This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft File: tjC3O1HLxTgN1K2z1ar_TXozTF4.mft (raw, json) Hash identifier: VuXxmOQa5WxJg6REsojrK+QiWSbBMUhRv3WYWr0m724= Subject key identifier: 12:D8:AC:6B:56:B7:75:1D:7C:77:EB:5C:11:EE:26:A9:81:E1:11:DF Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E Certificate issuer: /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e Certificate serial: 019AF35207E88C4B1457956A0B228182E4A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft Manifest number: 1770 Signing time: Sat 06 Dec 2025 11:00:30 +0000 Manifest this update: Sat 06 Dec 2025 11:00:30 +0000 Manifest next update: Sun 07 Dec 2025 11:00:30 +0000 Files and hashes: 1: tjC3O1HLxTgN1K2z1ar_TXozTF4.crl (hash: 5Bruj+DM1LtatQtZhMhhy/f5T2VMqclwkRDXg0sAPjM=) 2: vtod0X9q1UxXYWyU0iJvMZK0FuU.roa (hash: hazDQDv/KGyD5MQE7kb1mVj2PkHFae3QD7YWTocQdWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:07:e8:8c:4b:14:57:95:6a:0b:22:81:82:e4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e Validity Not Before: Dec 6 11:00:30 2025 GMT Not After : Dec 7 11:00:30 2025 GMT Subject: CN=12d8ac6b56b7751d7c77eb5c11ee26a981e111df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:02:c6:83:04:a4:3d:28:fb:7f:08:29:01:77: 91:14:3e:b3:af:1a:ad:b8:35:d3:7a:a3:d9:1a:65: dc:4f:93:80:ae:55:51:83:95:78:e9:7d:4f:9b:e3: 1a:8c:2d:47:ff:20:f1:36:24:41:5e:d5:c6:35:4f: b0:e4:5c:95:38:19:72:c4:2e:af:6d:ec:ae:ba:31: 47:cb:8b:be:8b:57:1c:6b:4f:3b:cf:ef:d6:cf:de: 93:48:b2:0e:7e:2e:e6:05:47:ae:f5:aa:1b:25:93: 9b:07:e3:42:9a:67:eb:f5:0f:77:4e:a6:90:d8:cb: 02:17:a6:54:dd:5c:68:eb:e5:3f:4f:a5:1a:96:48: 7d:dc:d9:24:b2:ac:30:da:72:36:4c:06:55:91:b6: d2:3d:65:3e:fe:e1:8b:70:f0:90:2a:62:27:5d:52: 1b:cf:8a:14:68:be:59:b7:b5:23:9f:4c:ba:1b:aa: 75:37:a4:b6:20:28:29:a3:55:4a:34:c2:5b:a4:26: 8b:2c:ab:25:7b:4b:58:a7:fc:46:f4:b1:e0:a5:dd: 29:9a:96:65:b8:1e:9f:c3:a9:6f:cd:17:4b:15:ac: 06:4f:05:9e:74:35:5a:89:3e:ae:d9:2a:21:58:ed: 3b:25:a5:81:39:aa:3b:4f:c6:5c:6d:75:97:d7:4f: 2f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D8:AC:6B:56:B7:75:1D:7C:77:EB:5C:11:EE:26:A9:81:E1:11:DF X509v3 Authority Key Identifier: keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:a7:42:d9:dc:ae:94:0f:5f:8c:ea:31:19:78:9e:04:c2:b6: 6b:3d:43:47:08:e3:dd:93:09:0a:42:0d:5a:3b:c6:6e:51:d9: f8:d8:dd:d3:c5:d3:bc:f1:c8:82:be:31:15:89:c3:e3:2d:4c: 68:84:5f:47:17:a4:fb:65:58:f4:13:5f:93:92:21:b7:f5:fd: 46:14:93:62:db:d5:c8:16:f9:b3:55:54:eb:ce:1b:09:41:dd: fe:3f:13:5d:f9:05:b6:65:12:47:4d:d1:54:02:66:b0:68:59: 12:8f:84:26:7e:08:9c:73:d0:75:5b:db:3f:ff:f4:0d:bd:71: 28:c6:e8:d3:43:6d:d4:03:19:d5:9e:21:15:42:7f:ce:4f:9f: 39:2a:8d:25:db:7a:62:ca:12:e7:be:b3:bf:8a:73:0e:d6:ea: 00:ca:63:b6:ff:50:de:24:cd:67:35:50:f7:9e:b7:4b:e7:c9: 0d:3e:41:9b:13:25:5e:50:45:a8:c2:c6:4d:82:12:9d:16:95: 4e:51:3f:d1:a9:ca:38:73:23:dd:3b:a2:c7:aa:39:19:f1:e4: df:22:d3:43:36:06:c3:bd:f2:57:ff:07:fc:3f:ff:b2:96:be: 0e:54:75:a9:c3:d6:4a:75:8c:02:64:91:3a:ae:6d:be:52:0a: 20:99:d9:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUgfojEsUV5VqCyKBguSoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MzBiNzNiNTFjYmM1MzgwZGQ0YWRiM2Q1YWFmZjRkN2Ez MzRjNWUwHhcNMjUxMjA2MTEwMDMwWhcNMjUxMjA3MTEwMDMwWjAzMTEwLwYDVQQD EygxMmQ4YWM2YjU2Yjc3NTFkN2M3N2ViNWMxMWVlMjZhOTgxZTExMWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwLGgwSkPSj7fwgpAXeRFD6zrxqt uDXTeqPZGmXcT5OArlVRg5V46X1Pm+MajC1H/yDxNiRBXtXGNU+w5FyVOBlyxC6v beyuujFHy4u+i1cca087z+/Wz96TSLIOfi7mBUeu9aobJZObB+NCmmfr9Q93TqaQ 2MsCF6ZU3Vxo6+U/T6Ualkh93Nkksqww2nI2TAZVkbbSPWU+/uGLcPCQKmInXVIb z4oUaL5Zt7Ujn0y6G6p1N6S2ICgpo1VKNMJbpCaLLKsle0tYp/xG9LHgpd0pmpZl uB6fw6lvzRdLFawGTwWedDVaiT6u2SohWO07JaWBOao7T8ZcbXWX108v8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLYrGtWt3UdfHfrXBHuJqmB4RHfMB8GA1UdIwQY MBaAFLYwtztRy8U4DdSts9Wq/016M0xeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGpDM08xSEx4VGdOMUsyejFhcl9UWG96VEY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80NzQ4YzctY2Q5ZS00MDFlLWE4YTQt MGQ0OGU2ODk1ZjEyLzEvdGpDM08xSEx4VGdOMUsyejFhcl9UWG96VEY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC80NzQ4YzctY2Q5ZS00MDFlLWE4YTQtMGQ0OGU2ODk1ZjEy LzEvdGpDM08xSEx4VGdOMUsyejFhcl9UWG96VEY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqdC2dyu lA9fjOoxGXieBMK2az1DRwjj3ZMJCkINWjvGblHZ+Njd08XTvPHIgr4xFYnD4y1M aIRfRxek+2VY9BNfk5Iht/X9RhSTYtvVyBb5s1VU684bCUHd/j8TXfkFtmUSR03R VAJmsGhZEo+EJn4InHPQdVvbP//0Db1xKMbo00Nt1AMZ1Z4hFUJ/zk+fOSqNJdt6 YsoS576zv4pzDtbqAMpjtv9Q3iTNZzVQ9563S+fJDT5BmxMlXlBFqMLGTYISnRaV TlE/0anKOHMj3Tuix6o5GfHk3yLTQzYGw73yV/8H/D//spa+DlR1qcPWSnWMAmSR Oq5tvlIKIJnZWA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:02:15 2025 by rpki-client