This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft File: tLB5uhPORqvsf1vD893Ni7hnWQU.mft (raw, json) Hash identifier: wlxnkXR1JLj3+aBqmAH2WfFTnV1ztYRxa2XVqBxosI8= Subject key identifier: A9:A4:56:41:AD:F1:68:A9:2F:87:26:5D:4C:E0:3B:20:E6:E5:6E:AA Authority key identifier: B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05 Certificate issuer: /CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905 Certificate serial: 019AF0880D32C6226EEA44465539788D5BEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft Manifest number: 175E Signing time: Fri 05 Dec 2025 22:00:39 +0000 Manifest this update: Fri 05 Dec 2025 22:00:39 +0000 Manifest next update: Sat 06 Dec 2025 22:00:39 +0000 Files and hashes: 1: tLB5uhPORqvsf1vD893Ni7hnWQU.crl (hash: xtsKzeB8f5wey+8qTDpxtEa3h7rYzu/dELMAVzHYinQ=) 2: u2BcurtkahmzzbpCvF5G__EHmrQ.roa (hash: sXnsJfkykB72mvD9Mf1AHstwJM/7MpBbK+WiRKqEOhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:0d:32:c6:22:6e:ea:44:46:55:39:78:8d:5b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905 Validity Not Before: Dec 5 22:00:39 2025 GMT Not After : Dec 6 22:00:39 2025 GMT Subject: CN=a9a45641adf168a92f87265d4ce03b20e6e56eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:c5:93:f4:e3:87:60:9d:2b:1c:bb:90:5d: 20:bb:66:1f:f5:b9:f4:d0:8e:ca:c0:f2:20:e8:5b: 85:c8:6a:71:c3:fa:66:62:5f:1f:89:dc:2c:82:d7: f6:74:99:53:7d:9d:50:b1:ae:9a:ae:a8:ce:43:59: 31:4a:ab:90:3b:37:16:3a:80:a7:a3:9e:be:82:9c: 08:88:46:b8:b5:3d:c8:22:6a:69:4a:fe:c9:c2:87: 4b:22:6b:5a:06:99:e5:6c:bb:37:71:d6:36:05:33: 94:98:ea:0f:40:75:89:04:e8:30:44:de:b5:d6:33: aa:6e:f7:e5:ce:37:8b:a3:a6:01:b0:dc:8d:e6:9b: 96:b0:80:dd:bd:7b:e0:6a:4a:9a:6a:fd:be:44:c4: 32:67:3f:8d:a6:fa:ef:bb:d6:a5:39:70:95:5c:37: c8:c8:de:de:71:b3:43:e4:e3:89:42:44:b7:95:d6: fb:dd:11:cb:32:7c:7a:ce:88:b7:0c:d4:b6:87:d3: 4a:37:ec:83:58:ca:49:61:fa:d8:df:fb:bc:78:3e: 41:69:b2:67:5c:af:51:65:c4:bb:99:c6:b7:ea:e8: c5:fd:71:a5:1f:cc:76:8a:da:c1:a4:5d:2d:eb:30: 26:8b:07:ca:6a:33:64:e3:6d:71:db:49:89:56:fe: 80:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A4:56:41:AD:F1:68:A9:2F:87:26:5D:4C:E0:3B:20:E6:E5:6E:AA X509v3 Authority Key Identifier: keyid:B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:55:43:ce:78:2f:69:09:21:d5:5f:b8:fd:a0:db:1f:cd:cf: 5a:6e:f6:53:72:66:90:9c:2c:f2:f5:02:dc:09:98:9c:3e:e4: 3e:81:41:0e:1a:b8:e8:c3:d7:91:25:99:9f:45:7f:dd:d7:98: 72:03:35:54:7e:d0:e0:1f:55:d2:7e:e8:a7:88:0c:a2:28:aa: e8:82:f1:40:b8:07:88:fa:1e:24:24:0a:38:db:bf:94:be:93: 42:20:12:bd:6a:3b:98:66:a3:a1:62:23:ab:ef:f7:b9:3c:de: cd:12:51:72:7d:b0:5b:72:d7:4f:02:ef:72:57:40:ac:86:cb: fb:4b:77:1f:fc:d6:60:df:7c:20:fd:4b:2e:9b:45:f8:66:ce: ed:26:b8:d8:39:a7:b5:54:80:0a:92:1c:65:6f:ac:db:67:cf: 98:74:e9:59:78:12:39:35:5d:87:2f:8b:b8:5d:85:f0:fc:f4: 6a:ce:d5:79:84:28:f7:07:e0:db:66:ac:29:a0:ac:6a:71:79: 44:ed:fa:7d:1f:da:ce:93:37:9a:c7:f8:02:c8:e7:7e:2f:76: 94:52:7f:ef:75:06:9c:4b:21:3e:4c:3d:65:6e:82:6a:84:7f: f0:14:fc:0a:82:f5:78:5b:17:51:21:08:d4:53:b8:71:c4:c8: f2:f5:e5:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiA0yxiJu6kRGVTl4jVvsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YjA3OWJhMTNjZTQ2YWJlYzdmNWJjM2YzZGRjZDhiYjg2 NzU5MDUwHhcNMjUxMjA1MjIwMDM5WhcNMjUxMjA2MjIwMDM5WjAzMTEwLwYDVQQD EyhhOWE0NTY0MWFkZjE2OGE5MmY4NzI2NWQ0Y2UwM2IyMGU2ZTU2ZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVXFk/Tjh2CdKxy7kF0gu2Yf9bn0 0I7KwPIg6FuFyGpxw/pmYl8fidwsgtf2dJlTfZ1Qsa6arqjOQ1kxSquQOzcWOoCn o56+gpwIiEa4tT3IImppSv7JwodLImtaBpnlbLs3cdY2BTOUmOoPQHWJBOgwRN61 1jOqbvflzjeLo6YBsNyN5puWsIDdvXvgakqaav2+RMQyZz+Npvrvu9alOXCVXDfI yN7ecbND5OOJQkS3ldb73RHLMnx6zoi3DNS2h9NKN+yDWMpJYfrY3/u8eD5BabJn XK9RZcS7mca36ujF/XGlH8x2itrBpF0t6zAmiwfKajNk421x20mJVv6AywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmkVkGt8WipL4cmXUzgOyDm5W6qMB8GA1UdIwQY MBaAFLSweboTzkar7H9bw/PdzYu4Z1kFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdExCNXVoUE9ScXZzZjF2RDg5M05pN2huV1FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kNDZhODEtMzczNS00MmM2LTliYmIt MWQxNzk5YjU5Yzk5LzEvdExCNXVoUE9ScXZzZjF2RDg5M05pN2huV1FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kNDZhODEtMzczNS00MmM2LTliYmItMWQxNzk5YjU5Yzk5 LzEvdExCNXVoUE9ScXZzZjF2RDg5M05pN2huV1FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFVDzngv aQkh1V+4/aDbH83PWm72U3JmkJws8vUC3AmYnD7kPoFBDhq46MPXkSWZn0V/3deY cgM1VH7Q4B9V0n7op4gMoiiq6ILxQLgHiPoeJCQKONu/lL6TQiASvWo7mGajoWIj q+/3uTzezRJRcn2wW3LXTwLvcldArIbL+0t3H/zWYN98IP1LLptF+GbO7Sa42Dmn tVSACpIcZW+s22fPmHTpWXgSOTVdhy+LuF2F8Pz0as7VeYQo9wfg22asKaCsanF5 RO36fR/azpM3msf4Asjnfi92lFJ/73UGnEshPkw9ZW6CaoR/8BT8CoL1eFsXUSEI 1FO4ccTI8vXlGg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:07 2025 by rpki-client