This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft File: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft (raw, json) Hash identifier: guVXJV/I0GN8jRhN4ABOHE+fCxgWFT+UeWfA5DQhMW0= Subject key identifier: 92:7C:6D:BC:16:56:44:31:00:7F:A3:A3:0B:73:D9:88:53:63:D2:EE Authority key identifier: 4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5 Certificate issuer: /CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5 Certificate serial: 019B3F48B0E16668A72441804E64066A02CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft Manifest number: 0E6F Signing time: Sun 21 Dec 2025 05:01:27 +0000 Manifest this update: Sun 21 Dec 2025 05:01:27 +0000 Manifest next update: Mon 22 Dec 2025 05:01:27 +0000 Files and hashes: 1: 4f1jI7-qAw-Fm-OtnESqUBoebm0.roa (hash: Yj15262IImuG/zvO4RGd+KynWz9BG4CJpl9H3lrssA0=) 2: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl (hash: 3vxLySfLbtVSuDfGwSv3jfg7/c8FlrR/FQxwDxWAew8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:b0:e1:66:68:a7:24:41:80:4e:64:06:6a:02:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5 Validity Not Before: Dec 21 05:01:27 2025 GMT Not After : Dec 22 05:01:27 2025 GMT Subject: CN=927c6dbc16564431007fa3a30b73d9885363d2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ef:b1:60:85:42:7b:24:a9:18:8b:27:33:cd: 0f:12:bb:22:23:66:c6:17:99:0e:77:78:68:0c:c3: 92:2a:bb:9e:e6:06:f2:17:4c:c1:83:7c:4e:d8:b8: 07:c8:be:b0:a2:a6:f4:3a:77:1d:82:b3:da:09:ab: 39:32:5b:2e:9c:2f:d5:c9:41:57:fe:96:ad:32:01: 5f:64:02:f7:52:c3:75:9a:19:0b:c7:4e:5f:bf:3f: 25:24:cc:a6:b3:61:ad:e8:ed:98:c1:f4:5a:aa:8c: 6d:cb:31:a6:b7:e6:d9:e7:9b:14:fa:c6:7e:ae:18: 49:7e:5c:1e:13:23:99:9d:ff:f0:13:24:d6:58:90: 0d:46:bf:b0:bb:7e:18:bc:0d:85:d2:47:41:03:8e: 6c:31:ba:6a:6e:5a:64:ff:bc:4c:84:d8:d7:6c:36: 8d:f6:1f:ca:3c:77:91:37:6e:3e:7d:1c:f2:18:bb: 82:ad:52:d0:7e:00:d2:0a:65:51:f3:90:2f:aa:86: 43:c6:08:c4:1e:d4:a9:be:2b:e7:cc:02:95:20:1f: 7d:66:cc:30:4d:ef:4a:ff:ab:8a:07:86:54:81:fd: 43:e7:7d:4c:f0:68:7a:cc:89:49:9c:dc:88:59:b8: 09:ff:a9:da:af:e5:63:a1:ab:0c:72:b4:35:94:f6: 5a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7C:6D:BC:16:56:44:31:00:7F:A3:A3:0B:73:D9:88:53:63:D2:EE X509v3 Authority Key Identifier: keyid:4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e3:a6:00:4a:e2:2d:5b:d3:7c:8f:ee:05:37:1a:f9:d8:db: f9:20:99:ab:41:5e:32:30:a9:55:62:99:a2:31:f7:40:67:df: 87:ac:f3:a2:c1:4f:5f:54:70:e9:b4:bf:ab:09:ce:aa:0f:65: 6c:96:08:59:8c:d4:1f:78:31:38:a0:db:98:26:c2:0c:c9:8b: 4e:d3:8c:7b:7f:6d:65:85:69:a7:ec:d0:54:7a:63:9b:77:88: 89:eb:c4:68:08:19:99:7b:97:30:04:58:ea:be:e3:9e:2a:c9: 21:e0:ef:10:0d:ea:05:30:16:be:e0:a2:a6:9d:40:90:e3:f1: 41:0a:33:4e:2f:4c:73:16:b9:64:d2:60:6e:e8:e0:ae:2b:07: 60:ff:4c:a7:81:b7:32:bd:7e:2e:d3:09:61:2c:a5:30:4a:50: f5:27:c3:df:67:1d:28:ff:6b:7c:9c:3e:79:aa:8c:ef:59:20: fa:98:80:98:64:2f:0e:11:4f:a7:e8:ff:ed:f2:8b:ef:6d:94: 8d:78:26:be:e0:d1:58:c6:fe:b2:2a:ff:72:78:ed:e6:4f:da: 3b:3c:66:f6:8d:a8:9b:58:59:dd:20:c5:65:9f:37:0c:b3:49: a9:28:2e:d8:ac:79:b9:7a:90:ca:97:ae:52:97:ba:06:5c:84: 8f:31:fe:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SLDhZminJEGATmQGagLKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYmUzMWI2YmVkYzUxZjJhYTJlYzBhNjQ1M2YyZTQzNWU4 MDhmYjUwHhcNMjUxMjIxMDUwMTI3WhcNMjUxMjIyMDUwMTI3WjAzMTEwLwYDVQQD Eyg5MjdjNmRiYzE2NTY0NDMxMDA3ZmEzYTMwYjczZDk4ODUzNjNkMmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk++xYIVCeySpGIsnM80PErsiI2bG F5kOd3hoDMOSKrue5gbyF0zBg3xO2LgHyL6woqb0OncdgrPaCas5MlsunC/VyUFX /patMgFfZAL3UsN1mhkLx05fvz8lJMyms2Gt6O2YwfRaqoxtyzGmt+bZ55sU+sZ+ rhhJflweEyOZnf/wEyTWWJANRr+wu34YvA2F0kdBA45sMbpqblpk/7xMhNjXbDaN 9h/KPHeRN24+fRzyGLuCrVLQfgDSCmVR85AvqoZDxgjEHtSpvivnzAKVIB99Zsww Te9K/6uKB4ZUgf1D531M8Gh6zIlJnNyIWbgJ/6nar+VjoasMcrQ1lPZaiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJ8bbwWVkQxAH+jowtz2YhTY9LuMB8GA1UdIwQY MBaAFE2+Mba+3FHyqi7ApkU/LkNegI+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAt ZmJkNDZkOWNhMzcyLzEvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAtZmJkNDZkOWNhMzcy LzEvVGI0eHRyN2NVZktxTHNDbVJUOHVRMTZBajdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeOmAEri LVvTfI/uBTca+djb+SCZq0FeMjCpVWKZojH3QGffh6zzosFPX1Rw6bS/qwnOqg9l bJYIWYzUH3gxOKDbmCbCDMmLTtOMe39tZYVpp+zQVHpjm3eIievEaAgZmXuXMARY 6r7jnirJIeDvEA3qBTAWvuCipp1AkOPxQQozTi9Mcxa5ZNJgbujgrisHYP9Mp4G3 Mr1+LtMJYSylMEpQ9SfD32cdKP9rfJw+eaqM71kg+piAmGQvDhFPp+j/7fKL722U jXgmvuDRWMb+sir/cnjt5k/aOzxm9o2om1hZ3SDFZZ83DLNJqSgu2Kx5uXqQypeu Upe6BlyEjzH+Xw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:13:26 2025 by rpki-client