This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft File: tm6nNZIhwbd9bMAG97ZwapqQgpk.mft (raw, json) Hash identifier: gc27iQl8Kcar6urI9uwXrLB96K+k4AOf+okYQe56Nho= Subject key identifier: C5:11:17:F5:6D:F8:75:14:5C:5C:25:AE:2E:56:77:0A:78:18:F2:E2 Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99 Certificate issuer: /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299 Certificate serial: 019AF5E62C598EF8CDD4E95C39E208D3C753 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft Manifest number: 1773 Signing time: Sat 06 Dec 2025 23:01:33 +0000 Manifest this update: Sat 06 Dec 2025 23:01:33 +0000 Manifest next update: Sun 07 Dec 2025 23:01:33 +0000 Files and hashes: 1: 040TsSTaomXmk-0H6b35Y5nsohA.roa (hash: ywLoOOPj8BHlaIbmhxcOt0xmd8oXL/QshjksxdsZgto=) 2: tm6nNZIhwbd9bMAG97ZwapqQgpk.crl (hash: oFtNOJKTVLh4GNxsFpOH/r2TmevnDEJDRGDkAfUK0co=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:2c:59:8e:f8:cd:d4:e9:5c:39:e2:08:d3:c7:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299 Validity Not Before: Dec 6 23:01:33 2025 GMT Not After : Dec 7 23:01:33 2025 GMT Subject: CN=c51117f56df875145c5c25ae2e56770a7818f2e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d2:dd:4f:7c:9b:75:fc:18:ad:ff:3f:39:f8: 55:a6:fd:73:3d:81:0f:2d:af:45:f3:d3:9d:5c:24: 5d:e1:0d:34:80:76:e8:1d:89:0f:22:91:11:da:3e: 6f:b3:20:6b:89:79:d0:76:f0:4a:c5:35:02:7c:9b: e8:c5:55:f8:3f:39:6d:96:b2:c2:4e:2c:08:4e:4f: 18:a5:62:97:07:d0:55:5b:57:85:e8:07:1d:34:23: 57:4e:ec:e9:10:e5:98:2a:cf:fe:49:d5:3a:ba:98: 7a:3d:68:ee:cb:9c:e0:c8:4f:a1:e5:36:69:eb:9c: 25:b1:0f:98:91:e3:f4:38:3f:8a:1d:9c:c6:fc:e7: 8b:c3:8f:bd:95:96:95:53:ca:59:09:22:70:1e:4b: 7f:5d:41:8f:34:cb:79:c1:c7:39:03:1a:a3:7f:e2: 77:03:da:04:b0:98:a5:0a:78:e4:1e:06:c2:79:58: 2a:97:a7:0b:9a:1f:c5:1e:36:13:3a:68:10:0a:03: 48:01:1b:9c:80:41:d1:e2:ac:68:c2:2b:94:79:a4: 93:cf:dd:71:09:63:17:fb:ee:f8:ce:f8:c2:e8:33: 60:02:9f:84:18:6a:c6:1c:c9:3c:bc:48:59:ec:f3: b2:9a:03:0d:f1:83:9d:62:6c:bf:bb:d9:0f:2f:72: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:11:17:F5:6D:F8:75:14:5C:5C:25:AE:2E:56:77:0A:78:18:F2:E2 X509v3 Authority Key Identifier: keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:fa:24:c0:f8:4f:a8:14:75:ae:66:f7:d8:e8:48:51:98:e1: e0:7a:a7:de:16:73:db:70:b0:85:67:ef:79:12:15:77:2b:fc: 75:d0:56:27:d9:71:27:15:0f:0b:06:d5:13:b6:97:75:52:eb: 2f:50:fd:fb:bb:8d:2c:d3:39:11:d1:6f:d2:13:3b:a8:0d:4c: 31:8a:43:b4:f2:11:35:74:35:46:de:f4:86:45:de:86:81:fc: c4:46:54:30:69:d2:2d:4d:a3:fa:13:ad:07:f2:f4:43:2d:6c: 4d:97:cb:44:73:b9:b6:2e:56:6e:10:58:73:8c:42:49:6f:65: fc:89:28:67:06:b2:f8:7e:ea:62:e3:45:ea:02:77:c4:68:31: ca:94:d9:fa:ec:0c:6d:15:53:e6:3e:93:80:eb:32:7a:97:8b: 76:3e:24:cd:54:5c:5b:bc:d5:0e:2a:99:de:7c:04:06:d6:1d: 4d:f4:45:c5:68:4c:62:67:c4:2d:85:ec:a7:66:22:46:d4:60: 43:40:07:aa:89:eb:fd:a1:0f:31:1a:c9:92:d2:38:09:93:de: cf:d3:00:ac:97:8e:95:4f:47:bd:b4:a9:ac:31:fe:3a:17:d6: 6b:f1:90:07:5d:8e:4e:e5:da:e4:e3:82:ab:dc:08:1d:ae:35: d6:fb:e2:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15ixZjvjN1OlcOeII08dTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NmVhNzM1OTIyMWMxYjc3ZDZjYzAwNmY3YjY3MDZhOWE5 MDgyOTkwHhcNMjUxMjA2MjMwMTMzWhcNMjUxMjA3MjMwMTMzWjAzMTEwLwYDVQQD EyhjNTExMTdmNTZkZjg3NTE0NWM1YzI1YWUyZTU2NzcwYTc4MThmMmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndLdT3ybdfwYrf8/OfhVpv1zPYEP La9F89OdXCRd4Q00gHboHYkPIpER2j5vsyBriXnQdvBKxTUCfJvoxVX4PzltlrLC TiwITk8YpWKXB9BVW1eF6AcdNCNXTuzpEOWYKs/+SdU6uph6PWjuy5zgyE+h5TZp 65wlsQ+YkeP0OD+KHZzG/OeLw4+9lZaVU8pZCSJwHkt/XUGPNMt5wcc5Axqjf+J3 A9oEsJilCnjkHgbCeVgql6cLmh/FHjYTOmgQCgNIARucgEHR4qxowiuUeaSTz91x CWMX++74zvjC6DNgAp+EGGrGHMk8vEhZ7POymgMN8YOdYmy/u9kPL3LoiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMURF/Vt+HUUXFwlri5Wdwp4GPLiMB8GA1UdIwQY MBaAFLZupzWSIcG3fWzABve2cGqakIKZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG02bk5aSWh3YmQ5Yk1BRzk3WndhcHFRZ3BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mODdhMmUtNDZiMS00YTY2LWE5MGMt Njk5ODM1YzkyYmZlLzEvdG02bk5aSWh3YmQ5Yk1BRzk3WndhcHFRZ3BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9mODdhMmUtNDZiMS00YTY2LWE5MGMtNjk5ODM1YzkyYmZl LzEvdG02bk5aSWh3YmQ5Yk1BRzk3WndhcHFRZ3BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPokwPhP qBR1rmb32OhIUZjh4Hqn3hZz23CwhWfveRIVdyv8ddBWJ9lxJxUPCwbVE7aXdVLr L1D9+7uNLNM5EdFv0hM7qA1MMYpDtPIRNXQ1Rt70hkXehoH8xEZUMGnSLU2j+hOt B/L0Qy1sTZfLRHO5ti5WbhBYc4xCSW9l/IkoZway+H7qYuNF6gJ3xGgxypTZ+uwM bRVT5j6TgOsyepeLdj4kzVRcW7zVDiqZ3nwEBtYdTfRFxWhMYmfELYXsp2YiRtRg Q0AHqonr/aEPMRrJktI4CZPez9MArJeOlU9HvbSprDH+OhfWa/GQB12OTuXa5OOC q9wIHa411vviNQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:28:45 2025 by rpki-client