This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json) Hash identifier: FHII1E0B0teia4oal7AnpfHc9GhYzGU0mAfOBY7HGl4= Subject key identifier: D5:4A:99:25:24:74:FC:AE:7A:01:A7:07:33:2C:EB:29:AF:11:A8:81 Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89 Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189 Certificate serial: 019AF5AEEF03272A63F69DA5D6A69750F00A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 22:01:13 +0000 Manifest this update: Sat 06 Dec 2025 22:01:13 +0000 Manifest next update: Sun 07 Dec 2025 22:01:13 +0000 Files and hashes: 1: WmxX7pBfpD5c2m2kHOUO4M_bBgA.roa (hash: q0DpW8XtR4IxHRwLJz0IGFkpb8cJ4HYo8d4HsEmNl8o=) 2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: SSg84AfhGNhtyP8kw61Fh7VKzv6yKiE5OphQuXh4QCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:ef:03:27:2a:63:f6:9d:a5:d6:a6:97:50:f0:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189 Validity Not Before: Dec 6 22:01:13 2025 GMT Not After : Dec 7 22:01:13 2025 GMT Subject: CN=d54a99252474fcae7a01a707332ceb29af11a881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b2:de:6d:70:b5:80:78:15:f7:73:e3:c9:cc: 44:82:04:7b:bc:d4:9b:aa:46:5d:6b:93:3a:85:b1: 05:ca:dc:7c:87:ee:3d:d6:8c:12:13:d7:70:42:b8: a1:07:f5:c6:33:ce:70:e2:65:7b:b5:e4:26:0d:bf: 41:7a:3e:32:35:70:91:64:c9:86:7c:95:34:f3:49: f3:af:8d:50:0e:6f:66:81:d7:de:e3:a5:94:53:6c: 56:1c:30:18:53:e8:66:df:a3:79:b9:e3:e6:8d:e2: 96:31:a8:77:74:76:01:a6:4d:d7:f4:28:3e:76:06: 95:87:de:72:70:1a:88:0e:ca:f6:74:76:f2:80:9d: a2:cd:bf:46:aa:0a:3c:0f:f6:58:37:de:78:a5:b2: 66:09:93:86:31:38:e5:e3:63:94:d5:5a:75:bf:47: 93:5a:5b:43:1d:54:b4:a9:8f:47:9a:4c:54:68:25: 72:e1:ce:1a:1f:f5:6a:8e:9f:a4:ae:36:15:0f:8f: 4d:92:4d:8f:f9:a3:33:5d:c9:dc:fb:5f:90:fb:c6: 88:46:74:63:e4:30:d9:a8:96:81:b6:f0:46:8e:7a: 59:85:11:8b:88:2c:59:e2:06:3d:6f:b1:af:2c:72: 7a:5b:2b:26:2a:0d:41:76:4b:a7:f6:96:0b:8e:74: 63:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4A:99:25:24:74:FC:AE:7A:01:A7:07:33:2C:EB:29:AF:11:A8:81 X509v3 Authority Key Identifier: keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:3c:93:cf:b0:54:4b:12:37:f2:db:88:48:aa:91:55:a8:38: 45:08:7d:74:29:7a:0a:cb:f1:02:8c:db:3c:fa:81:6c:58:ad: 6b:e7:ec:29:13:51:0d:a5:3e:92:7b:40:65:18:65:35:6f:20: 45:06:aa:5f:55:5d:0c:8e:21:98:18:96:1f:63:a6:f4:f5:90: a0:e6:1c:d6:1b:62:be:be:7b:89:35:7f:c0:4b:65:b1:f4:77: 03:bb:76:03:d0:85:d7:15:3f:95:e3:09:fd:c8:4e:2e:01:d5: ee:4c:7d:f7:9c:63:d0:b6:09:7b:d3:26:00:1d:67:80:64:ac: 5d:0d:03:36:68:31:03:d2:95:0c:9d:20:0c:18:a5:c5:50:ba: f2:22:aa:a4:a2:d2:0b:36:40:1b:4a:2d:29:b4:b1:b1:16:73: 65:56:12:57:42:12:fa:a1:8b:e2:7e:39:47:58:02:02:41:2f: 4f:13:a3:ae:83:06:c2:57:17:a7:23:30:68:2d:42:4d:68:ac: 46:fd:63:bc:a9:c8:f6:0f:30:7d:34:53:18:91:57:d1:11:fc: 4f:69:08:c6:1d:69:cc:2c:0c:56:e5:13:6a:bc:a8:d6:08:e3: e8:3e:78:e2:97:9d:58:4b:c3:d4:a7:39:2e:78:a2:34:a0:82: 87:07:ec:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ru8DJypj9p2l1qaXUPAKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTg4MmY3MTcxYWY2ZGNkY2NjOWNkNzlmOThkZWM2NzU3 ZmUxODkwHhcNMjUxMjA2MjIwMTEzWhcNMjUxMjA3MjIwMTEzWjAzMTEwLwYDVQQD EyhkNTRhOTkyNTI0NzRmY2FlN2EwMWE3MDczMzJjZWIyOWFmMTFhODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7LebXC1gHgV93PjycxEggR7vNSb qkZda5M6hbEFytx8h+491owSE9dwQrihB/XGM85w4mV7teQmDb9Bej4yNXCRZMmG fJU080nzr41QDm9mgdfe46WUU2xWHDAYU+hm36N5uePmjeKWMah3dHYBpk3X9Cg+ dgaVh95ycBqIDsr2dHbygJ2izb9Gqgo8D/ZYN954pbJmCZOGMTjl42OU1Vp1v0eT WltDHVS0qY9HmkxUaCVy4c4aH/Vqjp+krjYVD49Nkk2P+aMzXcnc+1+Q+8aIRnRj 5DDZqJaBtvBGjnpZhRGLiCxZ4gY9b7GvLHJ6WysmKg1Bdkun9pYLjnRjSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVKmSUkdPyuegGnBzMs6ymvEaiBMB8GA1UdIwQY MBaAFLTogvcXGvbc3Myc15+Y3sZ1f+GJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAt ZmVmZThlMzQwMDZjLzEvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAtZmVmZThlMzQwMDZj LzEvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzyTz7BU SxI38tuISKqRVag4RQh9dCl6CsvxAozbPPqBbFita+fsKRNRDaU+kntAZRhlNW8g RQaqX1VdDI4hmBiWH2Om9PWQoOYc1htivr57iTV/wEtlsfR3A7t2A9CF1xU/leMJ /chOLgHV7kx995xj0LYJe9MmAB1ngGSsXQ0DNmgxA9KVDJ0gDBilxVC68iKqpKLS CzZAG0otKbSxsRZzZVYSV0IS+qGL4n45R1gCAkEvTxOjroMGwlcXpyMwaC1CTWis Rv1jvKnI9g8wfTRTGJFX0RH8T2kIxh1pzCwMVuUTaryo1gjj6D544pedWEvD1Kc5 LniiNKCChwfsKQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:38 2025 by rpki-client