This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft File: ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft (raw, json) Hash identifier: zPpTOgJ4LsXKTp8n+tGhZkI1SHGBZLLqLoeVhhBx5dY= Subject key identifier: 04:16:AE:2C:A8:71:55:4A:DB:FA:78:8C:BC:8D:B3:86:D0:AE:24:31 Authority key identifier: 4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4 Certificate issuer: /CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4 Certificate serial: 019AF31C0EDF42463BEA21B8D2057D3759D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft Manifest number: 0A67 Signing time: Sat 06 Dec 2025 10:01:33 +0000 Manifest this update: Sat 06 Dec 2025 10:01:33 +0000 Manifest next update: Sun 07 Dec 2025 10:01:33 +0000 Files and hashes: 1: ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl (hash: c994PrcDziImlF9LabGpsXPuVSsScA9BFtJJBINl8LM=) 2: dhaZ9rJEY3VSapdxzWuOpswb-w0.roa (hash: jRn4LzSctiGARclpcid7MOPCN0FjXXNaOIwerI8w1dk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:0e:df:42:46:3b:ea:21:b8:d2:05:7d:37:59:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4 Validity Not Before: Dec 6 10:01:33 2025 GMT Not After : Dec 7 10:01:33 2025 GMT Subject: CN=0416ae2ca871554adbfa788cbc8db386d0ae2431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5a:06:43:a0:69:72:ee:c3:79:d1:9a:40:2b: 89:9e:5f:f5:48:40:75:cc:1f:55:6d:e4:d9:f8:66: 7a:ef:7b:c9:23:4d:7c:1f:92:9b:aa:61:12:bb:ce: dc:f2:82:02:29:58:60:c5:2d:db:7b:6a:a1:84:da: 83:62:5a:ae:fc:09:f8:2f:03:cb:66:bd:34:82:81: 1b:f2:2a:3e:ff:78:5a:43:c6:38:4c:0d:0b:1c:7f: 65:7d:55:a3:9e:9c:59:62:af:40:2c:df:93:a8:8f: cf:23:36:57:36:2c:7e:f0:c7:e4:eb:49:c9:99:7e: 68:cb:33:b5:31:12:a6:dd:9a:b7:e3:81:1a:75:ca: da:c2:0b:39:35:2d:0f:e3:5e:af:3a:5c:54:0e:af: 03:ec:dc:c3:e4:66:83:c2:a2:aa:8b:5b:7c:29:ac: c3:85:e7:90:94:d7:6e:bd:21:5f:95:00:20:e4:7f: 31:2e:ff:dd:c7:bd:1e:18:c3:7a:97:46:2c:a4:66: c5:c7:1b:b8:68:f6:da:35:05:af:b9:c5:70:42:b3: 18:36:28:34:9f:9f:f3:9b:fc:de:fb:db:ab:9a:01: f3:a4:ba:87:e0:21:8e:4d:1f:1f:a8:4a:e1:ce:df: 58:d0:9f:40:50:ab:a3:72:cc:9f:1e:73:a9:7b:7e: e5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:16:AE:2C:A8:71:55:4A:DB:FA:78:8C:BC:8D:B3:86:D0:AE:24:31 X509v3 Authority Key Identifier: keyid:4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:25:0c:54:c5:a1:a8:72:5e:e0:9f:ac:64:a3:cd:76:12:bf: 79:0a:70:e9:42:78:a3:0f:6c:41:b7:b6:e6:da:7d:67:6b:1c: 09:f5:a8:94:cd:66:ca:6c:aa:33:5d:d1:74:b7:ad:45:1f:9b: ed:36:2a:00:41:62:ca:bb:76:6f:2e:2a:b5:2c:01:ce:cc:3b: c8:27:36:5c:75:d0:c5:f2:b2:1c:22:28:45:c9:8f:61:d0:32: 45:cb:24:af:d3:18:69:9e:29:4a:07:e9:88:c3:62:0f:0b:e0: 2d:6d:73:0a:70:0b:a4:7c:7a:30:1e:94:4a:88:38:85:f8:80: 6c:ac:74:fe:82:35:d0:e7:dc:1c:8a:cd:9f:23:32:cf:ba:f1: 5d:97:cf:87:71:b6:0c:9f:27:9c:c1:4d:8d:6b:df:aa:68:10: 40:45:fe:4a:4e:7f:13:c5:c4:bb:d1:d9:86:5c:4f:5e:a9:22: 95:2b:b1:ed:49:42:c8:24:bf:e4:ea:c9:41:3e:00:18:73:e2: 3f:0e:0b:a8:a9:be:b1:bc:af:25:64:6a:df:36:44:e0:12:af: d6:ae:9f:25:1e:41:67:fb:87:76:bb:30:d7:22:13:c6:9c:2f: 49:38:b9:13:ec:f6:3d:91:9c:57:87:a7:cb:f4:54:49:c9:4d: cb:10:56:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHA7fQkY76iG40gV9N1nVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMTI5ZmJjYzdhZThmNWI0MDE5ZjA3YTNkNmQyZTE4NDk2 YjVlZTQwHhcNMjUxMjA2MTAwMTMzWhcNMjUxMjA3MTAwMTMzWjAzMTEwLwYDVQQD EygwNDE2YWUyY2E4NzE1NTRhZGJmYTc4OGNiYzhkYjM4NmQwYWUyNDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1oGQ6Bpcu7DedGaQCuJnl/1SEB1 zB9VbeTZ+GZ673vJI018H5KbqmESu87c8oICKVhgxS3be2qhhNqDYlqu/An4LwPL Zr00goEb8io+/3haQ8Y4TA0LHH9lfVWjnpxZYq9ALN+TqI/PIzZXNix+8Mfk60nJ mX5oyzO1MRKm3Zq344Eadcrawgs5NS0P416vOlxUDq8D7NzD5GaDwqKqi1t8KazD heeQlNduvSFflQAg5H8xLv/dx70eGMN6l0YspGbFxxu4aPbaNQWvucVwQrMYNig0 n5/zm/ze+9urmgHzpLqH4CGOTR8fqErhzt9Y0J9AUKujcsyfHnOpe37lCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQWriyocVVK2/p4jLyNs4bQriQxMB8GA1UdIwQY MBaAFE4Sn7zHro9bQBnwej1tLhhJa17kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGhLZnZNZXVqMXRBR2ZCNlBXMHVHRWxyWHVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mMjlhNTItMzcyMC00ODBmLTgwZGIt OTFkMmI0ODkwMzY5LzEvVGhLZnZNZXVqMXRBR2ZCNlBXMHVHRWxyWHVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9mMjlhNTItMzcyMC00ODBmLTgwZGItOTFkMmI0ODkwMzY5 LzEvVGhLZnZNZXVqMXRBR2ZCNlBXMHVHRWxyWHVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCUMVMWh qHJe4J+sZKPNdhK/eQpw6UJ4ow9sQbe25tp9Z2scCfWolM1mymyqM13RdLetRR+b 7TYqAEFiyrt2by4qtSwBzsw7yCc2XHXQxfKyHCIoRcmPYdAyRcskr9MYaZ4pSgfp iMNiDwvgLW1zCnALpHx6MB6USog4hfiAbKx0/oI10OfcHIrNnyMyz7rxXZfPh3G2 DJ8nnMFNjWvfqmgQQEX+Sk5/E8XEu9HZhlxPXqkilSux7UlCyCS/5OrJQT4AGHPi Pw4LqKm+sbyvJWRq3zZE4BKv1q6fJR5BZ/uHdrsw1yITxpwvSTi5E+z2PZGcV4en y/RUSclNyxBWpw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:00:25 2025 by rpki-client