This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft File: tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft (raw, json) Hash identifier: Vbmk2TKi457gl1KZIgIYU1gVT9ptTmyUp3o+fRqBr2A= Subject key identifier: E7:E6:FB:78:37:BE:04:FE:60:05:58:52:2F:01:39:A5:33:07:4E:3D Authority key identifier: B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E Certificate issuer: /CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e Certificate serial: 019B3D59E47E6F384F13D60610BDDF75A093 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 20:00:59 +0000 Manifest this update: Sat 20 Dec 2025 20:00:59 +0000 Manifest next update: Sun 21 Dec 2025 20:00:59 +0000 Files and hashes: 1: 3wD7YASUrL3NpA7N1DKGwyMvpW8.roa (hash: E3LCGPj2WzMDsMMPMtvTWx8+o6rGMeVTiLG80T025To=) 2: tCxsttlDEYs9pRw5Gm9iTgZyCBc.roa (hash: 0ZbwaGE5XpT8151KuGcEKOSEkVLV60MXa5tXdHShvII=) 3: tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl (hash: F8UcRn2YaQ83yTcJmZXyyTkJ0klt2ZcHlReQO5ZzN7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:e4:7e:6f:38:4f:13:d6:06:10:bd:df:75:a0:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e Validity Not Before: Dec 20 20:00:59 2025 GMT Not After : Dec 21 20:00:59 2025 GMT Subject: CN=e7e6fb7837be04fe600558522f0139a533074e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:52:8f:3d:e1:53:da:a6:f7:1c:29:e9:3e:14: ed:35:de:24:db:f1:ad:08:a3:4c:af:e4:45:2a:8f: 62:20:b4:2b:10:56:6b:2f:22:3b:60:0b:7e:bc:2e: 1d:fe:d5:bf:07:7b:9f:c3:be:16:66:f3:27:72:fd: e8:5b:0a:a2:8d:87:db:fb:e3:0e:db:0d:4b:46:30: 95:35:b4:e5:dd:aa:ed:33:95:52:21:32:59:df:af: 45:cd:9f:3b:39:18:44:69:92:a5:26:4b:2f:e8:f3: ec:f8:cc:d6:61:80:ef:2b:b7:d7:f4:3c:e6:de:64: f3:9f:78:58:b1:6c:d7:e0:e3:f6:ef:1b:0e:93:d2: 64:e7:8c:84:9d:9c:94:2e:84:e7:b1:31:39:9c:20: cf:8c:ac:2f:e8:a2:5e:0d:4e:aa:5a:10:23:42:f5: 59:b9:e7:4c:0b:e2:47:67:36:0f:6b:d1:8e:45:cd: 19:62:21:42:11:20:8c:da:d0:94:91:7c:f2:ef:50: cd:f3:28:23:88:e8:82:4c:39:88:28:ff:f6:31:30: 16:88:50:73:43:83:dc:d1:d2:1b:9b:81:74:dd:36: cb:03:f0:c2:5e:a1:bc:13:99:a7:91:aa:8a:3d:24: f9:25:66:ab:c6:52:fe:e4:02:37:29:55:1e:ec:d6: 1e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E6:FB:78:37:BE:04:FE:60:05:58:52:2F:01:39:A5:33:07:4E:3D X509v3 Authority Key Identifier: keyid:B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:16:e7:6e:3a:fc:9c:5f:36:52:38:a5:a7:1b:07:17:db:50: c6:92:dd:79:e3:a1:4c:0c:d3:38:21:1a:66:59:b6:31:d7:e7: b1:69:a4:23:05:3b:df:87:e0:3a:09:b7:05:67:ee:08:6a:6c: 6b:f4:26:88:dd:46:6c:1d:3c:b6:69:f1:b4:22:63:ee:5f:f3: 0b:86:50:7c:4d:75:1c:15:48:05:1d:95:65:92:2f:41:ae:00: a5:43:b2:34:b9:bb:f3:77:f6:ad:a6:ed:1b:9d:0c:cc:44:a9: a3:68:ee:9b:fa:af:c6:1b:df:42:be:fd:3e:e4:c3:3b:49:0b: 5e:f5:61:64:7e:1a:78:ce:1d:d9:da:64:d5:59:b2:c5:92:25: 19:4c:82:0a:3c:33:95:9a:08:b8:aa:e1:b0:35:00:50:f7:2c: 0f:f8:31:7b:31:c4:fe:f8:41:7e:d1:39:fa:5f:eb:b1:0d:44: 4a:d4:65:93:47:7d:39:d1:01:75:ef:5d:01:93:38:ea:64:38: b9:63:d8:d4:67:b5:60:0b:a0:5e:82:70:32:7c:6d:10:69:3b: f3:d8:43:74:20:44:c8:d1:03:c8:7c:b6:54:31:91:df:3d:d4: 03:1a:d6:67:e1:3d:5c:d7:f2:aa:3e:82:76:89:bf:ff:9c:47: 50:7f:74:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WeR+bzhPE9YGEL3fdaCTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MGQ2Y2E5NWUyNzcwZjU1MzQwZDkwOWVjN2M5N2VlY2Ez ZmUyMGUwHhcNMjUxMjIwMjAwMDU5WhcNMjUxMjIxMjAwMDU5WjAzMTEwLwYDVQQD EyhlN2U2ZmI3ODM3YmUwNGZlNjAwNTU4NTIyZjAxMzlhNTMzMDc0ZTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1KPPeFT2qb3HCnpPhTtNd4k2/Gt CKNMr+RFKo9iILQrEFZrLyI7YAt+vC4d/tW/B3ufw74WZvMncv3oWwqijYfb++MO 2w1LRjCVNbTl3artM5VSITJZ369FzZ87ORhEaZKlJksv6PPs+MzWYYDvK7fX9Dzm 3mTzn3hYsWzX4OP27xsOk9Jk54yEnZyULoTnsTE5nCDPjKwv6KJeDU6qWhAjQvVZ uedMC+JHZzYPa9GORc0ZYiFCESCM2tCUkXzy71DN8ygjiOiCTDmIKP/2MTAWiFBz Q4Pc0dIbm4F03TbLA/DCXqG8E5mnkaqKPST5JWarxlL+5AI3KVUe7NYe1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfm+3g3vgT+YAVYUi8BOaUzB049MB8GA1UdIwQY MBaAFLYNbKleJ3D1U0DZCex8l+7KP+IOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGcxc3FWNG5jUFZUUU5rSjdIeVg3c29fNGc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMzNlOGItYmRlMS00ZjkwLWJhZjUt MjM4NDdhNDBkOWU0LzEvdGcxc3FWNG5jUFZUUU5rSjdIeVg3c29fNGc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wMzNlOGItYmRlMS00ZjkwLWJhZjUtMjM4NDdhNDBkOWU0 LzEvdGcxc3FWNG5jUFZUUU5rSjdIeVg3c29fNGc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBbnbjr8 nF82UjilpxsHF9tQxpLdeeOhTAzTOCEaZlm2MdfnsWmkIwU734fgOgm3BWfuCGps a/QmiN1GbB08tmnxtCJj7l/zC4ZQfE11HBVIBR2VZZIvQa4ApUOyNLm783f2rabt G50MzESpo2jum/qvxhvfQr79PuTDO0kLXvVhZH4aeM4d2dpk1VmyxZIlGUyCCjwz lZoIuKrhsDUAUPcsD/gxezHE/vhBftE5+l/rsQ1EStRlk0d9OdEBde9dAZM46mQ4 uWPY1Ge1YAugXoJwMnxtEGk789hDdCBEyNEDyHy2VDGR3z3UAxrWZ+E9XNfyqj6C dom//5xHUH90Lg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:07:32 2025 by rpki-client