This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft File: thpyv6TKq8uk7ASEE3pRb580Q0Y.mft (raw, json) Hash identifier: heJ5b9IKIdda2Ki5CNJbq41whVnMvKhF363Ol1V9eDE= Subject key identifier: A7:B3:FF:E0:25:82:77:E2:B5:FC:08:F7:0A:99:0F:12:20:F9:6B:94 Authority key identifier: B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46 Certificate issuer: /CN=b61a72bfa4caabcba4ec0484137a516f9f344346 Certificate serial: 019B7147292BF0D355A902ACDF60B5606C4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft Manifest number: 17A5 Signing time: Tue 30 Dec 2025 22:00:47 +0000 Manifest this update: Tue 30 Dec 2025 22:00:47 +0000 Manifest next update: Wed 31 Dec 2025 22:00:47 +0000 Files and hashes: 1: _PvMfBQqU6jjldV1ydf8UKmzB00.roa (hash: 24OxToSBrVSS6AXxMxL0W6j/CNzWhFy38ZdtMKAbWe4=) 2: thpyv6TKq8uk7ASEE3pRb580Q0Y.crl (hash: lMdeoyFcfjbntwiHVNl9xhSE52o+/nfbHnV+EmzmQz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 22:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:47:29:2b:f0:d3:55:a9:02:ac:df:60:b5:60:6c:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b61a72bfa4caabcba4ec0484137a516f9f344346 Validity Not Before: Dec 30 22:00:47 2025 GMT Not After : Dec 31 22:00:47 2025 GMT Subject: CN=a7b3ffe0258277e2b5fc08f70a990f1220f96b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2d:9f:06:56:1f:13:ea:b6:45:11:47:f5:25: 91:a6:8e:4a:ac:8d:18:24:62:c2:78:9f:95:6d:67: 8f:11:6e:d7:34:8e:8b:a4:58:6c:19:41:d7:19:20: a1:3e:e5:73:0f:d7:8a:94:49:03:ef:54:5e:0a:1b: d5:7e:6b:53:72:48:a2:a4:d6:71:92:7f:37:07:b6: eb:42:0c:ea:97:dc:02:91:28:73:38:a9:37:25:2c: ed:00:6c:aa:de:b9:1d:15:db:39:0b:4d:9c:bd:d7: f9:7f:48:a4:c3:ce:57:35:2f:9b:84:df:cb:a3:11: 8c:33:e1:1d:37:c5:99:4d:01:65:32:36:11:4d:67: 19:22:c3:63:67:1c:7b:ab:8c:04:46:ca:96:21:b9: 71:bb:eb:f2:05:71:9b:84:2a:c7:1a:cf:0a:8b:f1: ef:af:3a:b8:41:a4:16:bb:64:a4:16:98:1d:6e:0f: f0:2a:c4:34:22:a0:29:fd:99:9e:a2:42:88:29:ee: 11:1e:59:b6:0d:a5:33:6f:a2:2c:f7:67:28:48:16: 30:0f:37:6f:8d:d3:a3:1e:b4:23:ad:24:13:9f:83: c5:76:e4:9f:10:f7:9a:3c:27:de:ce:a9:9a:43:74: b7:f7:f7:2d:61:28:9f:31:f5:d1:6b:cd:dd:c2:4c: 3c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B3:FF:E0:25:82:77:E2:B5:FC:08:F7:0A:99:0F:12:20:F9:6B:94 X509v3 Authority Key Identifier: keyid:B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e2:b6:5c:b5:d2:4f:8a:17:a0:57:f2:18:90:fb:88:c1:f4: 75:97:c9:37:dc:22:51:9e:68:ec:95:32:07:43:c9:e6:a7:d3: e5:4a:42:30:13:ce:14:e4:8c:fa:80:ee:cc:33:ef:d1:b5:41: 0c:80:e9:6d:c1:27:0d:8f:bc:0d:12:4b:82:ea:52:bf:9a:b8: 80:53:4a:73:b8:ea:62:74:d3:7c:2b:94:1b:43:e0:be:fa:48: e0:f2:99:12:05:2b:01:f1:54:3f:54:c6:5c:e7:dd:33:6c:33: 15:49:cc:cd:4b:01:a0:ba:a4:d8:ef:98:7d:1f:e1:57:17:a0: 09:c3:a3:ac:dc:96:92:b1:6c:7f:a3:54:a7:e1:9d:fd:9e:3c: 7e:ec:93:da:18:45:e4:7c:2c:56:94:79:88:3e:1a:75:ce:2d: bc:e6:48:17:fb:2a:bd:ed:a9:9a:5e:53:cd:0e:80:f3:a1:5c: c1:96:05:ee:cb:dc:09:99:23:89:7c:4b:4c:38:2f:55:51:0a: fe:28:f6:76:62:6e:b0:1a:61:e9:2b:51:71:de:ae:ea:d4:ee: 64:7e:82:0d:f6:4b:f7:60:16:1d:f6:47:18:f5:f7:e4:b9:d8: d3:8c:0b:cd:80:ae:6d:f2:b0:8d:a3:a3:a9:df:5a:d9:e9:06: 74:e2:92:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxRykr8NNVqQKs32C1YGxPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MWE3MmJmYTRjYWFiY2JhNGVjMDQ4NDEzN2E1MTZmOWYz NDQzNDYwHhcNMjUxMjMwMjIwMDQ3WhcNMjUxMjMxMjIwMDQ3WjAzMTEwLwYDVQQD EyhhN2IzZmZlMDI1ODI3N2UyYjVmYzA4ZjcwYTk5MGYxMjIwZjk2Yjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1y2fBlYfE+q2RRFH9SWRpo5KrI0Y JGLCeJ+VbWePEW7XNI6LpFhsGUHXGSChPuVzD9eKlEkD71ReChvVfmtTckiipNZx kn83B7brQgzql9wCkShzOKk3JSztAGyq3rkdFds5C02cvdf5f0ikw85XNS+bhN/L oxGMM+EdN8WZTQFlMjYRTWcZIsNjZxx7q4wERsqWIblxu+vyBXGbhCrHGs8Ki/Hv rzq4QaQWu2SkFpgdbg/wKsQ0IqAp/ZmeokKIKe4RHlm2DaUzb6Is92coSBYwDzdv jdOjHrQjrSQTn4PFduSfEPeaPCfezqmaQ3S39/ctYSifMfXRa83dwkw81wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKez/+AlgnfitfwI9wqZDxIg+WuUMB8GA1UdIwQY MBaAFLYacr+kyqvLpOwEhBN6UW+fNENGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGhweXY2VEtxOHVrN0FTRUUzcFJiNTgwUTBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hMjQ4NzQtOThkMy00NzM0LThlZmEt OGMyNTNjNDU5MjcxLzEvdGhweXY2VEtxOHVrN0FTRUUzcFJiNTgwUTBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hMjQ4NzQtOThkMy00NzM0LThlZmEtOGMyNTNjNDU5Mjcx LzEvdGhweXY2VEtxOHVrN0FTRUUzcFJiNTgwUTBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmuK2XLXS T4oXoFfyGJD7iMH0dZfJN9wiUZ5o7JUyB0PJ5qfT5UpCMBPOFOSM+oDuzDPv0bVB DIDpbcEnDY+8DRJLgupSv5q4gFNKc7jqYnTTfCuUG0PgvvpI4PKZEgUrAfFUP1TG XOfdM2wzFUnMzUsBoLqk2O+YfR/hVxegCcOjrNyWkrFsf6NUp+Gd/Z48fuyT2hhF 5HwsVpR5iD4adc4tvOZIF/sqve2pml5TzQ6A86FcwZYF7svcCZkjiXxLTDgvVVEK /ij2dmJusBph6StRcd6u6tTuZH6CDfZL92AWHfZHGPX35LnY04wLzYCubfKwjaOj qd9a2ekGdOKSfw== -----END CERTIFICATE-----Generated at Wed Dec 31 05:54:28 2025 by rpki-client