This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft File: tGTgryi3VcTsiAENlCmGl9GIOTM.mft (raw, json) Hash identifier: qlk9qWi7xDWMql+y7x3JtzYvb6UkcCFmiKAeHRYtLsM= Subject key identifier: 8E:7E:FC:2D:86:2B:81:22:EF:44:17:B1:28:16:21:D8:E0:76:AF:DE Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33 Certificate issuer: /CN=b464e0af28b755c4ec88010d94298697d1883933 Certificate serial: 019B2F9E99D7C8952334FF13BE04A0E3744C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft Manifest number: 0945 Signing time: Thu 18 Dec 2025 04:01:21 +0000 Manifest this update: Thu 18 Dec 2025 04:01:21 +0000 Manifest next update: Fri 19 Dec 2025 04:01:21 +0000 Files and hashes: 1: 4ZUimyMSrmZMeMTJpofdIprKN0Y.roa (hash: +sbrqZ7npPQY0M7RUiP5uMAuk7XGp56zDb3oxzfgBs8=) 2: D6cOOwuzIu0b1VD3IEBzEJwwwCo.roa (hash: v5PJLnM3bwyGnG1xvGzcUgGuOEM5ARi6RIpoEpY7P4s=) 3: fyoJ9a9SSU9QMOOAnopUi24XOCI.roa (hash: Oq4G4KqExdW+YSWtwOksmXAFXdtGTgedgjAZaCPW9DM=) 4: tGTgryi3VcTsiAENlCmGl9GIOTM.crl (hash: cgNF5WYh2buVbDlVS49rsti47Gb5umD6yGtHgYhbVsA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:99:d7:c8:95:23:34:ff:13:be:04:a0:e3:74:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933 Validity Not Before: Dec 18 04:01:21 2025 GMT Not After : Dec 19 04:01:21 2025 GMT Subject: CN=8e7efc2d862b8122ef4417b1281621d8e076afde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:17:58:6d:c0:1f:a6:bc:32:b3:64:89:05:86: 0c:fd:46:80:27:67:23:bd:f3:de:c1:d0:7a:d0:4e: 01:52:58:73:3d:c0:4a:5e:49:ec:21:d2:79:7a:b8: b5:28:0d:03:01:ee:50:f1:c1:a6:e7:81:e5:00:7c: f3:20:17:ba:70:b8:10:2c:21:69:fd:20:eb:ae:7d: 19:80:50:41:3b:1b:51:25:ab:25:e6:2e:4a:37:3d: 88:3c:6b:b9:1a:6c:62:28:c2:2d:2e:56:56:07:2f: 31:9f:5a:78:f2:bf:a5:71:af:f2:1a:b6:c2:47:c9: 43:1d:4e:be:39:a2:6b:85:1a:1d:5a:e3:3b:c7:74: ca:32:14:f1:be:61:8e:7a:b6:dc:b0:5d:23:58:23: 55:ac:8c:da:05:1e:22:87:59:a5:5e:2a:f6:b3:54: 36:e4:30:ec:81:8b:c4:6a:50:fa:dd:7b:17:c1:ed: a2:e7:67:ee:bc:0a:1d:cb:04:f2:2f:7d:c9:f2:bf: 9c:23:e2:6b:e8:44:0d:21:aa:c4:eb:db:7a:53:5a: 0c:c7:91:b7:9e:5e:07:f9:ed:50:28:14:e1:65:38: 70:2b:0e:81:36:52:20:37:a5:e0:e9:2a:63:c8:b5: f2:ca:b7:3e:69:66:0b:32:31:09:8f:c7:78:a9:40: 30:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7E:FC:2D:86:2B:81:22:EF:44:17:B1:28:16:21:D8:E0:76:AF:DE X509v3 Authority Key Identifier: keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:02:90:a0:6f:ea:9d:ee:00:f1:9b:66:15:82:44:71:c6:d5: fc:fe:72:00:00:de:e7:b0:87:ba:e8:69:39:ea:5c:1a:7f:b3: ef:b2:48:2a:89:aa:f5:b6:79:56:3b:5c:53:3a:c3:69:b7:fa: b4:9c:dd:b0:ca:51:98:fc:f2:4c:ed:b3:3b:a4:8c:06:22:a8: 65:a7:bb:81:be:c7:4e:25:48:e4:4a:aa:9e:62:59:8d:5d:85: 75:e4:4a:c9:97:50:20:56:23:36:22:95:5f:38:83:89:90:ec: b4:49:22:b1:cc:78:54:c6:48:f4:c7:c8:ec:b1:08:2a:ce:05: 8f:a9:48:bb:a9:55:97:73:eb:2e:5e:84:bb:99:7a:5f:09:2f: 05:d6:dd:18:eb:c6:5c:fc:b6:fe:1c:f3:47:50:71:9f:95:53: cf:5e:db:e5:7d:36:00:9e:1e:bc:92:1d:7e:01:68:ff:42:2b: 1b:69:ce:c0:16:ea:b6:82:b7:5e:61:a1:ad:2b:b9:5c:6e:8e: b6:0e:29:69:82:86:89:5d:7a:88:1b:d1:93:86:84:3b:f6:f2: 99:ac:05:af:e2:1c:10:89:1d:c8:0f:e5:b1:8f:28:0c:b1:f0: 40:4f:65:e9:20:9f:6e:fa:eb:75:82:26:62:ae:0c:2e:bf:b6: c7:f6:5c:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnpnXyJUjNP8TvgSg43RMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NjRlMGFmMjhiNzU1YzRlYzg4MDEwZDk0Mjk4Njk3ZDE4 ODM5MzMwHhcNMjUxMjE4MDQwMTIxWhcNMjUxMjE5MDQwMTIxWjAzMTEwLwYDVQQD Eyg4ZTdlZmMyZDg2MmI4MTIyZWY0NDE3YjEyODE2MjFkOGUwNzZhZmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhdYbcAfprwys2SJBYYM/UaAJ2cj vfPewdB60E4BUlhzPcBKXknsIdJ5eri1KA0DAe5Q8cGm54HlAHzzIBe6cLgQLCFp /SDrrn0ZgFBBOxtRJasl5i5KNz2IPGu5GmxiKMItLlZWBy8xn1p48r+lca/yGrbC R8lDHU6+OaJrhRodWuM7x3TKMhTxvmGOerbcsF0jWCNVrIzaBR4ih1mlXir2s1Q2 5DDsgYvEalD63XsXwe2i52fuvAodywTyL33J8r+cI+Jr6EQNIarE69t6U1oMx5G3 nl4H+e1QKBThZThwKw6BNlIgN6Xg6SpjyLXyyrc+aWYLMjEJj8d4qUAwSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5+/C2GK4Ei70QXsSgWIdjgdq/eMB8GA1UdIwQY MBaAFLRk4K8ot1XE7IgBDZQphpfRiDkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wY2FhNmQtMTA5ZS00NWYzLWE5MzIt NDc1YzVjOTFmNDc0LzEvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8wY2FhNmQtMTA5ZS00NWYzLWE5MzItNDc1YzVjOTFmNDc0 LzEvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAKQoG/q ne4A8ZtmFYJEccbV/P5yAADe57CHuuhpOepcGn+z77JIKomq9bZ5VjtcUzrDabf6 tJzdsMpRmPzyTO2zO6SMBiKoZae7gb7HTiVI5EqqnmJZjV2FdeRKyZdQIFYjNiKV XziDiZDstEkiscx4VMZI9MfI7LEIKs4Fj6lIu6lVl3PrLl6Eu5l6XwkvBdbdGOvG XPy2/hzzR1Bxn5VTz17b5X02AJ4evJIdfgFo/0IrG2nOwBbqtoK3XmGhrSu5XG6O tg4paYKGiV16iBvRk4aEO/bymawFr+IcEIkdyA/lsY8oDLHwQE9l6SCfbvrrdYIm Yq4MLr+2x/Zc1w== -----END CERTIFICATE-----Generated at Thu Dec 18 12:53:07 2025 by rpki-client