This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft File: tGasCkklUoPNUwZpcc17Pf4qPOg.mft (raw, json) Hash identifier: SdN55EwCeyNj0zOWYQXfTyaU77Nt0scYDYL3SqxDozQ= Subject key identifier: D6:DD:41:4E:93:28:08:42:2C:B8:20:3D:51:20:BD:69:FD:D3:BA:04 Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8 Certificate issuer: /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8 Certificate serial: 019AF50AD94CC0AFFACC42B66E1A3FCAF49A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft Manifest number: 16AB Signing time: Sat 06 Dec 2025 19:02:00 +0000 Manifest this update: Sat 06 Dec 2025 19:02:00 +0000 Manifest next update: Sun 07 Dec 2025 19:02:00 +0000 Files and hashes: 1: doq0g_q616KoQiCYhBpjnY3GXAI.roa (hash: 2NaVQRnf2IQ50I0pWc2BZKlLLETET7Nu4U+ng9RipiU=) 2: tGasCkklUoPNUwZpcc17Pf4qPOg.crl (hash: L9g6ZLatcl6oPHOGd63cP1jpBIrShlbZ/ojqNqksENI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:d9:4c:c0:af:fa:cc:42:b6:6e:1a:3f:ca:f4:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8 Validity Not Before: Dec 6 19:02:00 2025 GMT Not After : Dec 7 19:02:00 2025 GMT Subject: CN=d6dd414e932808422cb8203d5120bd69fdd3ba04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:83:06:93:cd:11:2c:d0:40:de:9d:d1:40:03: 1c:93:86:b2:f2:13:c4:a9:fa:0d:4a:60:b6:66:6d: 90:fb:7a:9f:2e:fa:bc:fc:70:71:c4:ce:b7:c2:dc: 3e:2b:12:36:3f:e7:7e:0e:ba:a0:7d:33:57:2c:d4: f9:dc:a6:b2:6a:4d:3b:6c:32:ae:f1:f1:89:4e:aa: 81:07:d4:da:f0:6e:aa:43:ba:19:e0:99:6b:a1:b4: 4a:4d:b4:9c:a1:7c:ad:4d:fb:b2:f2:df:8a:34:48: 0d:85:2f:df:96:e5:ba:0a:2f:6b:94:82:d5:76:3c: 6e:82:37:96:60:00:ec:d1:20:fd:7d:c7:ad:e2:34: 5b:80:37:05:34:26:10:79:60:fa:fc:fc:dc:28:d6: ce:2e:1a:b7:62:e4:07:dd:a8:bc:ad:e2:c2:a7:50: e3:2a:3f:7c:47:3b:1c:10:1d:ff:23:2a:89:74:4d: 85:75:b4:6b:56:c0:ab:81:21:ac:fb:0c:5c:65:e1: 64:46:27:f1:90:d7:56:da:5c:89:55:66:48:02:8f: 96:9f:fc:93:6f:4c:f4:f4:f0:cf:17:d6:79:b0:41: e2:37:db:f6:24:53:1d:d6:47:d4:89:dc:a2:b8:22: 73:50:6a:d4:fa:fb:9d:24:77:64:cf:de:01:09:c8: ec:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DD:41:4E:93:28:08:42:2C:B8:20:3D:51:20:BD:69:FD:D3:BA:04 X509v3 Authority Key Identifier: keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:d5:11:73:97:ca:b4:76:74:c5:d4:e0:cc:e8:21:54:3f:b1: 18:e8:44:ca:f7:12:1c:32:00:11:ef:08:48:44:a0:8f:c9:53: dd:f0:47:58:97:5b:41:53:2f:f5:52:e1:61:78:af:b6:d4:9c: 23:a0:3c:ea:d8:45:82:00:8a:46:f0:e0:28:a6:01:40:3c:b8: d6:c3:53:0f:01:dc:55:5f:15:0a:12:45:f2:02:ca:e1:09:02: 0e:5c:4a:59:23:5d:10:a9:c2:3e:f6:16:97:fc:24:a5:e9:9d: cc:a4:49:01:8c:83:8e:a8:48:79:33:60:b2:9c:d9:34:8c:6a: e8:cc:e7:5a:f9:74:86:91:fe:f2:a0:76:8c:47:9f:a4:13:d5: 84:82:50:8d:fd:8a:dd:d1:0e:9e:4d:35:58:a5:f5:fd:3f:65: ae:1f:47:02:d7:1c:3e:5f:22:9a:32:64:6f:33:68:47:3a:ce: 78:67:47:6b:d0:6d:61:a3:5b:9e:6d:a6:17:83:dd:84:69:af: 3b:4e:fc:f4:c4:0a:99:0f:cb:aa:8b:cb:b1:fb:94:5f:10:d7: 04:df:e8:79:db:37:31:02:d4:40:a9:67:b7:2a:b1:1c:d2:f2: a0:b2:d9:82:28:75:c5:6f:04:3a:18:fe:1e:c2:b5:ae:ed:d1: c1:ba:5e:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CtlMwK/6zEK2bho/yvSaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NjZhYzBhNDkyNTUyODNjZDUzMDY2OTcxY2Q3YjNkZmUy YTNjZTgwHhcNMjUxMjA2MTkwMjAwWhcNMjUxMjA3MTkwMjAwWjAzMTEwLwYDVQQD EyhkNmRkNDE0ZTkzMjgwODQyMmNiODIwM2Q1MTIwYmQ2OWZkZDNiYTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIMGk80RLNBA3p3RQAMck4ay8hPE qfoNSmC2Zm2Q+3qfLvq8/HBxxM63wtw+KxI2P+d+DrqgfTNXLNT53Kayak07bDKu 8fGJTqqBB9Ta8G6qQ7oZ4JlrobRKTbScoXytTfuy8t+KNEgNhS/fluW6Ci9rlILV djxugjeWYADs0SD9fcet4jRbgDcFNCYQeWD6/PzcKNbOLhq3YuQH3ai8reLCp1Dj Kj98RzscEB3/IyqJdE2FdbRrVsCrgSGs+wxcZeFkRifxkNdW2lyJVWZIAo+Wn/yT b0z09PDPF9Z5sEHiN9v2JFMd1kfUidyiuCJzUGrU+vudJHdkz94BCcjsJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbdQU6TKAhCLLggPVEgvWn907oEMB8GA1UdIwQY MBaAFLRmrApJJVKDzVMGaXHNez3+KjzoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8xMzNiNTItN2E2Ni00MWFiLWFlZWUt YzliNDcwZGMyNDBiLzEvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8xMzNiNTItN2E2Ni00MWFiLWFlZWUtYzliNDcwZGMyNDBi LzEvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzdURc5fK tHZ0xdTgzOghVD+xGOhEyvcSHDIAEe8ISESgj8lT3fBHWJdbQVMv9VLhYXivttSc I6A86thFggCKRvDgKKYBQDy41sNTDwHcVV8VChJF8gLK4QkCDlxKWSNdEKnCPvYW l/wkpemdzKRJAYyDjqhIeTNgspzZNIxq6MznWvl0hpH+8qB2jEefpBPVhIJQjf2K 3dEOnk01WKX1/T9lrh9HAtccPl8imjJkbzNoRzrOeGdHa9BtYaNbnm2mF4PdhGmv O0789MQKmQ/LqovLsfuUXxDXBN/oeds3MQLUQKlntyqxHNLyoLLZgih1xW8EOhj+ HsK1ru3RwbperA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:18 2025 by rpki-client