This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json) Hash identifier: RII6DrLN9z14i8OacvpDRW/nBk511CMlOqMCi/9JwNM= Subject key identifier: E5:8F:21:10:4C:90:6B:66:B6:08:DE:A9:C1:B8:64:04:92:F1:DB:AF Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12 Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112 Certificate serial: 019B42B751F5F5793DA2603DC8C1F6A9C9BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft Manifest number: 16DF Signing time: Sun 21 Dec 2025 21:01:08 +0000 Manifest this update: Sun 21 Dec 2025 21:01:08 +0000 Manifest next update: Mon 22 Dec 2025 21:01:08 +0000 Files and hashes: 1: N4NMmlfe9DF5a3SAVtfSEbM2wfQ.roa (hash: 8UZlWmjB6Dnz8NNshRUlMhAJBpkzaL1ZPtLOI64Gvsw=) 2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: JGx3rmHdr13Bi6GiN9UxLIswmYMCIlrHQDe1tZdxeC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:51:f5:f5:79:3d:a2:60:3d:c8:c1:f6:a9:c9:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112 Validity Not Before: Dec 21 21:01:08 2025 GMT Not After : Dec 22 21:01:08 2025 GMT Subject: CN=e58f21104c906b66b608dea9c1b8640492f1dbaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:31:3e:db:f9:dc:ea:3f:31:f8:34:e4:7b:b4: 85:57:e0:c4:2a:11:b4:03:6f:53:36:9c:4a:b3:f1: 62:65:9f:a2:b6:22:f9:e4:c4:88:51:f9:9c:d8:31: cf:e0:3d:d6:2d:fc:5d:06:e8:13:e8:46:e1:16:1e: 8b:cc:0b:8b:46:76:b5:9b:2c:dc:1d:e6:2a:18:1f: 9e:81:8e:b8:b9:2d:19:85:c3:68:0a:e9:1a:97:9e: 49:a1:55:32:a3:f2:33:3c:8d:0e:cd:56:41:c6:a8: f4:26:db:69:d0:6c:1b:55:cf:a2:85:22:cb:1d:bb: 60:67:6e:7b:d2:df:0d:e8:16:b8:53:42:bd:b7:ef: 4c:08:ae:7a:2a:54:e4:c1:6c:02:59:92:a9:34:54: f5:e3:77:16:0a:c6:1c:4d:dc:e6:81:84:ba:fa:b0: 60:f3:d9:68:81:9d:98:d8:1d:45:94:5e:c7:ea:e0: c5:34:7a:9d:8b:92:6b:2f:2d:61:d7:29:ac:2f:4c: fa:6a:62:a8:25:fa:85:22:6f:ad:bc:2a:a5:17:fe: 58:9b:e6:8c:57:a6:d5:d9:4f:ad:96:9d:e7:13:4a: 64:9d:6d:2b:10:16:b3:0e:33:bd:71:7f:79:b5:ec: 1c:0f:31:98:ea:e7:02:82:bd:bd:70:ba:69:59:d3: c2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8F:21:10:4C:90:6B:66:B6:08:DE:A9:C1:B8:64:04:92:F1:DB:AF X509v3 Authority Key Identifier: keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:74:e0:ad:17:d4:a7:d9:a2:17:e3:40:54:a5:de:6f:be:4f: 9e:11:b5:f5:d6:55:3e:e0:a1:f4:67:54:16:77:61:a8:59:82: 28:25:86:6e:03:7e:59:c1:65:01:3f:06:f1:8f:fd:35:14:c0: 1e:b7:15:19:7c:c8:56:9a:a0:e5:30:44:27:dd:b3:80:2a:1c: f6:c9:66:79:f0:5e:35:09:86:5e:50:98:b7:e9:e3:8d:c5:d6: 77:7d:e5:62:28:0d:39:89:32:73:84:5b:e0:89:ea:cf:30:64: 40:75:05:f7:2f:2f:31:25:b1:69:af:3e:d8:a0:6f:13:c1:fb: 4b:95:be:fa:a1:0f:6d:10:ae:18:b8:4c:df:0c:b3:49:98:f8: f5:b2:b8:7d:55:34:4e:c6:db:56:6f:1d:09:56:88:c2:51:cb: fb:8c:44:a0:46:a9:07:2d:7e:45:13:8e:0a:9b:e8:7e:ab:bb: 35:77:9b:5f:39:ed:42:13:bd:f8:ee:f9:0b:4d:f9:22:80:2d: 57:d6:92:d8:07:7a:4f:b9:a5:24:db:2c:55:4b:44:ca:0d:83: 86:72:51:d6:f9:fc:ee:e1:9c:9c:4f:e8:0e:cb:a1:8a:89:3f: fa:02:74:37:81:30:b2:4d:8f:1d:a2:19:b5:ff:93:0c:bf:75: 15:c8:40:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt1H19Xk9omA9yMH2qcm7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MzFhZDQ2ZTBiOWMwMTBjZDI4ODVlNjAwMmMxYTViOTNj ZDUxMTIwHhcNMjUxMjIxMjEwMTA4WhcNMjUxMjIyMjEwMTA4WjAzMTEwLwYDVQQD EyhlNThmMjExMDRjOTA2YjY2YjYwOGRlYTljMWI4NjQwNDkyZjFkYmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTE+2/nc6j8x+DTke7SFV+DEKhG0 A29TNpxKs/FiZZ+itiL55MSIUfmc2DHP4D3WLfxdBugT6EbhFh6LzAuLRna1myzc HeYqGB+egY64uS0ZhcNoCukal55JoVUyo/IzPI0OzVZBxqj0Jttp0GwbVc+ihSLL HbtgZ2570t8N6Ba4U0K9t+9MCK56KlTkwWwCWZKpNFT143cWCsYcTdzmgYS6+rBg 89logZ2Y2B1FlF7H6uDFNHqdi5JrLy1h1ymsL0z6amKoJfqFIm+tvCqlF/5Ym+aM V6bV2U+tlp3nE0pknW0rEBazDjO9cX95tewcDzGY6ucCgr29cLppWdPCDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWPIRBMkGtmtgjeqcG4ZASS8duvMB8GA1UdIwQY MBaAFEUxrUbgucAQzSiF5gAsGluTzVESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84ZWI0NTMtYTNlYi00NTAwLWE3ZTAt MzJkZTU4NThiYTZjLzEvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy84ZWI0NTMtYTNlYi00NTAwLWE3ZTAtMzJkZTU4NThiYTZj LzEvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3TgrRfU p9miF+NAVKXeb75PnhG19dZVPuCh9GdUFndhqFmCKCWGbgN+WcFlAT8G8Y/9NRTA HrcVGXzIVpqg5TBEJ92zgCoc9slmefBeNQmGXlCYt+njjcXWd33lYigNOYkyc4Rb 4InqzzBkQHUF9y8vMSWxaa8+2KBvE8H7S5W++qEPbRCuGLhM3wyzSZj49bK4fVU0 TsbbVm8dCVaIwlHL+4xEoEapBy1+RROOCpvofqu7NXebXzntQhO9+O75C035IoAt V9aS2Ad6T7mlJNssVUtEyg2DhnJR1vn87uGcnE/oDsuhiok/+gJ0N4Ewsk2PHaIZ tf+TDL91FchA3g== -----END CERTIFICATE-----Generated at Mon Dec 22 02:05:15 2025 by rpki-client