This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft File: tGTgryi3VcTsiAENlCmGl9GIOTM.mft (raw, json) Hash identifier: ddoNngezT22EDtrQByWVFIA7v/R8tnH6jkb+9BXJNQM= Subject key identifier: D0:73:B3:0A:5A:07:0C:18:85:20:E2:24:97:EA:61:E1:59:EC:66:08 Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33 Certificate issuer: /CN=b464e0af28b755c4ec88010d94298697d1883933 Certificate serial: 019AF1D241259F9F886A10F9DC85B7321730 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft Manifest number: 0925 Signing time: Sat 06 Dec 2025 04:01:19 +0000 Manifest this update: Sat 06 Dec 2025 04:01:19 +0000 Manifest next update: Sun 07 Dec 2025 04:01:19 +0000 Files and hashes: 1: 4ZUimyMSrmZMeMTJpofdIprKN0Y.roa (hash: +sbrqZ7npPQY0M7RUiP5uMAuk7XGp56zDb3oxzfgBs8=) 2: D6cOOwuzIu0b1VD3IEBzEJwwwCo.roa (hash: v5PJLnM3bwyGnG1xvGzcUgGuOEM5ARi6RIpoEpY7P4s=) 3: fyoJ9a9SSU9QMOOAnopUi24XOCI.roa (hash: Oq4G4KqExdW+YSWtwOksmXAFXdtGTgedgjAZaCPW9DM=) 4: tGTgryi3VcTsiAENlCmGl9GIOTM.crl (hash: BMvG4wR2Ydy9Eflufdmj2rdy8hGfEOw6oCCHTQ/kDVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:41:25:9f:9f:88:6a:10:f9:dc:85:b7:32:17:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933 Validity Not Before: Dec 6 04:01:19 2025 GMT Not After : Dec 7 04:01:19 2025 GMT Subject: CN=d073b30a5a070c188520e22497ea61e159ec6608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:30:5c:78:42:b0:10:9f:d1:2d:0d:d8:94:37: 9c:89:09:94:da:b2:5d:d5:52:b1:2a:38:2c:88:33: 2d:4a:4f:f2:f0:2e:32:89:d1:ee:96:9c:df:8f:33: ea:75:75:c0:fd:4b:5e:fe:64:2a:02:7b:f7:4c:92: 38:2d:f3:ff:db:cd:35:d8:4e:ab:1b:4e:92:83:d6: 71:6e:83:c2:2b:a6:6d:bb:5c:68:97:0b:4a:dd:47: bb:25:0e:0f:66:85:49:d9:73:e2:f8:86:cd:35:96: 23:a1:95:f1:73:e4:35:8b:ba:14:03:89:a8:6b:35: 20:bb:a4:73:33:f2:49:69:44:f5:da:8f:c1:5d:3e: 71:cb:99:fa:c5:33:55:d6:b3:bc:0f:25:5f:a5:f6: 5e:73:cd:4c:2f:8a:77:fd:2e:3d:f1:1a:76:d6:7c: 6c:ba:a4:b4:15:91:1c:58:a8:a8:61:9d:e4:d4:43: ee:04:8b:2a:b0:c4:3b:5f:5c:7b:e0:69:2f:31:42: 63:4a:83:14:cb:c8:67:87:4e:fb:30:1c:96:64:29: d0:fb:8e:c2:ea:88:32:a1:04:49:f1:9c:b3:cb:03: fb:8d:3b:4d:c7:49:75:c1:d7:ee:11:05:29:d2:28: 97:b0:33:b4:bb:ff:02:b8:bf:b4:a6:9e:f9:53:ec: 80:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:73:B3:0A:5A:07:0C:18:85:20:E2:24:97:EA:61:E1:59:EC:66:08 X509v3 Authority Key Identifier: keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:2f:9b:45:88:f7:ab:92:e0:45:44:71:a7:7b:49:0f:d5:2a: b6:52:8b:0d:46:dc:ef:a1:d1:99:20:0e:a1:56:46:c7:33:5f: e4:05:c2:9c:e2:c5:9d:18:16:14:a8:fe:a6:c5:ca:75:cd:f5: 28:1b:28:bc:16:27:8b:d1:8b:44:8c:c2:c2:52:31:b5:d9:2d: 67:48:78:67:0a:eb:f1:83:37:55:1d:6f:7f:89:96:82:a5:7e: 61:91:5a:50:87:53:54:6d:d4:48:d2:a3:f3:3e:fc:8f:0c:3b: 1c:04:69:7e:5c:21:57:73:5f:38:4a:b9:85:b4:a0:69:fd:9c: 52:c6:13:e3:65:e4:15:b2:e2:30:a9:4c:5b:50:a9:f4:a3:df: 45:77:47:1a:94:b9:dd:cf:c6:0c:a2:ba:5c:af:59:23:58:dc: e0:2a:ae:78:be:8d:1b:d3:05:e2:ae:4d:63:f1:e4:2d:b2:9e: b8:8a:98:5d:c0:13:b2:0d:a1:e3:9f:a9:a9:c4:c9:32:2a:82: f6:36:9e:d3:26:74:f1:5e:c3:b5:4a:a6:d0:39:7f:3a:fd:7c: b0:25:41:34:36:bd:49:9f:d0:a4:51:5a:71:9c:88:f4:b0:e1: c2:ae:ab:3f:82:3d:4d:75:bd:ec:43:66:55:c7:de:d3:bb:f7: a4:22:39:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kEln5+IahD53IW3MhcwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NjRlMGFmMjhiNzU1YzRlYzg4MDEwZDk0Mjk4Njk3ZDE4 ODM5MzMwHhcNMjUxMjA2MDQwMTE5WhcNMjUxMjA3MDQwMTE5WjAzMTEwLwYDVQQD EyhkMDczYjMwYTVhMDcwYzE4ODUyMGUyMjQ5N2VhNjFlMTU5ZWM2NjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjBceEKwEJ/RLQ3YlDeciQmU2rJd 1VKxKjgsiDMtSk/y8C4yidHulpzfjzPqdXXA/Ute/mQqAnv3TJI4LfP/28012E6r G06Sg9ZxboPCK6Ztu1xolwtK3Ue7JQ4PZoVJ2XPi+IbNNZYjoZXxc+Q1i7oUA4mo azUgu6RzM/JJaUT12o/BXT5xy5n6xTNV1rO8DyVfpfZec81ML4p3/S498Rp21nxs uqS0FZEcWKioYZ3k1EPuBIsqsMQ7X1x74GkvMUJjSoMUy8hnh077MByWZCnQ+47C 6ogyoQRJ8ZyzywP7jTtNx0l1wdfuEQUp0iiXsDO0u/8CuL+0pp75U+yA5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBzswpaBwwYhSDiJJfqYeFZ7GYIMB8GA1UdIwQY MBaAFLRk4K8ot1XE7IgBDZQphpfRiDkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wY2FhNmQtMTA5ZS00NWYzLWE5MzIt NDc1YzVjOTFmNDc0LzEvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8wY2FhNmQtMTA5ZS00NWYzLWE5MzItNDc1YzVjOTFmNDc0 LzEvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASi+bRYj3 q5LgRURxp3tJD9UqtlKLDUbc76HRmSAOoVZGxzNf5AXCnOLFnRgWFKj+psXKdc31 KBsovBYni9GLRIzCwlIxtdktZ0h4Zwrr8YM3VR1vf4mWgqV+YZFaUIdTVG3USNKj 8z78jww7HARpflwhV3NfOEq5hbSgaf2cUsYT42XkFbLiMKlMW1Cp9KPfRXdHGpS5 3c/GDKK6XK9ZI1jc4CqueL6NG9MF4q5NY/HkLbKeuIqYXcATsg2h45+pqcTJMiqC 9jae0yZ08V7DtUqm0Dl/Ov18sCVBNDa9SZ/QpFFacZyI9LDhwq6rP4I9TXW97ENm Vcfe07v3pCI5Bg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:27 2025 by rpki-client