This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft File: tFBrzj9-GuOn4sua0gXEzfsC3bU.mft (raw, json) Hash identifier: k4Oefj9ZKDExNGkod/l363QhMk1xAcjO9j7SP6D5M+E= Subject key identifier: 37:9E:73:C2:70:4B:D9:52:61:12:90:E3:9F:BA:A3:A1:9C:D1:74:DE Authority key identifier: B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5 Certificate issuer: /CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5 Certificate serial: 019B397D76F81D83DE136EB8594C4F40F6C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft Manifest number: 1694 Signing time: Sat 20 Dec 2025 02:01:22 +0000 Manifest this update: Sat 20 Dec 2025 02:01:22 +0000 Manifest next update: Sun 21 Dec 2025 02:01:22 +0000 Files and hashes: 1: Kd39P6546NpKkTMGeJ0Di1Tm-dg.roa (hash: whkcH/ShQkUqu7p697My2+ymwjNji4wGQLqM0wmvkYA=) 2: To-uv46-3XmiPKg6c_GrFJdFcf0.roa (hash: SmXcvoxvyvRm/BeOwyu47J7sKwYa3+1oFy5V9rexUqQ=) 3: tFBrzj9-GuOn4sua0gXEzfsC3bU.crl (hash: pH+Ca9qxymS/U6JmCcH7wMaa6hcML1lZl1IqYkb4DE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:76:f8:1d:83:de:13:6e:b8:59:4c:4f:40:f6:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5 Validity Not Before: Dec 20 02:01:22 2025 GMT Not After : Dec 21 02:01:22 2025 GMT Subject: CN=379e73c2704bd952611290e39fbaa3a19cd174de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c0:9a:ad:b9:81:9e:1d:b9:0c:cf:cb:31:37: 8e:7c:31:e0:85:26:93:e7:4e:24:b7:91:ce:b6:ae: 8a:ca:44:ba:07:b9:3c:80:d5:f4:01:30:51:08:b7: 49:ba:00:59:83:11:db:63:25:4e:96:6b:cc:98:b2: ff:dd:4f:04:95:d7:33:45:30:b6:31:18:8e:b6:8e: 27:52:98:7f:99:39:f3:40:1b:da:aa:92:24:9c:e6: 2c:6c:e2:41:35:a4:de:38:9e:a9:52:4d:84:e6:fe: d7:2b:b5:31:86:83:03:15:00:55:d3:18:36:3f:b0: 31:8a:ce:b8:dd:a1:01:23:d9:82:b7:f6:d3:37:a2: ba:1f:92:ab:5b:32:a4:9d:fb:30:89:e4:a0:d1:05: 68:76:51:92:8f:8c:28:57:3e:b5:47:50:51:48:19: 79:6c:a5:bb:cd:d0:a6:c4:6f:f6:1f:78:8e:e0:9e: e8:e2:3d:9a:c5:98:09:49:91:cf:88:79:f4:df:42: 52:36:d9:78:6a:88:42:ac:cb:ab:6e:00:d0:63:70: b8:92:1d:1a:fd:4d:fc:77:e2:47:76:8a:01:0d:19: fd:82:6d:18:b4:ec:98:a0:9a:e9:73:06:55:c8:6f: 8d:d8:16:45:b4:eb:46:26:04:b7:fd:b8:0a:0b:58: 94:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9E:73:C2:70:4B:D9:52:61:12:90:E3:9F:BA:A3:A1:9C:D1:74:DE X509v3 Authority Key Identifier: keyid:B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ff:e5:7c:c3:64:04:10:dc:e7:8f:d2:96:d1:4c:d1:09:e6: 43:de:7a:13:05:b5:b3:b0:fb:b5:b7:f3:6d:46:77:82:8d:35: 6c:b3:3c:06:e7:f2:78:3a:91:23:21:b0:91:10:ec:a4:0f:ed: 2b:79:40:2f:b5:29:67:42:41:54:9a:c0:14:bf:96:d3:e9:75: 52:42:5a:00:3c:7a:87:6d:e6:d4:59:bc:46:93:f5:95:77:c9: 7f:f3:e8:0a:1f:22:bb:c1:78:6c:9f:39:7d:d0:22:69:15:fc: d6:09:f7:a8:a5:84:63:d4:d9:c0:40:5f:45:24:20:b4:32:09: 39:bc:96:cd:64:cc:79:a2:8d:9b:13:11:fc:e6:72:08:25:0a: 90:76:7e:80:9d:6a:d9:cc:fe:30:32:da:15:1a:e7:50:8b:5a: 78:a1:19:78:44:52:27:be:c2:5e:e1:9f:49:2b:1c:08:e0:f5: c8:6f:36:c2:6d:b3:ef:4b:04:ed:ea:b9:dc:49:0c:2a:40:4c: e7:b8:85:4d:93:6f:02:ea:5a:eb:9a:01:6e:75:ce:b7:de:7d: b3:3a:a7:f7:df:f6:85:70:24:d4:d8:61:bf:da:e4:2a:a9:88: e8:c9:f6:52:8e:98:94:97:99:ad:1a:2f:68:9e:e7:7b:94:8a: 8f:2d:5e:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fXb4HYPeE264WUxPQPbJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTA2YmNlM2Y3ZTFhZTNhN2UyY2I5YWQyMDVjNGNkZmIw MmRkYjUwHhcNMjUxMjIwMDIwMTIyWhcNMjUxMjIxMDIwMTIyWjAzMTEwLwYDVQQD EygzNzllNzNjMjcwNGJkOTUyNjExMjkwZTM5ZmJhYTNhMTljZDE3NGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8CarbmBnh25DM/LMTeOfDHghSaT 504kt5HOtq6KykS6B7k8gNX0ATBRCLdJugBZgxHbYyVOlmvMmLL/3U8EldczRTC2 MRiOto4nUph/mTnzQBvaqpIknOYsbOJBNaTeOJ6pUk2E5v7XK7UxhoMDFQBV0xg2 P7Axis643aEBI9mCt/bTN6K6H5KrWzKknfswieSg0QVodlGSj4woVz61R1BRSBl5 bKW7zdCmxG/2H3iO4J7o4j2axZgJSZHPiHn030JSNtl4aohCrMurbgDQY3C4kh0a /U38d+JHdooBDRn9gm0YtOyYoJrpcwZVyG+N2BZFtOtGJgS3/bgKC1iUTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDeec8JwS9lSYRKQ45+6o6Gc0XTeMB8GA1UdIwQY MBaAFLRQa84/fhrjp+LLmtIFxM37At21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZCcnpqOS1HdU9uNHN1YTBnWEV6ZnNDM2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9kYjU5ODktMTlmNi00NjhkLTlmYzMt ZjhhMzc4MGMzNDhlLzEvdEZCcnpqOS1HdU9uNHN1YTBnWEV6ZnNDM2JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9kYjU5ODktMTlmNi00NjhkLTlmYzMtZjhhMzc4MGMzNDhl LzEvdEZCcnpqOS1HdU9uNHN1YTBnWEV6ZnNDM2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbP/lfMNk BBDc54/SltFM0QnmQ956EwW1s7D7tbfzbUZ3go01bLM8BufyeDqRIyGwkRDspA/t K3lAL7UpZ0JBVJrAFL+W0+l1UkJaADx6h23m1Fm8RpP1lXfJf/PoCh8iu8F4bJ85 fdAiaRX81gn3qKWEY9TZwEBfRSQgtDIJObyWzWTMeaKNmxMR/OZyCCUKkHZ+gJ1q 2cz+MDLaFRrnUItaeKEZeERSJ77CXuGfSSscCOD1yG82wm2z70sE7eq53EkMKkBM 57iFTZNvAupa65oBbnXOt959szqn99/2hXAk1Nhhv9rkKqmI6Mn2Uo6YlJeZrRov aJ7ne5SKjy1eIg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:42:20 2025 by rpki-client