This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft File: tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft (raw, json) Hash identifier: Tun+l1d58CFW5xxtpZASG8ek2hjPwnqNBTGT98dM9tQ= Subject key identifier: 71:E1:E9:A5:FF:6A:29:B2:BD:CD:FD:5B:01:ED:65:2C:B7:93:17:BF Authority key identifier: B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88 Certificate issuer: /CN=b4bdde78415b69c31277c0aac7fca6607d635d88 Certificate serial: 019B27771DD6DD4A8C6AFEF5E05FD5C6E0F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 14:01:16 +0000 Manifest this update: Tue 16 Dec 2025 14:01:16 +0000 Manifest next update: Wed 17 Dec 2025 14:01:16 +0000 Files and hashes: 1: 9zCWH-Ac1Rhc3_vCx_Ixlkh16vw.asa (hash: 1GzmLCaUmzKWkWm0Xkaj4ZmWi88kwnMLhp1nR2/73XM=) 2: ag-uYpovt5JPQ3cFAXtXn4zz86A.roa (hash: 2LKnP2sHY9S5jGwYqiGKID4jG+yM+87plZe5I7Vq4ns=) 3: tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl (hash: 8Wat+ASN402V3r1Dfc2bobLYPDNACFU4H+xezOZAyhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:77:1d:d6:dd:4a:8c:6a:fe:f5:e0:5f:d5:c6:e0:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4bdde78415b69c31277c0aac7fca6607d635d88 Validity Not Before: Dec 16 14:01:16 2025 GMT Not After : Dec 17 14:01:16 2025 GMT Subject: CN=71e1e9a5ff6a29b2bdcdfd5b01ed652cb79317bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:da:cf:93:80:ee:7b:d8:69:23:b4:cd:be:e2: 87:3e:31:3c:b1:c7:15:80:ca:5a:fa:28:b2:3c:f8: a8:6d:af:5a:4c:e0:0f:c0:4d:ee:27:58:19:8b:e0: 2d:43:b1:f9:14:82:6b:c0:de:9c:f3:2e:d8:31:e8: 4f:5a:cc:b4:cc:96:ba:ad:d5:8b:b7:de:06:2c:61: f7:e3:b5:b3:ca:6c:30:32:3e:ac:66:7e:18:c3:74: 25:e8:e9:d2:ad:b6:40:81:ba:34:4f:7d:a5:78:de: f8:27:f6:34:89:db:9a:66:8b:50:19:cc:8e:55:c2: 10:bf:56:3a:4f:54:63:12:0a:af:54:ab:7c:3d:d7: dc:d2:bb:a1:a9:e5:bd:0c:9d:2e:08:6b:53:89:a2: 79:b8:9d:7d:4c:a4:39:56:56:ec:52:75:28:36:61: 1a:0f:cc:e3:66:b5:c0:5c:93:95:6d:67:4d:38:a6: aa:aa:83:eb:f5:46:3f:a6:1b:41:e4:de:5f:08:09: c0:68:2d:ab:46:52:e6:ce:ed:c5:a6:d3:37:87:ae: 3c:5d:e5:cb:00:15:b4:21:f4:c5:40:0f:f9:90:59: 85:ad:03:cf:35:9c:30:f0:9b:84:3c:8e:63:b9:03: 39:fd:60:71:d6:06:6e:44:4f:c0:b0:e8:53:b3:12: 88:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E1:E9:A5:FF:6A:29:B2:BD:CD:FD:5B:01:ED:65:2C:B7:93:17:BF X509v3 Authority Key Identifier: keyid:B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:df:a3:19:af:9d:54:c0:90:30:30:dd:86:a3:da:cc:be:5f: f8:08:e2:19:bf:cf:33:92:00:b1:0d:95:08:e6:3a:58:82:aa: 7c:7f:b5:d7:aa:c7:99:fa:a7:f1:34:b8:09:42:d4:67:4e:f0: a0:dc:71:23:3e:fb:0f:3e:a0:65:6f:a7:e4:f0:53:b1:dc:f2: f9:be:89:bc:da:cf:41:c1:19:e4:6b:2d:ce:fe:10:a7:bd:ea: 3b:64:91:ad:50:02:e3:bf:e2:5c:9f:87:8b:4f:95:bf:9e:e2: f2:dc:39:31:fc:89:2c:cd:c0:a8:c2:c1:27:4e:c2:97:d5:ce: 61:e4:08:79:39:d5:52:9d:11:a1:9f:79:b8:6f:95:31:df:d1: 8d:63:9e:ec:94:2d:19:c1:16:64:7c:a1:61:f9:ed:5a:20:31: 7f:f6:99:a4:a4:45:1a:1b:06:eb:5d:7a:67:13:cc:2f:a1:8c: 92:8a:cc:00:3b:dc:dc:8d:0b:a8:c0:1e:07:1f:12:9f:71:e4: 12:29:91:d4:35:db:34:b4:db:fe:7e:89:36:12:6e:ed:cc:49: 23:dc:20:9f:f9:58:5c:50:a8:18:fe:20:73:f8:92:e6:e6:7e: b1:af:e7:10:1d:34:ed:88:be:6f:6a:dd:88:93:07:67:52:73: 8b:96:73:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsndx3W3UqMav714F/VxuDzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YmRkZTc4NDE1YjY5YzMxMjc3YzBhYWM3ZmNhNjYwN2Q2 MzVkODgwHhcNMjUxMjE2MTQwMTE2WhcNMjUxMjE3MTQwMTE2WjAzMTEwLwYDVQQD Eyg3MWUxZTlhNWZmNmEyOWIyYmRjZGZkNWIwMWVkNjUyY2I3OTMxN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9rPk4Due9hpI7TNvuKHPjE8sccV gMpa+iiyPPioba9aTOAPwE3uJ1gZi+AtQ7H5FIJrwN6c8y7YMehPWsy0zJa6rdWL t94GLGH347WzymwwMj6sZn4Yw3Ql6OnSrbZAgbo0T32leN74J/Y0iduaZotQGcyO VcIQv1Y6T1RjEgqvVKt8Pdfc0ruhqeW9DJ0uCGtTiaJ5uJ19TKQ5VlbsUnUoNmEa D8zjZrXAXJOVbWdNOKaqqoPr9UY/phtB5N5fCAnAaC2rRlLmzu3FptM3h648XeXL ABW0IfTFQA/5kFmFrQPPNZww8JuEPI5juQM5/WBx1gZuRE/AsOhTsxKI3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHh6aX/aimyvc39WwHtZSy3kxe/MB8GA1UdIwQY MBaAFLS93nhBW2nDEnfAqsf8pmB9Y12IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEwzZWVFRmJhY01TZDhDcXhfeW1ZSDFqWFlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zNGQ0NzAtNDlmNy00YWUwLWI2MWEt MDk0NGJlZDBlZDI2LzEvdEwzZWVFRmJhY01TZDhDcXhfeW1ZSDFqWFlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8zNGQ0NzAtNDlmNy00YWUwLWI2MWEtMDk0NGJlZDBlZDI2 LzEvdEwzZWVFRmJhY01TZDhDcXhfeW1ZSDFqWFlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFt+jGa+d VMCQMDDdhqPazL5f+AjiGb/PM5IAsQ2VCOY6WIKqfH+116rHmfqn8TS4CULUZ07w oNxxIz77Dz6gZW+n5PBTsdzy+b6JvNrPQcEZ5Gstzv4Qp73qO2SRrVAC47/iXJ+H i0+Vv57i8tw5MfyJLM3AqMLBJ07Cl9XOYeQIeTnVUp0RoZ95uG+VMd/RjWOe7JQt GcEWZHyhYfntWiAxf/aZpKRFGhsG6116ZxPML6GMkorMADvc3I0LqMAeBx8Sn3Hk EimR1DXbNLTb/n6JNhJu7cxJI9wgn/lYXFCoGP4gc/iS5uZ+sa/nEB007Yi+b2rd iJMHZ1Jzi5ZzNA== -----END CERTIFICATE-----Generated at Tue Dec 16 19:18:24 2025 by rpki-client