This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft File: tPM_b9KbrwPMTUha9fa3DaawCZ8.mft (raw, json) Hash identifier: 9pZTR3kAcKEyddvibUnJDQ1D5yAI4lJN2U7n6r4o+FM= Subject key identifier: 47:D1:0A:8C:9A:32:6D:12:B7:8E:03:1F:2A:5F:3B:F3:14:1B:DC:DF Authority key identifier: B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F Certificate issuer: /CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f Certificate serial: 019AF1D1D748039D87571AA928E5838AFAC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft Manifest number: 103A Signing time: Sat 06 Dec 2025 04:00:52 +0000 Manifest this update: Sat 06 Dec 2025 04:00:52 +0000 Manifest next update: Sun 07 Dec 2025 04:00:52 +0000 Files and hashes: 1: tPM_b9KbrwPMTUha9fa3DaawCZ8.crl (hash: ieqKVDLYBntpYClZtAXnxIY0/8vVlX22rDmpPsmdYz0=) 2: tYPVw8LB8i24cvigRIjHBmA1vkA.roa (hash: PLxJfAKIcmuKybJlU2Vop9ZELJyvcamyBgkEBw419jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d7:48:03:9d:87:57:1a:a9:28:e5:83:8a:fa:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f Validity Not Before: Dec 6 04:00:52 2025 GMT Not After : Dec 7 04:00:52 2025 GMT Subject: CN=47d10a8c9a326d12b78e031f2a5f3bf3141bdcdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:86:ee:e8:59:b2:97:9a:7c:d9:f6:39:d6: 71:31:1b:1b:f1:67:d9:4d:18:5f:6b:a4:80:56:1d: 1a:db:66:64:de:8d:06:bb:61:e3:12:ca:5e:ec:a0: b4:55:26:cc:ea:da:d4:a2:26:a8:5f:d4:df:f7:7f: 99:ad:47:eb:a8:25:1a:c3:ca:22:f8:96:a2:ef:94: d1:c6:db:05:f6:60:f5:3b:1e:d8:76:47:bf:94:38: c5:f8:70:42:5b:26:a8:2d:a6:95:96:46:fa:c1:5e: 0b:32:18:9a:00:69:5d:42:91:bd:87:77:f5:0d:a9: 45:a5:4c:f9:cd:19:c2:d3:44:7e:27:ad:f8:48:ce: 21:f2:02:d9:41:4f:aa:4f:41:5f:de:82:e5:0e:6c: f8:23:ce:88:75:20:1b:0e:e3:a6:ef:cf:0a:12:30: 74:83:f7:e4:73:37:60:47:0f:59:51:d6:2b:87:8e: fd:d0:b7:5f:a7:d4:bc:c8:d6:94:c2:ad:0b:88:ee: 48:b9:4b:33:7c:1e:38:47:d1:50:35:00:12:bd:f5: 4c:e0:8f:a4:2e:91:dc:72:ee:69:d2:c0:71:2a:02: dd:f3:95:d1:21:54:da:9f:02:df:8a:80:ac:33:41: 2e:4c:65:a9:d2:f7:ab:be:c7:e0:7e:76:87:46:04: 61:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D1:0A:8C:9A:32:6D:12:B7:8E:03:1F:2A:5F:3B:F3:14:1B:DC:DF X509v3 Authority Key Identifier: keyid:B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:be:ea:64:9b:a3:62:08:30:7d:7f:11:41:1e:72:08:c1:32: 81:05:76:c6:91:ab:50:ff:4f:8d:ec:7f:c0:88:15:1d:41:66: d2:5f:2d:31:66:35:44:92:62:6b:61:df:a9:24:c7:e1:bf:8d: fd:fa:c4:9c:93:70:7b:b6:07:18:a4:b6:02:3b:f1:c0:39:01: 97:ee:1f:61:93:8f:ca:de:3c:2a:59:d3:f1:e8:a5:75:e0:ba: 62:c9:05:d1:f8:ee:ec:9b:f3:42:32:83:62:e3:06:22:64:12: b8:8b:af:f2:1e:50:54:a6:8d:59:ad:e9:b7:11:87:d0:67:55: f8:73:d2:64:6e:eb:30:8d:96:e3:4a:ce:29:f2:28:c8:70:b1: 87:a9:41:72:c3:e9:66:9b:4b:28:49:6a:84:11:af:81:3d:cc: 27:4e:27:da:de:ad:59:2e:d4:3a:7e:40:2b:5f:ae:49:48:a7: d3:be:8d:80:5d:69:19:b7:ee:67:80:00:b1:5f:e4:50:d7:f3: 5a:04:6c:e8:fc:7a:f8:e0:96:f4:f7:7c:de:20:48:75:11:bd: d1:33:89:ee:ba:61:c2:51:6c:fa:48:4e:01:c9:29:49:2e:a2: 6c:a9:bc:29:a7:94:9f:97:60:d9:e5:f1:48:70:6a:80:9d:5c: a5:ec:83:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ddIA52HVxqpKOWDivrCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZjMzZjZmZDI5YmFmMDNjYzRkNDg1YWY1ZjZiNzBkYTZi MDA5OWYwHhcNMjUxMjA2MDQwMDUyWhcNMjUxMjA3MDQwMDUyWjAzMTEwLwYDVQQD Eyg0N2QxMGE4YzlhMzI2ZDEyYjc4ZTAzMWYyYTVmM2JmMzE0MWJkY2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUaG7uhZspeafNn2OdZxMRsb8WfZ TRhfa6SAVh0a22Zk3o0Gu2HjEspe7KC0VSbM6trUoiaoX9Tf93+ZrUfrqCUaw8oi +Jai75TRxtsF9mD1Ox7Ydke/lDjF+HBCWyaoLaaVlkb6wV4LMhiaAGldQpG9h3f1 DalFpUz5zRnC00R+J634SM4h8gLZQU+qT0Ff3oLlDmz4I86IdSAbDuOm788KEjB0 g/fkczdgRw9ZUdYrh4790Ldfp9S8yNaUwq0LiO5IuUszfB44R9FQNQASvfVM4I+k LpHccu5p0sBxKgLd85XRIVTanwLfioCsM0EuTGWp0vervsfgfnaHRgRhPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEfRCoyaMm0St44DHypfO/MUG9zfMB8GA1UdIwQY MBaAFLTzP2/Sm68DzE1IWvX2tw2msAmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85MGE1Y2YtZTQ4NC00YmIyLWEyODUt NmE0OWI1YTMxMjk0LzEvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC85MGE1Y2YtZTQ4NC00YmIyLWEyODUtNmE0OWI1YTMxMjk0 LzEvdFBNX2I5S2Jyd1BNVFVoYTlmYTNEYWF3Q1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZr7qZJuj YggwfX8RQR5yCMEygQV2xpGrUP9Pjex/wIgVHUFm0l8tMWY1RJJia2HfqSTH4b+N /frEnJNwe7YHGKS2AjvxwDkBl+4fYZOPyt48KlnT8eildeC6YskF0fju7JvzQjKD YuMGImQSuIuv8h5QVKaNWa3ptxGH0GdV+HPSZG7rMI2W40rOKfIoyHCxh6lBcsPp ZptLKElqhBGvgT3MJ04n2t6tWS7UOn5AK1+uSUin076NgF1pGbfuZ4AAsV/kUNfz WgRs6Px6+OCW9Pd83iBIdRG90TOJ7rphwlFs+khOAckpSS6ibKm8KaeUn5dg2eXx SHBqgJ1cpeyDxA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:36 2025 by rpki-client