This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft File: tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft (raw, json) Hash identifier: 9U3O6pNap9O1AAIOzs9qJ29DjEBwwGb2kbKo3QWsXo0= Subject key identifier: FE:C9:68:32:80:1A:D4:C6:0C:84:2A:CB:8F:2B:76:21:62:E0:4E:1C Authority key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE Certificate issuer: /CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae Certificate serial: 019B59E3860DD3D8771896BA0F6E22D0A55D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 09:00:41 +0000 Manifest this update: Fri 26 Dec 2025 09:00:41 +0000 Manifest next update: Sat 27 Dec 2025 09:00:41 +0000 Files and hashes: 1: HeDUncvNrC9DXvqHmX3LCuEEQFk.roa (hash: pkL8awVC+vif3Sv8BEo/gQroGPTBLCBBOJrEXIA/gLU=) 2: tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl (hash: cr8RYmbz8KPE7G0DVnmSTSnLt+fwvCCsn5d7TTftNnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:86:0d:d3:d8:77:18:96:ba:0f:6e:22:d0:a5:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae Validity Not Before: Dec 26 09:00:41 2025 GMT Not After : Dec 27 09:00:41 2025 GMT Subject: CN=fec96832801ad4c60c842acb8f2b762162e04e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ee:b1:b2:73:95:06:60:3b:fd:33:0d:5e:19: 8f:a2:90:ce:1e:c3:7d:ee:14:d7:87:fa:dc:45:6f: 0d:88:5d:31:43:4f:75:f1:6b:43:08:ba:61:0f:90: 4d:32:29:0c:cf:2c:3f:fd:3f:5e:42:c2:71:be:bc: 4b:bd:4e:1f:e0:63:64:b8:5a:8d:b3:07:0e:1d:8b: bd:dd:7b:57:5b:0b:4b:1c:01:72:1a:d3:31:9a:ae: 0b:4f:ec:ab:54:b5:51:24:a4:4f:d1:e5:47:37:d1: 36:c9:53:9a:dd:6f:e4:cc:76:73:fa:58:8a:51:8b: d9:ac:58:eb:3f:db:ab:16:54:1d:4d:f9:5b:0e:f1: e8:37:1a:54:a8:fd:59:16:5e:95:a2:50:d4:48:70: 36:67:57:81:3d:3f:0f:19:5c:80:c1:c7:91:1a:72: 9b:38:95:bc:06:12:c7:ab:72:8d:52:ac:9f:c8:75: 1d:47:29:62:ee:70:82:40:88:d3:79:87:9d:39:5c: 71:1a:16:aa:c9:b4:79:59:bd:df:66:e7:af:70:c6: 22:75:b8:5f:0e:01:63:85:57:fe:c5:5a:3d:3c:41: 15:08:96:a5:17:ed:5b:86:15:67:c9:ff:34:b7:ac: e0:1a:e4:30:d7:95:f6:e4:f8:2d:1d:47:9f:81:6d: 38:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C9:68:32:80:1A:D4:C6:0C:84:2A:CB:8F:2B:76:21:62:E0:4E:1C X509v3 Authority Key Identifier: keyid:B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:2a:19:eb:a9:9f:12:5e:04:00:8f:1f:64:81:c5:16:94:f8: 09:99:a9:61:4e:f1:6b:19:0b:a7:4b:85:da:b6:1f:1c:ca:b3: 04:37:8b:48:e8:66:5c:e8:27:ec:8d:e6:40:e0:3e:49:23:1f: 31:c4:f6:ff:d4:11:33:3b:d6:95:a0:7a:b2:31:fe:90:8f:b9: b9:49:3e:ac:f2:77:60:33:77:61:89:d8:53:9c:ad:17:0a:c6: cc:b9:2a:08:cc:ed:bb:42:d5:b7:38:5c:1e:59:25:76:b2:a1: 86:96:a7:d8:a3:07:3e:52:c8:a0:cd:12:f7:26:93:0e:11:88: f4:4a:7a:4a:22:70:b5:05:83:01:38:a0:2a:b7:7b:39:83:ac: 3d:23:20:c9:7e:5f:ec:0c:bb:3a:66:06:0d:be:42:32:79:96: 5e:4f:6f:f9:3d:d7:9b:b7:a0:97:82:e7:26:44:de:0b:24:11: 54:a5:c8:7b:a5:e4:06:f7:9e:71:4f:b8:37:67:40:30:90:e0: 1f:af:f4:db:e7:51:a9:66:14:75:c7:26:69:3d:24:b9:69:20: 76:b0:22:d7:e6:f7:b7:e9:71:1f:fe:a6:32:58:dd:a5:60:c8: b0:07:13:0c:8f:cb:e5:85:84:f0:90:0f:9f:a5:10:79:06:50: fb:d5:4c:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ44YN09h3GJa6D24i0KVdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZmE0ZDA4MWIzNjg4N2YzZTVjYTY1MzdmNzQ2OWVlZTIx ZDcxYWUwHhcNMjUxMjI2MDkwMDQxWhcNMjUxMjI3MDkwMDQxWjAzMTEwLwYDVQQD EyhmZWM5NjgzMjgwMWFkNGM2MGM4NDJhY2I4ZjJiNzYyMTYyZTA0ZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu6xsnOVBmA7/TMNXhmPopDOHsN9 7hTXh/rcRW8NiF0xQ0918WtDCLphD5BNMikMzyw//T9eQsJxvrxLvU4f4GNkuFqN swcOHYu93XtXWwtLHAFyGtMxmq4LT+yrVLVRJKRP0eVHN9E2yVOa3W/kzHZz+liK UYvZrFjrP9urFlQdTflbDvHoNxpUqP1ZFl6VolDUSHA2Z1eBPT8PGVyAwceRGnKb OJW8BhLHq3KNUqyfyHUdRyli7nCCQIjTeYedOVxxGhaqybR5Wb3fZuevcMYidbhf DgFjhVf+xVo9PEEVCJalF+1bhhVnyf80t6zgGuQw15X25PgtHUefgW047QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7JaDKAGtTGDIQqy48rdiFi4E4cMB8GA1UdIwQY MBaAFLT6TQgbNoh/PlymU390ae7iHXGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBwTkNCczJpSDgtWEtaVGYzUnA3dUlkY2E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wY2ZlM2UtNzI5Zi00NDE4LTljZjQt ODYzZGFlY2ZjMmU4LzEvdFBwTkNCczJpSDgtWEtaVGYzUnA3dUlkY2E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wY2ZlM2UtNzI5Zi00NDE4LTljZjQtODYzZGFlY2ZjMmU4 LzEvdFBwTkNCczJpSDgtWEtaVGYzUnA3dUlkY2E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCoZ66mf El4EAI8fZIHFFpT4CZmpYU7xaxkLp0uF2rYfHMqzBDeLSOhmXOgn7I3mQOA+SSMf McT2/9QRMzvWlaB6sjH+kI+5uUk+rPJ3YDN3YYnYU5ytFwrGzLkqCMztu0LVtzhc HlkldrKhhpan2KMHPlLIoM0S9yaTDhGI9Ep6SiJwtQWDATigKrd7OYOsPSMgyX5f 7Ay7OmYGDb5CMnmWXk9v+T3Xm7egl4LnJkTeCyQRVKXIe6XkBveecU+4N2dAMJDg H6/02+dRqWYUdccmaT0kuWkgdrAi1+b3t+lxH/6mMljdpWDIsAcTDI/L5YWE8JAP n6UQeQZQ+9VMzQ== -----END CERTIFICATE-----Generated at Fri Dec 26 11:16:37 2025 by rpki-client