This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json) Hash identifier: oao0i3KMRWT3osi0gSp6SpwxqfeE+dAxEkjt+B5h0A4= Subject key identifier: D3:F0:62:2D:98:0D:A7:5B:73:A7:0C:45:1E:E8:1B:4C:2B:D9:8A:9B Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f Certificate serial: 019AF12E9BE29E55656B70C817991232BD0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 01:02:34 +0000 Manifest this update: Sat 06 Dec 2025 01:02:34 +0000 Manifest next update: Sun 07 Dec 2025 01:02:34 +0000 Files and hashes: 1: BeOIJLd8_MIXUGufXTnw_YPsJgs.roa (hash: UFekJjmZxy4vjH3dPZliRBeAZT4NRRq/0IMLKsXu0f8=) 2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: UIk/NLXmDCrk2F8fOe4odYhOM+q68cUIEEuAHfDIoTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:9b:e2:9e:55:65:6b:70:c8:17:99:12:32:bd:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f Validity Not Before: Dec 6 01:02:34 2025 GMT Not After : Dec 7 01:02:34 2025 GMT Subject: CN=d3f0622d980da75b73a70c451ee81b4c2bd98a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ba:86:ff:cd:41:66:2c:b9:7f:43:e4:a9:e7: f8:9a:e6:d3:c3:2c:f8:0c:ac:27:1c:85:1c:2f:66: 37:12:f4:51:8e:a1:ab:3b:9f:19:62:43:32:76:ef: de:85:cb:0d:0f:59:5a:75:31:f3:23:2b:4b:76:64: 67:79:5f:89:08:1d:6d:68:45:80:b5:a3:4a:d2:bc: 07:8c:a8:53:2d:78:67:c2:7f:66:63:9d:08:c5:06: a5:21:ea:72:eb:04:bc:e9:be:e6:db:aa:33:24:b4: 31:b9:e9:30:1e:c2:cf:f5:3f:6b:43:24:4f:7e:14: c9:be:41:11:8d:68:e6:ad:d3:79:c2:b0:9c:70:7b: 85:c2:42:91:1c:37:a5:7b:0a:e6:27:d0:62:4b:f7: d3:02:8d:0d:ec:7d:8f:0d:55:11:e7:d5:2e:95:63: c8:ee:97:64:0a:e2:86:20:82:8a:d5:6d:19:9f:43: cb:7c:85:30:fa:04:0a:ed:2d:5e:55:c5:0d:7a:b4: af:51:e2:c4:56:55:8c:e9:56:81:b1:e6:ee:cf:8b: 56:1a:c8:d8:f0:d7:ba:41:7c:d8:2e:51:68:3a:a1: 0b:55:56:f1:34:b4:a7:23:31:4d:1c:4c:d5:9f:3d: 3e:9e:6e:a8:c2:61:17:b4:9a:b8:61:4d:c4:60:11: 47:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F0:62:2D:98:0D:A7:5B:73:A7:0C:45:1E:E8:1B:4C:2B:D9:8A:9B X509v3 Authority Key Identifier: keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:27:d8:5a:bc:2a:23:7b:c3:a6:87:2e:8c:c4:4d:f8:5e:e7: 4a:43:c0:2a:f6:4d:d5:5d:c7:e0:d5:91:bb:7b:33:e6:ca:46: 1d:5f:10:e8:92:ae:1f:d7:2d:9c:a4:d2:63:4c:a4:10:94:74: ea:68:8f:2c:2a:13:2d:7a:9e:bf:4f:83:ca:b1:b5:58:0c:98: e3:6d:c2:c8:c7:26:57:dc:e7:a2:a2:91:fb:e3:6b:e5:2d:f5: a8:6d:a3:5d:80:6a:70:0a:c2:20:e2:ae:a2:b6:db:73:af:a3: 11:06:a1:13:df:45:7b:35:f6:21:3e:9a:11:92:25:37:9a:80: 59:6c:0a:c3:3b:4b:5c:37:08:e3:a5:ec:c6:c5:67:0a:9b:d6: 90:19:b5:a0:1f:28:35:da:04:1b:97:71:bd:b2:cb:9a:21:7b: e4:38:84:08:9f:ee:53:47:c1:83:6c:c3:5a:15:6c:e2:9b:5b: 19:f9:4e:19:72:f4:93:7d:f7:17:09:f3:b3:32:00:5b:55:72: 4e:b9:d6:4d:b8:27:bd:c5:7c:7d:d7:b8:ab:18:75:ed:8c:c6: de:bc:a0:d6:a4:19:2d:91:5e:ae:0e:55:26:e3:a6:bf:4c:8b: 82:fa:f7:74:e2:1f:5b:b3:3b:ae:e3:78:6d:40:67:d6:6b:fe: 24:7a:05:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLpvinlVla3DIF5kSMr0NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MGI1NzRmMDNkOTg4MTU1ZjQ0YmEyY2IwN2JjN2RmYjQ1 N2NmMGYwHhcNMjUxMjA2MDEwMjM0WhcNMjUxMjA3MDEwMjM0WjAzMTEwLwYDVQQD EyhkM2YwNjIyZDk4MGRhNzViNzNhNzBjNDUxZWU4MWI0YzJiZDk4YTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLqG/81BZiy5f0Pkqef4mubTwyz4 DKwnHIUcL2Y3EvRRjqGrO58ZYkMydu/ehcsND1ladTHzIytLdmRneV+JCB1taEWA taNK0rwHjKhTLXhnwn9mY50IxQalIepy6wS86b7m26ozJLQxuekwHsLP9T9rQyRP fhTJvkERjWjmrdN5wrCccHuFwkKRHDelewrmJ9BiS/fTAo0N7H2PDVUR59UulWPI 7pdkCuKGIIKK1W0Zn0PLfIUw+gQK7S1eVcUNerSvUeLEVlWM6VaBsebuz4tWGsjY 8Ne6QXzYLlFoOqELVVbxNLSnIzFNHEzVnz0+nm6owmEXtJq4YU3EYBFHxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPwYi2YDadbc6cMRR7oG0wr2YqbMB8GA1UdIwQY MBaAFLYLV08D2YgVX0S6LLB7x9+0V88PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0Mzgt YmJjYWUwZGYxZjJmLzEvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0MzgtYmJjYWUwZGYxZjJm LzEvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnifYWrwq I3vDpocujMRN+F7nSkPAKvZN1V3H4NWRu3sz5spGHV8Q6JKuH9ctnKTSY0ykEJR0 6miPLCoTLXqev0+DyrG1WAyY423CyMcmV9znoqKR++Nr5S31qG2jXYBqcArCIOKu orbbc6+jEQahE99FezX2IT6aEZIlN5qAWWwKwztLXDcI46XsxsVnCpvWkBm1oB8o NdoEG5dxvbLLmiF75DiECJ/uU0fBg2zDWhVs4ptbGflOGXL0k333FwnzszIAW1Vy TrnWTbgnvcV8fde4qxh17YzG3ryg1qQZLZFerg5VJuOmv0yLgvr3dOIfW7M7ruN4 bUBn1mv+JHoFPg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:29 2025 by rpki-client