This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft File: tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft (raw, json) Hash identifier: 7s66OFiwTm85DKZiyLe2qGzIR5sX6H5rregXEgULzNk= Subject key identifier: B8:93:D6:44:42:0C:A7:90:7E:D6:9A:37:E7:8E:E5:F0:C7:D5:5F:02 Authority key identifier: B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C Certificate issuer: /CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c Certificate serial: 019B6D33D89A5FF5C4BFF124299062F04BEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft Manifest number: 15B7 Signing time: Tue 30 Dec 2025 03:01:12 +0000 Manifest this update: Tue 30 Dec 2025 03:01:12 +0000 Manifest next update: Wed 31 Dec 2025 03:01:12 +0000 Files and hashes: 1: VMjps0TDOc6vg4EVncBcfziPs7o.roa (hash: F5yYItxb8pdHFsuwCVpmcCXEuMNoj5mX3+RkzMDL76c=) 2: tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl (hash: P7DDQBhO/I18Ft06dZgTCQcs1DIHlXjRUAsElvhB1CQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 03:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:d8:9a:5f:f5:c4:bf:f1:24:29:90:62:f0:4b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c Validity Not Before: Dec 30 03:01:12 2025 GMT Not After : Dec 31 03:01:12 2025 GMT Subject: CN=b893d644420ca7907ed69a37e78ee5f0c7d55f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6c:c2:3b:38:a4:f2:04:c0:f0:c7:c6:de:68: 41:75:98:e9:e6:7d:b1:5f:f5:0f:01:9b:39:43:da: 57:64:77:aa:88:d8:2f:99:ee:2d:ee:70:7e:ad:ae: 9d:06:8c:f0:b2:fc:9d:10:11:85:84:25:f1:e8:d2: c0:87:41:fc:1f:90:ed:83:c2:18:91:34:7c:ba:0e: 8e:62:b6:f3:a4:2e:24:bd:14:af:ab:21:05:1d:c4: 64:ce:73:f4:32:d9:79:7d:00:fc:43:3f:00:48:bb: 1f:74:ec:90:f6:44:a0:92:25:d7:a7:bc:03:6b:e5: b9:c3:ce:46:08:ff:49:aa:22:c3:65:1c:e2:86:97: 4d:a3:5c:15:88:bc:b8:57:5a:79:b6:94:dc:4b:f7: a6:a5:b7:a0:a2:1d:29:9e:7f:aa:64:27:98:c7:e3: 2d:98:39:5d:ad:f8:a9:e8:37:f5:d3:49:9b:39:2b: d9:dc:18:6c:8a:37:19:58:de:f1:93:39:b1:b9:02: 0c:13:cd:29:dd:51:f3:d3:f6:49:44:9e:b9:ba:10: 83:76:dd:82:22:ff:fd:66:74:c9:7c:de:4b:4f:29: e4:cd:b8:24:2b:d6:9b:07:79:36:2d:e4:90:5e:c3: a7:99:1b:5a:7d:04:73:36:8f:d5:9c:f8:45:69:c5: b6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:93:D6:44:42:0C:A7:90:7E:D6:9A:37:E7:8E:E5:F0:C7:D5:5F:02 X509v3 Authority Key Identifier: keyid:B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:6f:ed:05:06:65:73:46:48:67:7e:dc:64:a4:e9:1f:f4:6b: 8f:00:ef:a3:62:55:74:2b:82:c7:fe:5c:26:d4:0e:a5:6c:a8: 07:94:26:f4:bf:b5:28:20:c3:09:bf:fd:18:32:93:7c:8e:4d: f4:e0:e5:34:70:f9:7d:33:7b:d5:1b:73:4d:36:0d:e1:67:e2: ca:bf:38:73:b6:20:96:d1:be:64:37:00:5f:01:51:3b:26:07: 4c:64:0c:fa:2c:cd:c4:e1:61:9b:7e:cf:42:73:89:e8:eb:f7: 68:b9:e8:99:58:b6:cd:7c:23:8a:13:88:59:fe:8a:a2:a6:01: 12:78:d3:86:69:d1:18:40:2a:2c:6b:a9:10:ea:57:f9:0f:9e: 1a:40:12:b7:84:35:b7:5f:e4:d3:8a:d6:12:39:91:37:e2:bc: 68:cc:14:09:34:44:dc:41:0f:85:43:20:49:62:8c:e9:11:5a: 3f:e2:ab:61:b0:11:0d:76:30:3b:be:7e:13:e9:9a:e7:18:f5: b6:95:82:f6:f3:70:0d:27:90:85:20:bd:bb:e5:cd:71:7e:19: a5:51:be:c2:bb:81:77:96:90:3f:01:00:3a:68:d9:0a:9a:75: cc:3c:87:58:48:99:61:c0:25:47:eb:9f:4e:8b:46:d0:56:e1: 36:b6:80:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttM9iaX/XEv/EkKZBi8EvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OTU3Y2E0ODNhZjBiNjdmOTczYjA4NTk3MmNjYzVjNWVk MDNmN2MwHhcNMjUxMjMwMDMwMTEyWhcNMjUxMjMxMDMwMTEyWjAzMTEwLwYDVQQD EyhiODkzZDY0NDQyMGNhNzkwN2VkNjlhMzdlNzhlZTVmMGM3ZDU1ZjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWzCOzik8gTA8MfG3mhBdZjp5n2x X/UPAZs5Q9pXZHeqiNgvme4t7nB+ra6dBozwsvydEBGFhCXx6NLAh0H8H5Dtg8IY kTR8ug6OYrbzpC4kvRSvqyEFHcRkznP0Mtl5fQD8Qz8ASLsfdOyQ9kSgkiXXp7wD a+W5w85GCP9JqiLDZRzihpdNo1wViLy4V1p5tpTcS/empbegoh0pnn+qZCeYx+Mt mDldrfip6Df100mbOSvZ3BhsijcZWN7xkzmxuQIME80p3VHz0/ZJRJ65uhCDdt2C Iv/9ZnTJfN5LTynkzbgkK9abB3k2LeSQXsOnmRtafQRzNo/VnPhFacW2WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiT1kRCDKeQftaaN+eO5fDH1V8CMB8GA1UdIwQY MBaAFLaVfKSDrwtn+XOwhZcszFxe0D98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHBWOHBJT3ZDMmY1YzdDRmx5ek1YRjdRUDN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82NjM2OWMtMDJmOS00OTQ3LTljYjQt ODRiNzI1MTU4MzQ3LzEvdHBWOHBJT3ZDMmY1YzdDRmx5ek1YRjdRUDN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy82NjM2OWMtMDJmOS00OTQ3LTljYjQtODRiNzI1MTU4MzQ3 LzEvdHBWOHBJT3ZDMmY1YzdDRmx5ek1YRjdRUDN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYW/tBQZl c0ZIZ37cZKTpH/RrjwDvo2JVdCuCx/5cJtQOpWyoB5Qm9L+1KCDDCb/9GDKTfI5N 9ODlNHD5fTN71RtzTTYN4Wfiyr84c7YgltG+ZDcAXwFROyYHTGQM+izNxOFhm37P QnOJ6Ov3aLnomVi2zXwjihOIWf6KoqYBEnjThmnRGEAqLGupEOpX+Q+eGkASt4Q1 t1/k04rWEjmRN+K8aMwUCTRE3EEPhUMgSWKM6RFaP+KrYbARDXYwO75+E+ma5xj1 tpWC9vNwDSeQhSC9u+XNcX4ZpVG+wruBd5aQPwEAOmjZCpp1zDyHWEiZYcAlR+uf TotG0FbhNraA9g== -----END CERTIFICATE-----Generated at Tue Dec 30 12:29:21 2025 by rpki-client