This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft File: Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft (raw, json) Hash identifier: 7ntAtLrCuGEo3zT6Hrto/D2DRKY7ftlomaZ/u3hamVg= Subject key identifier: 0E:31:B1:FC:EE:8E:1A:01:21:E6:6B:E0:B4:34:88:1F:FC:4D:F0:13 Authority key identifier: 2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7 Certificate issuer: /CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7 Certificate serial: 019B440084FCC2F66F81E0202BD6E4BE87A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft Manifest number: 07B8 Signing time: Mon 22 Dec 2025 03:00:43 +0000 Manifest this update: Mon 22 Dec 2025 03:00:43 +0000 Manifest next update: Tue 23 Dec 2025 03:00:43 +0000 Files and hashes: 1: BlSeR_pJblcGKDZVOhalmR7CEhI.roa (hash: +LA/s25lXTsAJyNjZ89LILttPP1hwWlh26yK9Q72LZE=) 2: Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl (hash: vC6AOvF7DbeToMuIVjOZi94SODccYNfZXA22PzK+fgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:00:84:fc:c2:f6:6f:81:e0:20:2b:d6:e4:be:87:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7 Validity Not Before: Dec 22 03:00:43 2025 GMT Not After : Dec 23 03:00:43 2025 GMT Subject: CN=0e31b1fcee8e1a0121e66be0b434881ffc4df013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:db:39:09:b0:8e:04:33:e1:2b:09:08:f8:21: 79:de:27:e2:ad:86:5f:02:77:fa:7f:a2:ad:8a:16: 8f:f7:5c:53:fe:7c:d2:04:f0:86:da:8d:10:5f:6d: ed:97:fd:5c:f3:cd:17:e0:87:01:50:90:9e:91:38: 65:1c:42:0a:45:19:8b:5c:07:d3:2e:93:ed:b9:d3: dd:ff:d1:7f:76:77:7f:23:07:74:ac:fe:c4:11:d6: dc:28:dd:68:6e:f7:1e:8a:ec:8a:17:48:9c:55:a9: e7:73:27:ce:40:31:db:f8:44:42:49:d0:ff:c0:6b: 23:74:bf:fe:79:c0:09:08:1e:ee:46:2f:0e:ae:db: b7:85:9f:b4:19:57:ec:0f:81:8b:dc:92:a9:46:87: 0e:9a:ef:31:91:06:9e:17:e9:8d:e6:fb:a1:c6:e2: 61:23:f2:8e:17:5a:dd:95:2c:77:07:0b:db:52:ee: 86:88:29:64:0b:a5:54:97:f9:6f:70:1d:9f:49:3e: 0e:7b:d8:e0:74:69:77:de:b0:a0:f5:1f:b1:96:65: b7:2c:86:37:7b:e2:8e:c6:1d:b5:05:34:f2:18:c7: 0d:83:17:2e:7c:12:7c:ce:7b:85:69:3d:78:48:a2: c8:28:19:81:a9:00:cf:f1:e3:33:83:41:32:68:89: ba:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:31:B1:FC:EE:8E:1A:01:21:E6:6B:E0:B4:34:88:1F:FC:4D:F0:13 X509v3 Authority Key Identifier: keyid:2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:86:69:f5:7e:c2:ba:34:9f:11:2f:fe:e3:bd:2c:99:59:e5: 7b:0e:c8:bd:a9:be:83:35:dc:0d:ef:fd:53:c6:23:e6:fa:44: 24:2d:6f:61:ea:6f:17:93:12:94:85:7d:9f:9b:2d:50:b9:7a: 81:c0:91:d3:00:8b:c9:c9:a2:46:2b:5b:59:59:95:2e:9e:14: bb:b2:90:fa:6e:43:c5:17:68:a2:66:c3:6f:14:74:a0:d9:cf: 45:0d:78:a1:0b:a9:f3:a9:c4:40:fc:09:cc:df:45:17:f6:db: 0f:4c:a0:17:52:38:ef:41:2f:7e:0e:38:11:df:91:72:9d:ee: d4:f3:75:77:1f:22:c8:71:d6:90:de:b1:b2:61:39:8d:05:be: f6:6f:48:21:7e:b2:81:c4:ff:f2:fb:a7:60:49:12:4e:08:6d: 81:02:bc:bd:1b:6e:4a:7c:79:35:c5:e9:5c:ab:83:06:bc:dc: 59:e7:69:4f:b3:e5:66:dd:30:ab:42:e0:d1:5a:a8:bb:6a:92: 08:46:2a:e6:c1:1b:3e:03:8c:7f:cf:e6:76:1e:69:fd:d6:0d: bf:bc:4d:74:5c:a9:ec:bd:b8:e6:30:ec:6d:9b:d9:86:6e:d9: ef:fd:db:f1:c3:0c:79:af:80:b0:a1:40:a9:7b:49:04:c0:c9: bb:5a:69:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEAIT8wvZvgeAgK9bkvoejMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZDdmYmMxZGYwMDcwYWNmNWIzYTY3Y2U0ZTIxMmRiZDAz YWZhZDcwHhcNMjUxMjIyMDMwMDQzWhcNMjUxMjIzMDMwMDQzWjAzMTEwLwYDVQQD EygwZTMxYjFmY2VlOGUxYTAxMjFlNjZiZTBiNDM0ODgxZmZjNGRmMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmds5CbCOBDPhKwkI+CF53ifirYZf Anf6f6KtihaP91xT/nzSBPCG2o0QX23tl/1c880X4IcBUJCekThlHEIKRRmLXAfT LpPtudPd/9F/dnd/Iwd0rP7EEdbcKN1obvceiuyKF0icVanncyfOQDHb+ERCSdD/ wGsjdL/+ecAJCB7uRi8Ortu3hZ+0GVfsD4GL3JKpRocOmu8xkQaeF+mN5vuhxuJh I/KOF1rdlSx3BwvbUu6GiClkC6VUl/lvcB2fST4Oe9jgdGl33rCg9R+xlmW3LIY3 e+KOxh21BTTyGMcNgxcufBJ8znuFaT14SKLIKBmBqQDP8eMzg0EyaIm6zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4xsfzujhoBIeZr4LQ0iB/8TfATMB8GA1UdIwQY MBaAFC7X+8HfAHCs9bOmfOTiEtvQOvrXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHRmN3dkOEFjS3oxczZaODVPSVMyOUE2LXRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NTJlNjgtNjExZC00YWQ4LWE3ZTEt NDhiZmFjMmNkYzcyLzEvTHRmN3dkOEFjS3oxczZaODVPSVMyOUE2LXRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi81NTJlNjgtNjExZC00YWQ4LWE3ZTEtNDhiZmFjMmNkYzcy LzEvTHRmN3dkOEFjS3oxczZaODVPSVMyOUE2LXRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4Zp9X7C ujSfES/+470smVnlew7Ivam+gzXcDe/9U8Yj5vpEJC1vYepvF5MSlIV9n5stULl6 gcCR0wCLycmiRitbWVmVLp4Uu7KQ+m5DxRdoombDbxR0oNnPRQ14oQup86nEQPwJ zN9FF/bbD0ygF1I470Evfg44Ed+Rcp3u1PN1dx8iyHHWkN6xsmE5jQW+9m9IIX6y gcT/8vunYEkSTghtgQK8vRtuSnx5NcXpXKuDBrzcWedpT7PlZt0wq0Lg0Vqou2qS CEYq5sEbPgOMf8/mdh5p/dYNv7xNdFyp7L245jDsbZvZhm7Z7/3b8cMMea+AsKFA qXtJBMDJu1ppLA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:30:28 2025 by rpki-client