This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft File: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft (raw, json) Hash identifier: IlmJ94G0Vn8WuQGKBRsWqh55Cc6kWJHrMwQZyqoKfic= Subject key identifier: 8F:4D:2D:F7:9C:BE:80:75:AB:62:42:1F:1C:E5:5C:4A:43:03:78:C3 Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d Certificate serial: 019AF4D2AFE5B988D0ECE681CC27E080C69C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 18:00:39 +0000 Manifest this update: Sat 06 Dec 2025 18:00:39 +0000 Manifest next update: Sun 07 Dec 2025 18:00:39 +0000 Files and hashes: 1: AuQnPlvYaXKRlM4K_qYnSQH8XhU.roa (hash: qvJ/L4CGhxXYThfrwcSRz9uge4t0blzZ120bzRELDv8=) 2: F7DtnHMe2aPaEVwgJdRXETJ3B3E.roa (hash: MXWzMDDGEU1JVdMLECcVtcWDfSvCJBYg9H2NNF7s8es=) 3: NT96ZXytZXeLYG8nYXbccb_AzMM.roa (hash: jF7i9U0X2AT56VYqylel02ci97XBnH5+7EoAI42ntOM=) 4: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl (hash: dluU5WXiUUDFv/QoVbWDJG8TIOsEVnvG+rxH+3+FxJA=) 5: dZ8FONS7KKnXtPOWC1aUQDIHQr4.roa (hash: eYi/BgNAuN/BBQLuz4zrndBhjJKwJ84q4OAoqSVG8XI=) 6: kw0uZTx7n5NT55NNgp7YJmoV9Go.roa (hash: 8XlRvDMZFDhRr5qjjN+VGMeejBbNLMwpbYD6/C4LFwY=) 7: mLDvK3-bwZrItlCvgdik3bR3f2M.roa (hash: YyM0oKefpsy5Jzp3sMVhcN2qGFNdHn75iID1HMnlHcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:af:e5:b9:88:d0:ec:e6:81:cc:27:e0:80:c6:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d Validity Not Before: Dec 6 18:00:39 2025 GMT Not After : Dec 7 18:00:39 2025 GMT Subject: CN=8f4d2df79cbe8075ab62421f1ce55c4a430378c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:70:b9:3e:4d:55:57:8b:e1:ce:0d:c6:e9:89: b1:33:d8:53:e4:47:4e:cb:1b:17:2f:fe:f7:ed:be: 07:33:a3:95:83:e1:dd:7c:5a:a4:5c:ba:e9:33:c6: ef:79:87:77:11:91:b3:9d:23:d6:13:7b:99:5e:29: 49:e1:b6:a8:65:6f:c5:72:00:67:75:46:2f:6f:ff: 77:3f:f7:15:21:f8:16:2a:c4:59:6c:45:e1:89:4f: eb:60:90:1e:6e:ee:7a:5b:38:df:bc:b9:bf:77:8b: 38:db:55:a2:49:fc:58:4e:78:ea:f6:67:60:bb:86: 70:8b:91:2a:2b:9c:96:24:b8:62:9a:91:c1:77:48: bf:b8:6d:70:d0:f4:d3:23:9f:5a:8b:2a:c5:88:3a: e8:66:dc:6a:93:8c:ce:bc:a9:b6:09:2b:ae:44:cb: 75:25:03:6b:0d:c5:65:b4:82:ab:4b:cf:7b:b0:9e: c2:cf:e9:9e:f6:1e:a9:8a:0e:52:ef:3b:f6:06:2d: c3:a5:3b:4d:ec:20:0d:e6:70:88:f3:17:c2:af:74: 07:1d:82:48:cf:c5:cd:16:0c:d2:33:58:81:10:01: 4f:5a:d7:06:d3:2a:3f:cc:4f:50:f8:13:4a:41:b0: 07:ff:18:35:3a:26:34:c3:e2:6f:95:96:4d:d6:c2: d3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4D:2D:F7:9C:BE:80:75:AB:62:42:1F:1C:E5:5C:4A:43:03:78:C3 X509v3 Authority Key Identifier: keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:a4:7f:86:d6:04:85:79:21:21:aa:03:9e:b9:c0:59:da:69: 76:aa:45:0f:2b:e7:06:82:50:ce:08:81:62:ea:ef:6e:7f:0b: 08:b1:63:15:f5:9b:6d:a3:2b:20:db:5c:5f:f6:7f:3e:3c:cd: b1:ed:33:83:c4:7a:53:a1:e9:b8:8c:5a:aa:35:3b:c0:49:cc: 32:be:5a:5f:28:12:74:49:26:e6:2a:94:3a:61:54:04:43:d9: 46:43:09:89:08:30:d6:92:01:9b:b1:f2:0b:b1:47:a9:6e:25: 93:6a:c4:b7:85:ca:54:42:11:f7:8f:df:00:ff:20:1b:f1:a3: c3:5e:2e:50:b0:40:63:7a:81:c9:1f:80:fb:31:50:dc:86:4b: 9e:5e:e9:ee:96:d4:71:ff:e9:ae:d8:0a:e6:f8:6e:6e:8e:30: 14:0d:d0:52:85:b9:43:a0:94:9f:23:21:7c:18:39:9f:59:86: c5:51:5d:63:39:0a:3b:d4:11:f1:8a:70:56:9d:5b:25:61:57: c8:a2:be:b4:8f:26:95:93:75:bd:22:d2:0c:3a:e9:f7:4d:52: f3:be:36:2f:32:02:a1:2b:81:bf:20:86:b7:d2:1b:37:7f:be: 90:ed:97:17:e0:cc:ff:0c:ef:60:16:8d:6d:42:e3:fa:84:96: 38:31:33:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00q/luYjQ7OaBzCfggMacMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlY2ExMDVjZTRhZjZjMjFjZDQyOWU5OTJkMDZlYTdkMDZk OGE1NmQwHhcNMjUxMjA2MTgwMDM5WhcNMjUxMjA3MTgwMDM5WjAzMTEwLwYDVQQD Eyg4ZjRkMmRmNzljYmU4MDc1YWI2MjQyMWYxY2U1NWM0YTQzMDM3OGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3C5Pk1VV4vhzg3G6YmxM9hT5EdO yxsXL/737b4HM6OVg+HdfFqkXLrpM8bveYd3EZGznSPWE3uZXilJ4baoZW/FcgBn dUYvb/93P/cVIfgWKsRZbEXhiU/rYJAebu56WzjfvLm/d4s421WiSfxYTnjq9mdg u4Zwi5EqK5yWJLhimpHBd0i/uG1w0PTTI59aiyrFiDroZtxqk4zOvKm2CSuuRMt1 JQNrDcVltIKrS897sJ7Cz+me9h6pig5S7zv2Bi3DpTtN7CAN5nCI8xfCr3QHHYJI z8XNFgzSM1iBEAFPWtcG0yo/zE9Q+BNKQbAH/xg1OiY0w+JvlZZN1sLTCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9NLfecvoB1q2JCHxzlXEpDA3jDMB8GA1UdIwQY MBaAFE7KEFzkr2whzUKemS0G6n0G2KVtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgt NDZlZTBjZDdmY2JhLzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgtNDZlZTBjZDdmY2Jh LzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwKR/htYE hXkhIaoDnrnAWdppdqpFDyvnBoJQzgiBYurvbn8LCLFjFfWbbaMrINtcX/Z/PjzN se0zg8R6U6HpuIxaqjU7wEnMMr5aXygSdEkm5iqUOmFUBEPZRkMJiQgw1pIBm7Hy C7FHqW4lk2rEt4XKVEIR94/fAP8gG/Gjw14uULBAY3qByR+A+zFQ3IZLnl7p7pbU cf/prtgK5vhubo4wFA3QUoW5Q6CUnyMhfBg5n1mGxVFdYzkKO9QR8YpwVp1bJWFX yKK+tI8mlZN1vSLSDDrp901S8742LzICoSuBvyCGt9IbN3++kO2XF+DM/wzvYBaN bULj+oSWODEzWg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:56:38 2025 by rpki-client