This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json) Hash identifier: tH1XrrBkuAJSvfovVkkbEs0cm3y/bXiC6ADxeP49J3E= Subject key identifier: D1:23:70:F9:DA:16:92:FA:79:7A:21:68:5D:49:AE:26:ED:33:42:4C Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54 Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54 Certificate serial: 019AF2091FC7106690D304BD61E1D776617E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft Manifest number: 06AB Signing time: Sat 06 Dec 2025 05:01:15 +0000 Manifest this update: Sat 06 Dec 2025 05:01:15 +0000 Manifest next update: Sun 07 Dec 2025 05:01:15 +0000 Files and hashes: 1: JboF5duYkSjIw0cFCDow2D7hhYA.roa (hash: 5ee85IvEdLLZLBu0IK/0DK9QgLyt71g8oPTMmxnM7ss=) 2: bPHOfPhRt9UxNoPYUZyx6NkEcPE.roa (hash: l5CD77LRDYrviJN2I+kUm6dy7C8YOi2kiqH568j84ZE=) 3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: t43ZCdoOdgnaE3LXnxjzxLcth7PoWmaaC+TV8qxt758=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1f:c7:10:66:90:d3:04:bd:61:e1:d7:76:61:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54 Validity Not Before: Dec 6 05:01:15 2025 GMT Not After : Dec 7 05:01:15 2025 GMT Subject: CN=d12370f9da1692fa797a21685d49ae26ed33424c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fd:77:23:04:e6:f7:7d:d0:01:25:29:a6:d7: cb:ef:39:a0:f8:53:19:3c:12:4f:a8:26:a8:d5:62: c8:bb:e1:20:7b:96:ab:b7:d8:46:1a:42:2e:32:8e: f0:bb:61:cd:68:4f:4f:0f:a2:0e:0e:89:b2:ec:2b: f9:a3:26:21:ab:87:e3:1f:8f:18:b8:60:16:1f:dc: 9a:76:79:65:1d:77:a6:20:f3:93:cd:d7:dd:a7:65: 9b:3e:cb:d5:7c:3f:67:0d:95:bc:ee:f3:47:ef:7d: 49:2a:28:96:40:6c:74:68:f0:58:d7:01:39:44:bb: d7:39:e6:e0:a5:51:83:19:87:2b:38:70:4f:df:b7: b5:ed:68:71:97:f7:08:08:ac:9d:fb:3c:3d:6c:d2: c3:3b:a8:b9:7c:b3:8b:fd:92:12:00:6d:7b:88:a6: 73:a0:49:28:3d:b1:0b:55:a4:7b:ce:09:72:44:44: 53:1c:8e:c8:d3:ce:26:9f:31:55:aa:de:97:1d:8e: 95:18:c7:f8:af:4c:86:e8:9d:57:45:02:da:45:f1: 5d:3c:00:4d:00:10:21:58:07:a3:32:92:4d:92:8d: ef:2b:1c:9b:28:36:f2:b4:71:db:a7:95:20:4e:39: 81:1f:c5:ef:8a:53:7d:52:72:6b:1a:5e:f8:29:3a: 7f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:23:70:F9:DA:16:92:FA:79:7A:21:68:5D:49:AE:26:ED:33:42:4C X509v3 Authority Key Identifier: keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:91:e6:3f:80:c6:62:30:da:ba:d7:df:84:88:29:08:01:a4: 5a:9a:b1:9a:7a:8c:56:1e:10:50:62:6d:00:10:9b:7d:a6:ca: a6:ad:bd:41:5f:9f:02:e1:a9:0f:61:a2:6d:58:4d:4a:10:33: f7:b9:f2:a2:7a:10:69:dd:67:c6:82:f4:7d:8e:52:f5:60:16: a2:2a:cc:06:f9:83:03:89:48:8e:95:db:5e:c8:37:eb:2a:4e: b5:9d:37:6f:0f:24:7f:90:48:5a:7a:c5:64:a8:74:2a:bf:5c: 8e:96:0d:b6:e4:57:62:36:44:a5:01:56:fa:9e:ce:51:7a:2e: cc:72:cf:2d:48:7a:4a:64:8a:89:cb:d4:a0:0f:24:0e:81:2d: b0:84:7a:c4:96:95:ee:a6:da:5e:41:1f:7b:fd:ff:09:e0:97: 71:c7:22:4d:4d:10:94:6a:7e:53:fd:b8:61:72:e1:d1:4a:e8: 2d:db:a7:be:5c:fe:6a:21:d8:81:ea:6c:c1:03:9c:29:10:85: b8:00:d9:7d:51:3f:1a:5a:d9:9f:27:a6:45:d5:69:44:92:98: 3a:6b:2d:54:81:93:08:52:73:3b:00:1b:06:bc:0c:1b:67:a6: 40:d2:a7:38:15:ed:49:2c:33:d8:42:f8:80:84:35:50:ce:fc: f8:2c:cb:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCR/HEGaQ0wS9YeHXdmF+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YzgxNGZmY2E1MzEwODYyYTIyMjRmMGFmZDkwY2FhOTZh YzBiNTQwHhcNMjUxMjA2MDUwMTE1WhcNMjUxMjA3MDUwMTE1WjAzMTEwLwYDVQQD EyhkMTIzNzBmOWRhMTY5MmZhNzk3YTIxNjg1ZDQ5YWUyNmVkMzM0MjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP13IwTm933QASUpptfL7zmg+FMZ PBJPqCao1WLIu+Ege5art9hGGkIuMo7wu2HNaE9PD6IODomy7Cv5oyYhq4fjH48Y uGAWH9yadnllHXemIPOTzdfdp2WbPsvVfD9nDZW87vNH731JKiiWQGx0aPBY1wE5 RLvXOebgpVGDGYcrOHBP37e17Whxl/cICKyd+zw9bNLDO6i5fLOL/ZISAG17iKZz oEkoPbELVaR7zglyRERTHI7I084mnzFVqt6XHY6VGMf4r0yG6J1XRQLaRfFdPABN ABAhWAejMpJNko3vKxybKDbytHHbp5UgTjmBH8XvilN9UnJrGl74KTp/CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEjcPnaFpL6eXohaF1JribtM0JMMB8GA1UdIwQY MBaAFLTIFP/KUxCGKiIk8K/ZDKqWrAtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xYWFlNDUtZjZiZS00MDFjLWIzZDAt ZjQ2N2IyZjQyYWY2LzEvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8xYWFlNDUtZjZiZS00MDFjLWIzZDAtZjQ2N2IyZjQyYWY2 LzEvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5HmP4DG YjDautffhIgpCAGkWpqxmnqMVh4QUGJtABCbfabKpq29QV+fAuGpD2GibVhNShAz 97nyonoQad1nxoL0fY5S9WAWoirMBvmDA4lIjpXbXsg36ypOtZ03bw8kf5BIWnrF ZKh0Kr9cjpYNtuRXYjZEpQFW+p7OUXouzHLPLUh6SmSKicvUoA8kDoEtsIR6xJaV 7qbaXkEfe/3/CeCXccciTU0QlGp+U/24YXLh0UroLdunvlz+aiHYgepswQOcKRCF uADZfVE/GlrZnyemRdVpRJKYOmstVIGTCFJzOwAbBrwMG2emQNKnOBXtSSwz2EL4 gIQ1UM78+CzLIg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:19 2025 by rpki-client