This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft File: t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft (raw, json) Hash identifier: sg/T0Qdcg5PU1gH1tzvjW67Q5KzmstiNbg7lAxS0bqc= Subject key identifier: 87:7C:45:D2:FC:7C:3C:BA:67:0F:8E:4E:71:07:E1:63:93:5A:08:2D Authority key identifier: B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47 Certificate issuer: /CN=b77627cafe755785750bde5ba49e6c1091bf4247 Certificate serial: 019AF464BD735DF92FB424C247F90BEC66B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft Manifest number: 0F58 Signing time: Sat 06 Dec 2025 16:00:34 +0000 Manifest this update: Sat 06 Dec 2025 16:00:34 +0000 Manifest next update: Sun 07 Dec 2025 16:00:34 +0000 Files and hashes: 1: QR0_yngod2ytYXVRxBdIJaGQtD8.roa (hash: ltA6YElUsxrQZ+fMVYaCHWCNPW6fU+6PIrwsYryAwAU=) 2: t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl (hash: +MTrn+Cas1B9eNUb3oWh4mxZ2SQw1FyxfBk3tK+5YYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:bd:73:5d:f9:2f:b4:24:c2:47:f9:0b:ec:66:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b77627cafe755785750bde5ba49e6c1091bf4247 Validity Not Before: Dec 6 16:00:34 2025 GMT Not After : Dec 7 16:00:34 2025 GMT Subject: CN=877c45d2fc7c3cba670f8e4e7107e163935a082d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:93:ce:be:a1:1d:89:af:16:bb:56:d5:93:dc: 74:16:e0:8b:03:90:fd:1c:08:55:01:4a:49:96:1b: 1b:89:ca:8f:56:e7:1b:9f:7c:9e:b3:f5:f6:0c:23: 23:9c:cb:b9:56:72:4a:01:f2:1b:96:9b:ae:4b:59: 52:94:aa:06:ad:6d:24:c2:20:79:38:0f:66:0e:20: 6a:0a:bd:68:79:ae:14:ae:84:4c:20:81:2d:2a:85: 61:ee:0b:a0:ce:e3:df:01:28:fc:af:1b:16:04:cd: 34:d5:f4:0a:e9:55:e2:2b:dc:96:d3:97:93:8a:1b: d5:ea:8f:e4:89:ad:a7:ce:86:3a:f4:d8:1c:27:a9: a8:82:ea:68:a7:43:29:3b:83:41:f1:32:02:46:98: d1:a1:76:3f:32:d8:5e:a7:06:b7:87:ee:64:27:7e: b5:61:10:94:b9:a6:c3:b7:1f:51:f5:dd:e8:19:20: a4:11:00:67:16:7d:04:ac:b4:67:44:d6:1e:6a:6d: ed:dc:92:a7:33:4d:cb:98:f8:d4:49:a3:fc:d4:a9: a5:b9:91:8c:b9:34:20:93:b4:91:34:24:ae:03:e2: c3:6b:f8:ff:ed:b4:02:a3:01:75:09:6f:c1:6c:44: a3:f5:f0:e8:9b:a0:b6:30:27:c3:58:64:0d:7a:13: 2a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7C:45:D2:FC:7C:3C:BA:67:0F:8E:4E:71:07:E1:63:93:5A:08:2D X509v3 Authority Key Identifier: keyid:B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:1b:d9:62:e1:6f:2e:fd:69:5c:7d:ee:5c:8e:e1:2b:5c:96: 3b:48:17:f6:7f:6b:39:aa:ed:d3:79:c8:e2:19:05:43:bd:52: 36:ed:0e:76:26:66:23:79:ad:00:4d:97:4e:5b:02:23:3e:81: 4e:05:5b:c9:2f:61:d3:ec:36:62:83:0b:f3:2f:fd:c3:84:5a: 0a:b1:71:bb:bf:18:86:ee:e6:65:c9:2b:21:4f:e8:cc:4b:c5: bd:d4:27:89:f4:8b:df:ee:2e:64:d1:93:91:5d:96:84:ca:77: 4f:9b:04:0d:df:cf:36:6d:19:af:35:51:91:66:88:c9:68:b7: 91:7c:95:67:a2:ae:62:ad:7e:51:be:e1:e8:cf:af:1a:45:30: f9:82:df:10:8c:fe:a1:c7:7d:4d:d1:bf:98:86:62:4d:3c:52: ae:3f:57:d7:b6:df:36:9e:72:a1:25:68:4f:7d:75:da:24:81: e6:85:a9:81:6f:da:5b:b3:67:0a:05:4b:c4:36:0a:17:a4:55: 00:eb:9d:08:8a:10:90:db:8b:dc:f5:a4:2e:62:b0:ce:bb:54: 09:a4:00:9c:54:8b:1a:e1:d6:66:59:7f:c7:51:f3:ac:f4:6b: 41:5a:44:82:55:6b:80:a6:d4:17:40:2e:30:d6:30:04:4a:67: a4:e6:61:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZL1zXfkvtCTCR/kL7Ga4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NzYyN2NhZmU3NTU3ODU3NTBiZGU1YmE0OWU2YzEwOTFi ZjQyNDcwHhcNMjUxMjA2MTYwMDM0WhcNMjUxMjA3MTYwMDM0WjAzMTEwLwYDVQQD Eyg4NzdjNDVkMmZjN2MzY2JhNjcwZjhlNGU3MTA3ZTE2MzkzNWEwODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupPOvqEdia8Wu1bVk9x0FuCLA5D9 HAhVAUpJlhsbicqPVucbn3yes/X2DCMjnMu5VnJKAfIblpuuS1lSlKoGrW0kwiB5 OA9mDiBqCr1oea4UroRMIIEtKoVh7gugzuPfASj8rxsWBM001fQK6VXiK9yW05eT ihvV6o/kia2nzoY69NgcJ6mogupop0MpO4NB8TICRpjRoXY/Mthepwa3h+5kJ361 YRCUuabDtx9R9d3oGSCkEQBnFn0ErLRnRNYeam3t3JKnM03LmPjUSaP81KmluZGM uTQgk7SRNCSuA+LDa/j/7bQCowF1CW/BbESj9fDom6C2MCfDWGQNehMq9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFId8RdL8fDy6Zw+OTnEH4WOTWggtMB8GA1UdIwQY MBaAFLd2J8r+dVeFdQveW6SebBCRv0JHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNZbnl2NTFWNFYxQzk1YnBKNXNFSkdfUWtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82MDIxMzctZGQ0MC00ZWY5LWJiMGYt NDQ1N2ZhMjBiY2JhLzEvdDNZbnl2NTFWNFYxQzk1YnBKNXNFSkdfUWtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS82MDIxMzctZGQ0MC00ZWY5LWJiMGYtNDQ1N2ZhMjBiY2Jh LzEvdDNZbnl2NTFWNFYxQzk1YnBKNXNFSkdfUWtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhvZYuFv Lv1pXH3uXI7hK1yWO0gX9n9rOart03nI4hkFQ71SNu0OdiZmI3mtAE2XTlsCIz6B TgVbyS9h0+w2YoML8y/9w4RaCrFxu78Yhu7mZckrIU/ozEvFvdQnifSL3+4uZNGT kV2WhMp3T5sEDd/PNm0ZrzVRkWaIyWi3kXyVZ6KuYq1+Ub7h6M+vGkUw+YLfEIz+ ocd9TdG/mIZiTTxSrj9X17bfNp5yoSVoT3112iSB5oWpgW/aW7NnCgVLxDYKF6RV AOudCIoQkNuL3PWkLmKwzrtUCaQAnFSLGuHWZll/x1HzrPRrQVpEglVrgKbUF0Au MNYwBEpnpOZhxA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:59:19 2025 by rpki-client