This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft File: tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json) Hash identifier: ZVH65cV0iO+bicNu1buqzLEeLM10RrmmyjvIQpLgd64= Subject key identifier: C9:0E:B0:3F:4E:50:FA:17:42:3D:44:D6:B4:F0:6A:66:2A:AD:2D:67 Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b Certificate serial: 019AF389909CA54B321B141B871CCEE7A9F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft Manifest number: 1373 Signing time: Sat 06 Dec 2025 12:01:10 +0000 Manifest this update: Sat 06 Dec 2025 12:01:10 +0000 Manifest next update: Sun 07 Dec 2025 12:01:10 +0000 Files and hashes: 1: iONsIN03z4IKNXYg6US72IxJBcU.roa (hash: X7Mx72vOONyXDgxRP6UfNMJzZuu3rnCgwN1U1ZoR2/s=) 2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: bKAs4XU1cqe5LgVqA7x8dmz3Ub9LeFs0yYvhB/fZEeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:90:9c:a5:4b:32:1b:14:1b:87:1c:ce:e7:a9:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b60aac104376b79dd6829091947b779c989af68b Validity Not Before: Dec 6 12:01:10 2025 GMT Not After : Dec 7 12:01:10 2025 GMT Subject: CN=c90eb03f4e50fa17423d44d6b4f06a662aad2d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:62:50:9b:c8:55:e4:e7:9c:e3:c5:9d:a7: ff:2a:7b:6b:51:08:95:c6:cb:bc:be:b4:92:f7:b3: 86:39:52:de:f3:d9:56:b9:65:09:62:d6:0a:c4:76: 82:69:17:cf:64:70:06:fa:91:0a:ce:0a:73:a8:49: 5a:40:9d:ee:da:f2:d5:dd:65:40:f2:f0:8d:e2:08: 83:88:98:68:2e:78:8c:6d:9c:d6:a4:8e:65:dd:f7: 1a:46:f6:02:fd:f6:bb:06:87:5b:70:40:17:cf:d4: 87:e3:c9:ad:83:7d:f3:8f:de:5a:5e:72:47:71:eb: 2a:b3:99:b7:34:c4:48:10:a4:5d:b6:7c:f9:89:81: c1:9f:96:4a:13:86:c8:6b:54:29:45:ea:32:24:97: ee:6e:15:24:ff:7d:05:0f:b6:19:23:32:8b:ea:b6: 9f:af:fc:6b:d2:76:97:f9:b4:87:1e:17:f2:ad:c8: 8a:b2:06:3c:c9:32:25:4f:08:bc:e7:ae:3d:91:73: 66:b4:8e:d2:e4:d5:0e:de:6e:0c:74:8e:31:22:e8: 0e:96:84:a5:a3:d7:93:05:70:5e:b2:7a:25:2d:ae: 05:00:8f:ad:48:59:4b:11:80:a9:2e:d3:44:5f:a5: 9d:36:b5:e5:46:02:70:96:4f:4e:98:4d:11:db:15: 41:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0E:B0:3F:4E:50:FA:17:42:3D:44:D6:B4:F0:6A:66:2A:AD:2D:67 X509v3 Authority Key Identifier: keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:58:95:e7:50:8b:ff:97:a7:88:93:08:7e:aa:20:ae:62:7f: 6b:36:9a:0b:37:93:00:1d:d7:cb:f3:82:1a:99:1d:66:29:78: 37:01:cb:e6:b8:44:7c:16:4c:80:c6:1a:a6:c4:57:e3:5a:98: e8:d9:1f:cc:a9:80:ca:b1:f1:cd:fb:a7:32:1a:33:6f:72:4b: 07:d4:fe:c4:9f:1a:19:c1:7f:67:ad:25:40:f9:ae:fb:ef:32: 4b:8f:39:18:5a:8a:3c:67:33:9c:60:48:1b:ca:1f:88:b1:66: f0:c7:c2:b6:79:cb:88:0d:9d:6f:9a:17:1d:9e:e1:b5:43:a6: 32:b0:3d:cc:fd:5d:d2:dd:c2:99:98:81:68:4c:e3:c7:3d:23: 96:8e:a6:93:8d:21:87:79:af:47:83:80:a9:1e:6c:d9:8f:76: 5e:06:a9:13:76:01:bf:eb:97:8d:e7:b1:09:3f:7a:30:9d:89: 97:31:f0:ab:06:8e:da:a1:78:07:ed:74:80:dd:62:df:b2:34: bf:0f:68:bd:64:d9:b2:67:e6:f6:c3:f5:b7:39:3b:77:90:12: 8b:9a:97:38:ef:fc:fc:c5:f0:1f:27:d9:7a:22:2a:37:1e:dc: f0:80:7c:6d:be:47:6c:02:c2:1d:35:1e:76:e3:df:bf:1f:b5: 15:96:9f:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZCcpUsyGxQbhxzO56nxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MGFhYzEwNDM3NmI3OWRkNjgyOTA5MTk0N2I3NzljOTg5 YWY2OGIwHhcNMjUxMjA2MTIwMTEwWhcNMjUxMjA3MTIwMTEwWjAzMTEwLwYDVQQD EyhjOTBlYjAzZjRlNTBmYTE3NDIzZDQ0ZDZiNGYwNmE2NjJhYWQyZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtixiUJvIVeTnnOPFnaf/KntrUQiV xsu8vrSS97OGOVLe89lWuWUJYtYKxHaCaRfPZHAG+pEKzgpzqElaQJ3u2vLV3WVA 8vCN4giDiJhoLniMbZzWpI5l3fcaRvYC/fa7BodbcEAXz9SH48mtg33zj95aXnJH cesqs5m3NMRIEKRdtnz5iYHBn5ZKE4bIa1QpReoyJJfubhUk/30FD7YZIzKL6raf r/xr0naX+bSHHhfyrciKsgY8yTIlTwi85649kXNmtI7S5NUO3m4MdI4xIugOloSl o9eTBXBesnolLa4FAI+tSFlLEYCpLtNEX6WdNrXlRgJwlk9OmE0R2xVB5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkOsD9OUPoXQj1E1rTwamYqrS1nMB8GA1UdIwQY MBaAFLYKrBBDdred1oKQkZR7d5yYmvaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWJiOWEtOWEwNy00ODY3LTk3MGIt MmIxZGE2MjRmN2JjLzEvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9lYWJiOWEtOWEwNy00ODY3LTk3MGItMmIxZGE2MjRmN2Jj LzEvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnViV51CL /5eniJMIfqogrmJ/azaaCzeTAB3Xy/OCGpkdZil4NwHL5rhEfBZMgMYapsRX41qY 6NkfzKmAyrHxzfunMhozb3JLB9T+xJ8aGcF/Z60lQPmu++8yS485GFqKPGcznGBI G8ofiLFm8MfCtnnLiA2db5oXHZ7htUOmMrA9zP1d0t3CmZiBaEzjxz0jlo6mk40h h3mvR4OAqR5s2Y92XgapE3YBv+uXjeexCT96MJ2JlzHwqwaO2qF4B+10gN1i37I0 vw9ovWTZsmfm9sP1tzk7d5ASi5qXOO/8/MXwHyfZeiIqNx7c8IB8bb5HbALCHTUe duPfvx+1FZafpg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:55:46 2025 by rpki-client