This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft File: tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json) Hash identifier: lGiyopOZfZtf1HAq8KgnFRdA9CdMe1aaB7Yh1E0Q0XY= Subject key identifier: 4A:2C:A8:C9:E0:E9:CB:BB:76:60:31:E8:2F:E2:C6:24:F6:7C:39:A2 Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c Certificate serial: 019AF1646B87D30EE28CC92B7C2885AB1AA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft Manifest number: 11C0 Signing time: Sat 06 Dec 2025 02:01:21 +0000 Manifest this update: Sat 06 Dec 2025 02:01:21 +0000 Manifest next update: Sun 07 Dec 2025 02:01:21 +0000 Files and hashes: 1: Tm8yT_3vBgLrxw1Lr4A3GN1Cjk4.roa (hash: cpwfuPoZQp9+xwJvstUEZKWWh0LDOj40EbCeSJBVSfw=) 2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: GBmkehOuiJo/KiGK2BR5m9JtomPPBdNINC6AHZeP0bc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:6b:87:d3:0e:e2:8c:c9:2b:7c:28:85:ab:1a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c Validity Not Before: Dec 6 02:01:21 2025 GMT Not After : Dec 7 02:01:21 2025 GMT Subject: CN=4a2ca8c9e0e9cbbb766031e82fe2c624f67c39a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:63:bc:5b:4c:9a:c8:39:b9:80:08:8a:50:df: a8:d9:5b:07:72:e3:60:b2:d9:1d:60:ef:c9:9f:2e: a3:fe:98:55:1d:98:50:66:65:66:8b:42:df:dd:15: c3:d8:97:e3:e3:39:0d:19:a3:c3:8f:65:6b:7a:a1: 44:91:f1:ba:0c:3c:c4:43:09:a3:fe:95:f0:f3:ee: b0:36:d7:5e:3e:6e:ab:d0:12:1d:cb:b5:bc:e7:a0: 6f:68:a8:c0:99:bd:3e:59:24:4e:2e:07:2f:02:7f: 49:fe:25:3f:d6:36:ae:0b:dd:b4:5c:6b:2a:f0:aa: f8:4f:03:0b:5e:59:fb:b9:08:9c:29:88:59:73:2d: 7f:6c:30:29:c3:ab:f1:98:98:b6:5a:84:7b:05:fa: a9:29:db:5b:27:5d:ff:c6:3e:93:64:79:bf:13:9e: 84:73:ba:0e:90:f6:53:79:28:c4:57:59:0a:82:79: b0:cd:27:40:ab:85:ad:8b:68:3c:d7:f0:89:5a:fd: 06:9c:2b:14:ef:bd:1b:1a:73:77:71:0d:f6:32:f4: 3b:24:f5:35:c5:d6:c9:dd:66:bf:4b:29:c3:dc:fd: 27:73:23:d6:94:12:95:5b:f9:29:8a:bf:30:8f:90: 4a:88:fe:bf:98:8f:a7:03:2a:b8:24:e5:c3:f0:5d: 58:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2C:A8:C9:E0:E9:CB:BB:76:60:31:E8:2F:E2:C6:24:F6:7C:39:A2 X509v3 Authority Key Identifier: keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2f:23:64:b7:94:f8:ec:64:a8:d1:b4:88:39:ad:ac:5e:f0: 23:44:29:ae:02:e5:dd:20:50:fb:b2:88:41:cc:9f:6c:09:5d: c6:9c:00:c6:bd:d1:1e:f7:67:7a:ce:51:65:d9:b4:2e:e4:da: 0a:e7:61:3e:cd:6b:27:d6:57:49:62:45:e6:44:b2:81:16:b8: 9c:51:28:b2:69:c9:be:49:df:02:d2:00:59:74:e6:f2:9f:04: 27:0a:c3:bc:0d:f8:a0:88:79:40:e7:d0:b0:f0:46:92:19:da: 12:d5:35:d5:8b:ac:92:92:11:43:7c:a0:5a:ef:07:a2:a5:3f: 83:b9:d6:48:36:e4:65:ae:a4:43:f9:0f:60:73:af:73:4c:85: b8:39:26:5f:f4:2c:91:f2:41:22:74:ef:3b:18:dd:47:2d:4d: bd:34:08:da:c9:f5:cf:6c:3f:bb:89:34:47:c3:6c:fb:be:9c: 6d:12:c9:47:62:12:aa:a1:d9:46:ea:84:60:02:18:87:42:34: 31:de:66:22:42:9a:d3:21:17:13:dc:fd:12:23:2b:72:73:2f: 25:ec:3a:06:18:27:77:38:18:39:25:5f:4b:30:be:a6:e4:64: 14:fe:dd:2a:33:26:e3:ca:95:f1:81:49:15:46:f4:99:4b:53: 11:c3:bb:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGuH0w7ijMkrfCiFqxqjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NDhkNjI2YTkyMGU0MmRhY2QwZTk0OGU5NjZhNWU0YmNj M2MxMWMwHhcNMjUxMjA2MDIwMTIxWhcNMjUxMjA3MDIwMTIxWjAzMTEwLwYDVQQD Eyg0YTJjYThjOWUwZTljYmJiNzY2MDMxZTgyZmUyYzYyNGY2N2MzOWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GO8W0yayDm5gAiKUN+o2VsHcuNg stkdYO/Jny6j/phVHZhQZmVmi0Lf3RXD2Jfj4zkNGaPDj2VreqFEkfG6DDzEQwmj /pXw8+6wNtdePm6r0BIdy7W856BvaKjAmb0+WSROLgcvAn9J/iU/1jauC920XGsq 8Kr4TwMLXln7uQicKYhZcy1/bDApw6vxmJi2WoR7BfqpKdtbJ13/xj6TZHm/E56E c7oOkPZTeSjEV1kKgnmwzSdAq4Wti2g81/CJWv0GnCsU770bGnN3cQ32MvQ7JPU1 xdbJ3Wa/SynD3P0ncyPWlBKVW/kpir8wj5BKiP6/mI+nAyq4JOXD8F1YvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEosqMng6cu7dmAx6C/ixiT2fDmiMB8GA1UdIwQY MBaAFLRI1iapIOQtrNDpSOlmpeS8w8EcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81NWQ1ODQtMTlhMS00N2MwLTk1YTYt YmM4ZTBiNjlhYzEyLzEvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81NWQ1ODQtMTlhMS00N2MwLTk1YTYtYmM4ZTBiNjlhYzEy LzEvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKC8jZLeU +OxkqNG0iDmtrF7wI0QprgLl3SBQ+7KIQcyfbAldxpwAxr3RHvdnes5RZdm0LuTa CudhPs1rJ9ZXSWJF5kSygRa4nFEosmnJvknfAtIAWXTm8p8EJwrDvA34oIh5QOfQ sPBGkhnaEtU11YuskpIRQ3ygWu8HoqU/g7nWSDbkZa6kQ/kPYHOvc0yFuDkmX/Qs kfJBInTvOxjdRy1NvTQI2sn1z2w/u4k0R8Ns+76cbRLJR2ISqqHZRuqEYAIYh0I0 Md5mIkKa0yEXE9z9EiMrcnMvJew6BhgndzgYOSVfSzC+puRkFP7dKjMm48qV8YFJ FUb0mUtTEcO71Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:42:29 2025 by rpki-client