This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft File: t0QwmQgmnlOLK0-pYzcMnsIHeng.mft (raw, json) Hash identifier: 8CHrNok8slwlnuiiqMqCLXup7n68P0dE+IZ0hhpwpEg= Subject key identifier: CD:E4:AC:59:F0:D1:6B:9F:7B:4B:72:DA:AD:FC:9C:A3:36:79:56:40 Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78 Certificate issuer: /CN=b744309908269e538b2b4fa963370c9ec2077a78 Certificate serial: 019AF0BF31621125C3C3532F7333774F9411 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft Manifest number: 11B2 Signing time: Fri 05 Dec 2025 23:00:52 +0000 Manifest this update: Fri 05 Dec 2025 23:00:52 +0000 Manifest next update: Sat 06 Dec 2025 23:00:52 +0000 Files and hashes: 1: 9KyR_UDLctrtTTdIj8zaeFvcX6U.asa (hash: U5PQzu4dr+B2uxtoMJzepcrIcGyWSPWFAKzaqqVTf0o=) 2: YBLZGJHJKH4DoV9XrJh7KrLAY0g.roa (hash: L0o/zjJZLOmk6cpaT73kurdvyrzNoMlbhiuzTQLNAKg=) 3: t0QwmQgmnlOLK0-pYzcMnsIHeng.crl (hash: ob/4k19nUa51nINcfMAbsxpvNKgI6mYjfBRwX4gAMJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:31:62:11:25:c3:c3:53:2f:73:33:77:4f:94:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78 Validity Not Before: Dec 5 23:00:52 2025 GMT Not After : Dec 6 23:00:52 2025 GMT Subject: CN=cde4ac59f0d16b9f7b4b72daadfc9ca336795640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:38:f1:ae:87:b3:49:79:ca:a6:b8:52:11:c9: 3c:db:a3:d9:35:50:27:c0:15:ee:66:6a:66:b3:1a: cf:6f:9c:94:08:8e:c1:8c:46:15:f7:23:7b:f5:d3: cf:ce:b7:31:59:a9:52:e5:c8:5e:be:45:71:df:46: f1:d4:0b:57:a8:28:d9:53:68:78:23:d5:27:fd:57: db:6f:f4:4d:44:3a:14:1b:e9:4d:a5:c1:ae:30:8d: 4a:97:f5:b8:e7:8c:8d:d6:86:cc:0e:ec:56:57:e0: b9:5b:40:99:48:37:df:9e:93:10:3e:19:c4:07:b1: 4e:02:5d:34:dc:89:ea:b0:02:a3:68:5e:6f:e8:51: a7:51:c5:96:a1:fa:e0:bd:36:53:e4:ec:bd:f5:cf: 70:1f:e8:0a:2f:60:b5:93:17:73:4c:de:e8:51:7a: 45:81:e3:97:bb:51:22:a5:0b:8a:bc:19:50:4f:73: 1f:e7:73:28:0f:83:e9:39:c9:a9:8a:0a:28:92:ea: c5:ff:b0:08:35:9b:a9:14:e8:53:9c:44:f7:ca:8c: 4b:67:50:9f:83:ba:fe:00:c0:7a:2e:ac:88:1f:a4: f2:4b:a1:5c:d7:cd:d6:f4:bd:76:7f:c4:2e:f1:25: a8:ce:71:4f:69:7c:72:f7:3b:5b:0f:0b:31:9e:92: 12:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E4:AC:59:F0:D1:6B:9F:7B:4B:72:DA:AD:FC:9C:A3:36:79:56:40 X509v3 Authority Key Identifier: keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:df:c0:5c:05:9d:eb:9e:7b:58:36:77:06:8c:85:8d:79:ad: 9c:c0:e9:c4:5b:6b:11:ef:7f:30:bf:3b:c8:2e:af:84:f3:6d: 54:1d:37:fb:40:41:67:9e:c6:c1:38:3f:80:d9:19:92:68:48: 3e:6a:13:50:fe:5b:8e:bf:73:68:16:67:f2:44:23:fe:2e:dc: 19:4e:64:04:47:bd:ba:93:21:87:87:0b:b0:87:7d:5e:56:33: fb:72:c1:03:db:2b:88:82:a9:ef:d1:83:9b:78:a5:62:0e:ee: db:0a:1e:bc:8d:2a:bf:38:72:fc:12:44:c0:8b:28:85:a0:52: e1:e9:d3:94:bc:32:92:49:8b:de:98:a6:cd:fb:80:59:d5:c2: 56:2e:0a:41:aa:19:a5:f5:90:03:42:5e:1a:a6:8f:e0:53:e2: 15:7b:e4:9a:d3:c3:ca:6b:46:ca:a4:e8:03:26:d3:7d:32:47: a8:10:d2:74:48:ec:57:04:6a:e5:37:d7:68:4e:d2:5c:8a:3b: 69:80:2f:e1:c8:db:86:6c:ea:14:cf:3b:6f:58:56:3f:33:71: fb:48:68:f9:b3:68:ca:3b:54:5d:64:60:b0:7c:ba:31:68:ff: 47:6a:fb:cb:5a:a4:17:87:4c:a7:79:39:3f:2e:3f:f5:a6:15: c7:de:d2:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzFiESXDw1MvczN3T5QRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NDQzMDk5MDgyNjllNTM4YjJiNGZhOTYzMzcwYzllYzIw NzdhNzgwHhcNMjUxMjA1MjMwMDUyWhcNMjUxMjA2MjMwMDUyWjAzMTEwLwYDVQQD EyhjZGU0YWM1OWYwZDE2YjlmN2I0YjcyZGFhZGZjOWNhMzM2Nzk1NjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jjxroezSXnKprhSEck826PZNVAn wBXuZmpmsxrPb5yUCI7BjEYV9yN79dPPzrcxWalS5chevkVx30bx1AtXqCjZU2h4 I9Un/Vfbb/RNRDoUG+lNpcGuMI1Kl/W454yN1obMDuxWV+C5W0CZSDffnpMQPhnE B7FOAl003InqsAKjaF5v6FGnUcWWofrgvTZT5Oy99c9wH+gKL2C1kxdzTN7oUXpF geOXu1EipQuKvBlQT3Mf53MoD4PpOcmpigookurF/7AINZupFOhTnET3yoxLZ1Cf g7r+AMB6LqyIH6TyS6Fc183W9L12f8Qu8SWoznFPaXxy9ztbDwsxnpISdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3krFnw0Wufe0ty2q38nKM2eVZAMB8GA1UdIwQY MBaAFLdEMJkIJp5TiytPqWM3DJ7CB3p4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NjUyZTgtNWQyMC00MmY2LWE3Mzkt ZDU0OTIxNjA0ZWNkLzEvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80NjUyZTgtNWQyMC00MmY2LWE3MzktZDU0OTIxNjA0ZWNk LzEvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOt/AXAWd 6557WDZ3BoyFjXmtnMDpxFtrEe9/ML87yC6vhPNtVB03+0BBZ57GwTg/gNkZkmhI PmoTUP5bjr9zaBZn8kQj/i7cGU5kBEe9upMhh4cLsId9XlYz+3LBA9sriIKp79GD m3ilYg7u2woevI0qvzhy/BJEwIsohaBS4enTlLwykkmL3pimzfuAWdXCVi4KQaoZ pfWQA0JeGqaP4FPiFXvkmtPDymtGyqToAybTfTJHqBDSdEjsVwRq5TfXaE7SXIo7 aYAv4cjbhmzqFM87b1hWPzNx+0ho+bNoyjtUXWRgsHy6MWj/R2r7y1qkF4dMp3k5 Py4/9aYVx97SOg== -----END CERTIFICATE-----Generated at Sat Dec 6 05:06:43 2025 by rpki-client