This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft File: rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft (raw, json) Hash identifier: 5UO5HItdMmgxOtv4rWGRTl35Ln7NGxA9hHzHLHqAs78= Subject key identifier: FF:53:7E:B3:D1:81:F5:52:5E:82:86:B6:A9:A3:78:BB:61:EA:74:E5 Authority key identifier: AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B Certificate issuer: /CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b Certificate serial: 019AF12D8552BA3E958E7C33D8F2ECD4FCE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:23 +0000 Manifest this update: Sat 06 Dec 2025 01:01:23 +0000 Manifest next update: Sun 07 Dec 2025 01:01:23 +0000 Files and hashes: 1: T4ejI0o1-ZTfFiV7QKtB9D7UcpE.roa (hash: GaQ0ytKrYJcgBIWcbLoASBPxVTSW9++rXI3zKEi5m5Q=) 2: rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl (hash: cmeq0swDfRW1jMgRpLNi8u6bIA+mthAcGIBF5jF/txA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:85:52:ba:3e:95:8e:7c:33:d8:f2:ec:d4:fc:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b Validity Not Before: Dec 6 01:01:23 2025 GMT Not After : Dec 7 01:01:23 2025 GMT Subject: CN=ff537eb3d181f5525e8286b6a9a378bb61ea74e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:ab:c3:cd:0b:fe:ae:a3:ec:3d:ee:71:c1: 3f:a2:31:b0:b4:a8:05:06:20:17:4a:b9:8f:98:9d: dc:4d:38:1d:31:51:c4:56:22:53:14:f4:21:00:e8: af:5d:ff:17:cf:42:6a:58:4d:f5:08:5e:fb:16:2c: df:4e:f6:65:20:3b:9d:67:9b:4f:44:2a:c6:e4:7b: 7c:e3:86:fa:a8:e9:93:1f:0e:09:58:c0:93:68:08: 93:aa:56:89:06:7e:29:a9:3a:d1:45:97:3b:67:88: 9c:02:38:5d:4b:79:f6:5f:77:28:d3:d9:29:d6:40: 30:07:ed:67:5b:10:cd:2b:e3:67:f6:f5:21:0b:8c: 5a:d2:52:a8:b1:5c:f0:20:67:f8:16:e7:19:05:4a: 99:30:02:a8:23:07:ea:f2:5c:da:25:e2:72:45:d4: a5:5b:17:fe:26:27:a2:34:a1:03:46:f1:c4:b2:b0: cc:f8:6e:fa:a4:59:ca:e6:fd:61:f7:23:bd:e9:cf: 92:f4:57:8a:4b:ce:6c:a0:d0:ce:37:74:e7:c7:d3: bc:3a:de:d5:d8:3f:bb:c9:08:65:66:fb:05:13:e3: 7a:03:82:ec:9b:f8:d0:f9:41:59:4f:05:7e:9e:71: c0:3f:69:8d:a1:f8:67:26:f3:e6:23:13:e5:d0:5d: 13:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:53:7E:B3:D1:81:F5:52:5E:82:86:B6:A9:A3:78:BB:61:EA:74:E5 X509v3 Authority Key Identifier: keyid:AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:4f:1f:02:71:7f:a1:ec:14:dc:e7:d3:25:b2:16:42:f8:2b: da:25:f5:65:c2:20:b7:9c:88:ae:0d:f9:33:3b:f5:75:71:37: 19:72:ec:f9:77:48:07:70:fa:24:96:75:f7:c6:be:e2:52:cc: dc:7c:b9:7d:b9:26:4c:84:82:17:17:61:a1:f5:28:ce:95:a3: d3:c2:cb:f6:ad:2b:89:e0:e7:ea:6c:dc:77:2f:a3:54:50:e6: c9:c2:b0:cc:b7:fb:34:2d:e4:d1:6f:cc:77:60:17:23:1b:ab: 2f:07:ea:d6:3c:52:d1:27:0f:51:59:e0:f6:13:bc:a5:bd:7a: e7:42:81:3b:18:34:53:72:8d:c4:f9:a2:fc:be:f6:07:9f:57: 32:ac:80:c3:15:f3:57:7d:72:fa:ad:89:b5:8b:03:28:f5:b9: 13:2a:71:6c:34:bc:f4:47:2a:ce:c0:24:37:af:5e:14:d0:da: 59:dd:eb:ba:4d:2d:67:2e:16:f8:0a:b8:38:a8:fa:b0:1e:ee: 7d:99:be:b4:37:c5:22:c4:cf:6b:dd:38:f9:55:24:31:6f:3d: d0:f4:b3:42:e7:4c:d0:1e:07:b1:85:a4:11:df:79:6f:21:e5: c7:63:46:3f:e4:4b:ba:7c:1b:5c:13:ad:1b:39:81:56:ff:31: 30:58:9e:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYVSuj6Vjnwz2PLs1PzlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZDZlZjE3ZTZmOTUxODE4OTBlNTRkMDAwYTJhYzhmZjJk MjQ5OWIwHhcNMjUxMjA2MDEwMTIzWhcNMjUxMjA3MDEwMTIzWjAzMTEwLwYDVQQD EyhmZjUzN2ViM2QxODFmNTUyNWU4Mjg2YjZhOWEzNzhiYjYxZWE3NGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnqrw80L/q6j7D3uccE/ojGwtKgF BiAXSrmPmJ3cTTgdMVHEViJTFPQhAOivXf8Xz0JqWE31CF77FizfTvZlIDudZ5tP RCrG5Ht844b6qOmTHw4JWMCTaAiTqlaJBn4pqTrRRZc7Z4icAjhdS3n2X3co09kp 1kAwB+1nWxDNK+Nn9vUhC4xa0lKosVzwIGf4FucZBUqZMAKoIwfq8lzaJeJyRdSl Wxf+JieiNKEDRvHEsrDM+G76pFnK5v1h9yO96c+S9FeKS85soNDON3Tnx9O8Ot7V 2D+7yQhlZvsFE+N6A4Lsm/jQ+UFZTwV+nnHAP2mNofhnJvPmIxPl0F0TAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9TfrPRgfVSXoKGtqmjeLth6nTlMB8GA1UdIwQY MBaAFK7W7xfm+VGBiQ5U0ACirI/y0kmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRidkYtYjVVWUdKRGxUUUFLS3NqX0xTU1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jN2VhMWYtYWEyNy00YWM4LThjYTct MGFlMGYxYWNjZGE0LzEvcnRidkYtYjVVWUdKRGxUUUFLS3NqX0xTU1pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jN2VhMWYtYWEyNy00YWM4LThjYTctMGFlMGYxYWNjZGE0 LzEvcnRidkYtYjVVWUdKRGxUUUFLS3NqX0xTU1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE08fAnF/ oewU3OfTJbIWQvgr2iX1ZcIgt5yIrg35Mzv1dXE3GXLs+XdIB3D6JJZ198a+4lLM 3Hy5fbkmTISCFxdhofUozpWj08LL9q0rieDn6mzcdy+jVFDmycKwzLf7NC3k0W/M d2AXIxurLwfq1jxS0ScPUVng9hO8pb1650KBOxg0U3KNxPmi/L72B59XMqyAwxXz V31y+q2JtYsDKPW5EypxbDS89EcqzsAkN69eFNDaWd3ruk0tZy4W+Aq4OKj6sB7u fZm+tDfFIsTPa904+VUkMW890PSzQudM0B4HsYWkEd95byHlx2NGP+RLunwbXBOt GzmBVv8xMFieaw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:43 2025 by rpki-client