This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft File: tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft (raw, json) Hash identifier: HQis053/u3uIOKhVFF5rPrAROi5l3IWaLkbXftHg7hM= Subject key identifier: 7C:9B:71:CA:1B:17:D2:10:20:F1:72:89:CC:78:E5:49:9A:B8:BE:29 Authority key identifier: B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77 Certificate issuer: /CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977 Certificate serial: 019B4A70BDD663F49C0954A5F5D89A57460B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft Manifest number: 0DC0 Signing time: Tue 23 Dec 2025 09:01:01 +0000 Manifest this update: Tue 23 Dec 2025 09:01:01 +0000 Manifest next update: Wed 24 Dec 2025 09:01:01 +0000 Files and hashes: 1: 6mSAzptlMtavroiRBEbzErufO08.roa (hash: lJ5Bp/WretmXqwZLM24/DP1Oy5iyysz4o7F+olg5yZQ=) 2: tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl (hash: r/UALzqH1BZ1OxyKEs7LD7XiPL3Y9h3mRhm9iEehQy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:70:bd:d6:63:f4:9c:09:54:a5:f5:d8:9a:57:46:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977 Validity Not Before: Dec 23 09:01:01 2025 GMT Not After : Dec 24 09:01:01 2025 GMT Subject: CN=7c9b71ca1b17d21020f17289cc78e5499ab8be29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:85:06:c5:94:3b:d2:46:1c:a6:cc:9e:0d: f2:62:48:ba:df:51:b2:c9:f5:0f:72:73:83:b1:d0: 00:5b:71:80:95:ee:b3:13:a5:9b:9e:30:17:b4:75: 2e:e5:a0:82:37:da:c1:2d:d6:da:2d:b1:ae:3a:44: ce:86:b5:b0:ad:a4:d0:09:78:01:77:58:5e:ce:4a: 90:92:16:6a:9a:11:e5:ed:a2:c5:f5:9f:60:73:8d: 0a:96:e3:4a:b0:20:6c:dc:81:ac:82:d6:b3:0c:0b: cf:2e:15:c4:d9:99:0c:99:e4:ab:01:6a:fe:68:8d: 85:36:e8:cc:ad:46:fb:34:d8:d4:fe:41:85:5b:fa: 13:e1:6c:03:64:69:5b:03:d8:5c:6f:e8:40:51:36: 5f:be:9c:20:c2:e0:8b:b1:49:99:3d:25:50:23:ee: 97:e9:5e:a6:fd:63:b6:25:cb:f9:05:3e:63:77:60: 54:44:42:90:0d:e0:53:04:23:57:94:11:1f:5e:23: 3b:49:c0:8a:51:55:22:99:ff:b0:14:1f:ea:5b:4e: c0:08:f9:52:e6:b8:d3:31:0f:ba:1e:07:46:74:e7: aa:a6:2e:dd:f7:43:ba:b4:84:a6:4d:16:4c:29:ed: 31:49:5b:35:06:6e:33:e5:b7:7f:9c:15:ec:42:ef: 5c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9B:71:CA:1B:17:D2:10:20:F1:72:89:CC:78:E5:49:9A:B8:BE:29 X509v3 Authority Key Identifier: keyid:B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b4:c2:b9:61:7e:fd:d4:99:47:89:a8:aa:69:dd:2d:b1:e0: 1d:12:80:05:b9:c4:5f:4e:9f:01:82:2b:c9:16:0b:73:56:91: 21:b4:e1:42:a8:96:a4:8a:b5:73:da:00:ae:6b:a1:87:85:9b: bf:64:e2:ad:08:72:ff:a2:35:e3:96:e8:cf:7c:ae:02:5e:24: 4d:97:9d:0d:8e:3b:60:17:32:37:f4:62:3b:20:46:eb:ad:bf: cc:7b:9b:64:9e:58:fb:82:1b:02:8e:f2:30:f6:66:89:2a:55: 2e:54:ec:3a:31:2a:64:8f:76:e2:e1:3f:96:bb:ac:01:90:08: d3:dd:21:12:a8:d0:9a:55:a0:d6:d6:f2:4b:c9:6b:ca:91:f6: 31:a5:c1:5c:29:25:0e:64:1a:3e:2c:24:47:a1:e4:4e:a8:46: 88:03:27:4d:06:67:96:89:f0:59:43:d6:2f:ca:f6:9f:fa:89: 30:1d:9a:ad:15:15:b1:63:e7:fc:57:df:7e:45:0a:0e:c7:3a: a3:70:d5:2a:e2:77:24:61:da:cb:74:0c:18:e8:97:a3:24:12: 3e:21:bc:68:f1:d3:2e:52:f8:82:8d:70:19:5a:ec:42:2d:cc: 39:16:4c:ae:f8:9a:19:c4:10:8b:54:7a:1b:a2:c6:c4:b0:6b: f7:63:c1:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcL3WY/ScCVSl9diaV0YLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1Y2NkZDg4M2Y2ZGQxMTRlY2Y2ZjcyNzE2YTg0NjM0ZjY3 YWM5NzcwHhcNMjUxMjIzMDkwMTAxWhcNMjUxMjI0MDkwMTAxWjAzMTEwLwYDVQQD Eyg3YzliNzFjYTFiMTdkMjEwMjBmMTcyODljYzc4ZTU0OTlhYjhiZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0eFBsWUO9JGHKbMng3yYki631Gy yfUPcnODsdAAW3GAle6zE6WbnjAXtHUu5aCCN9rBLdbaLbGuOkTOhrWwraTQCXgB d1hezkqQkhZqmhHl7aLF9Z9gc40KluNKsCBs3IGsgtazDAvPLhXE2ZkMmeSrAWr+ aI2FNujMrUb7NNjU/kGFW/oT4WwDZGlbA9hcb+hAUTZfvpwgwuCLsUmZPSVQI+6X 6V6m/WO2Jcv5BT5jd2BUREKQDeBTBCNXlBEfXiM7ScCKUVUimf+wFB/qW07ACPlS 5rjTMQ+6HgdGdOeqpi7d90O6tISmTRZMKe0xSVs1Bm4z5bd/nBXsQu9cNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHybccobF9IQIPFyicx45UmauL4pMB8GA1UdIwQY MBaAFLXM3Yg/bdEU7Pb3JxaoRjT2esl3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGN6ZGlEOXQwUlRzOXZjbkZxaEdOUFo2eVhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iYTc4NGQtNzQ2ZS00OWU3LWE0MDgt NGFiYWY1M2E1MGFmLzEvdGN6ZGlEOXQwUlRzOXZjbkZxaEdOUFo2eVhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iYTc4NGQtNzQ2ZS00OWU3LWE0MDgtNGFiYWY1M2E1MGFm LzEvdGN6ZGlEOXQwUlRzOXZjbkZxaEdOUFo2eVhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrTCuWF+ /dSZR4moqmndLbHgHRKABbnEX06fAYIryRYLc1aRIbThQqiWpIq1c9oArmuhh4Wb v2TirQhy/6I145boz3yuAl4kTZedDY47YBcyN/RiOyBG662/zHubZJ5Y+4IbAo7y MPZmiSpVLlTsOjEqZI924uE/lrusAZAI090hEqjQmlWg1tbyS8lrypH2MaXBXCkl DmQaPiwkR6HkTqhGiAMnTQZnlonwWUPWL8r2n/qJMB2arRUVsWPn/FfffkUKDsc6 o3DVKuJ3JGHay3QMGOiXoyQSPiG8aPHTLlL4go1wGVrsQi3MORZMrviaGcQQi1R6 G6LGxLBr92PBdg== -----END CERTIFICATE-----Generated at Tue Dec 23 18:34:24 2025 by rpki-client