This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json) Hash identifier: kcsqS9U8zlNYkdnbT+C68tqZxzK0BoIJMeBJSa3q/JU= Subject key identifier: 98:B7:D3:4B:53:E0:6F:C6:B4:07:99:D9:D5:CB:79:E3:B4:C0:40:85 Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Certificate serial: 019AF23F6EBA5FD003DF59A6E999655B4411 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 06:00:34 +0000 Manifest this update: Sat 06 Dec 2025 06:00:34 +0000 Manifest next update: Sun 07 Dec 2025 06:00:34 +0000 Files and hashes: 1: TBa4a-KtbfHFVrbN2cad2MX6LMk.roa (hash: Y3N+cjg+SjqyV2tOVkdyLRVpi/Svkzn+vqTnkQ2Uhq0=) 2: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: sNRsxAu0JifRvCAhO1QDjz5+DMHTReBtbO0ldn5dGo4=) 3: VCmh7D4aDnJ3RvUgB4_x96-F7yk.roa (hash: Fvy+64reQdJIkB2LlOhrfVK5VykM8awZbivVRRObMH8=) 4: W2TNL5im0fX66hopLKpEaeHN1Vw.roa (hash: jFMMnSyz7YrR/mDL9VXSfjnRvEdkg9GR9m7oXoI7Q1I=) 5: cC9Kn5RNwJ59ItW6IXpERzZosPw.roa (hash: Tn7jWRKA9agcVwEoCtyV/3OdfNNW+6uN3rC9ZNlnP8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:6e:ba:5f:d0:03:df:59:a6:e9:99:65:5b:44:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Validity Not Before: Dec 6 06:00:34 2025 GMT Not After : Dec 7 06:00:34 2025 GMT Subject: CN=98b7d34b53e06fc6b40799d9d5cb79e3b4c04085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:65:5a:3f:54:ca:07:85:c9:e2:ba:7b:19:e3: 85:c2:e4:c8:86:4c:ef:e0:4a:1f:cf:63:d3:aa:00: ac:56:12:38:e7:00:b7:69:3d:55:3e:75:92:b8:8a: 33:e8:3d:92:ea:c7:43:a2:36:16:a0:1b:67:ed:2c: 69:c7:18:16:06:4e:1e:88:73:15:eb:93:48:d7:4e: a4:8b:c3:6b:75:4f:ce:a2:75:25:ed:c1:40:5f:f6: 02:f8:98:e7:b0:4b:3b:0a:11:4f:98:e3:1a:e0:b2: 7e:ea:63:0f:65:b8:8a:70:7b:c8:f1:8d:3d:28:80: 39:d7:1a:12:9c:db:81:3f:1e:aa:f1:6c:98:66:53: 08:c5:bc:c8:39:c0:53:44:c0:ff:01:fa:30:f1:e1: 29:0b:8a:bc:e1:39:60:15:87:e5:06:c7:61:82:8c: e3:b4:e0:4e:05:d8:e2:7e:21:21:e3:33:28:a7:6c: 9b:9f:46:d6:77:93:da:fd:78:16:e0:9c:fe:7b:20: 9f:5f:3e:e6:cc:d9:0d:69:4d:11:c1:67:5b:f8:0b: a2:5e:87:00:8f:96:90:da:c6:c9:86:e0:52:22:db: 33:44:09:73:e4:c0:29:65:c3:42:18:f9:95:17:60: 9a:45:9d:1b:77:0a:e5:5b:e4:1b:93:4d:ff:d4:12: ea:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B7:D3:4B:53:E0:6F:C6:B4:07:99:D9:D5:CB:79:E3:B4:C0:40:85 X509v3 Authority Key Identifier: keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:1c:ef:7c:ec:a1:a5:61:96:5f:dd:99:5c:cf:5e:9b:da:b0: ed:24:f7:55:f2:b7:20:e9:1c:e6:dd:99:78:49:18:93:99:a5: 12:ac:fc:1b:99:fb:99:52:e0:e6:52:b4:c5:11:70:82:a1:5d: 0e:d7:70:05:8f:70:2d:14:e2:df:1a:bd:d2:92:dc:eb:d8:95: c6:3c:df:30:9a:32:c4:d1:08:f6:03:d1:d2:6b:d6:bc:ed:d0: b4:f2:0a:92:01:5e:c9:dd:ec:92:ae:42:09:4f:0c:43:7c:d7: 21:cd:8c:36:07:59:6b:01:7d:fa:d8:d2:d2:10:0d:50:6f:9d: 69:24:05:db:1f:b8:0c:c9:f6:f3:16:0c:0f:46:24:e9:f1:61: 03:02:c7:c2:4a:31:91:93:19:fe:a0:13:c2:97:a8:5e:2f:d4: 84:d6:db:23:a1:5c:07:fd:b0:4d:cf:57:cd:be:6b:27:3d:af: 91:e2:c7:51:0a:84:45:80:2c:97:16:b7:26:c4:4a:bb:dd:9e: e1:c3:a7:cd:57:ef:be:c6:77:1f:62:eb:ea:2f:d5:80:d9:64: 2f:15:f7:9e:e4:b3:74:ee:b4:25:26:13:f8:1a:64:7d:54:f5: 03:a5:6e:6c:69:e5:54:aa:c3:f3:a3:01:b0:88:d3:94:8d:33: 7b:83:8f:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP266X9AD31mm6ZllW0QRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODczODllZjQxZjE4YzFmY2M4Mjc1NDM0OWVhNzA5Njk4 MGIxZTMwHhcNMjUxMjA2MDYwMDM0WhcNMjUxMjA3MDYwMDM0WjAzMTEwLwYDVQQD Eyg5OGI3ZDM0YjUzZTA2ZmM2YjQwNzk5ZDlkNWNiNzllM2I0YzA0MDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWVaP1TKB4XJ4rp7GeOFwuTIhkzv 4Eofz2PTqgCsVhI45wC3aT1VPnWSuIoz6D2S6sdDojYWoBtn7SxpxxgWBk4eiHMV 65NI106ki8NrdU/OonUl7cFAX/YC+JjnsEs7ChFPmOMa4LJ+6mMPZbiKcHvI8Y09 KIA51xoSnNuBPx6q8WyYZlMIxbzIOcBTRMD/Afow8eEpC4q84TlgFYflBsdhgozj tOBOBdjifiEh4zMop2ybn0bWd5Pa/XgW4Jz+eyCfXz7mzNkNaU0RwWdb+AuiXocA j5aQ2sbJhuBSItszRAlz5MApZcNCGPmVF2CaRZ0bdwrlW+Qbk03/1BLqQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJi300tT4G/GtAeZ2dXLeeO0wECFMB8GA1UdIwQY MBaAFEyHOJ70HxjB/MgnVDSepwlpgLHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTct ZmZiNzA5Zjc2NjhjLzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTctZmZiNzA5Zjc2Njhj LzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhzvfOyh pWGWX92ZXM9em9qw7ST3VfK3IOkc5t2ZeEkYk5mlEqz8G5n7mVLg5lK0xRFwgqFd DtdwBY9wLRTi3xq90pLc69iVxjzfMJoyxNEI9gPR0mvWvO3QtPIKkgFeyd3skq5C CU8MQ3zXIc2MNgdZawF9+tjS0hANUG+daSQF2x+4DMn28xYMD0Yk6fFhAwLHwkox kZMZ/qATwpeoXi/UhNbbI6FcB/2wTc9Xzb5rJz2vkeLHUQqERYAslxa3JsRKu92e 4cOnzVfvvsZ3H2Lr6i/VgNlkLxX3nuSzdO60JSYT+BpkfVT1A6VubGnlVKrD86MB sIjTlI0ze4OPyw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:05:21 2025 by rpki-client