This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json) Hash identifier: Waw6CZV5Dg+1XtVLZdTqiaYFlXnEJa1/stpY3Qftdig= Subject key identifier: EF:6B:6C:87:56:5E:8E:D0:04:A6:8E:EC:00:0D:07:EC:C5:1C:50:92 Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0 Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0 Certificate serial: 019AF27709D849A776F2CD19E98E2DE7FD53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft Manifest number: 11D2 Signing time: Sat 06 Dec 2025 07:01:18 +0000 Manifest this update: Sat 06 Dec 2025 07:01:18 +0000 Manifest next update: Sun 07 Dec 2025 07:01:18 +0000 Files and hashes: 1: 7oTB9A6lOtEjQEsvoA-hCkKE_kU.roa (hash: CgqHCnrNWT0vsnk0wl9rl++PdFLv2TYzmWCCrA7fBCY=) 2: MfO1xzaCGvzf-Tdk8sWipKC3t-8.roa (hash: TSPXY1leU0O4gZ6iWESlm1g1sCeRvbsOHxtBl16fH1g=) 3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: BJtJOxLuy7UoallkeLEMpEOkjpqvbgXo5Wohd1A5d5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:09:d8:49:a7:76:f2:cd:19:e9:8e:2d:e7:fd:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0 Validity Not Before: Dec 6 07:01:18 2025 GMT Not After : Dec 7 07:01:18 2025 GMT Subject: CN=ef6b6c87565e8ed004a68eec000d07ecc51c5092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:19:63:1c:50:22:d6:eb:a0:a2:69:0c:28:a1: 25:97:cf:ad:5c:2d:a9:7f:f7:bb:85:09:78:ab:2e: a3:4e:05:f0:6f:b9:71:67:e9:bf:57:2b:fe:70:9e: 2a:2d:41:9c:63:bb:76:e2:eb:1e:91:04:6b:15:6d: 09:cd:bb:cc:09:f3:c7:85:f1:6e:77:9a:2f:21:55: 1d:e7:fc:2f:d2:01:22:bf:46:b6:52:3c:78:c5:e7: 4e:53:89:d3:26:84:af:ab:63:fd:29:5f:c5:da:90: 79:5a:1a:d3:09:e9:1e:47:11:9f:47:07:25:71:c5: 14:c5:fa:d4:50:09:d9:9d:76:84:90:01:97:c5:d9: 69:4d:a3:26:ce:05:b2:e2:bb:e2:ad:64:cd:71:02: 18:e9:24:6d:86:5a:a1:5c:15:52:76:47:cd:86:55: 13:5b:b5:a5:ec:e8:3a:90:30:b9:f3:9d:c2:a9:89: a4:70:cf:5a:41:a4:88:51:e8:c0:37:39:91:a8:41: 41:68:a2:4d:fa:2e:f4:10:ab:a7:a7:46:86:4e:c8: e5:94:a2:72:13:98:85:a3:63:4f:2e:a7:ce:b0:15: a3:8a:2a:25:52:ae:ff:04:da:a6:49:47:f0:3e:5f: 6d:0a:bf:f1:b0:88:90:ed:01:d1:1c:12:85:39:9d: eb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6B:6C:87:56:5E:8E:D0:04:A6:8E:EC:00:0D:07:EC:C5:1C:50:92 X509v3 Authority Key Identifier: keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:cd:4d:34:60:cb:39:25:d9:d2:60:11:b0:45:67:8c:83:b1: 0f:55:27:d1:bb:2c:a9:f6:90:24:04:68:9b:fb:17:b8:6d:93: 9e:e4:34:ca:d2:e3:e6:e9:08:cd:81:a3:04:6c:27:de:b0:61: d0:01:15:eb:21:93:79:43:97:4a:3c:f9:e4:d4:d3:b3:9b:88: 78:f5:23:be:0c:85:16:ce:a1:5e:c6:f2:13:6d:12:49:71:c1: 57:f9:d9:b2:04:04:61:ca:33:15:63:f7:85:39:95:fe:ae:2e: ea:9d:d3:6e:01:b2:29:74:e8:56:c4:47:25:1a:e6:11:f3:b2: ea:45:1e:f0:53:c0:a8:ae:44:7e:72:f8:ad:dc:56:d9:49:76: ba:d1:9b:13:b3:d7:1c:27:d7:c8:47:a3:4a:25:60:d3:98:ee: 75:0c:74:7e:fc:35:c8:e4:82:a6:ba:77:1b:87:cd:6e:17:b7: e7:af:89:31:0d:65:9c:81:ef:e1:10:ca:dc:8f:76:a2:00:75: 59:4a:61:9d:80:b5:21:91:d3:98:a7:34:97:ac:05:d9:e9:32: c5:88:47:29:b2:16:3e:6b:3c:49:fb:0a:c2:f1:af:e9:9d:c5: 72:ff:56:8c:b9:d3:cc:1a:a0:30:c4:2e:9c:07:c2:83:4c:d0: d7:3a:09:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwnYSad28s0Z6Y4t5/1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MjBhMjA0ZjRlMDljYzgzYTYyNThkN2FhNDRmN2QyZjBm YTQ0YTAwHhcNMjUxMjA2MDcwMTE4WhcNMjUxMjA3MDcwMTE4WjAzMTEwLwYDVQQD EyhlZjZiNmM4NzU2NWU4ZWQwMDRhNjhlZWMwMDBkMDdlY2M1MWM1MDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhljHFAi1uugomkMKKEll8+tXC2p f/e7hQl4qy6jTgXwb7lxZ+m/Vyv+cJ4qLUGcY7t24usekQRrFW0JzbvMCfPHhfFu d5ovIVUd5/wv0gEiv0a2Ujx4xedOU4nTJoSvq2P9KV/F2pB5WhrTCekeRxGfRwcl ccUUxfrUUAnZnXaEkAGXxdlpTaMmzgWy4rvirWTNcQIY6SRthlqhXBVSdkfNhlUT W7Wl7Og6kDC5853CqYmkcM9aQaSIUejANzmRqEFBaKJN+i70EKunp0aGTsjllKJy E5iFo2NPLqfOsBWjiiolUq7/BNqmSUfwPl9tCr/xsIiQ7QHRHBKFOZ3r2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9rbIdWXo7QBKaO7AANB+zFHFCSMB8GA1UdIwQY MBaAFLUgogT04JzIOmJY16pE99Lw+kSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAt YjhiMWU0YjRlY2I5LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAtYjhiMWU0YjRlY2I5 LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANs1NNGDL OSXZ0mARsEVnjIOxD1Un0bssqfaQJARom/sXuG2TnuQ0ytLj5ukIzYGjBGwn3rBh 0AEV6yGTeUOXSjz55NTTs5uIePUjvgyFFs6hXsbyE20SSXHBV/nZsgQEYcozFWP3 hTmV/q4u6p3TbgGyKXToVsRHJRrmEfOy6kUe8FPAqK5EfnL4rdxW2Ul2utGbE7PX HCfXyEejSiVg05judQx0fvw1yOSCprp3G4fNbhe356+JMQ1lnIHv4RDK3I92ogB1 WUphnYC1IZHTmKc0l6wF2ekyxYhHKbIWPms8SfsKwvGv6Z3Fcv9WjLnTzBqgMMQu nAfCg0zQ1zoJ5w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:23 2025 by rpki-client