This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft File: Ts9hevNfNyTn2oYOv75OwTiuGAA.mft (raw, json) Hash identifier: 3eG2R037J62UYux80tB5g+beXWWW/2szDcxtU5iYGSI= Subject key identifier: C4:1A:A5:B3:B1:01:77:3A:AF:4D:D4:03:16:17:EB:1E:27:EF:7C:E8 Authority key identifier: 4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00 Certificate issuer: /CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800 Certificate serial: 019AF088C2FF92A930DC13139D1BC00A3F51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft Manifest number: 14A5 Signing time: Fri 05 Dec 2025 22:01:25 +0000 Manifest this update: Fri 05 Dec 2025 22:01:25 +0000 Manifest next update: Sat 06 Dec 2025 22:01:25 +0000 Files and hashes: 1: PhMpSawzWF4ex2C_9UJlDInR9Qw.roa (hash: 8Mwytw2cAElmiryd1WCNePGo22yW+hClbYeRH6uFgoU=) 2: Ts9hevNfNyTn2oYOv75OwTiuGAA.crl (hash: /4OcSoUde5SfFq2jni+FlqFKCmVzJh2JOR77pSB4Rpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:c2:ff:92:a9:30:dc:13:13:9d:1b:c0:0a:3f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800 Validity Not Before: Dec 5 22:01:25 2025 GMT Not After : Dec 6 22:01:25 2025 GMT Subject: CN=c41aa5b3b101773aaf4dd4031617eb1e27ef7ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6e:98:dc:bc:13:33:e2:48:e5:53:2d:fb:58: a4:9f:f4:1b:90:80:ad:7e:85:61:c3:51:2e:d6:12: b9:c4:f4:a2:e6:81:64:8c:e4:e9:3c:ea:a1:7d:6d: 07:1b:5b:b1:3d:58:de:e2:9a:e8:4c:df:92:4b:2e: af:2d:c0:79:0c:20:c5:fa:ca:7e:fc:5c:b9:cc:01: a2:eb:22:cd:75:b6:e8:3a:15:54:77:c1:e1:85:70: bf:45:5d:2e:42:c9:3e:7b:8e:48:fe:3b:84:74:5d: 0a:05:3e:89:7c:5d:a7:6d:b5:b6:bc:93:eb:7f:c8: ac:e6:bc:e3:f1:6a:04:be:db:cf:c5:60:9f:08:49: 30:06:7f:98:17:f6:b4:62:4d:68:c7:94:75:cc:ca: 16:48:ed:31:05:e5:44:51:4b:8c:55:d4:18:92:bd: d8:7b:d2:d2:de:78:c4:f3:fe:cb:0e:f5:fa:53:47: 65:c7:11:03:0d:3a:e7:82:c3:4e:88:2a:c0:da:20: 94:e2:7e:a7:7e:21:14:e7:a0:2b:75:ab:c6:f7:93: 59:eb:ed:8b:11:ce:6f:c7:9a:4b:e5:af:9d:82:0f: ac:c7:73:7a:53:b7:b6:25:6e:d2:1c:04:16:a6:b7: c3:1d:37:bb:df:5a:da:ce:58:84:5e:61:de:ab:cc: 7c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1A:A5:B3:B1:01:77:3A:AF:4D:D4:03:16:17:EB:1E:27:EF:7C:E8 X509v3 Authority Key Identifier: keyid:4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:37:b6:15:fc:5d:1b:f1:43:c2:ed:67:a3:77:e4:3a:87:18: 75:07:90:65:8f:a6:63:a5:a2:78:90:f9:de:d6:d9:32:07:b6: 29:ff:ee:4d:68:49:11:a5:fd:c4:3b:f8:49:d1:9a:31:a2:a1: 70:59:17:17:b9:a8:96:42:76:63:c1:39:79:5e:50:93:93:38: 5b:b9:c2:5a:10:c1:4b:28:f1:36:df:15:f6:55:0b:b0:a2:73: e6:e9:e1:d2:7b:23:6e:67:e1:94:de:13:67:41:38:ca:ce:c1: 32:f1:ee:78:f6:62:e8:a8:a0:c0:af:2f:4d:eb:4b:d2:a0:12: c1:b4:db:1a:5f:8f:71:3b:06:c3:eb:13:57:cd:9d:fb:0b:5e: 20:66:d7:46:cb:2c:ce:8b:b4:9e:d2:7a:f8:37:22:31:60:34: 10:96:6f:15:f3:9b:6d:a8:28:a1:7d:cd:23:9a:1e:4f:6b:f1: 97:90:bf:c9:05:55:91:d4:cf:7c:60:b3:f6:99:ef:17:35:ab: 79:3e:fe:fe:8c:9c:49:0f:3c:85:ec:35:41:81:79:54:b2:42: 25:3a:f5:10:ed:fa:53:00:a9:40:2a:c4:31:a4:8e:47:92:9a: 0f:1c:07:21:b9:c3:a8:6b:00:29:8b:95:b8:b3:b0:ef:81:ec: d0:d8:95:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiML/kqkw3BMTnRvACj9RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlY2Y2MTdhZjM1ZjM3MjRlN2RhODYwZWJmYmU0ZWMxMzhh ZTE4MDAwHhcNMjUxMjA1MjIwMTI1WhcNMjUxMjA2MjIwMTI1WjAzMTEwLwYDVQQD EyhjNDFhYTViM2IxMDE3NzNhYWY0ZGQ0MDMxNjE3ZWIxZTI3ZWY3Y2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr26Y3LwTM+JI5VMt+1ikn/QbkICt foVhw1Eu1hK5xPSi5oFkjOTpPOqhfW0HG1uxPVje4proTN+SSy6vLcB5DCDF+sp+ /Fy5zAGi6yLNdbboOhVUd8HhhXC/RV0uQsk+e45I/juEdF0KBT6JfF2nbbW2vJPr f8is5rzj8WoEvtvPxWCfCEkwBn+YF/a0Yk1ox5R1zMoWSO0xBeVEUUuMVdQYkr3Y e9LS3njE8/7LDvX6U0dlxxEDDTrngsNOiCrA2iCU4n6nfiEU56ArdavG95NZ6+2L Ec5vx5pL5a+dgg+sx3N6U7e2JW7SHAQWprfDHTe731razliEXmHeq8x8AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQapbOxAXc6r03UAxYX6x4n73zoMB8GA1UdIwQY MBaAFE7PYXrzXzck59qGDr++TsE4rhgAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHM5aGV2TmZOeVRuMm9ZT3Y3NU93VGl1R0FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi85NzVjNWUtNmIwNS00YTQ3LTllOTEt MTM2OTkzNjVjM2M3LzEvVHM5aGV2TmZOeVRuMm9ZT3Y3NU93VGl1R0FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi85NzVjNWUtNmIwNS00YTQ3LTllOTEtMTM2OTkzNjVjM2M3 LzEvVHM5aGV2TmZOeVRuMm9ZT3Y3NU93VGl1R0FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgje2Ffxd G/FDwu1no3fkOocYdQeQZY+mY6WieJD53tbZMge2Kf/uTWhJEaX9xDv4SdGaMaKh cFkXF7molkJ2Y8E5eV5Qk5M4W7nCWhDBSyjxNt8V9lULsKJz5unh0nsjbmfhlN4T Z0E4ys7BMvHuePZi6KigwK8vTetL0qASwbTbGl+PcTsGw+sTV82d+wteIGbXRsss zou0ntJ6+DciMWA0EJZvFfObbagooX3NI5oeT2vxl5C/yQVVkdTPfGCz9pnvFzWr eT7+/oycSQ88hew1QYF5VLJCJTr1EO36UwCpQCrEMaSOR5KaDxwHIbnDqGsAKYuV uLOw74Hs0NiVKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:22 2025 by rpki-client