This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft File: TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft (raw, json) Hash identifier: ChBq6mqzbMsTWZ5bbf7NYsfQC3FprDhfeg/FnWEhBbI= Subject key identifier: 77:59:D8:04:D2:AF:11:C9:3D:74:5E:04:34:A2:32:9B:A6:34:26:6A Authority key identifier: 4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83 Certificate issuer: /CN=4e7545eee66daa39443ff9f88f522447f7863783 Certificate serial: 019B085B378A77C26F6D6F1E20DE193760E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft Manifest number: 12C4 Signing time: Wed 10 Dec 2025 13:02:34 +0000 Manifest this update: Wed 10 Dec 2025 13:02:34 +0000 Manifest next update: Thu 11 Dec 2025 13:02:34 +0000 Files and hashes: 1: NRxH6LDQFnqwlvTIsGf-f3zdgZM.roa (hash: 45q8sJ0aVkz5DnC4TEh7gH+UDuL3EgyXgzbbWcDZotI=) 2: TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl (hash: TWYZbpXo6IezLwpg6NDpjks6QRnV1OKN1PfINArrADk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:5b:37:8a:77:c2:6f:6d:6f:1e:20:de:19:37:60:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e7545eee66daa39443ff9f88f522447f7863783 Validity Not Before: Dec 10 13:02:34 2025 GMT Not After : Dec 11 13:02:34 2025 GMT Subject: CN=7759d804d2af11c93d745e0434a2329ba634266a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:76:54:21:32:1c:18:76:6f:a1:39:51:5d:f7: e6:25:60:a1:3e:e7:a6:0b:9a:6e:c1:b7:e6:36:65: e9:1e:cc:c3:45:f7:24:09:3f:ee:9a:43:3f:68:66: 8f:57:04:46:85:b1:16:2a:39:98:cb:e8:d4:f0:05: 3a:14:ba:82:30:83:4a:8d:ce:d4:7e:c9:0b:dc:69: 0e:35:39:2b:fe:4a:a4:16:7a:70:ae:6c:d7:f4:cc: ba:f6:d8:51:3c:aa:72:e1:f8:79:5a:23:2f:5b:4d: 9e:1c:7d:0d:12:f3:3b:05:d0:e8:2c:1a:a6:89:b1: 59:9d:20:dc:d8:be:86:17:28:27:32:a2:c3:b2:39: b2:89:91:cb:07:f5:ee:76:03:09:ce:3b:26:2d:fe: d8:3d:17:29:00:b4:b2:9b:ce:7a:31:94:43:d6:d3: 1e:23:bb:e2:b9:c7:02:95:4f:7a:e9:f5:aa:8f:b5: 24:9b:85:56:e2:b9:c6:33:14:bd:7d:19:24:6d:34: 32:14:b6:99:15:20:c9:be:84:e8:34:f2:25:87:3f: cf:62:d2:58:13:61:fc:5a:dc:b0:61:7c:a1:db:48: 02:8b:ce:2b:6e:e0:17:4f:2f:49:09:52:1a:a5:64: 3a:f4:d6:7e:5e:48:4b:6c:19:b7:20:dc:0d:97:3a: 27:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:59:D8:04:D2:AF:11:C9:3D:74:5E:04:34:A2:32:9B:A6:34:26:6A X509v3 Authority Key Identifier: keyid:4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9e:45:43:28:6c:2d:08:4e:f4:df:96:e4:51:05:63:3d:c0: 80:72:a8:72:b1:cc:bf:1e:73:93:3e:7e:41:37:68:b0:af:12: 6c:46:5f:94:11:a0:6f:ae:79:29:f4:de:e1:be:3d:74:79:50: 5d:8a:2a:a2:a9:2d:d9:26:38:fb:c7:33:bf:8f:2e:4b:81:dd: f7:78:44:31:5c:55:e1:78:95:96:14:cc:b3:89:3c:10:7d:19: 2e:9f:b9:37:5e:a8:a5:38:53:9c:1c:96:52:94:b1:42:b8:07: d4:ae:52:b2:c6:55:f8:27:99:86:26:fa:2e:53:80:89:0e:47: c6:f3:fa:16:e8:06:ca:69:9c:41:d9:de:30:f0:d1:67:7e:b3: 4e:3a:ee:6f:bd:6e:3a:cd:42:93:cc:be:97:f4:a3:b5:24:93: 6e:75:97:73:ae:f4:89:69:64:3a:30:12:0f:74:dc:15:cf:70: 32:e6:3e:55:51:57:74:8d:8e:15:52:93:79:6c:63:be:fc:ff: 57:ca:2c:9c:e3:7c:8e:9f:aa:a9:e2:4a:9d:a7:5b:61:22:b1: e1:77:a8:75:45:53:a4:7c:24:30:21:17:2c:92:9e:81:17:6b: 09:54:d2:bf:04:ab:2b:f7:7a:1d:a7:82:29:9a:97:2b:a7:d4: fa:ef:f8:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIWzeKd8JvbW8eIN4ZN2DnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNzU0NWVlZTY2ZGFhMzk0NDNmZjlmODhmNTIyNDQ3Zjc4 NjM3ODMwHhcNMjUxMjEwMTMwMjM0WhcNMjUxMjExMTMwMjM0WjAzMTEwLwYDVQQD Eyg3NzU5ZDgwNGQyYWYxMWM5M2Q3NDVlMDQzNGEyMzI5YmE2MzQyNjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXZUITIcGHZvoTlRXffmJWChPuem C5puwbfmNmXpHszDRfckCT/umkM/aGaPVwRGhbEWKjmYy+jU8AU6FLqCMINKjc7U fskL3GkONTkr/kqkFnpwrmzX9My69thRPKpy4fh5WiMvW02eHH0NEvM7BdDoLBqm ibFZnSDc2L6GFygnMqLDsjmyiZHLB/XudgMJzjsmLf7YPRcpALSym856MZRD1tMe I7viuccClU966fWqj7Ukm4VW4rnGMxS9fRkkbTQyFLaZFSDJvoToNPIlhz/PYtJY E2H8WtywYXyh20gCi84rbuAXTy9JCVIapWQ69NZ+XkhLbBm3INwNlzonnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdZ2ATSrxHJPXReBDSiMpumNCZqMB8GA1UdIwQY MBaAFE51Re7mbao5RD/5+I9SJEf3hjeDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG5WRjd1WnRxamxFUF9uNGoxSWtSX2VHTjRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9hNTM2NDQtOWRhNi00ZDI5LWI5YjYt ZTc4Y2ZhNzllZmYxLzEvVG5WRjd1WnRxamxFUF9uNGoxSWtSX2VHTjRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9hNTM2NDQtOWRhNi00ZDI5LWI5YjYtZTc4Y2ZhNzllZmYx LzEvVG5WRjd1WnRxamxFUF9uNGoxSWtSX2VHTjRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS55FQyhs LQhO9N+W5FEFYz3AgHKocrHMvx5zkz5+QTdosK8SbEZflBGgb655KfTe4b49dHlQ XYoqoqkt2SY4+8czv48uS4Hd93hEMVxV4XiVlhTMs4k8EH0ZLp+5N16opThTnByW UpSxQrgH1K5SssZV+CeZhib6LlOAiQ5HxvP6FugGymmcQdneMPDRZ36zTjrub71u Os1Ck8y+l/SjtSSTbnWXc670iWlkOjASD3TcFc9wMuY+VVFXdI2OFVKTeWxjvvz/ V8osnON8jp+qqeJKnadbYSKx4XeodUVTpHwkMCEXLJKegRdrCVTSvwSrK/d6HaeC KZqXK6fU+u/4Cg== -----END CERTIFICATE-----Generated at Wed Dec 10 17:15:18 2025 by rpki-client