This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft File: tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json) Hash identifier: M8mHVKPAM6O71uwg67g1siW0AzwpORYNCdiEO5howhA= Subject key identifier: 23:FC:F2:D1:16:FE:03:C2:33:22:70:03:73:2C:40:90:3F:62:C3:7A Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48 Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448 Certificate serial: 019B66FAE4ACC7B311D051CE61FEE4DAA53A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft Manifest number: 05C3 Signing time: Sun 28 Dec 2025 22:01:17 +0000 Manifest this update: Sun 28 Dec 2025 22:01:17 +0000 Manifest next update: Mon 29 Dec 2025 22:01:17 +0000 Files and hashes: 1: hrqEKTykKr09BUd_K3mCMU0oC6Q.roa (hash: pufSFJ+QVHIcFkxQwEPRtygVlxFuvFk+kfnkYeAvjWg=) 2: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: ITHgUBFNxPdQr8yrYO+iJ8pxhwLNI17NHAXj5mxBOig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fa:e4:ac:c7:b3:11:d0:51:ce:61:fe:e4:da:a5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448 Validity Not Before: Dec 28 22:01:17 2025 GMT Not After : Dec 29 22:01:17 2025 GMT Subject: CN=23fcf2d116fe03c233227003732c40903f62c37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5d:a2:1e:40:a7:ea:51:e4:ce:5c:32:0d:41: d5:dc:18:8e:67:c0:ed:53:d5:4e:cf:aa:80:fd:29: f2:7e:2d:de:7e:fd:9e:3c:95:2c:92:65:f7:ff:52: 40:3a:0e:09:7c:2c:19:05:6b:cf:47:2a:e2:8f:2a: 66:be:51:05:e7:92:da:d0:67:24:e5:53:86:e7:0b: a7:f2:60:b1:44:c7:27:ec:b7:cd:84:07:21:f5:0c: ab:58:71:54:13:7a:a8:cb:49:40:e8:c4:c5:50:7a: 68:ba:17:81:b9:75:f5:b0:be:19:c2:2e:aa:07:e9: 32:65:c5:bd:b1:52:c6:07:a5:a7:3b:74:1e:e0:33: 96:6f:ee:08:76:df:1d:51:47:c1:07:22:00:54:05: e7:69:a0:e1:25:db:05:34:53:7d:a4:cf:d9:f2:34: 57:9b:3e:a2:f1:8d:53:30:c7:97:94:e4:88:9c:2e: 62:82:9a:1a:42:7e:03:68:e7:a6:50:ff:f4:c5:6e: ad:53:b4:93:0b:17:bf:33:84:d3:a8:1a:c4:1f:02: 21:6e:4f:6d:3e:53:72:fb:40:9d:0c:0d:6a:6b:15: ff:cc:ac:a8:50:11:ed:9d:dc:b4:f0:c7:3d:82:31: 1c:2d:98:f4:f7:a9:f6:39:cd:fe:1c:07:36:d3:ab: 9e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FC:F2:D1:16:FE:03:C2:33:22:70:03:73:2C:40:90:3F:62:C3:7A X509v3 Authority Key Identifier: keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:6c:fc:3d:a2:bc:0b:88:5d:74:d3:76:c9:be:3e:39:a0:5e: 0c:08:06:13:2d:45:46:3c:dc:00:88:e4:04:68:42:dc:09:21: 71:cc:73:89:92:9b:f8:79:57:82:df:f4:b4:c5:73:28:df:d2: 0b:16:60:04:d5:6c:9d:9c:a7:50:82:df:3e:ec:bc:5b:cf:3f: 36:d9:66:fa:54:70:40:88:77:ec:e2:f5:4b:ef:56:2b:b4:48: 78:1b:27:45:6a:19:ae:59:b0:30:75:c2:e1:89:86:08:19:c0: 7d:17:f2:c7:ab:0c:64:1c:0c:65:0c:b8:e7:5d:7d:f6:96:8c: 7b:9b:a6:20:77:9a:82:ec:03:ec:98:86:1a:d8:e1:ce:aa:19: a2:6d:29:ad:f2:ae:26:c7:0b:69:1e:44:c5:13:16:77:32:c1: 0d:e5:bb:8b:1c:36:7d:3d:e5:b2:3a:f8:0d:50:17:18:32:12: 91:f4:de:68:7d:e7:68:de:31:c0:28:fc:6f:47:2a:63:e0:e7: 9d:d7:bc:f5:97:3f:bf:82:be:98:42:bf:f5:94:19:b7:78:01: 78:7d:dd:a0:68:51:fb:40:f7:61:e1:9d:82:db:73:d6:54:8f: c0:07:d9:40:e4:3e:97:96:bd:dc:14:31:dd:e3:0f:b9:a4:a2: 3f:37:3a:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+uSsx7MR0FHOYf7k2qU6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YzQxZTU5ODM0ZGE2MTJkODNjYTI0MTk0ZjAyY2E2ZDc2 MDI0NDgwHhcNMjUxMjI4MjIwMTE3WhcNMjUxMjI5MjIwMTE3WjAzMTEwLwYDVQQD EygyM2ZjZjJkMTE2ZmUwM2MyMzMyMjcwMDM3MzJjNDA5MDNmNjJjMzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll2iHkCn6lHkzlwyDUHV3BiOZ8Dt U9VOz6qA/Snyfi3efv2ePJUskmX3/1JAOg4JfCwZBWvPRyrijypmvlEF55La0Gck 5VOG5wun8mCxRMcn7LfNhAch9QyrWHFUE3qoy0lA6MTFUHpouheBuXX1sL4Zwi6q B+kyZcW9sVLGB6WnO3Qe4DOWb+4Idt8dUUfBByIAVAXnaaDhJdsFNFN9pM/Z8jRX mz6i8Y1TMMeXlOSInC5igpoaQn4DaOemUP/0xW6tU7STCxe/M4TTqBrEHwIhbk9t PlNy+0CdDA1qaxX/zKyoUBHtndy08Mc9gjEcLZj096n2Oc3+HAc206ueHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCP88tEW/gPCMyJwA3MsQJA/YsN6MB8GA1UdIwQY MBaAFLTEHlmDTaYS2DyiQZTwLKbXYCRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hM2JhY2EtNDM3ZC00NjA3LTljMWEt NTU3YTRjMzFlMDJlLzEvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hM2JhY2EtNDM3ZC00NjA3LTljMWEtNTU3YTRjMzFlMDJl LzEvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGz8PaK8 C4hddNN2yb4+OaBeDAgGEy1FRjzcAIjkBGhC3AkhccxziZKb+HlXgt/0tMVzKN/S CxZgBNVsnZynUILfPuy8W88/Ntlm+lRwQIh37OL1S+9WK7RIeBsnRWoZrlmwMHXC 4YmGCBnAfRfyx6sMZBwMZQy451199paMe5umIHeaguwD7JiGGtjhzqoZom0prfKu JscLaR5ExRMWdzLBDeW7ixw2fT3lsjr4DVAXGDISkfTeaH3naN4xwCj8b0cqY+Dn nde89Zc/v4K+mEK/9ZQZt3gBeH3doGhR+0D3YeGdgttz1lSPwAfZQOQ+l5a93BQx 3eMPuaSiPzc6xQ== -----END CERTIFICATE-----Generated at Mon Dec 29 00:46:14 2025 by rpki-client