This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft File: tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json) Hash identifier: ot7vJarW2ZX8VZ2Ri7JFqSVL1OjvLojug8pmSxOtyPc= Subject key identifier: E8:0E:6E:13:09:43:0C:4A:41:2E:0C:93:F9:46:7F:67:25:C7:F5:0D Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48 Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448 Certificate serial: 019AF12D6EDB1AE58BB2F45486A60EC0260B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft Manifest number: 0586 Signing time: Sat 06 Dec 2025 01:01:17 +0000 Manifest this update: Sat 06 Dec 2025 01:01:17 +0000 Manifest next update: Sun 07 Dec 2025 01:01:17 +0000 Files and hashes: 1: hrqEKTykKr09BUd_K3mCMU0oC6Q.roa (hash: pufSFJ+QVHIcFkxQwEPRtygVlxFuvFk+kfnkYeAvjWg=) 2: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: 5M320mplTbTNgSeGqlkHMw9AdBM2wEQZac2wecca4ag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:6e:db:1a:e5:8b:b2:f4:54:86:a6:0e:c0:26:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448 Validity Not Before: Dec 6 01:01:17 2025 GMT Not After : Dec 7 01:01:17 2025 GMT Subject: CN=e80e6e1309430c4a412e0c93f9467f6725c7f50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:bd:bb:61:14:23:b9:14:f1:9f:1a:ce:6e: e2:98:7c:34:4f:a9:1e:85:f1:c2:30:7e:a2:44:87: ec:bd:91:e4:db:07:9c:32:54:1a:13:94:45:47:88: 31:96:67:d0:76:40:91:a5:fc:a8:d8:a4:a0:31:70: 2d:6d:bd:8a:00:af:f4:ec:24:d0:05:b1:29:41:96: f4:1f:0a:64:f1:ae:41:f9:27:98:3c:4c:c0:09:85: 8f:bf:5f:a1:a0:29:bd:56:c4:e5:0f:1e:49:81:74: ca:2b:b9:ab:e2:02:61:26:20:fb:5a:3f:c2:86:31: ed:84:ae:75:b3:4d:f0:89:53:35:90:fa:16:b2:06: 8d:2b:68:72:06:f6:9c:fd:7a:3a:01:ab:8a:54:ce: 38:92:5e:8f:e0:91:37:a8:29:a0:a4:32:89:11:2c: e2:76:81:0f:f5:3e:0c:82:87:9d:fe:c5:da:39:65: f0:69:18:c2:aa:30:1a:62:fc:a4:70:fe:6d:ec:df: 3b:f0:22:0e:89:e1:5f:e8:a7:09:95:0a:02:f3:4a: dc:e8:0c:32:6b:20:14:f4:0e:eb:00:14:5b:53:2e: 30:29:09:28:57:17:a1:15:6b:2b:94:36:73:d8:f0: 82:37:ce:7b:0b:dc:ed:d3:7a:f0:41:b2:ef:c3:46: 66:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0E:6E:13:09:43:0C:4A:41:2E:0C:93:F9:46:7F:67:25:C7:F5:0D X509v3 Authority Key Identifier: keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:98:ea:80:a1:55:33:ac:92:c5:ee:c2:00:88:fe:08:5f:6d: 53:e4:ed:91:89:45:d8:71:80:ec:df:9d:9e:91:df:90:82:09: 3b:3d:17:a3:b6:d7:c7:89:34:49:01:54:aa:1a:f1:31:51:1b: 18:11:35:be:82:51:14:2d:82:9e:75:06:22:86:b1:64:2f:7f: e8:ca:8d:79:70:09:eb:da:7f:6a:4c:38:40:18:3b:6c:9f:0a: 9c:63:de:f2:85:6d:b2:a3:a2:dc:5d:33:ba:b1:88:d9:6d:2f: b6:54:a2:35:c2:f9:ec:cc:b9:af:75:f3:df:c3:44:80:be:23: a8:8e:4a:6b:fe:3d:6e:0b:0c:d5:14:9e:86:7f:ad:59:e3:a4: 09:82:ec:80:78:7f:cb:b3:33:f1:52:4d:b7:9c:6f:46:51:9e: 8d:f0:26:6b:7f:62:bc:06:d4:a9:33:ec:20:65:4f:29:dc:3d: 4b:d4:7d:aa:7a:ad:19:db:b7:14:58:50:8d:c5:ae:11:54:6f: 42:bb:f2:56:dd:66:36:27:fc:f9:73:44:8f:e2:1d:c6:01:13: 31:ce:8d:1d:ae:1a:f2:e4:c8:cf:83:c4:06:ff:a6:18:78:b7: bd:2e:16:93:59:38:11:27:81:9c:d2:2d:16:56:06:62:91:fa: b0:91:bd:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLW7bGuWLsvRUhqYOwCYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YzQxZTU5ODM0ZGE2MTJkODNjYTI0MTk0ZjAyY2E2ZDc2 MDI0NDgwHhcNMjUxMjA2MDEwMTE3WhcNMjUxMjA3MDEwMTE3WjAzMTEwLwYDVQQD EyhlODBlNmUxMzA5NDMwYzRhNDEyZTBjOTNmOTQ2N2Y2NzI1YzdmNTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUa9u2EUI7kU8Z8azm7imHw0T6ke hfHCMH6iRIfsvZHk2wecMlQaE5RFR4gxlmfQdkCRpfyo2KSgMXAtbb2KAK/07CTQ BbEpQZb0Hwpk8a5B+SeYPEzACYWPv1+hoCm9VsTlDx5JgXTKK7mr4gJhJiD7Wj/C hjHthK51s03wiVM1kPoWsgaNK2hyBvac/Xo6AauKVM44kl6P4JE3qCmgpDKJESzi doEP9T4Mgoed/sXaOWXwaRjCqjAaYvykcP5t7N878CIOieFf6KcJlQoC80rc6Awy ayAU9A7rABRbUy4wKQkoVxehFWsrlDZz2PCCN857C9zt03rwQbLvw0ZmfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgObhMJQwxKQS4Mk/lGf2clx/UNMB8GA1UdIwQY MBaAFLTEHlmDTaYS2DyiQZTwLKbXYCRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hM2JhY2EtNDM3ZC00NjA3LTljMWEt NTU3YTRjMzFlMDJlLzEvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hM2JhY2EtNDM3ZC00NjA3LTljMWEtNTU3YTRjMzFlMDJl LzEvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJjqgKFV M6ySxe7CAIj+CF9tU+TtkYlF2HGA7N+dnpHfkIIJOz0Xo7bXx4k0SQFUqhrxMVEb GBE1voJRFC2CnnUGIoaxZC9/6MqNeXAJ69p/akw4QBg7bJ8KnGPe8oVtsqOi3F0z urGI2W0vtlSiNcL57My5r3Xz38NEgL4jqI5Ka/49bgsM1RSehn+tWeOkCYLsgHh/ y7Mz8VJNt5xvRlGejfAma39ivAbUqTPsIGVPKdw9S9R9qnqtGdu3FFhQjcWuEVRv QrvyVt1mNif8+XNEj+IdxgETMc6NHa4a8uTIz4PEBv+mGHi3vS4Wk1k4ESeBnNIt FlYGYpH6sJG9fw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:12 2025 by rpki-client