This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft File: tqNouOZvnhWmEOwY1rFHtrokzuc.mft (raw, json) Hash identifier: X3SVlDCSqlwbv0QZnpGDeRnOIv6foDS7JL2um6Dm5bs= Subject key identifier: 50:C8:EF:E2:1B:D9:60:3B:E8:A2:88:68:23:70:F0:92:17:17:4C:4C Authority key identifier: B6:A3:68:B8:E6:6F:9E:15:A6:10:EC:18:D6:B1:47:B6:BA:24:CE:E7 Certificate issuer: /CN=b6a368b8e66f9e15a610ec18d6b147b6ba24cee7 Certificate serial: 019AF3F768214336787DB654AB0813154F76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqNouOZvnhWmEOwY1rFHtrokzuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft Manifest number: 01EF Signing time: Sat 06 Dec 2025 14:01:08 +0000 Manifest this update: Sat 06 Dec 2025 14:01:08 +0000 Manifest next update: Sun 07 Dec 2025 14:01:08 +0000 Files and hashes: 1: 76JdDApMBw2HG_-2b61i99W245Q.roa (hash: NIJoLQsfvrL/qonBB3ZwrtyRIgvdYG24/geuGhv0roI=) 2: tqNouOZvnhWmEOwY1rFHtrokzuc.crl (hash: 1TyF7Q6gxiXwlSGo2b6TFxnUMoIRgVLxr91OJzVwkCc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft rsync://rpki.ripe.net/repository/DEFAULT/tqNouOZvnhWmEOwY1rFHtrokzuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:68:21:43:36:78:7d:b6:54:ab:08:13:15:4f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6a368b8e66f9e15a610ec18d6b147b6ba24cee7 Validity Not Before: Dec 6 14:01:08 2025 GMT Not After : Dec 7 14:01:08 2025 GMT Subject: CN=50c8efe21bd9603be8a288682370f09217174c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:40:91:51:78:5e:50:28:5e:61:08:27:bc:56: 9c:6c:4a:c4:64:12:e0:1b:ab:c1:2e:75:c0:bc:94: 77:16:34:d1:21:b0:1c:5b:33:b9:9b:02:fb:55:fb: af:34:2e:d0:e4:b5:65:9a:a9:79:b6:2d:b1:9e:ee: 77:94:80:e1:df:ff:cd:d9:ae:fc:50:86:f6:52:78: 3c:74:9f:9f:f2:d9:44:79:71:d5:da:6a:10:58:7e: 40:26:97:22:1d:41:5f:22:e6:03:c3:18:01:a0:36: bb:8c:e9:eb:79:0c:d7:51:74:df:c7:5f:b5:56:ae: 82:5b:28:87:d2:5c:f5:08:4c:39:64:c2:bf:36:76: 8b:c5:f9:03:3f:c5:f5:a3:da:ad:e0:e3:7a:ab:91: a4:69:0f:5f:29:f3:52:92:20:1e:7e:91:36:ad:cf: c9:12:9e:14:3d:44:4d:02:d0:b9:0d:d9:db:a0:d1: 38:a0:98:2b:dd:15:a7:92:a0:89:73:ef:18:38:d8: 24:20:1b:4b:65:4d:e7:ca:f4:9a:09:04:e2:5b:4a: 03:32:74:2f:af:ba:3e:fe:67:44:d1:1b:5a:1c:bd: 80:99:f4:0e:ed:62:ee:cf:71:76:8c:c9:a1:ce:cb: d0:49:9e:a3:59:27:ef:21:5c:0b:c8:ea:47:43:8f: ee:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C8:EF:E2:1B:D9:60:3B:E8:A2:88:68:23:70:F0:92:17:17:4C:4C X509v3 Authority Key Identifier: keyid:B6:A3:68:B8:E6:6F:9E:15:A6:10:EC:18:D6:B1:47:B6:BA:24:CE:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqNouOZvnhWmEOwY1rFHtrokzuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:47:ac:23:7a:46:00:ec:4f:91:94:de:b0:d1:ff:10:2a:e9: ce:01:51:31:23:7e:84:97:a8:a7:2a:ae:74:c8:34:8d:62:49: ff:93:99:6c:e8:33:ef:cd:ca:d7:9f:bf:32:9d:7b:fe:c0:c3: 52:32:ef:c9:4d:cb:14:96:28:55:eb:89:d6:d6:7a:03:4d:9f: 88:d0:8d:93:c7:d0:be:df:f7:eb:45:d4:d5:41:20:70:9c:29: da:af:78:70:b7:77:56:08:2d:f7:5f:64:f9:c3:c3:b5:7b:fe: 8a:0a:ef:5c:77:48:d9:63:88:7a:6e:f1:76:8a:3c:7c:78:20: 56:70:a6:bc:dd:fe:0b:e8:04:e6:89:71:06:4e:eb:4e:08:0e: 34:be:e7:a2:2f:eb:60:00:96:1e:0d:6f:60:58:84:29:5d:11: 80:5b:60:90:9d:3a:0e:24:ce:c7:72:55:09:51:58:67:a1:8a: 64:0b:c9:a9:e4:fe:c3:b8:7f:1e:08:7e:ff:60:03:05:9a:c9: 5a:66:bb:0e:c3:bf:46:8b:17:3e:f5:1e:3d:02:da:04:03:ee: b1:b9:62:a1:1a:16:7f:80:b9:37:f6:51:91:92:f7:ce:6b:19: 65:d2:26:37:73:26:b6:34:d0:ff:9a:94:5d:86:81:ad:ae:7a: 15:bd:34:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz92ghQzZ4fbZUqwgTFU92MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YTM2OGI4ZTY2ZjllMTVhNjEwZWMxOGQ2YjE0N2I2YmEy NGNlZTcwHhcNMjUxMjA2MTQwMTA4WhcNMjUxMjA3MTQwMTA4WjAzMTEwLwYDVQQD Eyg1MGM4ZWZlMjFiZDk2MDNiZThhMjg4NjgyMzcwZjA5MjE3MTc0YzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kCRUXheUCheYQgnvFacbErEZBLg G6vBLnXAvJR3FjTRIbAcWzO5mwL7VfuvNC7Q5LVlmql5ti2xnu53lIDh3//N2a78 UIb2Ung8dJ+f8tlEeXHV2moQWH5AJpciHUFfIuYDwxgBoDa7jOnreQzXUXTfx1+1 Vq6CWyiH0lz1CEw5ZMK/NnaLxfkDP8X1o9qt4ON6q5GkaQ9fKfNSkiAefpE2rc/J Ep4UPURNAtC5DdnboNE4oJgr3RWnkqCJc+8YONgkIBtLZU3nyvSaCQTiW0oDMnQv r7o+/mdE0RtaHL2AmfQO7WLuz3F2jMmhzsvQSZ6jWSfvIVwLyOpHQ4/uIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDI7+Ib2WA76KKIaCNw8JIXF0xMMB8GA1UdIwQY MBaAFLajaLjmb54VphDsGNaxR7a6JM7nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHFOb3VPWnZuaFdtRU93WTFyRkh0cm9renVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9iYTE4NjgtYWI3Ni00YmUxLWJjNTMt NzQ4MGQ4YTJmMWJlLzEvdHFOb3VPWnZuaFdtRU93WTFyRkh0cm9renVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9iYTE4NjgtYWI3Ni00YmUxLWJjNTMtNzQ4MGQ4YTJmMWJl LzEvdHFOb3VPWnZuaFdtRU93WTFyRkh0cm9renVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATEesI3pG AOxPkZTesNH/ECrpzgFRMSN+hJeopyqudMg0jWJJ/5OZbOgz783K15+/Mp17/sDD UjLvyU3LFJYoVeuJ1tZ6A02fiNCNk8fQvt/360XU1UEgcJwp2q94cLd3Vggt919k +cPDtXv+igrvXHdI2WOIem7xdoo8fHggVnCmvN3+C+gE5olxBk7rTggONL7noi/r YACWHg1vYFiEKV0RgFtgkJ06DiTOx3JVCVFYZ6GKZAvJqeT+w7h/Hgh+/2ADBZrJ Wma7DsO/RosXPvUePQLaBAPusblioRoWf4C5N/ZRkZL3zmsZZdImN3MmtjTQ/5qU XYaBra56Fb00zw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:05:37 2025 by rpki-client