This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft File: tTRCGKSIC1AMAzMh52vXi088Flg.mft (raw, json) Hash identifier: DC8RRNfVxu6XXCF5tZRwBPqwRWDzewKgJyflxe/K4RU= Subject key identifier: 14:EE:F4:80:78:04:D0:9C:55:1D:EB:DA:94:52:35:D7:F2:95:44:A8 Authority key identifier: B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58 Certificate issuer: /CN=b5344218a4880b500c033321e76bd78b4f3c1658 Certificate serial: 019AF12EE63A24A29699FFD5725E273B858B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 01:02:53 +0000 Manifest this update: Sat 06 Dec 2025 01:02:53 +0000 Manifest next update: Sun 07 Dec 2025 01:02:53 +0000 Files and hashes: 1: 8Pm542mxmtNx79Ipw8aJ3MUUUlw.roa (hash: wUyn8TfNac0yPrEyoAGwGRLxadfovmjunsKwqoO4Tic=) 2: MK5kvHBNAAlnKRq0I1CvZhVF9Ng.roa (hash: ku7EY/yVBZoDpf18kdWwR04OCaLbQDYij0LYSvbt0Ho=) 3: tTRCGKSIC1AMAzMh52vXi088Flg.crl (hash: joEWlZsashjoSmAWAu3VwMpWvJmb8BR5HMGU8kNo35Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:e6:3a:24:a2:96:99:ff:d5:72:5e:27:3b:85:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5344218a4880b500c033321e76bd78b4f3c1658 Validity Not Before: Dec 6 01:02:53 2025 GMT Not After : Dec 7 01:02:53 2025 GMT Subject: CN=14eef4807804d09c551debda945235d7f29544a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:24:3d:96:eb:e8:b8:d1:23:78:41:fb:1b:78: ad:d9:ad:35:88:bf:80:00:cc:32:5a:59:4b:24:35: c8:4e:24:9a:d9:24:f1:3f:ab:57:2e:f9:dd:a9:36: 94:c4:73:71:bf:3c:9c:0c:3e:1f:6e:c2:69:2a:a2: c5:b2:ea:3b:bd:8b:54:4c:d6:04:88:cb:30:16:77: 7b:30:56:67:f2:31:8f:fb:74:37:84:69:d2:f0:49: 9c:0b:2b:23:77:76:45:be:9f:00:e9:d3:ba:ee:7b: a8:9e:02:51:6a:a3:c8:c1:50:f7:06:d0:49:6b:ec: f9:04:bc:f8:28:f1:5d:23:4e:85:29:2a:8f:92:99: 93:c5:18:73:2d:82:38:57:d9:e2:de:82:10:b7:a6: eb:d8:ef:d0:e4:1f:23:be:46:e7:65:39:1f:18:98: 05:cc:d0:c9:20:00:de:04:a1:93:56:21:2f:f0:05: c4:0a:06:a1:66:33:55:2a:42:88:8e:c7:ed:25:2d: b4:ad:5a:7e:6f:cc:27:94:92:f1:16:81:17:65:0c: 7a:57:5c:b9:3b:53:1e:09:fe:a3:2a:d1:2f:fe:5d: fd:60:b6:f2:ed:73:5e:7a:c9:a1:61:d8:66:01:bb: 4b:3c:84:5a:eb:2d:a0:19:b4:22:32:22:03:02:84: 11:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EE:F4:80:78:04:D0:9C:55:1D:EB:DA:94:52:35:D7:F2:95:44:A8 X509v3 Authority Key Identifier: keyid:B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:21:43:49:f7:68:51:fa:28:a4:7a:71:28:00:f6:2c:6e:a1: 40:43:3c:6d:b8:c1:34:20:be:97:47:0b:14:35:61:ac:56:c1: 8b:cb:b2:8e:9b:b8:66:1e:0b:e0:04:d5:19:c6:b4:ee:d6:5b: b8:36:41:8d:db:7f:de:a4:2a:15:d6:70:57:c7:fd:eb:2d:e4: cf:a0:0d:8b:98:42:48:fd:63:39:88:8f:fa:51:5e:07:ac:36: 83:9e:a2:dd:42:82:2d:1c:ac:0b:b9:26:12:bd:70:b3:ac:ee: 1e:ea:4b:ec:cd:92:24:5f:09:72:2d:e7:74:11:21:7e:45:5f: 46:56:4b:34:cc:46:9c:49:7e:2c:36:67:1a:8a:69:3b:3a:9b: 26:ab:c2:1d:67:28:9c:d7:3a:e0:88:fc:f7:a5:f3:a6:c3:9b: 0d:fe:02:2b:ff:47:17:4b:56:6c:2a:b9:ea:c3:24:13:4f:72: b4:f6:8a:aa:41:fc:68:52:f4:7e:31:52:63:54:d0:2f:4b:eb: 67:22:c0:ae:04:39:12:2e:36:27:2e:6d:53:ca:53:30:71:a7: 7f:8f:c0:2e:0e:b2:9c:72:75:4b:d6:fa:c3:55:bb:22:6d:d6: 50:9c:5d:12:c5:63:ac:de:8f:c1:54:82:e1:d2:42:7d:8b:55: 45:b6:55:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLuY6JKKWmf/Vcl4nO4WLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MzQ0MjE4YTQ4ODBiNTAwYzAzMzMyMWU3NmJkNzhiNGYz YzE2NTgwHhcNMjUxMjA2MDEwMjUzWhcNMjUxMjA3MDEwMjUzWjAzMTEwLwYDVQQD EygxNGVlZjQ4MDc4MDRkMDljNTUxZGViZGE5NDUyMzVkN2YyOTU0NGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiQ9luvouNEjeEH7G3it2a01iL+A AMwyWllLJDXITiSa2STxP6tXLvndqTaUxHNxvzycDD4fbsJpKqLFsuo7vYtUTNYE iMswFnd7MFZn8jGP+3Q3hGnS8EmcCysjd3ZFvp8A6dO67nuongJRaqPIwVD3BtBJ a+z5BLz4KPFdI06FKSqPkpmTxRhzLYI4V9ni3oIQt6br2O/Q5B8jvkbnZTkfGJgF zNDJIADeBKGTViEv8AXECgahZjNVKkKIjsftJS20rVp+b8wnlJLxFoEXZQx6V1y5 O1MeCf6jKtEv/l39YLby7XNeesmhYdhmAbtLPIRa6y2gGbQiMiIDAoQRTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTu9IB4BNCcVR3r2pRSNdfylUSoMB8GA1UdIwQY MBaAFLU0QhikiAtQDAMzIedr14tPPBZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFRSQ0dLU0lDMUFNQXpNaDUydlhpMDg4RmxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9kMjgyYmUtN2NhNS00MDBmLWJlODQt Y2ZhYjEwZDMwNjkzLzEvdFRSQ0dLU0lDMUFNQXpNaDUydlhpMDg4RmxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9kMjgyYmUtN2NhNS00MDBmLWJlODQtY2ZhYjEwZDMwNjkz LzEvdFRSQ0dLU0lDMUFNQXpNaDUydlhpMDg4RmxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSFDSfdo UfoopHpxKAD2LG6hQEM8bbjBNCC+l0cLFDVhrFbBi8uyjpu4Zh4L4ATVGca07tZb uDZBjdt/3qQqFdZwV8f96y3kz6ANi5hCSP1jOYiP+lFeB6w2g56i3UKCLRysC7km Er1ws6zuHupL7M2SJF8Jci3ndBEhfkVfRlZLNMxGnEl+LDZnGoppOzqbJqvCHWco nNc64Ij896XzpsObDf4CK/9HF0tWbCq56sMkE09ytPaKqkH8aFL0fjFSY1TQL0vr ZyLArgQ5Ei42Jy5tU8pTMHGnf4/ALg6ynHJ1S9b6w1W7Im3WUJxdEsVjrN6PwVSC 4dJCfYtVRbZV5A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:05 2025 by rpki-client