This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft File: To25ZDiURsq8r3lBzRmDQsIzbdA.mft (raw, json) Hash identifier: gxzUpNVzqinrrBSTJ8h/oK4SH7T685daZ9zNW8G1QYY= Subject key identifier: C0:58:C6:B2:B5:A4:16:51:EC:AF:A7:EB:46:F5:53:88:77:58:F4:1B Authority key identifier: 4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0 Certificate issuer: /CN=4e8db964389446cabcaf7941cd198342c2336dd0 Certificate serial: 019AF23FA6E2942F7550FB46B0A0581F396F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft Manifest number: 0913 Signing time: Sat 06 Dec 2025 06:00:49 +0000 Manifest this update: Sat 06 Dec 2025 06:00:49 +0000 Manifest next update: Sun 07 Dec 2025 06:00:49 +0000 Files and hashes: 1: To25ZDiURsq8r3lBzRmDQsIzbdA.crl (hash: zQV/Wcuw7gO7JXES34q1gpGRkxdgtIVol9GwVsElToI=) 2: Z5QHoKQNr7K3ZZ1_pXiHs3_16g8.roa (hash: /CZOibzm07xlRo0dBVlbyqc4APuq7TkYKFvaBHtU91A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a6:e2:94:2f:75:50:fb:46:b0:a0:58:1f:39:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e8db964389446cabcaf7941cd198342c2336dd0 Validity Not Before: Dec 6 06:00:49 2025 GMT Not After : Dec 7 06:00:49 2025 GMT Subject: CN=c058c6b2b5a41651ecafa7eb46f553887758f41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bb:f7:fc:d8:a4:49:89:80:1a:fe:92:f6:fb: ea:93:ea:21:4e:95:8f:0b:ab:a5:a3:35:cc:fb:da: 01:3d:ac:c5:bd:10:55:66:0f:5e:31:d3:34:ce:ff: 9b:92:29:d3:9b:be:2b:44:04:e7:d6:7e:d8:37:a5: 5c:1c:eb:ba:98:94:ce:4c:c6:f8:5b:e8:18:75:3b: b6:c8:31:eb:98:12:1a:d9:e8:b2:2d:c7:ff:22:c9: b9:9f:8e:50:f0:17:ec:33:39:1a:38:c1:7d:d8:0f: 44:2e:a5:3b:b7:97:46:31:e0:44:9e:cf:ec:db:85: e2:91:4a:76:96:bc:db:99:b1:43:c5:7b:11:c2:ca: 64:0b:9c:02:67:4a:71:78:de:08:22:25:3e:ba:bf: 8a:90:6b:2a:39:3c:c1:d0:37:bc:58:21:10:b1:63: d3:73:9b:34:28:d9:e7:cc:65:e6:42:f1:e1:a2:cc: 8f:ac:ef:05:9c:73:a7:67:82:3b:7e:e0:6b:a4:96: cd:18:f6:ea:6a:c8:5a:65:30:b3:cb:da:a1:38:7f: 2a:76:88:b0:fc:97:42:74:9f:1a:7d:cf:94:6f:b5: d3:3a:ec:89:08:03:06:bf:ba:91:ef:24:12:58:2e: c6:41:6d:ff:55:b8:ba:0b:67:22:d3:5c:07:89:00: c2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:58:C6:B2:B5:A4:16:51:EC:AF:A7:EB:46:F5:53:88:77:58:F4:1B X509v3 Authority Key Identifier: keyid:4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4f:21:9b:4f:49:92:71:16:e3:ec:34:d2:f7:ed:4f:90:32: dc:8c:91:74:7a:79:0c:8a:7c:b7:f3:0f:30:4d:c7:95:7b:55: 2e:2c:b6:8f:3b:00:64:ca:00:f9:28:37:f3:83:84:af:06:c3: 27:38:c1:1c:d9:89:f0:8c:b6:0c:3d:15:98:31:ac:0a:d9:c6: 9d:0e:90:bd:2c:7d:c4:f4:8f:53:3f:47:78:0f:e2:74:57:03: 3b:80:15:6d:6e:14:93:9f:54:04:e2:f4:e4:e3:0c:c2:e0:65: 3e:ef:61:aa:c4:81:cc:03:3f:09:5e:f6:c6:27:60:6a:12:af: 0c:3b:bc:07:31:5b:ed:83:43:32:3a:a6:ed:ba:70:e6:2f:a2: f4:4f:15:a5:2a:21:0c:6e:ab:2f:f9:d8:19:54:dc:7e:63:1e: b5:87:ec:f7:1e:58:8b:35:60:4f:65:cd:45:ef:99:ac:48:6d: 51:ee:f3:2f:c6:db:c1:cd:38:d1:3c:45:5d:a7:c3:11:89:7a: ee:66:8b:94:f5:69:82:65:52:e7:f0:db:71:23:d0:6e:7a:32: c2:cd:c8:5a:4d:a6:47:92:7d:99:04:05:53:30:4f:fc:4c:65: c9:4a:b7:a7:fb:7f:3d:a1:bc:2d:69:0a:61:87:33:3c:a3:84: d2:e9:a2:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6bilC91UPtGsKBYHzlvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlOGRiOTY0Mzg5NDQ2Y2FiY2FmNzk0MWNkMTk4MzQyYzIz MzZkZDAwHhcNMjUxMjA2MDYwMDQ5WhcNMjUxMjA3MDYwMDQ5WjAzMTEwLwYDVQQD EyhjMDU4YzZiMmI1YTQxNjUxZWNhZmE3ZWI0NmY1NTM4ODc3NThmNDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbv3/NikSYmAGv6S9vvqk+ohTpWP C6ulozXM+9oBPazFvRBVZg9eMdM0zv+bkinTm74rRATn1n7YN6VcHOu6mJTOTMb4 W+gYdTu2yDHrmBIa2eiyLcf/Ism5n45Q8BfsMzkaOMF92A9ELqU7t5dGMeBEns/s 24XikUp2lrzbmbFDxXsRwspkC5wCZ0pxeN4IIiU+ur+KkGsqOTzB0De8WCEQsWPT c5s0KNnnzGXmQvHhosyPrO8FnHOnZ4I7fuBrpJbNGPbqashaZTCzy9qhOH8qdoiw /JdCdJ8afc+Ub7XTOuyJCAMGv7qR7yQSWC7GQW3/Vbi6C2ci01wHiQDCvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBYxrK1pBZR7K+n60b1U4h3WPQbMB8GA1UdIwQY MBaAFE6NuWQ4lEbKvK95Qc0Zg0LCM23QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG8yNVpEaVVSc3E4cjNsQnpSbURRc0l6YmRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iMzk2MWMtM2Y2OC00NWMxLWEwNGUt OTU0NjliZjA5MzQwLzEvVG8yNVpEaVVSc3E4cjNsQnpSbURRc0l6YmRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9iMzk2MWMtM2Y2OC00NWMxLWEwNGUtOTU0NjliZjA5MzQw LzEvVG8yNVpEaVVSc3E4cjNsQnpSbURRc0l6YmRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnE8hm09J knEW4+w00vftT5Ay3IyRdHp5DIp8t/MPME3HlXtVLiy2jzsAZMoA+Sg384OErwbD JzjBHNmJ8Iy2DD0VmDGsCtnGnQ6QvSx9xPSPUz9HeA/idFcDO4AVbW4Uk59UBOL0 5OMMwuBlPu9hqsSBzAM/CV72xidgahKvDDu8BzFb7YNDMjqm7bpw5i+i9E8VpSoh DG6rL/nYGVTcfmMetYfs9x5YizVgT2XNRe+ZrEhtUe7zL8bbwc040TxFXafDEYl6 7maLlPVpgmVS5/DbcSPQbnoyws3IWk2mR5J9mQQFUzBP/ExlyUq3p/t/PaG8LWkK YYczPKOE0umisw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:17 2025 by rpki-client