This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json) Hash identifier: 1oInwpOGZ7AZdtXtgL5J2NIMQD9lGpn3qGASKjChx8Q= Subject key identifier: 4D:A7:02:43:EC:E4:2D:81:9E:9C:9A:B5:06:C4:22:63:EA:17:B0:D1 Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0 Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0 Certificate serial: 019AF0BF90F13D3F6600EB72087DFCEB04EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:01:17 +0000 Manifest this update: Fri 05 Dec 2025 23:01:17 +0000 Manifest next update: Sat 06 Dec 2025 23:01:17 +0000 Files and hashes: 1: 7kCB1J_rNDVtgNFDQBz-ZFXo6aA.roa (hash: j6xn4MHIGZVJXA81hfabdadaay1xFRv4GfnwCa5VtAQ=) 2: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: 2nPeZkn1XgMpl0/+7LFf+9khoHgjUGPR/rLWeaCw6cY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:90:f1:3d:3f:66:00:eb:72:08:7d:fc:eb:04:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0 Validity Not Before: Dec 5 23:01:17 2025 GMT Not After : Dec 6 23:01:17 2025 GMT Subject: CN=4da70243ece42d819e9c9ab506c42263ea17b0d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:32:3b:b6:f9:0a:ae:90:1c:1b:c4:47:f0:f4: a9:9b:b7:6f:77:bd:6e:e5:93:5a:4a:d1:d7:3e:5b: 2f:bb:ba:8c:9a:97:ca:d6:a5:9a:9f:14:87:81:ef: 59:75:83:23:0d:d4:0d:c8:57:80:1d:a2:5a:9c:e3: 15:a3:1d:a2:9c:ea:9e:25:8a:28:c5:77:4b:4e:04: e3:d0:d7:4f:9e:3d:db:4c:c7:41:46:ba:60:46:2d: 54:2a:36:09:ce:e7:d5:93:0e:2d:15:f8:44:a7:6c: de:70:65:77:10:86:df:bd:e6:c3:31:d8:98:c2:79: 4d:3c:80:cf:f4:15:80:f7:a8:30:fa:85:69:92:ee: 06:bd:5e:59:52:db:c4:64:d0:c8:fc:d1:b1:9b:8a: c4:98:83:7c:6e:36:1d:a0:ad:42:b4:0c:86:1d:c2: a4:59:33:f3:86:48:84:57:8a:8d:20:b2:86:38:92: 84:76:1f:3a:59:03:66:1b:08:92:ae:ff:a2:4a:7c: cb:4c:99:7e:52:46:42:b7:5b:59:f7:54:fc:d8:f2: 3f:b3:d4:a4:e2:ab:07:72:55:da:f0:91:57:c3:10: 21:8c:73:6d:4f:2e:64:21:f1:5a:84:06:34:b8:91: 6c:ab:30:1f:21:33:a8:15:44:d9:4b:d3:25:8e:4e: 45:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A7:02:43:EC:E4:2D:81:9E:9C:9A:B5:06:C4:22:63:EA:17:B0:D1 X509v3 Authority Key Identifier: keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:aa:9c:01:30:c7:1c:da:6b:ec:f8:ef:8b:eb:74:9e:52:68: 57:0f:4e:ce:5b:be:e5:5b:eb:ae:31:e6:1c:68:99:c6:64:2f: 22:72:28:5d:19:1d:8a:e8:ab:f8:8a:b7:78:3b:07:37:74:f7: 5a:92:2c:e5:35:26:12:6d:97:0d:81:ce:56:45:62:fb:a6:75: fa:57:0e:04:26:51:ce:6f:20:2a:84:08:b9:68:da:58:d9:8b: 9a:06:69:ec:33:2b:e8:45:89:ef:2f:03:0b:e2:f3:ea:af:34: 64:43:2d:e9:36:80:5f:79:b1:b6:50:85:8b:ce:4e:a3:de:41: b3:5f:fa:d6:a2:3e:ef:47:d4:88:43:40:e8:15:c3:0e:90:7f: 74:ba:ae:19:00:13:41:d3:0c:6a:ba:93:58:62:b8:7f:48:e3: 18:48:cd:e3:a7:89:2d:62:08:0c:b5:3f:91:d8:72:a4:f9:37: 55:21:1d:da:0d:3b:2a:0a:28:bd:c7:34:79:77:db:d7:45:32: 3a:86:af:49:1e:85:db:b9:50:d8:52:89:1e:27:7c:cf:af:09: 47:77:5b:60:e2:b8:e5:5b:5b:c3:7d:e9:88:2d:12:07:c7:16: 0d:ef:f2:b3:0e:49:ee:08:20:50:e9:54:f7:0a:5a:f2:96:6d: a2:2e:95:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5DxPT9mAOtyCH386wTqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1N2FiNzE4YjRhY2IzYTY3OWM1ZGI4ZmNlZTcyOTRlZDZi ZTJiZDAwHhcNMjUxMjA1MjMwMTE3WhcNMjUxMjA2MjMwMTE3WjAzMTEwLwYDVQQD Eyg0ZGE3MDI0M2VjZTQyZDgxOWU5YzlhYjUwNmM0MjI2M2VhMTdiMGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzI7tvkKrpAcG8RH8PSpm7dvd71u 5ZNaStHXPlsvu7qMmpfK1qWanxSHge9ZdYMjDdQNyFeAHaJanOMVox2inOqeJYoo xXdLTgTj0NdPnj3bTMdBRrpgRi1UKjYJzufVkw4tFfhEp2zecGV3EIbfvebDMdiY wnlNPIDP9BWA96gw+oVpku4GvV5ZUtvEZNDI/NGxm4rEmIN8bjYdoK1CtAyGHcKk WTPzhkiEV4qNILKGOJKEdh86WQNmGwiSrv+iSnzLTJl+UkZCt1tZ91T82PI/s9Sk 4qsHclXa8JFXwxAhjHNtTy5kIfFahAY0uJFsqzAfITOoFUTZS9Mljk5FewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2nAkPs5C2BnpyatQbEImPqF7DRMB8GA1UdIwQY MBaAFLV6txi0rLOmecXbj87nKU7WvivQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYt YzcwMGVhMDNjMjI3LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYtYzcwMGVhMDNjMjI3 LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlaqcATDH HNpr7Pjvi+t0nlJoVw9Ozlu+5VvrrjHmHGiZxmQvInIoXRkdiuir+Iq3eDsHN3T3 WpIs5TUmEm2XDYHOVkVi+6Z1+lcOBCZRzm8gKoQIuWjaWNmLmgZp7DMr6EWJ7y8D C+Lz6q80ZEMt6TaAX3mxtlCFi85Oo95Bs1/61qI+70fUiENA6BXDDpB/dLquGQAT QdMMarqTWGK4f0jjGEjN46eJLWIIDLU/kdhypPk3VSEd2g07Kgoovcc0eXfb10Uy OoavSR6F27lQ2FKJHid8z68JR3dbYOK45Vtbw33piC0SB8cWDe/ysw5J7gggUOlU 9wpa8pZtoi6VOg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:27 2025 by rpki-client