This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft File: Tk9mXUbWoqvwUh5csffEUcozeoc.mft (raw, json) Hash identifier: zsS0n0d/+PzHCFtDa4WC+V7/Nd74VpJbsKZVo+K7CMU= Subject key identifier: C6:57:6D:E0:94:A1:05:30:28:25:B2:98:76:A5:DA:CD:4D:96:DD:0B Authority key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87 Certificate issuer: /CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87 Certificate serial: 019AF23FB7E3E2E94DE6471910DEEB4333AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft Manifest number: 0343 Signing time: Sat 06 Dec 2025 06:00:53 +0000 Manifest this update: Sat 06 Dec 2025 06:00:53 +0000 Manifest next update: Sun 07 Dec 2025 06:00:53 +0000 Files and hashes: 1: 1KxZYvxri1sxva3r2G7KLnG5z_Y.roa (hash: 9JXmyyV6BbeWSwFTBJAUkp5UHelZgOhj8wsWM2RqVyk=) 2: HrSejbS-39NivWEqBB6_ezmUBgQ.roa (hash: 8T3MTXu6asTJ46RNeuQMt6iMOXHZ2zW1uZEJeSesDDw=) 3: Tk9mXUbWoqvwUh5csffEUcozeoc.crl (hash: mITEUafnu4db2jQEtk66Bpid7ETeW+MxkByi+JMvPic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b7:e3:e2:e9:4d:e6:47:19:10:de:eb:43:33:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87 Validity Not Before: Dec 6 06:00:53 2025 GMT Not After : Dec 7 06:00:53 2025 GMT Subject: CN=c6576de094a105302825b29876a5dacd4d96dd0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:db:08:bb:56:c8:08:29:9d:e2:bd:51:e7:e2: fc:59:f1:5e:13:ff:e6:82:96:a3:70:09:56:a0:b3: 76:94:21:24:56:51:4e:7d:ab:88:ee:f2:33:f1:11: 94:6e:1b:1b:cd:85:da:56:fe:61:1d:bc:0a:d4:20: 9b:33:00:79:64:c2:47:79:0b:c8:82:ed:f1:75:4c: 9f:a3:ba:25:40:e6:60:65:93:5f:d1:a1:83:50:90: ed:5e:49:90:6f:a8:fa:5d:b1:01:d7:78:13:cd:02: db:8b:54:d1:cd:02:73:e9:92:5c:c7:f0:e2:bd:99: 89:f7:e5:e8:25:25:50:bb:30:eb:f4:a4:ec:0e:8f: e0:3e:be:e2:df:7c:c3:65:d3:78:77:89:61:32:c3: 6c:51:47:02:8e:9e:b2:86:23:30:38:28:fb:33:0a: 03:b8:bc:18:71:49:08:7d:b0:2e:63:69:16:5a:c7: 39:95:5b:f5:f5:f3:b6:f5:cd:7e:00:77:3e:76:6e: 4f:c2:bb:a8:05:74:a0:20:6b:13:bf:69:69:a8:21: f7:33:b0:c0:af:dd:c7:99:30:6f:7c:45:b9:02:22: 50:80:da:61:dc:88:e1:bf:18:33:a3:8e:12:11:ac: be:02:68:11:11:56:5e:11:2d:07:89:33:44:8f:64: 64:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:57:6D:E0:94:A1:05:30:28:25:B2:98:76:A5:DA:CD:4D:96:DD:0B X509v3 Authority Key Identifier: keyid:4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:20:ee:93:62:34:67:28:9b:62:33:b6:09:80:b5:02:6d:78: 9d:1f:65:10:d6:94:e0:ff:95:8b:10:2c:5a:ed:7c:c7:f7:e4: 84:b1:36:1a:a7:3f:86:da:db:42:b2:35:58:64:8c:6f:b5:60: 16:5a:e4:68:11:ce:6b:a9:ff:77:69:ac:45:72:e4:be:52:6a: 61:e3:5e:d8:58:e8:29:d0:f1:5d:15:c8:8f:c4:72:a2:bc:2c: a8:95:e9:f9:57:63:93:ef:ce:63:30:2d:ac:50:c3:ab:18:a0: 49:c9:7b:81:90:11:d2:5d:76:2e:47:09:c0:44:4d:87:2e:71: b2:ad:96:fc:64:40:d9:e2:0b:24:6a:61:c2:50:90:eb:b5:2e: 2d:7f:0e:12:0a:f9:73:a1:6d:c6:77:9e:1e:4b:06:4b:98:67: 36:23:93:db:81:76:d9:8c:20:03:12:ba:d2:dd:64:90:62:c3: 2f:5b:4b:73:93:83:77:72:73:f9:b2:94:ad:4d:eb:58:86:50: d0:b3:4c:00:bd:bf:d3:ba:f8:01:9f:d2:01:68:0b:dd:5f:dd: b8:ef:69:ef:df:f2:e3:d2:57:b0:50:e7:f2:f3:7e:d0:ad:dc: 45:b3:08:f2:e9:04:b0:92:85:f2:85:70:ff:f0:73:63:0a:bc: 7c:65:3d:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7fj4ulN5kcZEN7rQzOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNGY2NjVkNDZkNmEyYWJmMDUyMWU1Y2IxZjdjNDUxY2Ez MzdhODcwHhcNMjUxMjA2MDYwMDUzWhcNMjUxMjA3MDYwMDUzWjAzMTEwLwYDVQQD EyhjNjU3NmRlMDk0YTEwNTMwMjgyNWIyOTg3NmE1ZGFjZDRkOTZkZDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9sIu1bICCmd4r1R5+L8WfFeE//m gpajcAlWoLN2lCEkVlFOfauI7vIz8RGUbhsbzYXaVv5hHbwK1CCbMwB5ZMJHeQvI gu3xdUyfo7olQOZgZZNf0aGDUJDtXkmQb6j6XbEB13gTzQLbi1TRzQJz6ZJcx/Di vZmJ9+XoJSVQuzDr9KTsDo/gPr7i33zDZdN4d4lhMsNsUUcCjp6yhiMwOCj7MwoD uLwYcUkIfbAuY2kWWsc5lVv19fO29c1+AHc+dm5PwruoBXSgIGsTv2lpqCH3M7DA r93HmTBvfEW5AiJQgNph3Ijhvxgzo44SEay+AmgREVZeES0HiTNEj2Rk6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZXbeCUoQUwKCWymHal2s1Nlt0LMB8GA1UdIwQY MBaAFE5PZl1G1qKr8FIeXLH3xFHKM3qHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGs5bVhVYldvcXZ3VWg1Y3NmZkVVY296ZW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNzBiODktN2M0Ny00MjYzLTg2YTAt MDA3M2MyYjdhN2VlLzEvVGs5bVhVYldvcXZ3VWg1Y3NmZkVVY296ZW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8yNzBiODktN2M0Ny00MjYzLTg2YTAtMDA3M2MyYjdhN2Vl LzEvVGs5bVhVYldvcXZ3VWg1Y3NmZkVVY296ZW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyDuk2I0 ZyibYjO2CYC1Am14nR9lENaU4P+VixAsWu18x/fkhLE2Gqc/htrbQrI1WGSMb7Vg FlrkaBHOa6n/d2msRXLkvlJqYeNe2FjoKdDxXRXIj8RyorwsqJXp+Vdjk+/OYzAt rFDDqxigScl7gZAR0l12LkcJwERNhy5xsq2W/GRA2eILJGphwlCQ67UuLX8OEgr5 c6FtxneeHksGS5hnNiOT24F22YwgAxK60t1kkGLDL1tLc5ODd3Jz+bKUrU3rWIZQ 0LNMAL2/07r4AZ/SAWgL3V/duO9p79/y49JXsFDn8vN+0K3cRbMI8ukEsJKF8oVw //BzYwq8fGU98g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:23 2025 by rpki-client