This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft File: tDpxymDXTkXSuXSKsQZlKf0BM34.mft (raw, json) Hash identifier: 2uMg0uF6zcHL1SJtM7jqu5nFAxGeDPOu+bukddOwpRo= Subject key identifier: 50:23:A5:0A:4C:F5:9B:91:3A:3B:EC:8B:7B:BB:8B:6C:B2:A8:31:BA Authority key identifier: B4:3A:71:CA:60:D7:4E:45:D2:B9:74:8A:B1:06:65:29:FD:01:33:7E Certificate issuer: /CN=b43a71ca60d74e45d2b9748ab1066529fd01337e Certificate serial: 019B5599A6D1454083C9B2FF55154B6D792E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDpxymDXTkXSuXSKsQZlKf0BM34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 13:01:31 +0000 Manifest this update: Thu 25 Dec 2025 13:01:31 +0000 Manifest next update: Fri 26 Dec 2025 13:01:31 +0000 Files and hashes: 1: M5_-d1GdbRA2RUGO5npOtRSNEB8.roa (hash: DYZ2j8UdvivRy1b6Q4G0ZdvY6U48+tpNnHP/gql8rCo=) 2: tDpxymDXTkXSuXSKsQZlKf0BM34.crl (hash: V7n65N8Qv1Rae90CRLPyj0PzPgtza4HcHvB6PyAGCRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft rsync://rpki.ripe.net/repository/DEFAULT/tDpxymDXTkXSuXSKsQZlKf0BM34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:99:a6:d1:45:40:83:c9:b2:ff:55:15:4b:6d:79:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43a71ca60d74e45d2b9748ab1066529fd01337e Validity Not Before: Dec 25 13:01:31 2025 GMT Not After : Dec 26 13:01:31 2025 GMT Subject: CN=5023a50a4cf59b913a3bec8b7bbb8b6cb2a831ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:5a:cb:8f:a6:3e:31:cf:cb:60:e6:73:e0:a1: 97:94:95:38:f7:b4:82:de:72:ee:75:56:2c:82:2a: e0:39:cf:a6:25:24:0f:b6:ff:56:df:a1:c3:00:d1: 8e:c7:75:0c:24:b7:89:df:df:9b:5c:56:f0:45:f9: 4d:78:59:83:24:14:a8:aa:6a:d2:ba:02:82:cb:51: 29:7f:84:6e:b2:ac:69:ce:7f:b5:a1:f6:64:f1:5e: 1f:90:25:71:8d:d7:44:8b:b4:5e:f6:25:ae:a8:88: 07:7c:55:1b:2d:6e:57:17:17:74:5f:37:b1:d6:ef: 68:2b:41:ee:df:03:0b:89:c2:51:6e:ee:61:71:b1: 9b:35:0f:6d:d4:d6:15:17:d0:da:82:a5:d8:d0:3b: d1:93:e3:6c:e0:33:bd:5c:f4:12:5c:34:fe:01:dc: a4:0a:5b:a9:e1:64:85:7e:7e:e5:db:10:bb:a9:b7: 18:5a:3e:60:a6:fe:03:ff:46:63:9a:ab:20:35:0b: 73:d0:0a:cd:26:84:92:3f:17:95:c2:2c:73:a4:c0: 43:ba:6b:29:f7:d1:7d:36:62:74:bc:b4:ef:95:af: 3e:71:2b:b1:f4:64:46:24:64:ab:a4:04:78:0e:15: ea:aa:fc:27:e3:33:42:b9:44:a3:14:b2:0d:7f:1d: 38:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:23:A5:0A:4C:F5:9B:91:3A:3B:EC:8B:7B:BB:8B:6C:B2:A8:31:BA X509v3 Authority Key Identifier: keyid:B4:3A:71:CA:60:D7:4E:45:D2:B9:74:8A:B1:06:65:29:FD:01:33:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDpxymDXTkXSuXSKsQZlKf0BM34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:60:56:d7:98:b1:d3:d5:d6:7a:af:5d:db:b0:fa:9f:70:02: f0:10:1a:bc:14:33:6e:0f:9e:bd:39:c0:20:ef:e9:7a:9a:ce: 59:90:c5:33:9e:6f:76:d6:b6:26:3c:e1:89:0d:26:66:5a:e4: e0:d9:13:54:34:c5:4a:a8:d9:70:b5:18:ae:b4:5b:a1:90:6d: 2a:ce:49:a0:58:0a:20:47:90:8a:8f:49:04:72:50:2a:5e:8c: c1:bd:de:00:7f:c6:94:59:b3:6c:04:68:83:97:a3:83:7b:71: 0b:23:f3:51:51:63:ec:c6:13:03:36:45:0e:48:b0:56:27:34: 0b:ab:6d:50:89:56:62:cf:1e:0c:e9:6b:2a:2e:15:0f:fc:13: a8:d9:5e:de:da:6a:81:4f:e1:49:52:00:6e:f8:40:37:01:1f: 81:17:da:60:fe:b5:cd:15:4d:3e:e0:be:f7:96:f6:ad:77:81: b6:cf:0e:d8:de:d1:38:f0:09:ad:6f:11:59:5a:93:90:af:7c: 38:17:ad:63:c8:32:1a:fc:68:27:9f:7c:72:28:1b:2e:d2:e7: dc:9e:ff:32:b6:ee:e3:c5:c4:10:d8:56:92:62:f6:44:57:71: 87:68:c5:35:d3:14:ab:e4:19:8d:4a:b8:8b:f2:6d:86:fa:5e: e4:e2:f4:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmabRRUCDybL/VRVLbXkuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0M2E3MWNhNjBkNzRlNDVkMmI5NzQ4YWIxMDY2NTI5ZmQw MTMzN2UwHhcNMjUxMjI1MTMwMTMxWhcNMjUxMjI2MTMwMTMxWjAzMTEwLwYDVQQD Eyg1MDIzYTUwYTRjZjU5YjkxM2EzYmVjOGI3YmJiOGI2Y2IyYTgzMWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/FrLj6Y+Mc/LYOZz4KGXlJU497SC 3nLudVYsgirgOc+mJSQPtv9W36HDANGOx3UMJLeJ39+bXFbwRflNeFmDJBSoqmrS ugKCy1Epf4Rusqxpzn+1ofZk8V4fkCVxjddEi7Re9iWuqIgHfFUbLW5XFxd0Xzex 1u9oK0Hu3wMLicJRbu5hcbGbNQ9t1NYVF9DagqXY0DvRk+Ns4DO9XPQSXDT+Adyk Clup4WSFfn7l2xC7qbcYWj5gpv4D/0ZjmqsgNQtz0ArNJoSSPxeVwixzpMBDumsp 99F9NmJ0vLTvla8+cSux9GRGJGSrpAR4DhXqqvwn4zNCuUSjFLINfx04GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAjpQpM9ZuROjvsi3u7i2yyqDG6MB8GA1UdIwQY MBaAFLQ6ccpg105F0rl0irEGZSn9ATN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERweHltRFhUa1hTdVhTS3NRWmxLZjBCTTM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS84Y2VmNmYtZmUwOS00ZWY2LThiZjEt Nzk4YWM0OTI4ZWQ2LzEvdERweHltRFhUa1hTdVhTS3NRWmxLZjBCTTM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS84Y2VmNmYtZmUwOS00ZWY2LThiZjEtNzk4YWM0OTI4ZWQ2 LzEvdERweHltRFhUa1hTdVhTS3NRWmxLZjBCTTM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2BW15ix 09XWeq9d27D6n3AC8BAavBQzbg+evTnAIO/peprOWZDFM55vdta2JjzhiQ0mZlrk 4NkTVDTFSqjZcLUYrrRboZBtKs5JoFgKIEeQio9JBHJQKl6Mwb3eAH/GlFmzbARo g5ejg3txCyPzUVFj7MYTAzZFDkiwVic0C6ttUIlWYs8eDOlrKi4VD/wTqNle3tpq gU/hSVIAbvhANwEfgRfaYP61zRVNPuC+95b2rXeBts8O2N7ROPAJrW8RWVqTkK98 OBetY8gyGvxoJ598cigbLtLn3J7/Mrbu48XEENhWkmL2RFdxh2jFNdMUq+QZjUq4 i/Jthvpe5OL0XQ== -----END CERTIFICATE-----Generated at Thu Dec 25 19:39:59 2025 by rpki-client