This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft File: TC9Y05SvcD-57w_FN77Q6X23Wo8.mft (raw, json) Hash identifier: JL1MQwcwnxXGX5U+XRE6f/cEz3DFGYMnN2wtrTAxH5A= Subject key identifier: 6F:1C:05:36:FE:3F:66:7E:50:39:9F:E5:8A:FA:10:C2:2B:66:3A:90 Authority key identifier: 4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F Certificate issuer: /CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f Certificate serial: 019AF12D893C4B7CEA6213455FC16B038D5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 01:01:24 +0000 Manifest this update: Sat 06 Dec 2025 01:01:24 +0000 Manifest next update: Sun 07 Dec 2025 01:01:24 +0000 Files and hashes: 1: TC9Y05SvcD-57w_FN77Q6X23Wo8.crl (hash: kMXmQ2ADI5OmhVcy4rGjNqtLFljJKf7acbfKSFTL8Wc=) 2: oazotxA3EnIAjH5CiO4PoDx9aig.roa (hash: H9V6PprjcGQjd8u9DXvLpu5E0DcK6LW/BPtbyyYT+nc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:89:3c:4b:7c:ea:62:13:45:5f:c1:6b:03:8d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f Validity Not Before: Dec 6 01:01:24 2025 GMT Not After : Dec 7 01:01:24 2025 GMT Subject: CN=6f1c0536fe3f667e50399fe58afa10c22b663a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:aa:09:a2:89:08:51:58:3f:d0:5e:bf:b4: 09:ef:b9:17:2b:37:ec:34:80:e8:54:1f:ad:b5:88: ea:b4:87:cc:75:ac:47:77:97:62:f8:66:3b:54:78: 31:f0:1b:4a:23:d0:02:14:31:33:f3:cb:15:28:8a: 56:7e:6b:5d:d9:45:6d:59:07:e5:da:34:37:87:c5: 97:44:5a:26:19:10:cb:c0:e0:5d:ba:d1:38:75:c4: 8e:de:92:2d:72:2a:2f:16:ff:be:a1:e7:47:3e:e7: 9e:ac:7f:ba:73:93:75:6f:43:9c:ae:fe:fa:b3:9d: 37:a0:1f:08:17:5a:03:bd:2d:25:08:e5:ea:d6:01: aa:41:56:46:99:fe:3d:95:6c:ac:28:50:ff:4b:2d: 2b:fd:fc:d0:c3:7f:49:6a:d2:4c:07:30:1b:e6:8c: dd:e3:b9:ff:1d:96:46:e9:97:cd:58:35:b8:1f:13: 27:05:3e:4a:c3:fe:2a:7b:9e:57:2d:9d:a9:e1:0f: 87:0e:8d:a3:1d:09:e5:dc:85:cc:fe:54:d7:5e:98: 51:dd:2a:ed:14:68:89:bb:0d:ac:96:0d:15:33:70: 8d:a7:24:20:31:1a:f1:89:d9:1d:07:79:f6:64:d6: b1:f9:b4:d6:38:66:16:e7:4b:e5:2e:e3:3e:77:0e: 81:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1C:05:36:FE:3F:66:7E:50:39:9F:E5:8A:FA:10:C2:2B:66:3A:90 X509v3 Authority Key Identifier: keyid:4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f9:0e:04:e1:0c:e5:81:c4:7e:2f:1e:78:94:69:15:11:aa: c9:d7:31:5c:75:4a:34:81:42:d5:5e:b8:ca:46:a8:5a:f3:e4: f8:0a:bd:e7:64:0e:05:6b:02:36:7a:ab:7d:b5:1b:ac:99:41: 66:18:df:2f:4c:35:a6:18:b7:a0:00:38:48:54:db:70:90:b1: 2c:4f:cf:72:9a:67:f5:d5:b8:05:b6:25:1b:3e:5e:f6:6b:ea: aa:68:57:b8:4e:5b:43:d8:d5:12:61:1a:54:e3:18:d7:98:5f: 76:63:cf:c7:04:6d:23:b6:c6:6d:2b:17:91:6e:2c:30:af:9f: 03:1c:11:3c:31:bc:e3:9c:de:e1:b3:ee:fa:d0:61:72:e9:d2: 8d:1f:ab:f3:c2:16:cc:d2:a3:78:91:ec:a9:78:81:b7:46:63: d6:30:5c:62:c8:07:b3:4d:3c:8c:1c:77:c8:cc:70:06:b2:9e: 91:89:e9:41:f1:78:c6:60:80:8a:b6:33:f4:9c:ec:22:3a:0d: 28:86:46:94:c1:ad:18:83:e8:b5:40:79:32:0e:07:9d:e8:26: 5b:d6:20:98:a6:cd:8d:c7:13:12:52:b9:b5:64:0b:15:b1:b0: dd:89:10:fd:00:35:78:b9:c8:31:1d:49:43:27:34:87:6f:2c: 74:74:05:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYk8S3zqYhNFX8FrA41cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMmY1OGQzOTRhZjcwM2ZiOWVmMGZjNTM3YmVkMGU5N2Ri NzVhOGYwHhcNMjUxMjA2MDEwMTI0WhcNMjUxMjA3MDEwMTI0WjAzMTEwLwYDVQQD Eyg2ZjFjMDUzNmZlM2Y2NjdlNTAzOTlmZTU4YWZhMTBjMjJiNjYzYTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9KqCaKJCFFYP9Bev7QJ77kXKzfs NIDoVB+ttYjqtIfMdaxHd5di+GY7VHgx8BtKI9ACFDEz88sVKIpWfmtd2UVtWQfl 2jQ3h8WXRFomGRDLwOBdutE4dcSO3pItciovFv++oedHPueerH+6c5N1b0Ocrv76 s503oB8IF1oDvS0lCOXq1gGqQVZGmf49lWysKFD/Sy0r/fzQw39JatJMBzAb5ozd 47n/HZZG6ZfNWDW4HxMnBT5Kw/4qe55XLZ2p4Q+HDo2jHQnl3IXM/lTXXphR3Srt FGiJuw2slg0VM3CNpyQgMRrxidkdB3n2ZNax+bTWOGYW50vlLuM+dw6BHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8cBTb+P2Z+UDmf5Yr6EMIrZjqQMB8GA1UdIwQY MBaAFEwvWNOUr3A/ue8PxTe+0Ol9t1qPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEM5WTA1U3ZjRC01N3dfRk43N1E2WDIzV284LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yNDY3NjktZDg3Ni00ZjIyLTlhMWMt NDVjNWY0NTZkNGJiLzEvVEM5WTA1U3ZjRC01N3dfRk43N1E2WDIzV284Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8yNDY3NjktZDg3Ni00ZjIyLTlhMWMtNDVjNWY0NTZkNGJi LzEvVEM5WTA1U3ZjRC01N3dfRk43N1E2WDIzV284LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvkOBOEM 5YHEfi8eeJRpFRGqydcxXHVKNIFC1V64ykaoWvPk+Aq952QOBWsCNnqrfbUbrJlB ZhjfL0w1phi3oAA4SFTbcJCxLE/Pcppn9dW4BbYlGz5e9mvqqmhXuE5bQ9jVEmEa VOMY15hfdmPPxwRtI7bGbSsXkW4sMK+fAxwRPDG845ze4bPu+tBhcunSjR+r88IW zNKjeJHsqXiBt0Zj1jBcYsgHs008jBx3yMxwBrKekYnpQfF4xmCAirYz9JzsIjoN KIZGlMGtGIPotUB5Mg4HnegmW9YgmKbNjccTElK5tWQLFbGw3YkQ/QA1eLnIMR1J Qyc0h28sdHQFVA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:38 2025 by rpki-client