This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft File: tPgsjv3jS9meROrwcxtsUltFShk.mft (raw, json) Hash identifier: galssjWo9YGdNHmtTNh1ZAW/UgGgS7Zl6T/dYAenhPM= Subject key identifier: 5B:1A:8A:5A:4A:66:BB:B2:BB:0F:24:0F:69:67:DA:8B:B7:49:BF:BF Authority key identifier: B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19 Certificate issuer: /CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19 Certificate serial: 019AF19B248606E95892BAD6FAB5280E5E16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:07 +0000 Manifest this update: Sat 06 Dec 2025 03:01:07 +0000 Manifest next update: Sun 07 Dec 2025 03:01:07 +0000 Files and hashes: 1: qLkt693aVmyKYJQGNdNxcAXdJ9w.roa (hash: D8tW4gMgnbvNPYFRk3OMpyQUNWmp5AcbpxituaqMb+A=) 2: tPgsjv3jS9meROrwcxtsUltFShk.crl (hash: CyNhbXLYgnaT8GQZd2DH7YvYiEN89ZlJFY8j8HwGFNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:24:86:06:e9:58:92:ba:d6:fa:b5:28:0e:5e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19 Validity Not Before: Dec 6 03:01:07 2025 GMT Not After : Dec 7 03:01:07 2025 GMT Subject: CN=5b1a8a5a4a66bbb2bb0f240f6967da8bb749bfbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a4:20:b2:3d:b0:2f:2e:a1:35:7d:dd:c9:c3: ae:8c:e9:52:cb:ee:c9:4e:88:cc:6e:00:f4:60:1a: dc:56:00:5c:7b:8b:ec:ab:d7:22:1a:19:33:b8:e4: d5:c6:96:01:bf:b8:03:b6:08:16:b8:79:53:e9:ca: 05:9a:95:e0:fb:12:c6:26:be:27:09:39:3f:80:04: 0b:9f:c7:bb:f9:d1:fe:b6:84:2d:a8:77:ac:ef:9c: a5:f1:90:1e:71:74:b5:8c:77:87:20:f5:4d:98:73: a8:a1:06:d9:38:ed:af:26:f0:53:34:d8:38:8a:74: 09:f6:f1:64:9a:54:56:f3:ea:c8:2f:0f:6b:4d:39: 13:06:1d:b3:ea:5d:5d:f8:ec:e6:67:46:89:dc:e4: 22:5f:ca:ed:69:54:87:e1:a2:c8:83:d7:af:31:24: 41:6e:9a:77:0b:ca:af:b8:84:23:4f:3c:07:69:c2: 3c:84:c2:b0:a8:d6:31:95:76:7d:37:ed:6b:91:c4: 06:6f:e5:fd:75:34:fc:71:7f:e0:d8:3a:90:9c:bf: 31:f4:fc:61:bc:9f:18:9f:94:89:c3:33:77:4c:bb: 2e:2d:d5:a1:ed:2b:1f:d5:11:e9:7f:48:79:2b:29: 65:25:3f:15:36:ea:d7:c2:61:37:a2:e0:a8:8c:10: 6d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1A:8A:5A:4A:66:BB:B2:BB:0F:24:0F:69:67:DA:8B:B7:49:BF:BF X509v3 Authority Key Identifier: keyid:B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:81:1d:12:61:47:fe:63:d6:98:cc:8f:10:d1:9c:5c:13:b2: 4b:c6:db:11:f3:d7:1f:7d:90:6c:7b:e1:64:6d:11:cf:3a:b4: 4f:80:02:a6:75:5d:06:08:6b:fc:9a:6c:3e:9b:ee:a3:21:25: 20:09:13:f0:0b:84:fd:32:1a:26:22:4c:b3:2a:89:1f:93:cb: 6d:53:3b:cd:3e:6e:4f:30:7e:02:a7:1e:bc:03:10:8a:88:be: 59:5e:91:b2:11:9e:b6:dc:eb:1a:d9:f9:2f:e4:81:60:a6:42: b9:39:bb:07:ee:65:52:06:62:81:2c:08:71:c9:c3:55:c5:05: 95:8b:df:a0:e8:d9:51:65:31:5b:06:56:86:7d:82:7f:73:0d: 8a:b5:7f:ac:14:91:78:77:b7:5a:e5:4c:5f:b4:8e:81:66:1f: b1:cf:29:03:53:34:7e:2d:b2:6b:c0:4b:ba:a9:2f:86:83:6d: 80:a4:4b:a3:5a:be:e9:73:0d:36:99:1f:5c:93:02:58:2a:95: 4e:d1:83:fb:1b:92:52:1d:78:97:3a:2d:6e:52:d0:f0:a2:e8: 51:7f:5b:59:79:3e:65:69:77:d4:98:eb:8b:aa:f8:9b:76:0f: 03:2c:6a:4a:66:44:1f:2a:91:d4:a1:92:d1:a6:1c:de:ae:b1: 85:33:da:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmySGBulYkrrW+rUoDl4WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZjgyYzhlZmRlMzRiZDk5ZTQ0ZWFmMDczMWI2YzUyNWI0 NTRhMTkwHhcNMjUxMjA2MDMwMTA3WhcNMjUxMjA3MDMwMTA3WjAzMTEwLwYDVQQD Eyg1YjFhOGE1YTRhNjZiYmIyYmIwZjI0MGY2OTY3ZGE4YmI3NDliZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KQgsj2wLy6hNX3dycOujOlSy+7J TojMbgD0YBrcVgBce4vsq9ciGhkzuOTVxpYBv7gDtggWuHlT6coFmpXg+xLGJr4n CTk/gAQLn8e7+dH+toQtqHes75yl8ZAecXS1jHeHIPVNmHOooQbZOO2vJvBTNNg4 inQJ9vFkmlRW8+rILw9rTTkTBh2z6l1d+OzmZ0aJ3OQiX8rtaVSH4aLIg9evMSRB bpp3C8qvuIQjTzwHacI8hMKwqNYxlXZ9N+1rkcQGb+X9dTT8cX/g2DqQnL8x9Pxh vJ8Yn5SJwzN3TLsuLdWh7Ssf1RHpf0h5KyllJT8VNurXwmE3ouCojBBtcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsailpKZruyuw8kD2ln2ou3Sb+/MB8GA1UdIwQY MBaAFLT4LI7940vZnkTq8HMbbFJbRUoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBnc2p2M2pTOW1lUk9yd2N4dHNVbHRGU2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82MDhmZGItYTQwNi00Yjg1LWIxNGEt ZDI0NDFlOGY2YzdhLzEvdFBnc2p2M2pTOW1lUk9yd2N4dHNVbHRGU2hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82MDhmZGItYTQwNi00Yjg1LWIxNGEtZDI0NDFlOGY2Yzdh LzEvdFBnc2p2M2pTOW1lUk9yd2N4dHNVbHRGU2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIEdEmFH /mPWmMyPENGcXBOyS8bbEfPXH32QbHvhZG0Rzzq0T4ACpnVdBghr/JpsPpvuoyEl IAkT8AuE/TIaJiJMsyqJH5PLbVM7zT5uTzB+AqcevAMQioi+WV6RshGettzrGtn5 L+SBYKZCuTm7B+5lUgZigSwIccnDVcUFlYvfoOjZUWUxWwZWhn2Cf3MNirV/rBSR eHe3WuVMX7SOgWYfsc8pA1M0fi2ya8BLuqkvhoNtgKRLo1q+6XMNNpkfXJMCWCqV TtGD+xuSUh14lzotblLQ8KLoUX9bWXk+ZWl31Jjri6r4m3YPAyxqSmZEHyqR1KGS 0aYc3q6xhTPaTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:27 2025 by rpki-client