This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json) Hash identifier: PJbXoo6/kVK4vu3SBlvog2Y1nI8F64On3Qh5Sc0+6fE= Subject key identifier: 50:20:E2:81:D7:E2:E1:3B:65:8F:37:74:DD:79:E5:C5:8B:95:FD:74 Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9 Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9 Certificate serial: 019B3B345F3F0C8AA1F0324B031F1214EEEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft Manifest number: 07B0 Signing time: Sat 20 Dec 2025 10:00:46 +0000 Manifest this update: Sat 20 Dec 2025 10:00:46 +0000 Manifest next update: Sun 21 Dec 2025 10:00:46 +0000 Files and hashes: 1: CvcmVd2qiQMCtgnMEuQp7Q5S4Vg.roa (hash: 6oEqjna8oaHJiSK9+x9VxezwWYrKn62GKKSEaLSxdDU=) 2: UKY-oSMIFmmicltNFFzSJHvvmLM.roa (hash: cA262Na30QfQdhfhBPxJOrAeDIB1dyAnD2XIGiuSUOI=) 3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: J2AG/a8IATLR/GqES1uzxUobjo9YSa/5xkdq6gqOl38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:5f:3f:0c:8a:a1:f0:32:4b:03:1f:12:14:ee:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9 Validity Not Before: Dec 20 10:00:46 2025 GMT Not After : Dec 21 10:00:46 2025 GMT Subject: CN=5020e281d7e2e13b658f3774dd79e5c58b95fd74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:71:14:c2:02:db:aa:d3:22:b4:9a:04:c9:1a: ad:8f:08:91:6a:d0:c3:a0:3f:fa:e0:3a:63:0f:b8: 2c:a9:e0:55:86:ca:7d:26:97:9b:a4:ff:5b:2d:2a: 4c:7f:4a:c5:12:03:4d:bf:8b:85:a3:ad:f4:30:b9: 03:89:4e:bf:60:50:72:25:fd:d1:4f:06:74:a8:2d: d3:d6:9f:c9:da:bf:1d:b5:aa:f6:11:5b:10:c9:aa: 0b:9c:9c:cc:9b:fb:80:01:3e:a4:82:24:e6:5b:00: fa:64:30:12:25:12:98:24:d7:38:e9:7b:22:d9:ef: 30:67:9e:6d:dc:6c:3c:41:40:2f:fb:6a:6d:ad:40: f0:81:76:08:91:6e:57:e6:e2:46:38:8d:40:cf:93: 99:fa:65:2c:fb:03:81:31:32:bf:bd:75:1c:cf:ae: 82:08:b7:7e:63:9b:3b:91:47:da:7d:e2:75:e3:75: 13:f3:d1:5b:9c:51:67:b6:3b:74:89:3f:3a:cf:c7: b8:32:11:f6:16:cb:89:6a:51:a9:ea:a4:9b:be:5f: 6a:7a:bf:84:cf:a3:b5:2e:b8:38:f1:9e:87:f8:2f: b9:6d:6a:ed:25:40:26:b1:32:05:df:a2:8c:e2:9f: 89:e3:a9:b9:a3:89:3e:d7:a8:7a:ac:58:e3:48:6b: e6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:20:E2:81:D7:E2:E1:3B:65:8F:37:74:DD:79:E5:C5:8B:95:FD:74 X509v3 Authority Key Identifier: keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a8:69:9b:2e:9a:0e:02:92:7b:58:6d:6e:db:e6:fa:d2:e6: 47:6a:ae:6c:de:07:62:8f:89:a4:f9:de:73:8b:35:92:33:e9: 54:7f:fa:20:91:8c:ae:98:6a:37:d5:bf:8e:45:a2:90:6e:1a: 18:21:2a:ca:f6:a4:f6:e6:e1:93:18:c8:95:c9:1c:0b:43:91: 1e:61:8d:fc:b7:16:f1:5f:19:8b:fa:16:9b:b9:49:af:b1:1a: 7f:6b:d9:e2:9f:49:bf:29:2b:e5:a9:6c:3e:b6:ee:cc:38:e5: f1:54:1f:9c:66:25:4f:d4:39:fa:32:37:25:d3:36:c8:87:de: f0:8a:8e:69:40:79:42:30:81:11:75:de:d2:da:75:10:a1:8a: 63:c9:4a:db:d0:36:73:e5:86:12:9b:9a:ab:76:9e:f6:2d:9f: 0b:3e:68:1e:5d:f7:4a:41:8a:e2:51:26:31:6e:80:49:13:e1: 54:32:23:1d:5d:40:59:73:ca:ff:4a:15:04:6f:20:62:8d:5b: 0a:36:6c:c4:95:2d:9a:ca:5d:ae:dd:e3:1b:d2:df:bb:78:bf: 90:b3:7c:b6:0a:dd:dd:f6:72:65:5f:ea:de:ee:23:f2:a0:74: 0e:46:f2:f9:58:29:6a:48:63:ec:f4:94:68:e3:f7:90:a8:f7: b5:d8:3b:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NF8/DIqh8DJLAx8SFO7sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OThjOTdiMTRjMzc0YTUyODMzZGI2YTQwMDdiNTRiNDY2 MmM1YTkwHhcNMjUxMjIwMTAwMDQ2WhcNMjUxMjIxMTAwMDQ2WjAzMTEwLwYDVQQD Eyg1MDIwZTI4MWQ3ZTJlMTNiNjU4ZjM3NzRkZDc5ZTVjNThiOTVmZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnEUwgLbqtMitJoEyRqtjwiRatDD oD/64DpjD7gsqeBVhsp9JpebpP9bLSpMf0rFEgNNv4uFo630MLkDiU6/YFByJf3R TwZ0qC3T1p/J2r8dtar2EVsQyaoLnJzMm/uAAT6kgiTmWwD6ZDASJRKYJNc46Xsi 2e8wZ55t3Gw8QUAv+2ptrUDwgXYIkW5X5uJGOI1Az5OZ+mUs+wOBMTK/vXUcz66C CLd+Y5s7kUfafeJ143UT89FbnFFntjt0iT86z8e4MhH2FsuJalGp6qSbvl9qer+E z6O1Lrg48Z6H+C+5bWrtJUAmsTIF36KM4p+J46m5o4k+16h6rFjjSGvmFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAg4oHX4uE7ZY83dN155cWLlf10MB8GA1UdIwQY MBaAFLSYyXsUw3SlKDPbakAHtUtGYsWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzct ODY1NDI2NjQ1N2M2LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzctODY1NDI2NjQ1N2M2 LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6hpmy6a DgKSe1htbtvm+tLmR2qubN4HYo+JpPnec4s1kjPpVH/6IJGMrphqN9W/jkWikG4a GCEqyvak9ubhkxjIlckcC0ORHmGN/LcW8V8Zi/oWm7lJr7Eaf2vZ4p9Jvykr5als PrbuzDjl8VQfnGYlT9Q5+jI3JdM2yIfe8IqOaUB5QjCBEXXe0tp1EKGKY8lK29A2 c+WGEpuaq3ae9i2fCz5oHl33SkGK4lEmMW6ASRPhVDIjHV1AWXPK/0oVBG8gYo1b CjZsxJUtmspdrt3jG9Lfu3i/kLN8tgrd3fZyZV/q3u4j8qB0Dkby+Vgpakhj7PSU aOP3kKj3tdg7Yw== -----END CERTIFICATE-----Generated at Sat Dec 20 15:07:31 2025 by rpki-client