da:0e:49:a1:9a:c4:19:f0: df:c4:17:9b:71:47:a1:b1:1c:41:9e:e2:bb:ee:05: 26:5c:0b:3e:73:4c:44:4b:ac:7b:e7:4e:9d:fa:aa: c6:17:e4:91:22:93:dd:63:ae:38:de:b3:d5:8e:d2: b8:56:b6:7e:9c:9c:bf:c8:7d:d0:75:71:c4:8e:e2: a9:8e:a9:b2:53:4c:79:27:4d:d2:60:c2:13:a3:c0: ec:58:f7:38:57:36:ef:84:93:61:7f:a6:1c:b2:ed: 0e:05:62:ca:27:52:71:c7:76:58:c6:7c:d3:f5:91: 4f:90:a2:75:a2:11:c5:ae:46:5a:f8:0e:8b:29:d8: 1f:b6:69:a7:21:8b:77:56:12:06:89:70:82:2f:d5: 82:cc:cc:9e:e4:21:91:f8:51:d2:b6:3e:91:9d:f7: 9c:16:7c:bf:2d:06:8d:38:be:e2:97:13:af:c6:cf: bd:b3:c1:68:e1:03:d1:4a:6e:75:2b:c4:09:0c:82: fe:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E7:51:32:4E:14:DE:5B:E0:A0:6E:2E:B3:CB:31:8A:B6:5E:F3:83 X509v3 Authority Key Identifier: keyid:4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:e3:f7:cc:c6:ac:f8:11:8a:88:a0:3b:b0:18:95:b8:43:1d: 83:03:f6:d6:62:b5:8c:df:11:03:62:e6:bb:80:97:39:7d:6b: fd:c3:89:e6:62:52:dc:1a:70:c2:d8:22:14:d3:f5:36:da:90: 0c:4d:0f:60:3a:c6:a1:cd:de:8a:48:52:fb:2c:b4:0c:ed:55: aa:da:a0:fd:3f:57:a4:b3:81:46:a9:4d:54:80:ed:9a:ab:8f: 45:88:aa:8e:84:51:a4:80:3c:1d:25:2b:a6:14:a1:8e:2b:f5: b6:6a:82:de:e5:17:f9:62:d0:13:56:62:c4:d2:47:5e:cf:a6: 9e:03:9f:97:9e:94:83:ec:d8:63:65:8e:db:bc:75:32:d6:9c: 00:28:dc:20:49:2f:63:7b:10:fd:95:19:04:b8:90:85:fc:c4: 63:83:f7:4c:ef:e1:4c:6b:9f:e0:9b:ae:3c:35:82:8b:e3:93: df:78:1a:32:84:4e:b8:52:9a:db:d6:b2:1f:fd:3f:b2:e4:0b: 2d:70:11:32:39:63:3b:e4:af:f3:d2:b6:0d:ba:ec:14:c8:40: 5b:68:ff:22:6e:ba:2f:88:73:d2:28:b2:e0:f3:ae:80:04:e5: 1d:c3:f5:fb:4d:41:ef:f3:5e:87:b5:27:68:c0:1f:81:3f:2d: 81:e6:af:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WhLUQNB+XjlyzvlfCn+EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYWVmYzQ5ZTZjZDY3ZTI1OTk2YTJjMGZjNTdiODBjYzIz ZGJhNDQwHhcNMjUxMjIwMjAwMTExWhcNMjUxMjIxMjAwMTExWjAzMTEwLwYDVQQD EygyM2U3NTEzMjRlMTRkZTViZTBhMDZlMmViM2NiMzE4YWI2NWVmMzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9XXHtAQlQrWYFjvKGlw/CCKWQYv VaJOymzZuEfetIcfMqZBUjp5M3V2wsMqbF5Z92hVxITPjL7UbwqRcWcWoqm62g5J oZrEGfDfxBebcUehsRxBnuK77gUmXAs+c0xES6x7506d+qrGF+SRIpPdY6443rPV jtK4VrZ+nJy/yH3QdXHEjuKpjqmyU0x5J03SYMITo8DsWPc4VzbvhJNhf6Ycsu0O BWLKJ1Jxx3ZYxnzT9ZFPkKJ1ohHFrkZa+A6LKdgftmmnIYt3VhIGiXCCL9WCzMye 5CGR+FHStj6RnfecFny/LQaNOL7ilxOvxs+9s8Fo4QPRSm51K8QJDIL+YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPnUTJOFN5b4KBuLrPLMYq2XvODMB8GA1UdIwQY MBaAFE6u/EnmzWfiWZaiwPxXuAzCPbpEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHE3OFNlYk5aLUpabHFMQV9GZTRETUk5dWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85ZjU4ZjItNzkxOS00YmZjLThmNzMt ZTcwNzNjZmUxMzRmLzEvVHE3OFNlYk5aLUpabHFMQV9GZTRETUk5dWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85ZjU4ZjItNzkxOS00YmZjLThmNzMtZTcwNzNjZmUxMzRm LzEvVHE3OFNlYk5aLUpabHFMQV9GZTRETUk5dWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOP3zMas +BGKiKA7sBiVuEMdgwP21mK1jN8RA2Lmu4CXOX1r/cOJ5mJS3BpwwtgiFNP1NtqQ DE0PYDrGoc3eikhS+yy0DO1Vqtqg/T9XpLOBRqlNVIDtmquPRYiqjoRRpIA8HSUr phShjiv1tmqC3uUX+WLQE1ZixNJHXs+mngOfl56Ug+zYY2WO27x1MtacACjcIEkv Y3sQ/ZUZBLiQhfzEY4P3TO/hTGuf4JuuPDWCi+OT33gaMoROuFKa29ayH/0/suQL LXARMjljO+Sv89K2DbrsFMhAW2j/Im66L4hz0iiy4POugATlHcP1+01B7/Neh7Un aMAfgT8tgeavuw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:56:10 2025 by rpki-client