This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json) Hash identifier: /cEBhIle3owgy+bWbZrCglPLxCxaxMP2tTc99lsbhFQ= Subject key identifier: 86:20:DC:FC:C5:D9:9D:C9:19:C4:7C:69:27:40:DF:91:67:A3:2D:4D Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2 Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2 Certificate serial: 019AF276A823008F8CFEE5F49EA80DB31EA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft Manifest number: 01FF Signing time: Sat 06 Dec 2025 07:00:53 +0000 Manifest this update: Sat 06 Dec 2025 07:00:53 +0000 Manifest next update: Sun 07 Dec 2025 07:00:53 +0000 Files and hashes: 1: r2p_nfti9wP7acQGEaKHM_xZ5Y4.roa (hash: 8x452bR9h9FZkxCtz0Hac6JBkLr+TCy/u9myFaRh5zg=) 2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: U4DCdjQD82jbjTC6WujudE2w2uaYpk0ooXmkK3s63d8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a8:23:00:8f:8c:fe:e5:f4:9e:a8:0d:b3:1e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2 Validity Not Before: Dec 6 07:00:53 2025 GMT Not After : Dec 7 07:00:53 2025 GMT Subject: CN=8620dcfcc5d99dc919c47c692740df9167a32d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:f7:9c:61:7d:78:e9:57:f9:56:db:bb:8d: 2d:c3:a1:79:43:51:89:b2:fa:52:c2:ba:8a:e2:72: 35:1d:4b:fb:38:d8:37:50:94:1b:67:cd:81:14:eb: a3:91:5c:a3:a3:c8:07:a1:1d:16:54:1d:73:7b:05: 77:3d:3a:7f:65:2c:8b:1e:11:89:19:13:bf:40:36: 5d:f8:85:83:9b:ae:02:cf:d7:17:bd:84:5c:16:a4: 7f:fa:31:b3:4f:a2:5f:3b:c7:8a:20:1b:ba:4c:2d: ed:75:af:11:72:50:fc:61:a1:31:ed:87:6f:0b:07: ed:57:46:34:08:81:27:07:81:90:5e:77:9d:34:50: 13:e4:43:0a:15:ce:9e:f8:a5:f8:45:53:e6:d9:71: 1c:91:6e:58:c8:b4:eb:d6:21:bb:d5:d9:01:60:03: dc:cd:df:af:22:46:84:89:e1:6e:06:4f:97:20:88: 5d:4b:29:21:23:78:89:77:bf:3e:64:39:82:3c:81: 9f:de:b1:ff:be:27:a4:1d:da:dc:c0:5d:65:2b:26: 04:f3:41:9c:9d:be:a1:b4:94:06:d0:8c:17:37:dd: 30:dd:87:79:6c:7d:88:91:9b:1e:30:42:75:19:9a: 18:45:06:90:26:87:d4:f7:12:91:3c:18:9a:81:14: 41:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:20:DC:FC:C5:D9:9D:C9:19:C4:7C:69:27:40:DF:91:67:A3:2D:4D X509v3 Authority Key Identifier: keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:de:96:f8:96:0e:aa:d1:8a:07:4c:cc:f1:13:3e:4b:a8:0c: 9e:a6:96:bf:20:bc:25:d4:5e:00:24:cf:2d:70:e8:48:e0:c2: 6a:2d:2c:23:d3:4c:60:7b:8a:7e:3c:e3:d6:1c:e9:29:93:b7: d7:2d:e0:31:ad:7e:26:03:43:f6:bc:b8:25:53:f8:68:b2:3c: 53:92:f6:ec:6c:ad:d0:55:93:6a:34:fe:07:6a:c0:7c:5e:55: a6:3c:0a:e8:ba:f5:d2:8d:fd:dc:09:f0:41:d8:45:b4:2f:2e: f5:55:0a:c2:78:3e:b5:39:3a:63:6c:64:d3:d6:9b:0e:8f:62: 66:35:0c:fa:69:29:57:35:4f:e8:59:e4:2d:98:01:b7:e7:5a: 9c:62:e3:e6:ed:59:b2:63:84:18:8b:db:8b:21:35:de:6d:e9: 51:6d:2b:d2:77:c8:9e:a4:b0:f6:61:a9:8b:9d:61:b6:ef:3a: 05:39:4e:a4:7d:e3:76:c2:17:6d:23:e6:f3:33:d1:d2:3e:5a: 43:93:e3:67:48:bb:a8:0f:07:f4:a1:95:a8:4f:10:bc:a2:37: 99:31:7f:85:d7:53:7f:34:0b:67:25:d8:fb:b7:29:63:f3:8e: 84:6e:86:e7:d2:24:59:2e:fd:af:2b:56:62:55:6c:61:ad:0f: 5a:2e:0b:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqgjAI+M/uX0nqgNsx6gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NzNkMmRkYTkzZTQyMDQwOTE2M2RhNTllNzQxNGVlOTFh MmVlZjIwHhcNMjUxMjA2MDcwMDUzWhcNMjUxMjA3MDcwMDUzWjAzMTEwLwYDVQQD Eyg4NjIwZGNmY2M1ZDk5ZGM5MTljNDdjNjkyNzQwZGY5MTY3YTMyZDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwL3nGF9eOlX+Vbbu40tw6F5Q1GJ svpSwrqK4nI1HUv7ONg3UJQbZ82BFOujkVyjo8gHoR0WVB1zewV3PTp/ZSyLHhGJ GRO/QDZd+IWDm64Cz9cXvYRcFqR/+jGzT6JfO8eKIBu6TC3tda8RclD8YaEx7Ydv CwftV0Y0CIEnB4GQXnedNFAT5EMKFc6e+KX4RVPm2XEckW5YyLTr1iG71dkBYAPc zd+vIkaEieFuBk+XIIhdSykhI3iJd78+ZDmCPIGf3rH/viekHdrcwF1lKyYE80Gc nb6htJQG0IwXN90w3Yd5bH2IkZseMEJ1GZoYRQaQJofU9xKRPBiagRRBfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYg3PzF2Z3JGcR8aSdA35Fnoy1NMB8GA1UdIwQY MBaAFLVz0t2pPkIECRY9pZ50FO6Rou7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFhQUzNhay1RZ1FKRmoybG5uUVU3cEdpN3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yZjY3MmItMjM2Yy00MGZiLWFhZjYt MDhkMGY0YmQyYzI4LzEvdFhQUzNhay1RZ1FKRmoybG5uUVU3cEdpN3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yZjY3MmItMjM2Yy00MGZiLWFhZjYtMDhkMGY0YmQyYzI4 LzEvdFhQUzNhay1RZ1FKRmoybG5uUVU3cEdpN3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxd6W+JYO qtGKB0zM8RM+S6gMnqaWvyC8JdReACTPLXDoSODCai0sI9NMYHuKfjzj1hzpKZO3 1y3gMa1+JgND9ry4JVP4aLI8U5L27Gyt0FWTajT+B2rAfF5VpjwK6Lr10o393Anw QdhFtC8u9VUKwng+tTk6Y2xk09abDo9iZjUM+mkpVzVP6FnkLZgBt+danGLj5u1Z smOEGIvbiyE13m3pUW0r0nfInqSw9mGpi51htu86BTlOpH3jdsIXbSPm8zPR0j5a Q5PjZ0i7qA8H9KGVqE8QvKI3mTF/hddTfzQLZyXY+7cpY/OOhG6G59IkWS79rytW YlVsYa0PWi4L5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:28 2025 by rpki-client