This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json) Hash identifier: uUhUoKjEyRpI/gL/2OOyDrz4CiiUTm58FpnW+HXlm2c= Subject key identifier: 88:70:24:F6:89:0E:77:C1:66:2E:0C:21:BA:79:89:E1:98:7B:CF:9F Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa Certificate serial: 019AF12CE85709CFC990EF7BD977F6199206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:00:43 +0000 Manifest this update: Sat 06 Dec 2025 01:00:43 +0000 Manifest next update: Sun 07 Dec 2025 01:00:43 +0000 Files and hashes: 1: J7n-Yd5XTH7n67jouruR47yViJQ.roa (hash: uOcoBZNZsx1gjsqlLawiv97uMdypKgT5mBdaC/TonUs=) 2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: xH7OvgcnV21/w5tvxYYUiBdeKmGrYN7jXuQ2ceJrwuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e8:57:09:cf:c9:90:ef:7b:d9:77:f6:19:92:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa Validity Not Before: Dec 6 01:00:43 2025 GMT Not After : Dec 7 01:00:43 2025 GMT Subject: CN=887024f6890e77c1662e0c21ba7989e1987bcf9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b3:da:01:50:49:6f:73:08:98:e7:63:83:b5: 83:3d:82:75:f7:62:c2:5e:17:62:a6:44:1d:4b:89: cf:ab:e1:50:28:2f:3e:20:c3:47:99:4d:86:d2:4c: 80:dc:ab:76:99:de:08:4c:5e:71:7a:a0:2a:dc:f5: 68:46:f6:53:32:be:a6:a6:73:dc:44:10:b8:6a:77: 6e:4e:bc:19:84:8d:e4:fb:7b:07:c9:58:c0:9c:b5: 2a:44:00:78:47:70:d8:d5:3a:84:b8:9c:6b:77:f4: 63:3e:94:c4:f9:a9:97:e9:2c:3c:ac:81:4b:22:1d: b1:23:a8:35:a6:e1:8b:81:b1:ed:d1:32:47:8b:41: 86:d5:a7:ff:0f:8c:13:b0:df:12:ab:6a:22:f9:90: fb:60:37:b7:b7:b9:37:fa:09:fe:06:c3:c2:69:81: 79:79:d8:e7:03:c9:43:12:a8:cb:96:5b:c8:18:49: cd:6d:de:06:0b:07:65:24:2c:a9:9c:8c:67:4d:5c: 24:78:d7:f2:e6:4a:73:5f:b2:08:31:5e:24:32:c3: 5b:84:9d:6a:57:81:0b:95:dc:ba:7c:b9:b1:91:f5: 02:57:0b:b6:bc:c1:b7:22:69:5c:8b:0e:12:9e:a2: 05:2c:4e:6f:b8:5b:43:24:03:df:36:03:19:ed:d3: 96:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:70:24:F6:89:0E:77:C1:66:2E:0C:21:BA:79:89:E1:98:7B:CF:9F X509v3 Authority Key Identifier: keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:a3:ae:23:c4:18:f0:c6:b5:39:1d:19:7b:bd:c3:c5:b3:57: 6c:4c:b4:17:a0:d2:ed:40:ac:34:ae:82:ff:49:02:42:f1:56: dc:ce:86:b4:0c:da:bb:8a:a7:03:d1:f2:ac:91:f6:4d:6a:ea: ba:f2:a1:27:43:1c:66:79:39:61:a6:74:95:5a:ef:7b:c1:51: 23:f7:40:dc:d7:32:aa:9e:b9:c0:f2:69:12:fb:c8:56:97:6e: 74:5c:58:c7:72:c5:32:ba:25:fa:13:88:5d:9c:40:ba:b0:82: 97:5a:65:1c:f3:ac:c3:75:09:ae:cf:32:40:89:b8:bc:e4:8f: de:7c:ed:8f:8d:5f:45:c9:bd:c8:28:cb:2c:bb:c4:af:3e:94: 03:ee:58:4f:04:24:db:09:90:20:36:78:b7:54:66:1f:91:03: ef:ab:c9:56:f0:23:a8:0d:00:ad:8b:94:d3:d1:8e:94:1f:a7: f7:b1:21:c2:aa:8b:38:cf:a9:32:35:24:2f:13:75:41:47:8b: b9:1f:97:df:d4:ad:f7:13:27:81:0b:65:76:85:5c:dc:88:d5: 23:a8:38:e6:b6:92:ac:c0:ee:7e:03:b9:b8:09:40:c3:e8:80: 90:83:52:38:3d:ef:07:c8:2f:d8:b8:51:50:3e:00:74:c0:8d: 11:90:74:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOhXCc/JkO972Xf2GZIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OWViNTBjYjhiYWM5MmRjMTc2ZThhODdjZjI1NTUyODIy MTk0ZmEwHhcNMjUxMjA2MDEwMDQzWhcNMjUxMjA3MDEwMDQzWjAzMTEwLwYDVQQD Eyg4ODcwMjRmNjg5MGU3N2MxNjYyZTBjMjFiYTc5ODllMTk4N2JjZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrPaAVBJb3MImOdjg7WDPYJ192LC XhdipkQdS4nPq+FQKC8+IMNHmU2G0kyA3Kt2md4ITF5xeqAq3PVoRvZTMr6mpnPc RBC4anduTrwZhI3k+3sHyVjAnLUqRAB4R3DY1TqEuJxrd/RjPpTE+amX6Sw8rIFL Ih2xI6g1puGLgbHt0TJHi0GG1af/D4wTsN8Sq2oi+ZD7YDe3t7k3+gn+BsPCaYF5 edjnA8lDEqjLllvIGEnNbd4GCwdlJCypnIxnTVwkeNfy5kpzX7IIMV4kMsNbhJ1q V4ELldy6fLmxkfUCVwu2vMG3Imlciw4SnqIFLE5vuFtDJAPfNgMZ7dOWZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhwJPaJDnfBZi4MIbp5ieGYe8+fMB8GA1UdIwQY MBaAFLSetQy4usktwXboqHzyVVKCIZT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zZWFhNzAtMDUyMC00NTU5LTg0MWEt NGNhOTU2YjA4YTQxLzEvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zZWFhNzAtMDUyMC00NTU5LTg0MWEtNGNhOTU2YjA4YTQx LzEvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqOuI8QY 8Ma1OR0Ze73DxbNXbEy0F6DS7UCsNK6C/0kCQvFW3M6GtAzau4qnA9HyrJH2TWrq uvKhJ0McZnk5YaZ0lVrve8FRI/dA3Ncyqp65wPJpEvvIVpdudFxYx3LFMrol+hOI XZxAurCCl1plHPOsw3UJrs8yQIm4vOSP3nztj41fRcm9yCjLLLvErz6UA+5YTwQk 2wmQIDZ4t1RmH5ED76vJVvAjqA0ArYuU09GOlB+n97EhwqqLOM+pMjUkLxN1QUeL uR+X39St9xMngQtldoVc3IjVI6g45raSrMDufgO5uAlAw+iAkINSOD3vB8gv2LhR UD4AdMCNEZB0fw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:56:47 2025 by rpki-client