This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft File: t0QwmQgmnlOLK0-pYzcMnsIHeng.mft (raw, json) Hash identifier: vAC8xqtxjEKbD5OByhlSguz5fQLvBGKvu5SnLHktGQQ= Subject key identifier: 6C:EF:81:85:8C:3B:F5:93:35:FF:B7:F1:C1:F5:B3:D7:F6:2D:7E:61 Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78 Certificate issuer: /CN=b744309908269e538b2b4fa963370c9ec2077a78 Certificate serial: 019B24E39B944A48D9A1C4A59C3B0F29E609 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft Manifest number: 11CD Signing time: Tue 16 Dec 2025 02:00:54 +0000 Manifest this update: Tue 16 Dec 2025 02:00:54 +0000 Manifest next update: Wed 17 Dec 2025 02:00:54 +0000 Files and hashes: 1: 9KyR_UDLctrtTTdIj8zaeFvcX6U.asa (hash: U5PQzu4dr+B2uxtoMJzepcrIcGyWSPWFAKzaqqVTf0o=) 2: YBLZGJHJKH4DoV9XrJh7KrLAY0g.roa (hash: L0o/zjJZLOmk6cpaT73kurdvyrzNoMlbhiuzTQLNAKg=) 3: t0QwmQgmnlOLK0-pYzcMnsIHeng.crl (hash: qB/XwAbjJji3cfriORP2ZB++dAMJDFLuFrwqg9VHEUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:9b:94:4a:48:d9:a1:c4:a5:9c:3b:0f:29:e6:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78 Validity Not Before: Dec 16 02:00:54 2025 GMT Not After : Dec 17 02:00:54 2025 GMT Subject: CN=6cef81858c3bf59335ffb7f1c1f5b3d7f62d7e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c2:32:80:5a:b0:7d:b4:10:21:c8:22:0c:11: d3:c6:6c:63:75:b6:b8:a6:42:af:3f:83:bb:78:c6: e5:bb:f5:b8:f4:fc:67:4d:44:a1:3c:7b:15:e6:29: a4:20:1c:76:78:63:35:18:15:b1:32:91:a7:46:ce: f9:6b:46:17:dc:15:17:c2:c7:50:7d:f5:ab:b3:43: 72:89:3c:5a:5f:47:f5:41:f8:32:64:9b:e6:b8:a1: 40:ad:a7:fc:7a:9c:b1:86:cb:4a:2f:09:27:01:56: 35:5c:ec:f8:2f:68:85:bc:25:8b:b5:a7:aa:81:57: 5d:a4:28:cf:f3:58:d5:a3:e6:c6:c4:c7:ba:d5:ad: 9a:4e:c1:dd:06:6a:cc:0e:0d:66:8b:37:78:ed:43: 1b:f8:cb:c5:e9:f8:23:27:c8:51:00:2b:a1:90:33: f6:32:c2:4e:17:d9:e6:2d:aa:74:9c:82:59:3a:49: 92:bc:76:4a:f6:59:07:79:1c:b7:28:fd:8d:74:df: 16:3c:cc:e8:56:c9:e5:89:12:4f:08:d7:28:87:b3: 36:8e:a3:49:85:1b:c5:fb:0f:16:c9:57:77:20:4b: 40:e2:d1:7b:70:6e:1f:5b:95:29:e9:20:55:0a:27: ec:02:e8:e5:b0:d8:55:b2:92:dc:f2:ae:7c:d4:30: b6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EF:81:85:8C:3B:F5:93:35:FF:B7:F1:C1:F5:B3:D7:F6:2D:7E:61 X509v3 Authority Key Identifier: keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9d:21:b7:85:f0:bd:85:fe:1d:a8:85:44:0b:6a:17:f2:fd: 75:a0:1c:a6:7a:9d:a0:2d:4f:5c:27:3b:2a:af:a9:ab:f0:46: bd:b3:5f:f2:0c:bd:eb:16:4e:d3:bb:b8:b1:17:c6:c5:1e:d4: 12:1a:f3:4a:53:bd:5f:71:8d:f7:87:fb:35:d9:75:1c:86:cc: f1:2f:65:ab:10:1c:e1:c7:7d:56:3a:5d:30:84:64:e7:ea:8a: ff:42:42:18:80:70:21:b6:aa:c3:93:1c:07:89:fc:94:c5:1b: 93:3c:a1:0a:6c:77:07:dd:3d:1e:58:1d:8e:a2:d8:58:1a:39: bd:0f:40:49:b1:a7:91:34:9a:21:78:ff:c5:eb:6b:86:79:1f: 96:81:69:51:f4:f7:31:4a:0a:70:53:68:2e:af:60:5f:74:dc: 78:01:75:0a:e5:24:2e:b2:92:da:da:ce:22:29:30:37:0d:5b: fd:64:86:40:c3:68:10:ad:6c:35:ba:0c:d0:b6:a5:56:81:72: bb:24:e4:50:3f:dc:fa:30:08:4f:78:00:73:08:86:e1:93:19: d9:5e:07:2b:8c:ad:2c:6c:80:0d:19:71:38:c9:7c:82:94:f8: 4d:f2:07:97:65:45:43:94:0b:1f:65:7d:73:8c:90:e8:fa:a6: b6:47:bf:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk45uUSkjZocSlnDsPKeYJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NDQzMDk5MDgyNjllNTM4YjJiNGZhOTYzMzcwYzllYzIw NzdhNzgwHhcNMjUxMjE2MDIwMDU0WhcNMjUxMjE3MDIwMDU0WjAzMTEwLwYDVQQD Eyg2Y2VmODE4NThjM2JmNTkzMzVmZmI3ZjFjMWY1YjNkN2Y2MmQ3ZTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsIygFqwfbQQIcgiDBHTxmxjdba4 pkKvP4O7eMblu/W49PxnTUShPHsV5imkIBx2eGM1GBWxMpGnRs75a0YX3BUXwsdQ ffWrs0NyiTxaX0f1QfgyZJvmuKFAraf8epyxhstKLwknAVY1XOz4L2iFvCWLtaeq gVddpCjP81jVo+bGxMe61a2aTsHdBmrMDg1mizd47UMb+MvF6fgjJ8hRACuhkDP2 MsJOF9nmLap0nIJZOkmSvHZK9lkHeRy3KP2NdN8WPMzoVsnliRJPCNcoh7M2jqNJ hRvF+w8WyVd3IEtA4tF7cG4fW5Up6SBVCifsAujlsNhVspLc8q581DC2XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzvgYWMO/WTNf+38cH1s9f2LX5hMB8GA1UdIwQY MBaAFLdEMJkIJp5TiytPqWM3DJ7CB3p4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NjUyZTgtNWQyMC00MmY2LWE3Mzkt ZDU0OTIxNjA0ZWNkLzEvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80NjUyZTgtNWQyMC00MmY2LWE3MzktZDU0OTIxNjA0ZWNk LzEvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJ0ht4Xw vYX+HaiFRAtqF/L9daAcpnqdoC1PXCc7Kq+pq/BGvbNf8gy96xZO07u4sRfGxR7U EhrzSlO9X3GN94f7Ndl1HIbM8S9lqxAc4cd9VjpdMIRk5+qK/0JCGIBwIbaqw5Mc B4n8lMUbkzyhCmx3B909HlgdjqLYWBo5vQ9ASbGnkTSaIXj/xetrhnkfloFpUfT3 MUoKcFNoLq9gX3TceAF1CuUkLrKS2trOIikwNw1b/WSGQMNoEK1sNboM0LalVoFy uyTkUD/c+jAIT3gAcwiG4ZMZ2V4HK4ytLGyADRlxOMl8gpT4TfIHl2VFQ5QLH2V9 c4yQ6Pqmtke/5w== -----END CERTIFICATE-----Generated at Tue Dec 16 12:33:35 2025 by rpki-client