This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json) Hash identifier: KcPd3B2IBehmF/5nfXxHCeMBLARVtmO0a1JsM0kDZK0= Subject key identifier: A9:60:81:DA:43:87:00:3C:64:53:5B:D5:88:15:14:E5:00:CF:1A:B2 Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9 Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9 Certificate serial: 019AF3BFE6D8ACF646A2FA113079FD582F84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft Manifest number: 078B Signing time: Sat 06 Dec 2025 13:00:31 +0000 Manifest this update: Sat 06 Dec 2025 13:00:31 +0000 Manifest next update: Sun 07 Dec 2025 13:00:31 +0000 Files and hashes: 1: CvcmVd2qiQMCtgnMEuQp7Q5S4Vg.roa (hash: 6oEqjna8oaHJiSK9+x9VxezwWYrKn62GKKSEaLSxdDU=) 2: UKY-oSMIFmmicltNFFzSJHvvmLM.roa (hash: cA262Na30QfQdhfhBPxJOrAeDIB1dyAnD2XIGiuSUOI=) 3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: VhNdgaxpfpFMF8b6sypadjkV/aN7KYOh0Dw1GEz4JZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:e6:d8:ac:f6:46:a2:fa:11:30:79:fd:58:2f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9 Validity Not Before: Dec 6 13:00:31 2025 GMT Not After : Dec 7 13:00:31 2025 GMT Subject: CN=a96081da4387003c64535bd5881514e500cf1ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:93:91:6a:d7:f1:5d:9e:c2:30:28:d8:af:29: 56:88:23:ef:98:86:00:9b:d9:4c:92:7e:f1:87:63: 26:55:7c:21:40:a4:69:2b:14:b9:87:f3:58:4e:36: bd:d9:70:11:36:1b:e9:42:c7:f8:97:c6:7f:1e:28: 5f:9c:1f:68:12:e8:1a:9a:3f:24:cf:73:ca:42:42: cc:ee:f0:fe:d6:ce:e5:c0:7f:41:79:8d:a4:2b:48: a9:88:c2:6b:25:06:73:b6:7c:b3:77:88:34:4f:eb: aa:71:04:07:3f:81:3d:49:50:bc:4c:83:f0:37:75: 7d:f9:ad:4d:54:6a:85:e2:ce:d3:ac:94:01:30:c9: 9c:65:a2:d7:3d:15:5b:c8:88:75:46:b3:8c:c2:9f: ca:ae:d7:6a:9e:35:10:ba:70:c6:77:9d:de:9a:d3: 27:29:24:6f:08:8f:a3:a9:21:fa:d9:03:b8:01:54: 0e:a7:16:37:9a:27:35:61:09:d1:f4:5b:0b:23:73: 67:c4:81:45:f3:52:bc:be:34:54:79:9c:da:f5:e0: 9c:70:6c:29:14:29:af:06:5c:e2:76:83:81:16:3d: 8d:2d:79:e2:25:d5:f8:53:20:d1:b1:75:5b:40:6b: da:9c:43:d0:c2:7b:bd:a0:a0:a4:4f:1b:b7:9f:f5: aa:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:60:81:DA:43:87:00:3C:64:53:5B:D5:88:15:14:E5:00:CF:1A:B2 X509v3 Authority Key Identifier: keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:44:b8:a5:0e:ab:84:6d:93:62:9d:7f:ad:e0:5a:fb:d1:7d: 99:4c:6e:6c:24:60:cd:e5:61:4c:c1:da:ab:b4:ac:45:67:d0: f0:0a:b1:1f:e6:92:f1:22:b5:9c:1f:19:32:35:22:94:47:0a: e9:ff:74:b3:a4:8a:50:72:43:86:7d:d7:67:64:c5:08:97:bc: e3:b2:1d:ad:17:f4:0a:7b:33:fb:64:e9:90:ff:b9:5d:f7:25: 3a:b7:c2:a9:3c:5c:01:94:ba:c8:22:e7:b0:9d:02:eb:83:4e: f5:6d:d4:d5:74:31:5d:96:fb:12:b2:14:1b:de:d9:33:1b:99: 1a:38:16:e3:41:86:89:1c:b3:83:71:70:c2:0b:0a:df:ff:7e: 12:fa:34:d3:dd:c2:77:1d:7a:36:be:3d:a2:50:12:32:5a:00: b5:e7:d8:0b:66:db:54:35:93:cb:75:79:2a:7d:b1:c2:f1:2a: 7b:82:cb:6b:da:10:51:6a:25:d7:3d:73:08:6b:42:c3:53:3c: 05:0b:ce:32:80:6b:82:8f:a6:ad:e0:e3:ef:dc:d1:eb:fa:fd: 37:3a:a8:d5:a7:62:37:41:00:cc:95:4a:fb:d5:60:0c:5c:72: a3:f0:05:be:e3:f9:bc:68:7c:22:74:e8:d1:d4:54:f9:57:11: 67:7b:02:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv+bYrPZGovoRMHn9WC+EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OThjOTdiMTRjMzc0YTUyODMzZGI2YTQwMDdiNTRiNDY2 MmM1YTkwHhcNMjUxMjA2MTMwMDMxWhcNMjUxMjA3MTMwMDMxWjAzMTEwLwYDVQQD EyhhOTYwODFkYTQzODcwMDNjNjQ1MzViZDU4ODE1MTRlNTAwY2YxYWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpORatfxXZ7CMCjYrylWiCPvmIYA m9lMkn7xh2MmVXwhQKRpKxS5h/NYTja92XARNhvpQsf4l8Z/HihfnB9oEugamj8k z3PKQkLM7vD+1s7lwH9BeY2kK0ipiMJrJQZztnyzd4g0T+uqcQQHP4E9SVC8TIPw N3V9+a1NVGqF4s7TrJQBMMmcZaLXPRVbyIh1RrOMwp/KrtdqnjUQunDGd53emtMn KSRvCI+jqSH62QO4AVQOpxY3mic1YQnR9FsLI3NnxIFF81K8vjRUeZza9eCccGwp FCmvBlzidoOBFj2NLXniJdX4UyDRsXVbQGvanEPQwnu9oKCkTxu3n/WqvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlggdpDhwA8ZFNb1YgVFOUAzxqyMB8GA1UdIwQY MBaAFLSYyXsUw3SlKDPbakAHtUtGYsWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzct ODY1NDI2NjQ1N2M2LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzctODY1NDI2NjQ1N2M2 LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADES4pQ6r hG2TYp1/reBa+9F9mUxubCRgzeVhTMHaq7SsRWfQ8AqxH+aS8SK1nB8ZMjUilEcK 6f90s6SKUHJDhn3XZ2TFCJe847IdrRf0Cnsz+2TpkP+5XfclOrfCqTxcAZS6yCLn sJ0C64NO9W3U1XQxXZb7ErIUG97ZMxuZGjgW40GGiRyzg3FwwgsK3/9+Evo0093C dx16Nr49olASMloAtefYC2bbVDWTy3V5Kn2xwvEqe4LLa9oQUWol1z1zCGtCw1M8 BQvOMoBrgo+mreDj79zR6/r9Nzqo1adiN0EAzJVK+9VgDFxyo/AFvuP5vGh8InTo 0dRU+VcRZ3sCLA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:05:40 2025 by rpki-client