This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft File: tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft (raw, json) Hash identifier: DrGBaQC4Y+INXBfaTLH5NrHyX4dAbnRxsXBeJV8PKBU= Subject key identifier: A5:80:78:97:6B:69:59:B3:4B:17:3B:41:95:D7:C0:39:16:4D:18:63 Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73 Certificate issuer: /CN=b443b3486de7826fd6b0e2aec026597b6207b373 Certificate serial: 019AF08875E4C91443B25D8040DD98C95E29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft Manifest number: 07C4 Signing time: Fri 05 Dec 2025 22:01:06 +0000 Manifest this update: Fri 05 Dec 2025 22:01:06 +0000 Manifest next update: Sat 06 Dec 2025 22:01:06 +0000 Files and hashes: 1: tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl (hash: /Uqcvl3v5fuEPv5twjhcBFtGIrEhrOyPdnk+rCzmDhs=) 2: wT4e9Ao8jFQGwyLrCGIT4nZjT4c.roa (hash: pBWXcPqjDxvwQjU9omFEQSPm1JUMryg0VPK+ErbtywE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:75:e4:c9:14:43:b2:5d:80:40:dd:98:c9:5e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373 Validity Not Before: Dec 5 22:01:06 2025 GMT Not After : Dec 6 22:01:06 2025 GMT Subject: CN=a58078976b6959b34b173b4195d7c039164d1863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ef:23:25:de:48:4a:8a:78:42:00:63:7c:6b: 0f:3f:71:1e:fc:ad:a8:7a:32:7a:85:23:67:6d:38: 06:eb:39:c8:ec:26:b4:10:77:03:99:19:4b:df:a0: 0b:3a:24:06:c0:96:4c:89:ad:30:4f:36:22:a5:ab: 83:0b:f9:7a:66:d1:76:39:9a:58:f1:83:4f:9a:ad: 0b:9f:c9:89:fb:7a:39:88:25:5c:45:d3:3e:72:a1: 7b:1c:6c:32:6a:7f:d2:18:1f:5b:89:0f:35:95:b5: 0e:08:13:38:d9:ea:58:b2:f8:50:c8:e2:5c:6c:2d: 7f:f7:6b:b7:c1:8c:c8:9e:06:8c:1e:70:cd:48:fa: ee:2e:66:d0:24:8d:65:3f:17:29:ee:3d:2f:aa:70: eb:9e:56:48:9a:f3:89:3e:ed:e5:4d:93:c9:c1:8b: 8e:21:b3:60:76:dd:0b:e3:95:9e:3a:7e:41:a9:ce: 61:58:9c:79:26:ec:be:35:4c:cf:bf:c9:7e:1e:2f: e6:ef:45:b0:0e:94:0b:3f:c4:a8:a1:07:70:48:7a: 3f:a8:ef:26:97:cb:3a:fd:6f:5e:ad:77:ee:2a:4a: 1b:81:ba:9c:00:cb:35:c6:2e:d1:93:cf:0c:85:a1: 83:f1:72:f5:d8:51:31:c7:f8:93:ea:cf:f4:44:dd: 5c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:80:78:97:6B:69:59:B3:4B:17:3B:41:95:D7:C0:39:16:4D:18:63 X509v3 Authority Key Identifier: keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ad:d9:ec:c2:0b:2d:7d:30:01:bd:f2:f1:8b:94:32:d9:36: 71:24:ac:ec:73:2c:20:a2:3f:74:f3:b2:21:f3:f8:98:17:e9: f8:0b:1d:03:fb:e9:d1:99:af:9f:ca:4e:7b:d6:a5:ee:57:c1: 15:32:c8:f7:47:ac:fa:3b:62:41:2b:a4:14:aa:fa:d0:64:82: 26:0c:1a:67:9a:1e:a5:cd:35:06:1c:5e:51:93:1e:bc:e2:f8: 1e:47:8a:5e:6c:e2:95:24:56:ef:0e:73:cd:77:6f:5f:67:e4: b0:2b:8d:29:49:f5:0c:18:b1:b1:34:ea:78:ca:3e:b9:b8:14: f3:c6:e0:8b:ee:1a:4a:c2:1a:13:68:47:77:97:61:6f:dd:42: cd:16:69:81:eb:39:0c:87:be:e9:06:da:8d:fa:e2:02:ca:a1: bd:59:36:0f:48:93:88:dc:c3:ec:1e:75:22:43:78:ea:4f:0c: 02:eb:42:af:b9:2a:e6:fb:14:9c:14:30:fa:42:da:a0:58:fb: 99:81:33:a2:e0:cb:84:14:54:fb:af:06:1f:04:b6:b9:51:6f: 71:c0:5d:46:8f:07:e9:2d:5c:59:7a:8c:8f:f5:b6:fe:fb:03: 78:f7:47:40:41:1f:2e:7f:c7:75:2e:0c:9d:b6:06:30:4d:0c: 00:d5:7c:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiHXkyRRDsl2AQN2YyV4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NDNiMzQ4NmRlNzgyNmZkNmIwZTJhZWMwMjY1OTdiNjIw N2IzNzMwHhcNMjUxMjA1MjIwMTA2WhcNMjUxMjA2MjIwMTA2WjAzMTEwLwYDVQQD EyhhNTgwNzg5NzZiNjk1OWIzNGIxNzNiNDE5NWQ3YzAzOTE2NGQxODYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+8jJd5ISop4QgBjfGsPP3Ee/K2o ejJ6hSNnbTgG6znI7Ca0EHcDmRlL36ALOiQGwJZMia0wTzYipauDC/l6ZtF2OZpY 8YNPmq0Ln8mJ+3o5iCVcRdM+cqF7HGwyan/SGB9biQ81lbUOCBM42epYsvhQyOJc bC1/92u3wYzIngaMHnDNSPruLmbQJI1lPxcp7j0vqnDrnlZImvOJPu3lTZPJwYuO IbNgdt0L45WeOn5Bqc5hWJx5Juy+NUzPv8l+Hi/m70WwDpQLP8SooQdwSHo/qO8m l8s6/W9erXfuKkobgbqcAMs1xi7Rk88MhaGD8XL12FExx/iT6s/0RN1cEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWAeJdraVmzSxc7QZXXwDkWTRhjMB8GA1UdIwQY MBaAFLRDs0ht54Jv1rDirsAmWXtiB7NzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83NDI3MWMtNjlhNy00YTg2LTk2NmQt MmExNDUxZTdlM2MxLzEvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83NDI3MWMtNjlhNy00YTg2LTk2NmQtMmExNDUxZTdlM2Mx LzEvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYK3Z7MIL LX0wAb3y8YuUMtk2cSSs7HMsIKI/dPOyIfP4mBfp+AsdA/vp0Zmvn8pOe9al7lfB FTLI90es+jtiQSukFKr60GSCJgwaZ5oepc01BhxeUZMevOL4HkeKXmzilSRW7w5z zXdvX2fksCuNKUn1DBixsTTqeMo+ubgU88bgi+4aSsIaE2hHd5dhb91CzRZpges5 DIe+6QbajfriAsqhvVk2D0iTiNzD7B51IkN46k8MAutCr7kq5vsUnBQw+kLaoFj7 mYEzouDLhBRU+68GHwS2uVFvccBdRo8H6S1cWXqMj/W2/vsDePdHQEEfLn/HdS4M nbYGME0MANV8Aw== -----END CERTIFICATE-----Generated at Sat Dec 6 02:25:32 2025 by rpki-client