This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft File: tPljRdPyLts5XSR_e4bS1z5KAJE.mft (raw, json) Hash identifier: Lko5GRAUVAWkp0FAICuDa9pdyC/3WTdd4/GkqlewSKI= Subject key identifier: 43:8B:17:84:92:97:94:08:84:22:07:11:39:9D:74:E8:CE:8F:45:86 Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91 Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091 Certificate serial: 019AF31BC302A2654197A16328E33E34A4CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft Manifest number: 13EC Signing time: Sat 06 Dec 2025 10:01:14 +0000 Manifest this update: Sat 06 Dec 2025 10:01:14 +0000 Manifest next update: Sun 07 Dec 2025 10:01:14 +0000 Files and hashes: 1: 7DedS6FKqqRxhMQdTMsredCO-ec.roa (hash: UwXIiKkoxxbOonWsbkKsBFAofpKEdgb0a8h9Hm8rEFk=) 2: BO7jnm4hZ2aIhx-khbNXbsOaSwQ.roa (hash: WMiILjjnrmajQgVmU1EugIe9vhf+6CD9w7bhvMc/t+k=) 3: DQvnB8g8ydfr1eRuAPBU05IBCSY.roa (hash: 3PoHiqHAODeR+6H4KfoCCFru1dqX91tPZMvp0yS6YsQ=) 4: DefjgqgW3k0sn_tO0MEiDyeFL90.roa (hash: +8yaQDhhnZ95vny+dtdrD/Qy2l/JoW7VG40b+SfRWeM=) 5: Gg6X3rP4M_HU28IjArylySmkiPs.roa (hash: re0xx12aRVyU3Oz5YoKZNUQdKDWH3+edRSy/XUXja/E=) 6: Ng9Th0WDUlHnwzKfFfciBEcUafA.roa (hash: eNw7usxld6+OlHNgMwiycOJ5x4cMD7CEt+8UU1lok4E=) 7: Te45-h1SuAziXt4gVKN1aT8O4hM.roa (hash: r0d2Q2QSYYn2bF4r/tEM54zYpJ86K8TqM7RMI3N+2F4=) 8: tAGyNizHA9sFqrgwZZwFr5MvlyU.roa (hash: Y4agyqG7qiLYbwUkz0iIRFGAZQO0vld2Qe+1AH++h04=) 9: tPljRdPyLts5XSR_e4bS1z5KAJE.crl (hash: Ti0zjsR+7W6Ezo8KyzXCD2K7ZDsgwKKmFOnq3VQaT/g=) 10: taNbwNau2XMQKfIJe9yRvRtEQBY.roa (hash: vkYzoX5sZUla1YZ3xFWl02lzIlXI/hyjdmA2wlgSifs=) 11: xOyDXDSjlESISzzf5hUO9Zxj8rA.roa (hash: CFmR+zkfzBWyhYtIYt+hp8mhkI6GySeOyqTa7/nfcIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:c3:02:a2:65:41:97:a1:63:28:e3:3e:34:a4:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091 Validity Not Before: Dec 6 10:01:14 2025 GMT Not After : Dec 7 10:01:14 2025 GMT Subject: CN=438b17849297940884220711399d74e8ce8f4586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:25:7e:7c:1e:4f:aa:35:f3:9c:fd:ad:76:6b: 94:10:ca:bf:41:35:f4:24:9a:ea:c2:e5:9f:89:4a: 9e:bc:34:45:48:a5:65:35:4f:a8:91:72:b2:57:d5: 32:7e:24:1a:a7:a4:a5:49:0a:f2:96:2d:6d:23:11: b3:1b:20:01:63:72:a2:d2:80:c8:78:94:82:a2:cc: f1:a7:40:54:a8:fe:c0:f4:b4:49:0d:e7:b0:1f:af: 39:f1:46:c3:1b:a8:95:8d:29:35:f1:48:07:de:ba: 7b:7c:8b:ab:ca:74:3b:de:b4:0b:c8:5d:a6:02:ba: 2b:e7:b0:ff:4d:ff:81:ea:30:80:e1:71:a9:b6:13: 0e:05:61:94:19:73:4a:9b:d9:f4:08:0c:0c:df:ad: e3:f2:73:f4:2a:de:6c:b4:27:b1:b5:9b:44:2d:21: f7:4e:2c:55:72:eb:3f:6f:74:f4:bf:83:73:b5:e6: 48:0f:d3:28:d2:61:02:21:93:0e:f7:3d:bc:6e:14: 01:4b:c9:6d:ca:38:05:d3:1d:c5:ce:51:01:4a:f1: a7:06:8f:4e:5c:a8:f2:0c:f4:e2:4a:1b:f2:d1:ef: d4:d6:eb:a3:02:a7:3f:f7:4c:ba:a4:0d:7b:bd:cc: 07:99:53:f3:64:49:c5:15:53:52:c2:eb:f2:33:4c: 6f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8B:17:84:92:97:94:08:84:22:07:11:39:9D:74:E8:CE:8F:45:86 X509v3 Authority Key Identifier: keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e6:a7:05:6a:b8:2a:2d:a0:ac:fd:05:e3:c0:da:f5:b0:1d: 7d:26:a7:68:82:52:d1:80:4f:28:4e:c6:02:a3:88:5d:fd:0a: 6b:48:30:6b:82:d2:2a:15:67:97:44:38:f3:13:7c:58:90:19: 01:06:f7:36:84:85:ca:5b:93:be:9c:e8:97:7f:d0:f2:f6:cd: fe:33:9c:4d:0d:59:2a:84:8b:42:70:f6:b2:57:b7:90:f6:d7: ea:d6:3c:b4:a4:67:cb:02:dc:53:92:66:c6:7f:6d:23:96:3b: fb:12:b5:a0:26:c6:19:a5:8e:1b:80:c6:53:28:6c:17:95:bd: d8:96:3e:85:c3:5e:d8:ab:41:a2:19:03:a4:3d:4a:ef:d0:0c: 0e:dc:06:e3:b9:ee:06:40:9c:f4:29:65:5b:a4:81:01:b7:63: 19:0b:4b:a2:57:05:9b:ba:2b:e1:c3:f8:eb:e3:89:67:99:cf: ad:af:ce:8f:c6:5b:b9:5c:9c:ea:a7:41:4a:9d:44:7d:c6:67: 1f:7f:ba:81:62:c6:f2:22:dc:c3:29:4a:8e:d4:89:04:6d:17: cb:67:b1:dd:39:a4:07:98:80:ed:f1:38:c4:fd:ae:5b:ba:d2: 31:82:85:e4:d2:ef:ef:e3:0a:42:8b:62:24:1c:02:cc:45:7a: 5b:05:ba:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8MComVBl6FjKOM+NKTMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0 YTAwOTEwHhcNMjUxMjA2MTAwMTE0WhcNMjUxMjA3MTAwMTE0WjAzMTEwLwYDVQQD Eyg0MzhiMTc4NDkyOTc5NDA4ODQyMjA3MTEzOTlkNzRlOGNlOGY0NTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyV+fB5PqjXznP2tdmuUEMq/QTX0 JJrqwuWfiUqevDRFSKVlNU+okXKyV9UyfiQap6SlSQryli1tIxGzGyABY3Ki0oDI eJSCoszxp0BUqP7A9LRJDeewH6858UbDG6iVjSk18UgH3rp7fIurynQ73rQLyF2m Aror57D/Tf+B6jCA4XGpthMOBWGUGXNKm9n0CAwM363j8nP0Kt5stCextZtELSH3 TixVcus/b3T0v4NzteZID9Mo0mECIZMO9z28bhQBS8ltyjgF0x3FzlEBSvGnBo9O XKjyDPTiShvy0e/U1uujAqc/90y6pA17vcwHmVPzZEnFFVNSwuvyM0xvJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOLF4SSl5QIhCIHETmddOjOj0WGMB8GA1UdIwQY MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt NmZjMzQzZDc3Y2QyLzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOanBWq4 Ki2grP0F48Da9bAdfSanaIJS0YBPKE7GAqOIXf0Ka0gwa4LSKhVnl0Q48xN8WJAZ AQb3NoSFyluTvpzol3/Q8vbN/jOcTQ1ZKoSLQnD2sle3kPbX6tY8tKRnywLcU5Jm xn9tI5Y7+xK1oCbGGaWOG4DGUyhsF5W92JY+hcNe2KtBohkDpD1K79AMDtwG47nu BkCc9CllW6SBAbdjGQtLolcFm7or4cP46+OJZ5nPra/Oj8ZbuVyc6qdBSp1EfcZn H3+6gWLG8iLcwylKjtSJBG0Xy2ex3TmkB5iA7fE4xP2uW7rSMYKF5NLv7+MKQoti JBwCzEV6WwW6tA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:42 2025 by rpki-client