This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft File: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft (raw, json) Hash identifier: Faoi3ubdK//WL3kYsEjnA/HIugyU7DSoQpealg6wfXU= Subject key identifier: 55:19:5A:C9:62:3E:F8:E1:4A:A1:B0:DA:A3:BD:94:25:1A:C4:43:57 Authority key identifier: B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4 Certificate issuer: /CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4 Certificate serial: 019AF276F594AE7E66F40476EFE35A498DBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 07:01:13 +0000 Manifest this update: Sat 06 Dec 2025 07:01:13 +0000 Manifest next update: Sun 07 Dec 2025 07:01:13 +0000 Files and hashes: 1: E5ldtRDNq7PF5yZrAMEvxowWuR0.roa (hash: 4L7DIoeLgHz0Qv5KkaEDn/KJszMLQY8xsxtNREAtJGQ=) 2: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl (hash: 5OMKxy3cfOgcmkMTkazytsGENYkhi0CzYVP4NTYd3KM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f5:94:ae:7e:66:f4:04:76:ef:e3:5a:49:8d:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4 Validity Not Before: Dec 6 07:01:13 2025 GMT Not After : Dec 7 07:01:13 2025 GMT Subject: CN=55195ac9623ef8e14aa1b0daa3bd94251ac44357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:83:a5:82:5e:df:2b:f8:84:8e:82:13:ad:10: 20:f0:a1:6b:72:3b:db:60:45:09:c4:32:ca:49:6a: 82:6e:97:80:03:ea:d5:b8:5e:83:1a:a8:f9:30:d4: 2a:dd:12:5d:5c:b3:1c:37:7e:b8:75:83:2d:14:97: 29:fc:a8:c8:82:79:9f:6b:fe:87:40:6b:fc:dd:61: c5:ca:a0:f8:4b:86:95:31:cf:34:b1:08:5a:52:02: 78:3b:30:e6:63:3c:d3:a7:eb:67:20:75:72:51:2e: dc:d8:29:8f:88:7c:ac:ed:2a:33:3c:6d:fe:a6:00: 4a:96:8e:d6:f8:cd:40:82:7a:c2:8c:a8:f0:9b:f9: 79:42:9a:76:46:11:84:5b:95:7a:c8:c5:9a:38:cb: e7:a9:e0:6a:2f:85:58:04:65:40:26:dc:dc:04:58: f8:ef:b7:15:2e:1d:4a:c3:e5:51:20:16:de:30:ee: bb:ef:e7:a1:b3:44:c1:3f:29:95:71:e8:3a:a4:a7: 11:af:61:7d:49:23:fc:df:28:b1:39:9d:4a:80:d6: 2e:86:64:73:ae:d8:7d:ee:15:42:20:20:a0:08:84: 7b:19:37:b2:a4:c7:d8:36:a2:7a:1d:5f:cc:bc:63: ed:16:2e:c1:70:69:78:8d:5b:86:08:53:79:b4:39: d1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:19:5A:C9:62:3E:F8:E1:4A:A1:B0:DA:A3:BD:94:25:1A:C4:43:57 X509v3 Authority Key Identifier: keyid:B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:90:1f:ab:d9:47:12:d8:76:18:3e:6e:29:5b:29:6b:2c:c2: d1:31:23:86:3c:66:3a:99:9a:cf:ea:a6:7d:6c:f2:6b:92:86: 99:a9:16:6c:65:51:9f:f9:84:6b:f2:29:b4:fc:df:db:b4:33: 8a:38:0c:64:29:2d:f0:36:d3:0e:e9:a7:22:c1:0a:48:e1:de: 22:df:ee:0b:d6:fc:fb:fa:b7:b6:46:32:39:ff:9e:b4:27:4b: 1e:a9:17:84:de:60:6c:af:60:39:ba:f4:c1:5a:76:93:a9:0d: ea:4b:d9:cf:9d:20:ad:11:0b:be:15:21:16:b8:fe:aa:2d:ea: 0f:28:f6:1e:65:d2:16:cd:86:30:95:a0:6c:88:55:6b:2b:e3: 94:fc:ed:8a:a2:f2:81:0a:5f:e6:7e:01:32:f0:f8:65:c5:2d: 94:ec:3b:05:27:c2:d9:92:4c:78:75:5d:33:1c:33:8c:0e:08: 97:c1:c5:06:38:03:32:3e:cb:f9:c8:93:e4:55:8e:18:89:6c: b3:69:c1:e3:b2:5e:81:5b:62:7d:1d:54:a7:81:68:d2:32:54: 10:b8:3a:c0:4d:78:49:b9:23:56:00:f3:df:5e:39:62:c0:3e: 65:76:a6:7b:d7:69:65:0b:cc:00:1c:9a:24:34:82:bf:6e:7d: cc:56:e2:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvWUrn5m9AR27+NaSY2+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzM0MmYxN2Q1NGE4YTNkYTBjZTRkMzE4YjNiNGMzZmEw NTkzZTQwHhcNMjUxMjA2MDcwMTEzWhcNMjUxMjA3MDcwMTEzWjAzMTEwLwYDVQQD Eyg1NTE5NWFjOTYyM2VmOGUxNGFhMWIwZGFhM2JkOTQyNTFhYzQ0MzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YOlgl7fK/iEjoITrRAg8KFrcjvb YEUJxDLKSWqCbpeAA+rVuF6DGqj5MNQq3RJdXLMcN364dYMtFJcp/KjIgnmfa/6H QGv83WHFyqD4S4aVMc80sQhaUgJ4OzDmYzzTp+tnIHVyUS7c2CmPiHys7SozPG3+ pgBKlo7W+M1AgnrCjKjwm/l5Qpp2RhGEW5V6yMWaOMvnqeBqL4VYBGVAJtzcBFj4 77cVLh1Kw+VRIBbeMO677+ehs0TBPymVceg6pKcRr2F9SSP83yixOZ1KgNYuhmRz rth97hVCICCgCIR7GTeypMfYNqJ6HV/MvGPtFi7BcGl4jVuGCFN5tDnRrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUZWsliPvjhSqGw2qO9lCUaxENXMB8GA1UdIwQY MBaAFLQzQvF9VKij2gzk0xiztMP6BZPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEROQzhYMVVxS1BhRE9UVEdMTzB3X29Gay1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNWEyYzAtNWMwOC00OGJkLWE4YzMt MzY3NGE5MDEwZWZkLzEvdEROQzhYMVVxS1BhRE9UVEdMTzB3X29Gay1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8xNWEyYzAtNWMwOC00OGJkLWE4YzMtMzY3NGE5MDEwZWZk LzEvdEROQzhYMVVxS1BhRE9UVEdMTzB3X29Gay1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5Afq9lH Eth2GD5uKVspayzC0TEjhjxmOpmaz+qmfWzya5KGmakWbGVRn/mEa/IptPzf27Qz ijgMZCkt8DbTDumnIsEKSOHeIt/uC9b8+/q3tkYyOf+etCdLHqkXhN5gbK9gObr0 wVp2k6kN6kvZz50grRELvhUhFrj+qi3qDyj2HmXSFs2GMJWgbIhVayvjlPztiqLy gQpf5n4BMvD4ZcUtlOw7BSfC2ZJMeHVdMxwzjA4Il8HFBjgDMj7L+ciT5FWOGIls s2nB47JegVtifR1Up4Fo0jJUELg6wE14SbkjVgDz3145YsA+ZXame9dpZQvMABya JDSCv259zFbi1A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:33 2025 by rpki-client