This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft File: 1tcoXpK3QC6V29onv773Go4ifNQ.mft (raw, json) Hash identifier: p3SGcYKtk/QO+ckLO62xozjNyr0IBKr5voZy6s4wQJ4= Subject key identifier: C6:79:92:87:A4:24:98:D4:30:F8:C4:19:26:4A:5A:91:8C:EE:80:2A Authority key identifier: D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4 Certificate issuer: /CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4 Certificate serial: 019AF051A25205132ABFBF73D474C45F9E7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft Manifest number: 13 Signing time: Fri 05 Dec 2025 21:01:12 +0000 Manifest this update: Fri 05 Dec 2025 21:01:12 +0000 Manifest next update: Sat 06 Dec 2025 21:01:12 +0000 Files and hashes: 1: 1tFNa9gPNZNVMrlGcDWrwlLRbUs.roa (hash: aX2NScMgKNwa1w41FjgEr7tmcFXuhM9FnOXMlARjYZI=) 2: 1tcoXpK3QC6V29onv773Go4ifNQ.crl (hash: IR8a2bbAiMF9qFRs4Q5fmnRsyR9B77EI7c8Kl07moPc=) 3: eBPauH_f7L7lyNNyaIKmiAXb8bo.asa (hash: +50s6vZyUuaOE9EfblewUd4uNZv49Tkafxsjq2+jTqU=) 4: xE1mwTKzQDbk79YJ7PIMthkjSqo.asa (hash: YyhspqR7mOuHCVepylY/A74k3bsEO/zYUAHhZJuP0qE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:a2:52:05:13:2a:bf:bf:73:d4:74:c4:5f:9e:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4 Validity Not Before: Dec 5 21:01:12 2025 GMT Not After : Dec 6 21:01:12 2025 GMT Subject: CN=c6799287a42498d430f8c419264a5a918cee802a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2f:5b:b5:44:97:da:77:bd:2b:ff:4d:29:8d: 11:57:66:30:57:d0:bd:50:c9:1a:da:7d:ee:29:91: 4f:78:83:41:ca:d3:d3:41:08:45:4c:95:69:9d:51: 7b:7f:dd:e2:6f:22:7f:69:e5:06:88:56:b5:7e:a8: 50:2d:58:1c:99:94:cd:a1:9e:84:62:41:2e:b6:ec: 2b:3f:8d:fc:39:30:fc:8f:fd:5f:44:64:00:a2:91: e6:4b:6d:12:bc:24:5c:0d:e7:ec:e8:b5:e9:ad:f8: 50:24:8e:e4:1b:f8:15:f1:56:a6:18:ef:1a:fa:b4: 52:39:60:ac:a1:19:aa:3f:85:69:8f:99:e1:fd:1f: 56:8e:dc:0e:cd:43:45:2d:2e:35:7f:1a:65:ab:32: 14:8b:f0:cf:1d:01:9c:2e:21:df:04:b7:31:17:9d: f8:56:c0:ad:18:4f:c8:4e:04:42:0e:c8:6d:a7:d9: 6c:aa:5c:f4:c1:2b:02:db:e8:b9:46:01:7d:b9:cd: 5a:28:c0:c6:34:d9:6c:d0:89:81:e7:db:58:47:ba: ba:0c:62:54:c2:6a:a9:3d:88:23:c7:50:e5:f5:6f: 66:ee:7d:6e:3e:47:fa:31:7e:72:04:6a:28:7e:60: b1:c5:06:cd:d0:18:ca:99:44:c0:08:94:3d:5a:fd: 29:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:79:92:87:A4:24:98:D4:30:F8:C4:19:26:4A:5A:91:8C:EE:80:2A X509v3 Authority Key Identifier: keyid:D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:0f:2e:4b:8d:01:f9:75:90:35:96:c3:01:89:df:2c:86:a3: 77:5e:54:1b:8c:44:b4:76:31:4d:21:28:6e:16:02:33:82:22: 71:e2:05:aa:97:33:6f:c6:d2:fe:d3:e4:6a:58:95:4e:97:c4: 66:26:bc:30:e1:9f:e1:ca:2c:26:cd:f8:06:43:b0:a6:a3:83: 53:fc:62:00:b4:2f:08:69:d8:9f:d8:07:9c:aa:6b:c7:5c:8e: 5f:96:d1:0a:8b:6a:80:e4:a5:63:e1:a7:24:09:a9:86:97:1a: 19:b7:0e:0c:91:1d:bd:f4:95:67:e1:42:9a:25:14:11:c9:52: 12:bd:f9:8c:37:1f:22:21:78:83:78:a9:59:81:ed:19:a4:df: 6a:70:4a:11:68:93:d9:f2:3e:dc:1f:80:26:cd:71:e5:6e:93: 43:fe:80:22:b7:c0:7c:12:ec:04:55:28:e5:1e:b4:db:b6:65: 38:95:01:28:a0:9a:93:3b:49:0c:ff:dd:a3:7c:0e:6f:4c:ba: 54:aa:f0:f1:7e:b3:f3:43:ab:50:f7:be:37:7f:ab:d5:40:48: 16:0e:a7:ba:4b:c3:98:d6:db:00:c4:31:4a:e9:c4:68:d9:04: ae:33:6d:35:22:09:04:04:29:f2:fd:b4:6c:8c:6c:9c:a7:16: 0b:1a:60:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUaJSBRMqv79z1HTEX558MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZDcyODVlOTJiNzQwMmU5NWRiZGEyN2JmYmVmNzFhOGUy MjdjZDQwHhcNMjUxMjA1MjEwMTEyWhcNMjUxMjA2MjEwMTEyWjAzMTEwLwYDVQQD EyhjNjc5OTI4N2E0MjQ5OGQ0MzBmOGM0MTkyNjRhNWE5MThjZWU4MDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS9btUSX2ne9K/9NKY0RV2YwV9C9 UMka2n3uKZFPeINBytPTQQhFTJVpnVF7f93ibyJ/aeUGiFa1fqhQLVgcmZTNoZ6E YkEutuwrP438OTD8j/1fRGQAopHmS20SvCRcDefs6LXprfhQJI7kG/gV8VamGO8a +rRSOWCsoRmqP4Vpj5nh/R9WjtwOzUNFLS41fxplqzIUi/DPHQGcLiHfBLcxF534 VsCtGE/ITgRCDshtp9lsqlz0wSsC2+i5RgF9uc1aKMDGNNls0ImB59tYR7q6DGJU wmqpPYgjx1Dl9W9m7n1uPkf6MX5yBGoofmCxxQbN0BjKmUTACJQ9Wv0pawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZ5koekJJjUMPjEGSZKWpGM7oAqMB8GA1UdIwQY MBaAFNbXKF6St0AuldvaJ7++9xqOInzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXRjb1hwSzNRQzZWMjlvbnY3NzNHbzRpZk5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTk5M2QtYjkyZi00ZWMwLWIzMDAt ZDU1ZjVlMGZmNDNmLzEvMXRjb1hwSzNRQzZWMjlvbnY3NzNHbzRpZk5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTk5M2QtYjkyZi00ZWMwLWIzMDAtZDU1ZjVlMGZmNDNm LzEvMXRjb1hwSzNRQzZWMjlvbnY3NzNHbzRpZk5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZg8uS40B +XWQNZbDAYnfLIajd15UG4xEtHYxTSEobhYCM4IiceIFqpczb8bS/tPkaliVTpfE Zia8MOGf4cosJs34BkOwpqODU/xiALQvCGnYn9gHnKprx1yOX5bRCotqgOSlY+Gn JAmphpcaGbcODJEdvfSVZ+FCmiUUEclSEr35jDcfIiF4g3ipWYHtGaTfanBKEWiT 2fI+3B+AJs1x5W6TQ/6AIrfAfBLsBFUo5R6027ZlOJUBKKCakztJDP/do3wOb0y6 VKrw8X6z80OrUPe+N3+r1UBIFg6nukvDmNbbAMQxSunEaNkErjNtNSIJBAQp8v20 bIxsnKcWCxpgdA== -----END CERTIFICATE-----Generated at Sat Dec 6 05:42:21 2025 by rpki-client