This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft File: tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json) Hash identifier: rGXQn2YjremZrTWuHX62uB5RrNsx3CsjCCFJRKo1HmA= Subject key identifier: E5:40:11:A2:57:9B:70:19:1D:21:26:10:43:9C:95:F8:F2:E4:3D:60 Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93 Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193 Certificate serial: 019AF1D19666FD37098AECA598A8196BF71E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:00:35 +0000 Manifest this update: Sat 06 Dec 2025 04:00:35 +0000 Manifest next update: Sun 07 Dec 2025 04:00:35 +0000 Files and hashes: 1: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: 3J3EDQ/Tv62+P4F55yg1zYDb+N7jMBpd+NA8vEbubrQ=) 2: uhCkTjed1Otbl84zKJAXa3t70aA.roa (hash: cZYpuZx9ZnpX3epsbIvoPloPaPVgbUbl6mh5Fr2F3pw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:96:66:fd:37:09:8a:ec:a5:98:a8:19:6b:f7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193 Validity Not Before: Dec 6 04:00:35 2025 GMT Not After : Dec 7 04:00:35 2025 GMT Subject: CN=e54011a2579b70191d212610439c95f8f2e43d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9c:2b:ed:55:a6:11:c2:92:66:35:94:e7:65: e8:6a:81:ad:7c:98:a2:ab:00:d6:f2:22:2f:e5:f4: 53:d8:5c:1b:d6:72:90:72:79:81:14:8a:54:2b:92: 1e:d8:9c:df:9e:a9:ab:2f:49:14:c6:6a:a2:4c:3f: 44:8d:25:35:be:7b:32:99:34:f9:4f:50:8f:d3:f3: e5:81:10:0f:33:e2:9a:90:f5:54:b6:61:14:5d:a2: 97:66:f8:9c:9b:c1:2e:8b:63:16:0b:f6:b4:33:a5: 5c:0d:1d:09:8a:d2:d5:03:3a:7a:12:dd:67:d0:0c: 7c:9e:2c:44:03:57:22:e8:73:1e:d8:a1:ff:2f:cf: 33:69:62:03:19:42:12:58:fb:50:ae:e6:ae:8f:be: 0d:5c:fe:30:a9:22:b4:19:6a:72:6d:62:99:b7:34: 8f:22:d0:38:db:c3:07:1c:c1:f1:b0:54:14:ab:66: 56:5a:bb:12:fe:67:d3:d1:7b:37:39:9a:9e:71:3d: fd:2a:48:f6:52:77:0e:1d:19:f4:ff:39:d5:01:2a: 43:1c:b9:19:05:1f:f8:27:5a:26:67:22:04:99:3c: 3f:f0:5d:a6:7a:a8:95:ed:fc:45:0a:74:93:1e:39: 40:ed:b6:89:c2:22:0b:3e:f5:fd:b6:39:15:b1:be: b5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:40:11:A2:57:9B:70:19:1D:21:26:10:43:9C:95:F8:F2:E4:3D:60 X509v3 Authority Key Identifier: keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:64:92:45:95:5d:91:21:8e:0f:28:6b:62:0d:a3:df:68:af: ef:a4:f3:b7:3b:39:2e:c4:1e:48:bc:1a:2f:d5:77:42:72:b1: a9:74:94:5b:d4:f1:70:7c:b9:35:60:37:8f:93:28:ac:bf:2d: 4b:6e:be:0f:27:d4:68:52:ec:2c:2a:ca:ed:1b:0e:2b:6c:6c: e0:1b:d9:0b:55:5d:60:b0:85:f8:77:ca:af:12:a8:29:66:bb: d4:ec:82:50:ed:9f:a8:25:e2:f0:0c:00:11:97:e5:0e:cf:59: 86:20:08:37:73:76:1e:52:82:67:63:20:ec:a3:99:ad:94:8d: a5:c1:75:9d:a9:28:80:4c:28:08:3a:1e:98:e4:2c:36:0d:7e: 53:25:13:10:05:8b:d6:16:39:a1:e2:16:0b:de:f5:02:d8:d1: f4:0c:70:2e:39:bf:0b:a8:f8:25:e6:fc:d9:81:b9:53:96:1d: e7:76:89:11:d6:75:4e:fd:57:2b:8f:3f:6d:8f:21:6f:e2:e4: 5a:20:75:03:bf:ae:24:87:25:d8:10:97:17:cc:ed:a5:de:06: 8d:35:e3:9a:7f:02:15:c9:f1:bd:cb:b6:7c:e6:58:27:5c:78: 7f:cd:dd:26:97:43:ef:52:7b:f4:89:dc:ef:68:8f:c0:f4:4d: 05:0f:e6:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZZm/TcJiuylmKgZa/ceMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0Nzg0MTAyMjQ5MDQ0OTRlOWMwZjdkMzU2NTBhMjYwZTVm YjYxOTMwHhcNMjUxMjA2MDQwMDM1WhcNMjUxMjA3MDQwMDM1WjAzMTEwLwYDVQQD EyhlNTQwMTFhMjU3OWI3MDE5MWQyMTI2MTA0MzljOTVmOGYyZTQzZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5wr7VWmEcKSZjWU52XoaoGtfJii qwDW8iIv5fRT2Fwb1nKQcnmBFIpUK5Ie2JzfnqmrL0kUxmqiTD9EjSU1vnsymTT5 T1CP0/PlgRAPM+KakPVUtmEUXaKXZvicm8Eui2MWC/a0M6VcDR0JitLVAzp6Et1n 0Ax8nixEA1ci6HMe2KH/L88zaWIDGUISWPtQruauj74NXP4wqSK0GWpybWKZtzSP ItA428MHHMHxsFQUq2ZWWrsS/mfT0Xs3OZqecT39Kkj2UncOHRn0/znVASpDHLkZ BR/4J1omZyIEmTw/8F2meqiV7fxFCnSTHjlA7baJwiILPvX9tjkVsb61awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVAEaJXm3AZHSEmEEOclfjy5D1gMB8GA1UdIwQY MBaAFLR4QQIkkESU6cD301ZQomDl+2GTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81Y2ZiZjMtZTc4Mi00MDEzLThlZWUt ZGU3ZDNiYmZlZTg4LzEvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81Y2ZiZjMtZTc4Mi00MDEzLThlZWUtZGU3ZDNiYmZlZTg4 LzEvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2SSRZVd kSGODyhrYg2j32iv76Tztzs5LsQeSLwaL9V3QnKxqXSUW9TxcHy5NWA3j5MorL8t S26+DyfUaFLsLCrK7RsOK2xs4BvZC1VdYLCF+HfKrxKoKWa71OyCUO2fqCXi8AwA EZflDs9ZhiAIN3N2HlKCZ2Mg7KOZrZSNpcF1nakogEwoCDoemOQsNg1+UyUTEAWL 1hY5oeIWC971AtjR9AxwLjm/C6j4Jeb82YG5U5Yd53aJEdZ1Tv1XK48/bY8hb+Lk WiB1A7+uJIcl2BCXF8ztpd4GjTXjmn8CFcnxvcu2fOZYJ1x4f83dJpdD71J79Inc 72iPwPRNBQ/m7w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:35 2025 by rpki-client