This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft File: tgcVWH7cyzJajXwPWkLY8EOHHbc.mft (raw, json) Hash identifier: 6zT9tXhtXbU+Worh0Gf876lVkPt2fvtSRuizEzcHAfA= Subject key identifier: 00:C5:A1:20:44:AA:C2:30:0B:C2:59:EC:49:E0:D6:75:03:B7:D7:FC Authority key identifier: B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7 Certificate issuer: /CN=b60715587edccb325a8d7c0f5a42d8f043871db7 Certificate serial: 019AF12F364393DC858725BE30FB607C2AD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft Manifest number: 0286 Signing time: Sat 06 Dec 2025 01:03:14 +0000 Manifest this update: Sat 06 Dec 2025 01:03:14 +0000 Manifest next update: Sun 07 Dec 2025 01:03:14 +0000 Files and hashes: 1: tgcVWH7cyzJajXwPWkLY8EOHHbc.crl (hash: 9UzLV+ZCs5CWmD3wBLeDXuTv1D8ZnjRxknwoqH/B1LI=) 2: zAVl6KN24j-HKETuiZlV3hao63U.roa (hash: djF473q/t5BuBhPbvFB06yhsIPQKmfmJ61GIeE/TTOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:36:43:93:dc:85:87:25:be:30:fb:60:7c:2a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b60715587edccb325a8d7c0f5a42d8f043871db7 Validity Not Before: Dec 6 01:03:14 2025 GMT Not After : Dec 7 01:03:14 2025 GMT Subject: CN=00c5a12044aac2300bc259ec49e0d67503b7d7fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3c:1d:32:e6:a9:c3:68:e3:cf:ea:a0:26:4b: 82:01:1a:27:af:30:f0:30:69:e0:b0:17:87:0b:a8: 0d:fd:1c:0b:f7:0f:97:d8:06:04:76:91:36:56:e0: 1a:3a:99:38:b1:d0:4e:c2:11:51:2d:c1:77:95:16: 35:86:fa:6b:e6:1f:9c:6b:2a:ac:05:3d:22:4c:e7: de:b5:a7:2e:cf:9c:b6:ad:01:fc:55:0a:d0:20:4f: a3:ef:5b:60:07:7e:9b:39:1e:2a:4a:88:62:56:bc: 9b:b9:ee:ff:56:31:c4:63:e8:64:a6:34:3f:26:35: 16:a0:53:95:45:d2:c1:2d:7b:f2:a0:ed:9b:de:05: 4b:8d:79:97:ba:3b:95:9e:27:61:0e:76:3e:0f:db: 2a:b2:e0:6d:7d:5f:e0:ec:dd:79:b3:8d:fd:51:f8: 31:94:cd:33:fd:73:09:ae:46:ff:ab:ce:31:f2:4c: 1b:1d:35:de:9c:29:56:ce:4b:6c:06:c9:88:1b:dc: 34:c9:f0:ab:de:8f:2b:ca:2b:32:b1:94:c5:f8:1a: 11:02:d9:47:44:52:03:5c:bf:5b:7b:8a:55:5c:ef: b8:94:22:fe:c1:f9:08:33:3f:d5:bb:e2:e5:0c:d6: db:22:2a:d7:14:3f:8d:1f:d3:99:70:58:91:93:f3: 4b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C5:A1:20:44:AA:C2:30:0B:C2:59:EC:49:E0:D6:75:03:B7:D7:FC X509v3 Authority Key Identifier: keyid:B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:38:2c:51:ac:c0:d9:dc:ee:fc:cd:4b:94:16:c8:54:25:3d: c0:d3:aa:f8:33:17:5e:50:13:a7:73:4b:e3:5e:16:c1:5d:60: 30:54:f6:bc:53:33:1c:70:f7:68:b5:df:99:61:b1:f5:65:10: 9f:c0:65:2a:54:1c:6e:db:8d:07:1b:23:83:5b:9b:33:9d:d5: 2f:12:94:20:bd:86:24:aa:93:29:58:07:41:9d:64:b3:ef:0d: db:f8:8d:a0:3a:df:74:0f:64:49:a8:4f:c3:b9:5e:a7:7b:e0: 42:b2:5a:5a:de:e4:d6:27:9f:27:ad:4f:0e:40:eb:26:1e:8d: 1d:1e:61:2a:1e:88:41:be:16:47:b6:72:47:5d:32:82:e0:93: 6b:3b:1d:7e:2d:2f:7a:11:dd:ef:ae:69:c3:0b:7e:4a:14:6e: 4f:27:30:02:99:e6:3c:e5:d2:cc:0d:79:d6:36:e5:3a:e9:cb: 45:73:9f:e1:b6:06:94:87:e2:fc:de:cf:e5:17:28:ae:ac:da: 54:1d:dc:8c:30:1f:b1:41:0f:b4:26:5b:be:1e:28:90:12:7b: d0:01:62:e3:46:19:92:92:f0:c8:8d:8a:64:3c:22:62:16:fd: 72:bd:ab:2d:74:f7:ee:a6:7b:23:c6:a1:11:1f:41:c5:6b:64: c6:5c:69:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLzZDk9yFhyW+MPtgfCrQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDcxNTU4N2VkY2NiMzI1YThkN2MwZjVhNDJkOGYwNDM4 NzFkYjcwHhcNMjUxMjA2MDEwMzE0WhcNMjUxMjA3MDEwMzE0WjAzMTEwLwYDVQQD EygwMGM1YTEyMDQ0YWFjMjMwMGJjMjU5ZWM0OWUwZDY3NTAzYjdkN2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjwdMuapw2jjz+qgJkuCARonrzDw MGngsBeHC6gN/RwL9w+X2AYEdpE2VuAaOpk4sdBOwhFRLcF3lRY1hvpr5h+cayqs BT0iTOfetacuz5y2rQH8VQrQIE+j71tgB36bOR4qSohiVrybue7/VjHEY+hkpjQ/ JjUWoFOVRdLBLXvyoO2b3gVLjXmXujuVnidhDnY+D9sqsuBtfV/g7N15s439Ufgx lM0z/XMJrkb/q84x8kwbHTXenClWzktsBsmIG9w0yfCr3o8ryisysZTF+BoRAtlH RFIDXL9be4pVXO+4lCL+wfkIMz/Vu+LlDNbbIirXFD+NH9OZcFiRk/NL/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADFoSBEqsIwC8JZ7Eng1nUDt9f8MB8GA1UdIwQY MBaAFLYHFVh+3MsyWo18D1pC2PBDhx23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdjVldIN2N5ekphalh3UFdrTFk4RU9ISGJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8zNTlkNzEtMWU5ZS00MzlmLTkzZjEt MWY1NDI4Njg0ZmM3LzEvdGdjVldIN2N5ekphalh3UFdrTFk4RU9ISGJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8zNTlkNzEtMWU5ZS00MzlmLTkzZjEtMWY1NDI4Njg0ZmM3 LzEvdGdjVldIN2N5ekphalh3UFdrTFk4RU9ISGJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjgsUazA 2dzu/M1LlBbIVCU9wNOq+DMXXlATp3NL414WwV1gMFT2vFMzHHD3aLXfmWGx9WUQ n8BlKlQcbtuNBxsjg1ubM53VLxKUIL2GJKqTKVgHQZ1ks+8N2/iNoDrfdA9kSahP w7lep3vgQrJaWt7k1iefJ61PDkDrJh6NHR5hKh6IQb4WR7ZyR10yguCTazsdfi0v ehHd765pwwt+ShRuTycwApnmPOXSzA151jblOunLRXOf4bYGlIfi/N7P5Rcorqza VB3cjDAfsUEPtCZbvh4okBJ70AFi40YZkpLwyI2KZDwiYhb9cr2rLXT37qZ7I8ah ER9BxWtkxlxpbA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:30 2025 by rpki-client