This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft File: tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft (raw, json) Hash identifier: 1SstWrvHk9qwATrGFCpeWReZM9BE+NtTcPcscbtBHAg= Subject key identifier: 60:35:4D:86:71:4F:F3:37:7E:0A:B4:97:63:04:68:3F:54:79:C1:71 Authority key identifier: B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47 Certificate issuer: /CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947 Certificate serial: 019AF31C043A2E4E8E6CF059F5171F3DB607 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft Manifest number: 0AFA Signing time: Sat 06 Dec 2025 10:01:30 +0000 Manifest this update: Sat 06 Dec 2025 10:01:30 +0000 Manifest next update: Sun 07 Dec 2025 10:01:30 +0000 Files and hashes: 1: tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl (hash: Fd/L23ODUb6rSubG2t46ELzs0Huhh1EBSuhCCsXcdW0=) 2: x7aEXzfMRzlzp6VorB64R028Jvk.roa (hash: 3aOt7CTs1p/zJJSbWQR2//U36Y0+Zh2Kxl00BzPCEXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:04:3a:2e:4e:8e:6c:f0:59:f5:17:1f:3d:b6:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947 Validity Not Before: Dec 6 10:01:30 2025 GMT Not After : Dec 7 10:01:30 2025 GMT Subject: CN=60354d86714ff3377e0ab4976304683f5479c171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b5:50:9e:d5:b2:db:3e:a0:e1:81:89:31:4f: 2c:35:33:6c:b7:ae:d9:64:90:b7:fb:fe:4e:f7:37: 4c:f1:57:66:fc:59:d8:9e:f0:7b:56:04:6e:db:b0: 79:78:ef:63:1a:ec:f9:2c:a2:f1:80:f7:1e:2c:72: 3c:20:e6:5e:c8:c2:6b:a7:57:0f:37:31:3d:95:9b: 65:71:65:71:13:59:75:42:3c:81:30:f1:22:79:9c: 9d:76:ef:b9:87:fc:b7:bb:fe:c0:9d:56:63:e8:d9: 50:5f:aa:55:82:8e:f5:06:95:f0:5e:1a:46:ed:b3: 91:a9:f6:c0:cf:13:67:27:fc:53:77:96:6e:34:58: e7:8a:db:69:c4:25:96:d4:d5:73:65:ab:4b:99:b0: 7c:ee:44:d5:06:b0:77:16:a6:c6:6a:95:94:7f:3e: 5b:3b:13:8a:b9:39:78:93:fb:01:80:6b:22:0d:a5: 59:ef:1b:ef:f8:0e:32:25:39:b0:81:fb:49:b8:3e: 4b:89:96:bc:21:b7:5a:c8:f0:53:cc:93:0c:ee:d9: 13:d5:d1:3f:ff:4c:76:73:37:c7:5a:0a:4e:80:39: 7c:6a:2f:af:9d:f1:d9:b4:b1:22:cc:ad:55:90:b5: b6:e1:08:ec:54:1d:e2:21:36:01:c8:17:de:0b:38: 65:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:35:4D:86:71:4F:F3:37:7E:0A:B4:97:63:04:68:3F:54:79:C1:71 X509v3 Authority Key Identifier: keyid:B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:0f:ae:87:56:51:09:9d:8d:f4:1b:c2:47:4d:07:09:37:41: e6:cd:aa:7b:2d:d1:05:f8:b3:dc:d9:a1:2f:41:cc:99:37:8b: be:50:53:33:16:77:e6:ab:cf:09:00:be:11:23:25:ce:8a:fc: 99:33:f5:9d:66:bc:56:ba:89:8c:84:ba:be:bf:9f:66:cf:82: e6:21:79:e8:8f:cf:7d:1e:df:99:cf:f9:8b:d2:d6:4f:d0:eb: 8b:2a:28:f1:4a:81:6e:14:14:b6:f0:f7:08:87:ea:b1:c3:ad: 24:cc:bf:85:0b:f6:94:c9:d3:fd:b8:b8:a5:1a:df:05:ff:1d: 15:8e:8c:27:31:ba:1e:cc:5a:e0:ba:b6:4d:82:72:7e:51:f3: 12:40:66:b4:d7:42:3d:28:b5:0c:bb:80:a2:e7:11:81:ee:5b: 47:51:3f:f0:06:99:7e:69:e4:13:46:bd:20:85:36:a0:28:8b: f2:2d:c8:f1:b9:83:98:16:c6:4b:e1:5f:e4:b8:9b:56:80:73: e8:4c:bf:24:56:da:86:02:11:bc:ed:80:1a:37:35:cb:76:fe: d3:0c:40:d3:c1:ed:8a:fa:a4:bf:b6:5e:df:fa:58:ec:7a:7a: 3a:ff:50:96:af:4b:66:45:3a:df:28:99:05:68:79:73:b2:7b: 49:c2:6a:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHAQ6Lk6ObPBZ9RcfPbYHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MGQ4NDljYzQzYjczMmRhYjY2NDFmYzZmZDVhNGRiM2Ey ZGI5NDcwHhcNMjUxMjA2MTAwMTMwWhcNMjUxMjA3MTAwMTMwWjAzMTEwLwYDVQQD Eyg2MDM1NGQ4NjcxNGZmMzM3N2UwYWI0OTc2MzA0NjgzZjU0NzljMTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7VQntWy2z6g4YGJMU8sNTNst67Z ZJC3+/5O9zdM8Vdm/FnYnvB7VgRu27B5eO9jGuz5LKLxgPceLHI8IOZeyMJrp1cP NzE9lZtlcWVxE1l1QjyBMPEieZyddu+5h/y3u/7AnVZj6NlQX6pVgo71BpXwXhpG 7bORqfbAzxNnJ/xTd5ZuNFjnittpxCWW1NVzZatLmbB87kTVBrB3FqbGapWUfz5b OxOKuTl4k/sBgGsiDaVZ7xvv+A4yJTmwgftJuD5LiZa8IbdayPBTzJMM7tkT1dE/ /0x2czfHWgpOgDl8ai+vnfHZtLEizK1VkLW24QjsVB3iITYByBfeCzhlMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGA1TYZxT/M3fgq0l2MEaD9UecFxMB8GA1UdIwQY MBaAFLQNhJzEO3Mtq2ZB/G/VpNs6LblHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEEyRW5NUTdjeTJyWmtIOGI5V2syem90dVVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xMzRjY2ItYjBhYi00NDZiLTgxNzIt NjJlMjdjZDFlOTc1LzEvdEEyRW5NUTdjeTJyWmtIOGI5V2syem90dVVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8xMzRjY2ItYjBhYi00NDZiLTgxNzItNjJlMjdjZDFlOTc1 LzEvdEEyRW5NUTdjeTJyWmtIOGI5V2syem90dVVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYg+uh1ZR CZ2N9BvCR00HCTdB5s2qey3RBfiz3NmhL0HMmTeLvlBTMxZ35qvPCQC+ESMlzor8 mTP1nWa8VrqJjIS6vr+fZs+C5iF56I/PfR7fmc/5i9LWT9Driyoo8UqBbhQUtvD3 CIfqscOtJMy/hQv2lMnT/bi4pRrfBf8dFY6MJzG6Hsxa4Lq2TYJyflHzEkBmtNdC PSi1DLuAoucRge5bR1E/8AaZfmnkE0a9IIU2oCiL8i3I8bmDmBbGS+Ff5LibVoBz 6Ey/JFbahgIRvO2AGjc1y3b+0wxA08Htivqkv7Ze3/pY7Hp6Ov9Qlq9LZkU63yiZ BWh5c7J7ScJq1A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:07:59 2025 by rpki-client