This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft File: tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json) Hash identifier: o7PTini0GPUf0lOKKqa2gtqsZeZlPnGwb3A5dB5wnao= Subject key identifier: 94:77:4F:DB:92:63:94:2A:FD:17:43:75:7C:42:24:C2:3D:06:F7:CB Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Certificate serial: 019B37C5ECBFF4C425417E390CBC22B34AFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft Manifest number: 0F7D Signing time: Fri 19 Dec 2025 18:01:16 +0000 Manifest this update: Fri 19 Dec 2025 18:01:16 +0000 Manifest next update: Sat 20 Dec 2025 18:01:16 +0000 Files and hashes: 1: 52GXxgdg7vWygkQsHwnq_P3gjJA.roa (hash: i/4OVKKicHKNXCwirS/rOH1bcQmeEUg5ZtGhz1sY85I=) 2: 69jsCPkwXK1lmTxeQTyCID9PpjA.roa (hash: h/Q47E5oO3l5JxeekNZr7l4rqZH5SyA0969VUEHNB8w=) 3: 9MVV1yAh59mTgEP_W258bMa49_o.roa (hash: iCN3glju44EdxjBrGRw+NZhFmqg56yUA7pS6/PNweyY=) 4: AjV2rlIwTElr058YXLjGHHrdXf0.roa (hash: LTFD7RWDdMyUwIhuINghYkedTIuVGScYQK467Diulf0=) 5: Dgr2wvOQnRz5hgawqSG0QB7Wpf8.roa (hash: qz1bNfdEE/9TcJfQDqdc+8FtR45UoCnUkyfUGSABkmQ=) 6: ObtlGayrPGhbC0NJB3cANhdfN9g.roa (hash: IXODRFBoDBQAcQ/y7+mqgK85yVkykmHrcIsLk/+rl+k=) 7: UdUz-kT-b500-FTrkpKhOG9_Lzg.roa (hash: 0R7mO9NcYxR+lIBqqxDSdOzb7Oi6PF6Gf+MJjbPBZOg=) 8: VifVBKjqmDhUgid5BLElJTuQJo4.roa (hash: WI5+mxqhucetVt6cCUvKQ5QuoJnG/kLcpHeXlC1Yb5Y=) 9: lKCL8VeF7spgo1KPqTl3MnMrJFU.roa (hash: G5kvKqbW+q0BKre+iGyFYRJgxgTgTCaLSiQqwrZLbuM=) 10: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: hlFYZPiD+ihaPODzow7rPVJtE7zTUIUu178flxNHfF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 18:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:ec:bf:f4:c4:25:41:7e:39:0c:bc:22:b3:4a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Validity Not Before: Dec 19 18:01:16 2025 GMT Not After : Dec 20 18:01:16 2025 GMT Subject: CN=94774fdb9263942afd1743757c4224c23d06f7cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1b:3c:16:05:41:8b:b9:2e:0e:fe:40:2a:b4: a0:eb:b5:15:de:ca:1d:e1:8f:3b:62:f8:1f:4c:d1: ad:65:bb:28:60:bf:74:92:a3:97:b1:c2:7a:e7:92: ab:e9:f9:d4:0c:27:f0:a2:d9:66:c5:96:ab:b3:1a: 88:00:02:ac:96:14:37:4c:44:a9:59:17:99:a3:0a: eb:a9:71:4a:68:a6:1e:1d:66:58:c5:7b:f8:94:41: 2a:27:ad:11:f9:d1:4e:c7:03:28:cc:af:d2:c8:69: df:c2:27:62:fd:cd:5f:91:27:dd:59:1a:3f:cd:a4: 3a:2d:ce:8b:17:7d:96:cf:a9:5a:6c:d9:07:45:a6: df:8e:56:71:13:b5:4d:23:c0:8e:33:1b:b4:40:19: 31:e8:ec:77:26:47:f4:b2:a0:4a:03:91:6f:87:17: 10:06:f9:06:87:ff:f1:b5:5c:56:cd:85:f5:0e:73: fe:81:3c:70:7e:d5:7b:66:b1:bd:de:7e:d1:dc:d3: ac:89:33:de:00:e1:45:f8:4f:61:d3:fa:4c:45:57: d5:7b:68:c2:bd:99:0f:d7:d2:69:0b:e0:97:87:74: 02:28:3a:85:67:17:fe:f1:c7:65:48:5f:e2:05:b9: b7:38:94:42:a9:57:a2:bf:a7:69:55:6f:ce:f5:73: 6a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:77:4F:DB:92:63:94:2A:FD:17:43:75:7C:42:24:C2:3D:06:F7:CB X509v3 Authority Key Identifier: keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:81:5a:08:f8:97:80:3a:99:65:cf:ff:8d:d4:73:d0:13:df: f7:84:10:70:cf:26:43:7f:ed:62:c9:48:7d:3c:b0:b7:6d:e9: a3:d7:6f:cc:5e:b2:cf:22:8d:6c:4b:fb:d5:51:bc:b6:6e:0f: 78:e2:f4:ce:71:8b:60:7d:77:aa:63:74:89:2d:57:22:52:36: 20:83:2a:f2:bd:de:ed:25:0d:7b:74:c1:83:f3:b5:8d:66:2b: 9a:9c:0f:a6:2e:34:0a:51:66:e7:36:30:78:4e:f9:35:9f:f4: 70:b4:29:2a:f3:c5:70:11:d9:93:e2:16:d4:cd:f8:a2:25:87: d0:3f:3a:e1:c5:60:50:7b:33:99:8f:ea:33:18:1a:5b:1d:c9: 81:df:03:27:65:76:c7:8e:92:eb:28:9f:54:0f:85:d8:9f:73: d3:67:4f:dd:73:ac:fb:7a:27:ef:cf:1e:b7:1f:58:c4:05:a7: 0d:cf:09:0c:2e:f1:a6:c1:6a:51:86:53:3a:6d:5b:40:a5:3e: f4:bb:5e:78:90:93:15:e8:82:0b:9f:4e:64:46:cb:79:4c:55: a4:40:29:c6:24:99:46:80:12:f6:68:5d:71:95:46:e2:ad:b6: 3b:c0:21:77:ef:b5:ae:a7:e2:f7:7d:d9:de:a7:2d:0c:05:7e: d4:a2:03:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xey/9MQlQX45DLwis0r+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3 MzVkN2QwHhcNMjUxMjE5MTgwMTE2WhcNMjUxMjIwMTgwMTE2WjAzMTEwLwYDVQQD Eyg5NDc3NGZkYjkyNjM5NDJhZmQxNzQzNzU3YzQyMjRjMjNkMDZmN2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxs8FgVBi7kuDv5AKrSg67UV3sod 4Y87YvgfTNGtZbsoYL90kqOXscJ655Kr6fnUDCfwotlmxZarsxqIAAKslhQ3TESp WReZowrrqXFKaKYeHWZYxXv4lEEqJ60R+dFOxwMozK/SyGnfwidi/c1fkSfdWRo/ zaQ6Lc6LF32Wz6labNkHRabfjlZxE7VNI8COMxu0QBkx6Ox3Jkf0sqBKA5FvhxcQ BvkGh//xtVxWzYX1DnP+gTxwftV7ZrG93n7R3NOsiTPeAOFF+E9h0/pMRVfVe2jC vZkP19JpC+CXh3QCKDqFZxf+8cdlSF/iBbm3OJRCqVeiv6dpVW/O9XNqWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJR3T9uSY5Qq/RdDdXxCJMI9BvfLMB8GA1UdIwQY MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt YzdkMTk5MzBkNjZkLzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIFaCPiX gDqZZc//jdRz0BPf94QQcM8mQ3/tYslIfTywt23po9dvzF6yzyKNbEv71VG8tm4P eOL0znGLYH13qmN0iS1XIlI2IIMq8r3e7SUNe3TBg/O1jWYrmpwPpi40ClFm5zYw eE75NZ/0cLQpKvPFcBHZk+IW1M34oiWH0D864cVgUHszmY/qMxgaWx3Jgd8DJ2V2 x46S6yifVA+F2J9z02dP3XOs+3on788etx9YxAWnDc8JDC7xpsFqUYZTOm1bQKU+ 9LteeJCTFeiCC59OZEbLeUxVpEApxiSZRoAS9mhdcZVG4q22O8Ahd++1rqfi933Z 3qctDAV+1KIDZA== -----END CERTIFICATE-----Generated at Sat Dec 20 04:22:25 2025 by rpki-client