This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft File: tVG7qYKf51krGwLo1xyP18ziGrE.mft (raw, json) Hash identifier: LrzNngr+Yv1OvUia5vw4H0MtzCQkTUDsUGKMsy7tYpY= Subject key identifier: D5:82:3C:97:2F:22:C7:C3:39:98:F3:48:6C:BB:D7:C2:D6:A0:15:82 Authority key identifier: B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1 Certificate issuer: /CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1 Certificate serial: 019AF2ADB3266FC7267ECCF233B2775716A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft Manifest number: 0147 Signing time: Sat 06 Dec 2025 08:01:01 +0000 Manifest this update: Sat 06 Dec 2025 08:01:01 +0000 Manifest next update: Sun 07 Dec 2025 08:01:01 +0000 Files and hashes: 1: aMimPGKaT2G8XuuZ7-2O1Nh1hh8.roa (hash: k/8LZ3MzLnclzjgMcW5jgVcEL+c+Ow+osyP79ShIXpk=) 2: tVG7qYKf51krGwLo1xyP18ziGrE.crl (hash: CW6NxGRKPfDWzWmUb23mPgzOl5ye/KU1BnEW3Ml7IAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b3:26:6f:c7:26:7e:cc:f2:33:b2:77:57:16:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1 Validity Not Before: Dec 6 08:01:01 2025 GMT Not After : Dec 7 08:01:01 2025 GMT Subject: CN=d5823c972f22c7c33998f3486cbbd7c2d6a01582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:79:09:9d:1a:f1:0e:41:1e:12:51:ec:b4:ee: 53:24:53:39:77:fa:6a:6c:a6:a9:96:92:48:f5:5d: 79:84:6d:10:ef:4c:44:71:8f:3e:c7:36:d9:01:28: 55:73:a1:b1:ee:f0:88:5c:4c:68:4b:6f:29:d3:05: da:ef:21:af:ef:7b:08:82:58:a9:64:cd:80:c3:f2: a7:14:06:69:d4:e2:ee:dd:9e:2b:0b:3a:09:8e:e2: 4c:66:7d:07:04:1c:a8:6e:12:5f:82:dd:49:98:6f: 91:fc:a2:a1:17:23:a2:1e:c0:97:f4:e5:e6:38:51: 4c:c8:53:6a:02:d2:5f:73:12:08:ab:72:f9:e9:f1: b9:6d:1c:38:a2:5a:55:3f:9d:03:dc:3d:e2:d4:6f: ab:8a:7f:a4:cd:46:18:7d:80:b4:28:6b:75:31:f3: 2a:8d:4e:9a:b0:f3:73:8a:31:1f:69:f1:35:ce:6e: 55:eb:0c:d1:18:92:99:57:8c:a4:af:79:03:cd:dd: 32:85:3f:32:b6:49:52:23:b7:68:17:57:32:98:c2: bf:a2:56:cd:ec:8a:2f:d7:26:2e:48:fc:e1:f0:0d: 35:6e:11:9e:8b:d1:4e:2c:bd:6e:9b:0a:c1:5a:00: 4e:a6:14:ae:7e:b3:58:b9:ec:07:3a:6c:43:ad:1b: 7b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:82:3C:97:2F:22:C7:C3:39:98:F3:48:6C:BB:D7:C2:D6:A0:15:82 X509v3 Authority Key Identifier: keyid:B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:5e:f9:c3:09:b0:38:44:f9:71:69:1f:47:28:34:2b:96:62: 12:6e:1e:3b:0b:7b:6d:eb:ce:a6:bd:1a:7c:f5:97:51:35:0a: 1e:ce:f2:30:fc:06:f0:0a:b8:87:70:74:6f:2f:6c:62:ec:45: f0:02:3d:2b:e0:da:b3:69:3b:54:e1:61:70:20:b3:31:77:f9: 0c:92:10:bd:44:c5:39:17:fa:18:19:b2:aa:46:a3:26:eb:dc: 68:eb:9e:59:83:a2:b1:c9:2d:ae:6d:ad:e3:94:3c:a9:3f:9f: 62:32:2c:21:1d:bd:8a:bd:ab:9d:50:13:36:63:2a:84:2d:7d: 77:e5:02:71:c2:00:bb:a6:77:06:b5:36:d9:9c:20:e4:f0:e7: 7b:84:f6:65:0b:36:5b:9d:ee:31:f4:08:d7:3e:86:ae:6c:d9: 75:60:3c:31:7f:f7:21:51:91:ef:b3:e8:26:7a:0b:2a:72:f4: 07:25:b0:89:18:94:37:71:91:e8:85:c5:ad:64:5d:05:62:13: 6a:6b:6b:e4:75:a3:b5:c1:08:05:77:02:7d:00:1c:fe:d7:9f: bf:41:ca:69:00:d2:85:c2:9c:0a:91:b5:5c:b1:d2:10:0e:8a: 40:67:2a:b0:06:ff:ff:05:67:2f:9c:46:d0:68:0d:79:b4:95: 53:b7:c7:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbMmb8cmfszyM7J3VxajMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTFiYmE5ODI5ZmU3NTkyYjFiMDJlOGQ3MWM4ZmQ3Y2Nl MjFhYjEwHhcNMjUxMjA2MDgwMTAxWhcNMjUxMjA3MDgwMTAxWjAzMTEwLwYDVQQD EyhkNTgyM2M5NzJmMjJjN2MzMzk5OGYzNDg2Y2JiZDdjMmQ2YTAxNTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XkJnRrxDkEeElHstO5TJFM5d/pq bKaplpJI9V15hG0Q70xEcY8+xzbZAShVc6Gx7vCIXExoS28p0wXa7yGv73sIglip ZM2Aw/KnFAZp1OLu3Z4rCzoJjuJMZn0HBByobhJfgt1JmG+R/KKhFyOiHsCX9OXm OFFMyFNqAtJfcxIIq3L56fG5bRw4olpVP50D3D3i1G+rin+kzUYYfYC0KGt1MfMq jU6asPNzijEfafE1zm5V6wzRGJKZV4ykr3kDzd0yhT8ytklSI7doF1cymMK/olbN 7Iov1yYuSPzh8A01bhGei9FOLL1umwrBWgBOphSufrNYuewHOmxDrRt7lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWCPJcvIsfDOZjzSGy718LWoBWCMB8GA1UdIwQY MBaAFLVRu6mCn+dZKxsC6Nccj9fM4hqxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZHN3FZS2Y1MWtyR3dMbzF4eVAxOHppR3JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iNWQ5NTUtYzdmOC00NjNmLTgxNWEt NGViOTkyMjg2MGNkLzEvdFZHN3FZS2Y1MWtyR3dMbzF4eVAxOHppR3JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9iNWQ5NTUtYzdmOC00NjNmLTgxNWEtNGViOTkyMjg2MGNk LzEvdFZHN3FZS2Y1MWtyR3dMbzF4eVAxOHppR3JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtV75wwmw OET5cWkfRyg0K5ZiEm4eOwt7bevOpr0afPWXUTUKHs7yMPwG8Aq4h3B0by9sYuxF 8AI9K+Das2k7VOFhcCCzMXf5DJIQvUTFORf6GBmyqkajJuvcaOueWYOiscktrm2t 45Q8qT+fYjIsIR29ir2rnVATNmMqhC19d+UCccIAu6Z3BrU22Zwg5PDne4T2ZQs2 W53uMfQI1z6GrmzZdWA8MX/3IVGR77PoJnoLKnL0ByWwiRiUN3GR6IXFrWRdBWIT amtr5HWjtcEIBXcCfQAc/tefv0HKaQDShcKcCpG1XLHSEA6KQGcqsAb//wVnL5xG 0GgNebSVU7fHBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:24 2025 by rpki-client