This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft File: Tj_pDw-taiXUa9fDNbki2gMbLHg.mft (raw, json) Hash identifier: ppho+XLBLB3zKcXzvY3wkvQHeWgV0U9LcbvzsQaYcS4= Subject key identifier: B3:F4:23:CA:C6:74:43:F7:FB:1D:A2:65:A6:8D:19:E0:D2:9C:81:00 Authority key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78 Certificate issuer: /CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78 Certificate serial: 019B2777684C1261F07123F6E5D08D345EC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft Manifest number: 0C25 Signing time: Tue 16 Dec 2025 14:01:35 +0000 Manifest this update: Tue 16 Dec 2025 14:01:35 +0000 Manifest next update: Wed 17 Dec 2025 14:01:35 +0000 Files and hashes: 1: A8YDmTBK0K140SrVGjKT4rgJaBs.roa (hash: dZ2I5la+5OGaL56JsGr6ibfQkik4DvtIbwTHLacKDFU=) 2: Tj_pDw-taiXUa9fDNbki2gMbLHg.crl (hash: 8xzfoF7Mkf7cD0DHXiBxD/jchH2mObEA8P4XpaoXV2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:77:68:4c:12:61:f0:71:23:f6:e5:d0:8d:34:5e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78 Validity Not Before: Dec 16 14:01:35 2025 GMT Not After : Dec 17 14:01:35 2025 GMT Subject: CN=b3f423cac67443f7fb1da265a68d19e0d29c8100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:43:18:83:80:fc:22:89:62:6f:7d:76:8c:ad: 2e:93:6c:64:93:83:b3:b1:22:82:62:38:e3:d6:c6: cf:78:6d:68:d2:ee:fa:b9:ee:02:a5:20:c5:ec:e2: 0a:c4:62:ab:bc:36:15:9d:19:d0:e7:70:fa:c8:a4: 4f:22:f9:d2:30:53:23:b5:9a:d9:b6:e7:70:24:9c: 3d:98:3e:10:d1:09:20:9c:71:68:2c:e8:ae:13:08: 06:39:24:06:89:83:7a:88:4b:3c:40:b9:3f:a9:e5: 50:e1:78:cc:62:0f:f5:59:41:70:c8:d4:f4:20:b2: 08:fc:59:7e:50:cd:8d:11:ca:fd:89:0e:f2:46:72: 9f:7c:01:1e:6b:5c:57:5a:02:70:d3:f3:c8:c2:0d: f2:fa:56:96:3a:c7:6b:b4:1e:e7:1f:c3:f7:6e:e3: ff:bc:be:d9:d9:8d:ba:14:0a:98:0e:90:04:eb:f2: 8a:48:bd:29:6a:94:b0:46:d0:ea:e4:24:90:a2:d5: 6b:14:91:0b:a8:f1:6c:07:ae:ad:96:af:54:c2:85: 7b:59:e8:ce:20:1e:93:ff:92:60:be:f3:e4:5d:9d: ed:f9:c8:18:ad:e3:39:a6:36:a4:59:83:d5:64:bd: 22:b9:b0:41:ef:2d:60:fc:3d:c7:8f:85:22:1c:dc: d8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F4:23:CA:C6:74:43:F7:FB:1D:A2:65:A6:8D:19:E0:D2:9C:81:00 X509v3 Authority Key Identifier: keyid:4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:47:ca:4a:5a:6f:c3:aa:36:f4:ef:50:ae:0c:99:55:7b:61: c3:fd:6d:c3:26:2b:2b:87:0e:bf:f7:d4:45:70:f9:79:fd:84: 6c:70:44:7e:8a:c1:78:ab:e7:25:e4:00:37:a3:93:1f:5f:b4: c6:81:ec:f3:5b:b0:c0:3e:a2:f1:15:ea:ee:d9:8d:36:54:59: 45:93:6e:1a:c6:ae:74:fc:5a:93:25:b0:e0:57:45:22:6a:7b: 6d:9b:85:0a:a3:cc:fc:a2:a3:7e:0b:9f:55:b8:77:7c:7d:02: 49:89:60:17:f9:33:94:74:e6:8c:61:34:5a:de:65:d8:60:f0: 5f:71:d0:92:d4:f4:3a:e0:b5:84:13:33:e5:6b:77:91:a9:c7: 05:9e:a2:42:6e:3a:00:24:ae:bf:5d:73:2e:bb:26:37:01:75: 4d:92:05:a4:09:f1:3f:c9:b3:e7:ec:1f:19:76:d0:57:f4:09: bd:e9:06:2c:d0:03:50:32:8a:73:8c:4a:95:b0:65:7f:cc:4d: b4:1b:9b:fa:f1:87:2b:50:21:54:24:64:62:d3:ff:77:c6:ce: af:0a:fc:86:bd:a7:d2:f3:56:bf:c6:a2:98:1e:c3:ab:34:59: be:0c:e4:2f:e2:cb:9e:d6:17:c3:54:2b:02:ac:4f:77:43:19: 2b:f6:61:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnd2hMEmHwcSP25dCNNF7JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlM2ZlOTBmMGZhZDZhMjVkNDZiZDdjMzM1YjkyMmRhMDMx YjJjNzgwHhcNMjUxMjE2MTQwMTM1WhcNMjUxMjE3MTQwMTM1WjAzMTEwLwYDVQQD EyhiM2Y0MjNjYWM2NzQ0M2Y3ZmIxZGEyNjVhNjhkMTllMGQyOWM4MTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEMYg4D8Iolib312jK0uk2xkk4Oz sSKCYjjj1sbPeG1o0u76ue4CpSDF7OIKxGKrvDYVnRnQ53D6yKRPIvnSMFMjtZrZ tudwJJw9mD4Q0QkgnHFoLOiuEwgGOSQGiYN6iEs8QLk/qeVQ4XjMYg/1WUFwyNT0 ILII/Fl+UM2NEcr9iQ7yRnKffAEea1xXWgJw0/PIwg3y+laWOsdrtB7nH8P3buP/ vL7Z2Y26FAqYDpAE6/KKSL0papSwRtDq5CSQotVrFJELqPFsB66tlq9UwoV7WejO IB6T/5JgvvPkXZ3t+cgYreM5pjakWYPVZL0iubBB7y1g/D3Hj4UiHNzYXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLP0I8rGdEP3+x2iZaaNGeDSnIEAMB8GA1UdIwQY MBaAFE4/6Q8PrWol1GvXwzW5ItoDGyx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGpfcER3LXRhaVhVYTlmRE5ia2kyZ01iTEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80Zjk0M2YtZDE2YS00OGRhLWI5M2Et MTQ4N2M2MDIwYzQ2LzEvVGpfcER3LXRhaVhVYTlmRE5ia2kyZ01iTEhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi80Zjk0M2YtZDE2YS00OGRhLWI5M2EtMTQ4N2M2MDIwYzQ2 LzEvVGpfcER3LXRhaVhVYTlmRE5ia2kyZ01iTEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0fKSlpv w6o29O9QrgyZVXthw/1twyYrK4cOv/fURXD5ef2EbHBEforBeKvnJeQAN6OTH1+0 xoHs81uwwD6i8RXq7tmNNlRZRZNuGsaudPxakyWw4FdFImp7bZuFCqPM/KKjfguf Vbh3fH0CSYlgF/kzlHTmjGE0Wt5l2GDwX3HQktT0OuC1hBMz5Wt3kanHBZ6iQm46 ACSuv11zLrsmNwF1TZIFpAnxP8mz5+wfGXbQV/QJvekGLNADUDKKc4xKlbBlf8xN tBub+vGHK1AhVCRkYtP/d8bOrwr8hr2n0vNWv8aimB7DqzRZvgzkL+LLntYXw1Qr AqxPd0MZK/Zh0A== -----END CERTIFICATE-----Generated at Tue Dec 16 16:05:34 2025 by rpki-client