This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft File: gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json) Hash identifier: NECqD1u85QqsouvwlSiqSQK1iCrh5a0qHNnwHRjiQ40= Subject key identifier: 35:72:04:20:A0:E3:B1:1A:8B:0A:61:A4:90:38:65:98:99:96:B5:02 Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B Certificate issuer: /CN=81300300de5005ada2bb66c268998a40c33ad23b Certificate serial: 019B2E54F5CBBE0117CF612F6076BA42C41D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft Manifest number: 0DD7 Signing time: Wed 17 Dec 2025 22:01:18 +0000 Manifest this update: Wed 17 Dec 2025 22:01:18 +0000 Manifest next update: Thu 18 Dec 2025 22:01:18 +0000 Files and hashes: 1: _f2qtSqsuNVRAf2aMYbbvbg8ymw.roa (hash: 4sGopdLUwHqj2GkqogChdlm5xcViRd2S6Xz6oo4SiLA=) 2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: 4CrR/LHYUaCkFY73UgP0pVaDhhgKr6IpRyzMjgPubYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:f5:cb:be:01:17:cf:61:2f:60:76:ba:42:c4:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b Validity Not Before: Dec 17 22:01:18 2025 GMT Not After : Dec 18 22:01:18 2025 GMT Subject: CN=35720420a0e3b11a8b0a61a4903865989996b502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:20:d3:97:36:ef:6b:1a:19:8a:f7:05:3a:56: 67:f8:91:76:e0:b2:c6:ad:19:ac:7c:dc:ba:2c:52: d3:df:b9:5d:7a:03:73:f3:64:4d:0d:0d:95:3d:c2: 89:bc:f8:18:6a:a0:b8:de:bb:2e:44:7f:3a:83:de: dd:e3:28:a7:23:4e:5f:2a:9c:89:98:10:02:cd:59: f4:4a:d9:2e:2f:d3:67:4c:04:1c:7d:21:fa:af:da: 9d:41:b5:68:ea:06:44:0a:37:55:b6:69:74:ec:8f: d7:46:16:dd:5e:da:14:13:d8:c0:55:dd:25:39:86: e8:f7:0f:0a:47:4a:12:57:8f:7a:d6:37:75:f3:f0: 1b:67:e9:ac:03:f7:27:e2:4c:fd:0b:99:17:c4:20: 96:c2:1d:0e:b3:3b:b0:2d:88:91:02:db:e1:78:d7: 16:61:75:e4:21:8e:36:2e:7d:80:05:b4:2b:20:06: ff:6f:30:d2:82:58:d2:e6:2e:4c:3d:5f:47:2b:76: ed:22:bc:87:13:88:7c:0c:0d:8c:e4:b5:23:bf:4c: 9e:2f:07:a3:32:b8:d3:43:ca:d8:50:48:6b:39:d5: b0:c3:29:b3:8c:58:23:12:80:76:9b:01:07:74:7b: 42:f6:01:3a:a5:82:1f:b4:ce:93:f9:c8:4a:8b:ee: 2e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:72:04:20:A0:E3:B1:1A:8B:0A:61:A4:90:38:65:98:99:96:B5:02 X509v3 Authority Key Identifier: keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b6:88:b4:09:4a:63:8e:7a:57:a6:d2:22:d1:4b:7f:a7:5d: c1:c3:96:8f:ac:a8:b2:26:ab:52:6b:91:ca:ea:8f:79:cf:29: 8d:47:a5:05:dd:a8:26:5a:18:89:11:5a:aa:25:7d:dd:bc:5f: 1e:c3:f6:65:68:7d:a1:b7:1d:fb:13:6d:96:a4:c5:6d:be:e9: b6:f7:b4:98:16:6c:cb:c5:62:25:32:6c:d2:02:e5:85:4d:5f: 05:0d:32:54:b5:c9:87:df:e4:00:aa:3c:f6:ee:6a:9b:d1:5b: 69:c0:04:1e:95:ae:fe:74:20:6a:d9:43:ab:5f:be:15:ee:26: 8a:5e:e9:cb:9f:4a:0c:3c:19:6b:82:b2:16:a9:73:47:22:a7: c6:63:b5:92:01:f2:bc:e4:a5:36:e6:b6:b7:7e:b1:ac:49:ab: 56:9b:2a:20:02:85:7c:da:5a:9e:f8:08:0e:9f:a0:94:a9:69: 36:2f:c5:c4:70:8c:c5:20:31:32:6c:fa:10:5e:01:67:4a:f5: ac:45:03:da:aa:dd:dd:d6:14:49:29:25:fb:81:64:6c:8c:c4: e6:b3:00:dc:ee:24:15:e7:af:5c:d3:6c:c5:7e:ed:e3:14:bd: 09:cc:e5:c7:3c:af:7d:51:65:25:7b:6c:bb:4e:a1:d6:28:c0: 2a:0c:d2:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVPXLvgEXz2EvYHa6QsQdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMzAwMzAwZGU1MDA1YWRhMmJiNjZjMjY4OTk4YTQwYzMz YWQyM2IwHhcNMjUxMjE3MjIwMTE4WhcNMjUxMjE4MjIwMTE4WjAzMTEwLwYDVQQD EygzNTcyMDQyMGEwZTNiMTFhOGIwYTYxYTQ5MDM4NjU5ODk5OTZiNTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCDTlzbvaxoZivcFOlZn+JF24LLG rRmsfNy6LFLT37ldegNz82RNDQ2VPcKJvPgYaqC43rsuRH86g97d4yinI05fKpyJ mBACzVn0StkuL9NnTAQcfSH6r9qdQbVo6gZECjdVtml07I/XRhbdXtoUE9jAVd0l OYbo9w8KR0oSV4961jd18/AbZ+msA/cn4kz9C5kXxCCWwh0OszuwLYiRAtvheNcW YXXkIY42Ln2ABbQrIAb/bzDSgljS5i5MPV9HK3btIryHE4h8DA2M5LUjv0yeLwej MrjTQ8rYUEhrOdWwwymzjFgjEoB2mwEHdHtC9gE6pYIftM6T+chKi+4ubQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVyBCCg47EaiwphpJA4ZZiZlrUCMB8GA1UdIwQY MBaAFIEwAwDeUAWtortmwmiZikDDOtI7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1RBREFONVFCYTJpdTJiQ2FKbUtRTU02MGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kYmFkODgtZjgxOC00MzFlLTg3YTYt ZGZlZTk4NDAzN2FjLzEvZ1RBREFONVFCYTJpdTJiQ2FKbUtRTU02MGpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9kYmFkODgtZjgxOC00MzFlLTg3YTYtZGZlZTk4NDAzN2Fj LzEvZ1RBREFONVFCYTJpdTJiQ2FKbUtRTU02MGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbaItAlK Y456V6bSItFLf6ddwcOWj6yosiarUmuRyuqPec8pjUelBd2oJloYiRFaqiV93bxf HsP2ZWh9obcd+xNtlqTFbb7ptve0mBZsy8ViJTJs0gLlhU1fBQ0yVLXJh9/kAKo8 9u5qm9FbacAEHpWu/nQgatlDq1++Fe4mil7py59KDDwZa4KyFqlzRyKnxmO1kgHy vOSlNua2t36xrEmrVpsqIAKFfNpanvgIDp+glKlpNi/FxHCMxSAxMmz6EF4BZ0r1 rEUD2qrd3dYUSSkl+4FkbIzE5rMA3O4kFeevXNNsxX7t4xS9CczlxzyvfVFlJXts u06h1ijAKgzSgA== -----END CERTIFICATE-----Generated at Thu Dec 18 06:47:47 2025 by rpki-client