This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft File: tTVrOmd4voxhFK2H2q_NB8pV2AA.mft (raw, json) Hash identifier: qldESjAPsf3OwjIT8xx3dycGRzgePm/0iziWguvvcjI= Subject key identifier: 8D:E3:40:76:93:91:15:6E:1B:6A:83:90:E7:6C:73:50:FF:E4:12:E6 Authority key identifier: B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00 Certificate issuer: /CN=b5356b3a6778be8c6114ad87daafcd07ca55d800 Certificate serial: 019B2C2EF38FF74D50335B10F605BE72B606 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 12:00:32 +0000 Manifest this update: Wed 17 Dec 2025 12:00:32 +0000 Manifest next update: Thu 18 Dec 2025 12:00:32 +0000 Files and hashes: 1: NQNYc6fmHLA_NSQLy1429x1Q7Rs.roa (hash: 9fkXQ4KSWlEupj10JS2rCXdqinSmRcwnxokumXbhroc=) 2: tTVrOmd4voxhFK2H2q_NB8pV2AA.crl (hash: NDrukxJbjPJ5f9wpr/st0sgD41Gmzcrvjv0hCSViKxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2e:f3:8f:f7:4d:50:33:5b:10:f6:05:be:72:b6:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5356b3a6778be8c6114ad87daafcd07ca55d800 Validity Not Before: Dec 17 12:00:32 2025 GMT Not After : Dec 18 12:00:32 2025 GMT Subject: CN=8de340769391156e1b6a8390e76c7350ffe412e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:0a:44:61:4a:bf:e8:c8:d4:14:6e:3a:79: ed:31:0e:5c:bb:db:64:3c:ae:27:b2:ad:7b:4d:87: b8:66:7c:cb:ac:59:5b:b8:98:39:34:73:ca:de:a2: 8d:a3:e1:6b:28:20:01:b6:1d:66:8e:a4:11:4d:d0: 35:37:7a:0b:f7:10:4b:8d:39:38:06:27:7b:8a:73: 38:d2:e5:5f:87:12:34:66:6b:06:82:03:c0:cf:c4: 9e:67:74:40:95:49:54:29:53:8e:86:24:b9:3b:d0: 19:62:ee:a6:48:b3:69:d2:dd:79:08:9d:da:37:4c: 7c:ff:3f:51:dd:07:00:18:4a:d6:00:d1:a6:a7:7c: 38:bf:47:90:6c:6e:b5:70:60:d3:be:33:05:f8:02: 19:bf:93:1b:e3:0f:f9:cf:08:95:c1:3b:2c:80:f3: d1:38:75:6c:ce:4c:da:e7:19:c7:59:63:10:97:a3: ad:64:47:0f:ce:ce:c6:74:e8:6e:ee:0d:91:4d:8e: fc:03:81:4f:b6:8e:f7:ed:f8:4b:13:40:72:bc:a1: 2d:7d:a2:5f:1e:5b:05:4c:b0:2d:48:37:df:3c:c3: e5:55:5f:2a:c2:71:b5:21:48:f1:9e:45:73:32:90: 23:e5:30:84:43:03:ed:9d:0a:62:5b:28:a4:3d:51: c4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E3:40:76:93:91:15:6E:1B:6A:83:90:E7:6C:73:50:FF:E4:12:E6 X509v3 Authority Key Identifier: keyid:B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:70:57:c6:e6:8d:08:78:ac:2b:c9:da:1b:bd:fb:41:ea:ea: 18:20:6e:15:64:16:05:d0:fb:c1:5f:59:a7:8c:52:bf:82:27: 96:6a:d0:c3:da:f6:ce:60:0f:ca:db:72:3f:be:cc:57:89:ee: ff:9e:cc:fe:52:40:cc:d4:42:db:c2:25:0e:cf:aa:72:39:a8: 06:97:3a:fd:9b:bc:ff:08:c3:b9:d3:8d:30:be:00:96:63:95: c9:b6:11:06:9b:e2:a9:ee:cd:82:89:a8:5c:d4:c4:38:10:9c: 0b:8c:77:13:e6:76:ff:ec:b2:78:e3:61:4d:36:82:b8:9f:7e: 8a:c9:f1:48:c9:65:25:20:18:65:ee:fc:ab:e4:ac:e0:32:5d: 51:24:90:82:2b:a7:f3:40:e0:fc:ec:d2:0b:fd:9e:35:9d:7b: 4a:bc:2d:2b:2f:cb:8f:fb:5f:5b:79:1e:8a:6d:d2:29:b7:f5: b5:e2:8c:d0:40:3a:89:1f:15:80:ec:89:54:9a:1d:63:f6:40: ef:f9:5a:7a:06:6f:80:2b:30:bc:a7:b0:ff:8f:79:4a:33:41: aa:4b:89:c2:23:07:76:67:b3:5c:6b:ba:9e:08:9f:6b:7d:3f: dd:55:48:61:45:88:1c:15:99:94:9a:68:d1:1c:98:d1:ef:a6: 47:2c:71:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLvOP901QM1sQ9gW+crYGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MzU2YjNhNjc3OGJlOGM2MTE0YWQ4N2RhYWZjZDA3Y2E1 NWQ4MDAwHhcNMjUxMjE3MTIwMDMyWhcNMjUxMjE4MTIwMDMyWjAzMTEwLwYDVQQD Eyg4ZGUzNDA3NjkzOTExNTZlMWI2YTgzOTBlNzZjNzM1MGZmZTQxMmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWIKRGFKv+jI1BRuOnntMQ5cu9tk PK4nsq17TYe4ZnzLrFlbuJg5NHPK3qKNo+FrKCABth1mjqQRTdA1N3oL9xBLjTk4 Bid7inM40uVfhxI0ZmsGggPAz8SeZ3RAlUlUKVOOhiS5O9AZYu6mSLNp0t15CJ3a N0x8/z9R3QcAGErWANGmp3w4v0eQbG61cGDTvjMF+AIZv5Mb4w/5zwiVwTssgPPR OHVszkza5xnHWWMQl6OtZEcPzs7GdOhu7g2RTY78A4FPto737fhLE0ByvKEtfaJf HlsFTLAtSDffPMPlVV8qwnG1IUjxnkVzMpAj5TCEQwPtnQpiWyikPVHEZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3jQHaTkRVuG2qDkOdsc1D/5BLmMB8GA1UdIwQY MBaAFLU1azpneL6MYRSth9qvzQfKVdgAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFRWck9tZDR2b3hoRksySDJxX05COHBWMkFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85MWIzMWUtMDcxMS00M2ZhLWJjMjkt OTMyYjRhYzBhYWZkLzEvdFRWck9tZDR2b3hoRksySDJxX05COHBWMkFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS85MWIzMWUtMDcxMS00M2ZhLWJjMjktOTMyYjRhYzBhYWZk LzEvdFRWck9tZDR2b3hoRksySDJxX05COHBWMkFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3BXxuaN CHisK8naG737QerqGCBuFWQWBdD7wV9Zp4xSv4InlmrQw9r2zmAPyttyP77MV4nu /57M/lJAzNRC28IlDs+qcjmoBpc6/Zu8/wjDudONML4AlmOVybYRBpviqe7Ngomo XNTEOBCcC4x3E+Z2/+yyeONhTTaCuJ9+isnxSMllJSAYZe78q+Ss4DJdUSSQgiun 80Dg/OzSC/2eNZ17SrwtKy/Lj/tfW3keim3SKbf1teKM0EA6iR8VgOyJVJodY/ZA 7/laegZvgCswvKew/495SjNBqkuJwiMHdmezXGu6ngifa30/3VVIYUWIHBWZlJpo 0RyY0e+mRyxxpw== -----END CERTIFICATE-----Generated at Wed Dec 17 16:37:46 2025 by rpki-client