This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json) Hash identifier: ZhdirtpCkDPCn3CXyjly8xI/8SOa5X57GadEJzAF7b8= Subject key identifier: 1A:2E:28:F9:9B:DF:29:1D:E4:D8:D5:AE:B0:E8:C4:47:E8:C9:B9:A6 Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e Certificate serial: 019AF2090628106731102182B46D565707BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:08 +0000 Manifest this update: Sat 06 Dec 2025 05:01:08 +0000 Manifest next update: Sun 07 Dec 2025 05:01:08 +0000 Files and hashes: 1: LKAft93oZKWm8C5vqJwOGZJiSJU.roa (hash: DXlp4EQmxRSQHGzjwfBhaby6m7/cBeVJqjDN3Ga+MWk=) 2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: R204rlWFm4LlvS3YDHiR4Bxw/+1/8+7LHaYpaKEHlkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:06:28:10:67:31:10:21:82:b4:6d:56:57:07:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e Validity Not Before: Dec 6 05:01:08 2025 GMT Not After : Dec 7 05:01:08 2025 GMT Subject: CN=1a2e28f99bdf291de4d8d5aeb0e8c447e8c9b9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:ce:13:b8:2a:2e:eb:bf:9b:a6:58:a0:ad: 1d:2a:f4:aa:46:33:b3:3b:ea:0f:8c:ff:fb:63:e3: 9f:5f:f7:be:0d:af:d6:33:f4:f8:6b:7e:cf:b1:88: 82:3f:7b:70:d1:f8:5f:d6:37:4e:e2:86:c3:3a:33: fe:5d:70:db:97:4b:b3:ae:b2:09:b9:5d:eb:c3:c1: c4:85:5d:fa:05:fa:ba:bd:91:52:ca:c2:45:de:8c: 6c:07:f3:4d:c2:54:87:20:8b:3d:0f:66:81:99:a6: 96:62:f2:00:32:41:cd:88:94:e6:3c:cc:2a:1b:14: f6:a4:e2:52:f2:a9:48:d3:f5:8d:5d:8f:c6:88:5a: ef:16:8c:0b:34:51:06:d2:c0:62:27:48:7a:c9:27: c5:1c:18:94:74:a2:82:7a:1b:f5:b9:05:f1:a6:45: 4c:03:b4:1d:0e:84:88:17:a8:1d:21:21:ee:74:1a: 90:36:42:db:c5:67:c8:02:e1:f4:5f:da:98:79:32: 97:24:e5:9b:db:ae:04:89:fb:dc:f5:7e:00:44:0a: 86:dd:88:dd:e0:9d:22:43:4a:80:f5:50:aa:29:ef: ff:e1:06:a1:d5:26:4c:b5:ab:5a:a7:a4:17:18:08: d6:6c:ed:11:cb:8d:ad:5a:70:e3:1c:aa:4b:1c:9f: 23:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2E:28:F9:9B:DF:29:1D:E4:D8:D5:AE:B0:E8:C4:47:E8:C9:B9:A6 X509v3 Authority Key Identifier: keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ed:5f:c0:f6:1f:0b:bb:60:7a:9b:37:97:f2:60:23:35:76: 44:ce:94:a4:83:de:e2:7e:d5:39:1d:c1:e3:e3:37:2e:7d:8c: 4d:90:26:17:9e:a7:b3:f4:6d:f8:19:0f:85:13:9f:01:0d:c6: ef:04:15:ee:53:94:b7:b6:c7:d6:c2:d6:fe:70:b7:bc:37:4f: ca:75:61:e6:a0:43:21:0b:8b:0f:fe:14:cf:7e:76:b6:8e:54: b3:3b:c4:f2:11:0d:84:96:c4:94:b0:c8:a2:95:14:51:69:8b: 76:bb:7d:1c:f2:44:a6:9a:f4:73:59:2b:90:59:1b:6b:2d:46: f5:53:a3:14:6a:e9:b8:d2:be:bb:43:3e:be:e5:06:f2:4c:de: 41:c3:57:99:8b:f0:6c:ec:c3:a2:23:18:36:ca:26:ea:73:fd: 67:f2:70:45:82:55:a4:12:02:d5:05:3f:26:e2:35:1b:2c:f9: 12:b8:88:2f:ba:46:7e:af:05:93:23:7a:00:ad:46:b5:5f:5c: 66:53:d6:bc:77:0e:ce:3a:e6:0b:bf:92:4e:a9:53:36:cd:e4: 10:c6:98:da:a6:fe:82:2d:67:c7:6d:43:be:db:2b:a5:eb:77: 48:7b:ee:13:6c:28:cb:5b:54:99:6b:49:29:5a:94:b8:17:82: 04:b4:4a:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQYoEGcxECGCtG1WVwe/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZGQ2ZDY1OGUxNDU3MWU4MzlmNzgxM2RhMzFmMjIxNzQy MjgxOGUwHhcNMjUxMjA2MDUwMTA4WhcNMjUxMjA3MDUwMTA4WjAzMTEwLwYDVQQD EygxYTJlMjhmOTliZGYyOTFkZTRkOGQ1YWViMGU4YzQ0N2U4YzliOWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9POE7gqLuu/m6ZYoK0dKvSqRjOz O+oPjP/7Y+OfX/e+Da/WM/T4a37PsYiCP3tw0fhf1jdO4obDOjP+XXDbl0uzrrIJ uV3rw8HEhV36Bfq6vZFSysJF3oxsB/NNwlSHIIs9D2aBmaaWYvIAMkHNiJTmPMwq GxT2pOJS8qlI0/WNXY/GiFrvFowLNFEG0sBiJ0h6ySfFHBiUdKKCehv1uQXxpkVM A7QdDoSIF6gdISHudBqQNkLbxWfIAuH0X9qYeTKXJOWb264Eifvc9X4ARAqG3Yjd 4J0iQ0qA9VCqKe//4Qah1SZMtatap6QXGAjWbO0Ry42tWnDjHKpLHJ8j7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBouKPmb3ykd5NjVrrDoxEfoybmmMB8GA1UdIwQY MBaAFLTdbWWOFFceg594E9ox8iF0IoGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUt ODFkMjE0ZWRmMjk4LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUtODFkMjE0ZWRmMjk4 LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfe1fwPYf C7tgeps3l/JgIzV2RM6UpIPe4n7VOR3B4+M3Ln2MTZAmF56ns/Rt+BkPhROfAQ3G 7wQV7lOUt7bH1sLW/nC3vDdPynVh5qBDIQuLD/4Uz352to5UszvE8hENhJbElLDI opUUUWmLdrt9HPJEppr0c1krkFkbay1G9VOjFGrpuNK+u0M+vuUG8kzeQcNXmYvw bOzDoiMYNsom6nP9Z/JwRYJVpBIC1QU/JuI1Gyz5EriIL7pGfq8FkyN6AK1GtV9c ZlPWvHcOzjrmC7+STqlTNs3kEMaY2qb+gi1nx21Dvtsrpet3SHvuE2woy1tUmWtJ KVqUuBeCBLRKyw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:16 2025 by rpki-client