This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft File: gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json) Hash identifier: +JP82okHSvk+HaDmHHOpJeKL5rFmEvFLyr6MclZq/14= Subject key identifier: 5A:FA:2B:92:0A:2B:6D:B7:9F:56:06:AA:C6:13:AE:B7:C4:1A:86:D9 Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B Certificate issuer: /CN=81300300de5005ada2bb66c268998a40c33ad23b Certificate serial: 019AF2768C381577BD0A639FC8E19AD280BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft Manifest number: 0DB8 Signing time: Sat 06 Dec 2025 07:00:46 +0000 Manifest this update: Sat 06 Dec 2025 07:00:46 +0000 Manifest next update: Sun 07 Dec 2025 07:00:46 +0000 Files and hashes: 1: _f2qtSqsuNVRAf2aMYbbvbg8ymw.roa (hash: 4sGopdLUwHqj2GkqogChdlm5xcViRd2S6Xz6oo4SiLA=) 2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: 7dC+9qp6E+hqHsHR9HKRFMEZ3b7LT0RQ5lTIEbqgU6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8c:38:15:77:bd:0a:63:9f:c8:e1:9a:d2:80:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b Validity Not Before: Dec 6 07:00:46 2025 GMT Not After : Dec 7 07:00:46 2025 GMT Subject: CN=5afa2b920a2b6db79f5606aac613aeb7c41a86d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:11:4e:8f:19:d1:06:0b:96:01:7f:9e:1a:93: 27:76:d7:b9:fe:fb:a9:d9:e6:bf:f2:4b:27:8d:64: cc:9d:b9:e3:ec:f6:fa:be:7a:99:db:84:36:cd:44: 92:d0:d3:83:26:42:45:de:19:16:9d:a5:47:c8:c8: 50:90:fa:a6:06:25:c3:47:18:b9:58:e6:fd:3c:6e: 0c:93:49:b5:45:d6:04:6f:80:df:be:67:cc:04:a4: 8e:c7:bc:26:50:9d:48:e1:f0:b2:7b:70:41:8a:0a: 65:68:b0:c7:43:01:c1:16:05:bf:d9:2e:19:cd:21: a2:f9:1a:46:fe:b5:32:91:d5:b2:ab:6c:1d:77:5d: e9:bd:13:61:31:63:34:7a:9d:f1:06:ab:85:e6:f3: 27:d1:d6:15:0a:c1:bb:e5:6e:09:0a:e6:e3:7e:e7: ba:89:24:05:38:4e:6b:d3:d1:29:84:78:af:9f:1a: f6:51:c4:7e:0e:41:9d:f7:9e:21:c3:9c:2d:7f:7c: 74:8f:8c:ed:ff:65:22:45:c4:a5:b9:ad:71:e9:fb: 2f:76:ce:01:99:fa:26:ab:20:1b:83:a0:6b:bb:68: 20:5a:16:9b:aa:80:ba:33:fb:50:2f:b3:de:01:dc: 96:67:ae:55:2f:76:b8:47:c9:24:48:29:3a:36:a0: 11:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FA:2B:92:0A:2B:6D:B7:9F:56:06:AA:C6:13:AE:B7:C4:1A:86:D9 X509v3 Authority Key Identifier: keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:66:27:1f:45:07:b3:f1:6f:2a:b7:99:8b:e8:ea:a9:e3:16: 5c:b5:4e:09:82:cf:b4:6b:9d:b6:b7:3a:31:a0:41:f2:4d:d9: 6a:ce:1a:7b:e2:e3:a9:d1:07:d3:c3:2a:68:56:7e:a9:c3:67: 08:80:52:31:f7:16:db:e1:0b:b8:2a:96:c8:fe:87:e8:90:f2: 97:28:39:b5:d9:4f:94:12:4e:72:4c:4b:cb:bb:0b:46:a0:dd: 98:e8:29:ba:13:ef:57:8a:0c:27:94:3d:b7:b6:0f:4c:9d:41: c3:94:44:8b:0b:4c:f5:dd:51:c6:78:3e:31:68:85:05:dd:b7: 69:d0:d4:74:3c:f1:77:9f:bf:45:4b:3b:02:c5:55:0d:2f:16: 08:fb:77:9f:1d:3b:d8:74:55:40:3e:d2:06:eb:7e:8c:18:c6: b4:2b:30:8a:eb:94:d7:41:83:9f:55:56:1d:6d:e9:d3:57:2b: 9c:c0:93:d8:cf:fd:e6:1b:f0:ca:5b:fd:79:c4:d9:a9:b7:82: 9a:10:5b:a9:b4:fa:9c:fa:cd:8c:f2:f4:01:79:f3:5f:04:26: 4f:a2:b0:96:ae:e0:e5:1c:b5:83:49:8e:30:5e:56:88:72:1a: c9:e4:75:43:bd:bb:19:01:bb:9f:69:ed:7b:a9:eb:b3:91:21: 2b:70:f9:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydow4FXe9CmOfyOGa0oC8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMzAwMzAwZGU1MDA1YWRhMmJiNjZjMjY4OTk4YTQwYzMz YWQyM2IwHhcNMjUxMjA2MDcwMDQ2WhcNMjUxMjA3MDcwMDQ2WjAzMTEwLwYDVQQD Eyg1YWZhMmI5MjBhMmI2ZGI3OWY1NjA2YWFjNjEzYWViN2M0MWE4NmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhFOjxnRBguWAX+eGpMndte5/vup 2ea/8ksnjWTMnbnj7Pb6vnqZ24Q2zUSS0NODJkJF3hkWnaVHyMhQkPqmBiXDRxi5 WOb9PG4Mk0m1RdYEb4DfvmfMBKSOx7wmUJ1I4fCye3BBigplaLDHQwHBFgW/2S4Z zSGi+RpG/rUykdWyq2wdd13pvRNhMWM0ep3xBquF5vMn0dYVCsG75W4JCubjfue6 iSQFOE5r09EphHivnxr2UcR+DkGd954hw5wtf3x0j4zt/2UiRcSlua1x6fsvds4B mfomqyAbg6Bru2ggWhabqoC6M/tQL7PeAdyWZ65VL3a4R8kkSCk6NqARBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFr6K5IKK223n1YGqsYTrrfEGobZMB8GA1UdIwQY MBaAFIEwAwDeUAWtortmwmiZikDDOtI7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1RBREFONVFCYTJpdTJiQ2FKbUtRTU02MGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kYmFkODgtZjgxOC00MzFlLTg3YTYt ZGZlZTk4NDAzN2FjLzEvZ1RBREFONVFCYTJpdTJiQ2FKbUtRTU02MGpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9kYmFkODgtZjgxOC00MzFlLTg3YTYtZGZlZTk4NDAzN2Fj LzEvZ1RBREFONVFCYTJpdTJiQ2FKbUtRTU02MGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOGYnH0UH s/FvKreZi+jqqeMWXLVOCYLPtGudtrc6MaBB8k3Zas4ae+LjqdEH08MqaFZ+qcNn CIBSMfcW2+ELuCqWyP6H6JDylyg5tdlPlBJOckxLy7sLRqDdmOgpuhPvV4oMJ5Q9 t7YPTJ1Bw5REiwtM9d1Rxng+MWiFBd23adDUdDzxd5+/RUs7AsVVDS8WCPt3nx07 2HRVQD7SBut+jBjGtCswiuuU10GDn1VWHW3p01crnMCT2M/95hvwylv9ecTZqbeC mhBbqbT6nPrNjPL0AXnzXwQmT6Kwlq7g5Ry1g0mOMF5WiHIayeR1Q727GQG7n2nt e6nrs5EhK3D5OQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:50:33 2025 by rpki-client