This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json) Hash identifier: bhpuQMSfmJxnjy3dBvx4RHHzfVLsKvlO7jqbjx8B2bU= Subject key identifier: 00:27:0E:DB:30:BF:29:F9:97:74:C3:34:3E:27:4F:A6:55:8C:CC:54 Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e Certificate serial: 019B036A540445F38E5FF8D0B1992C270247 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft Manifest number: 176B Signing time: Tue 09 Dec 2025 14:00:58 +0000 Manifest this update: Tue 09 Dec 2025 14:00:58 +0000 Manifest next update: Wed 10 Dec 2025 14:00:58 +0000 Files and hashes: 1: LKAft93oZKWm8C5vqJwOGZJiSJU.roa (hash: DXlp4EQmxRSQHGzjwfBhaby6m7/cBeVJqjDN3Ga+MWk=) 2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: 7wG0Ezsz1B29tueOiu96Pt3RQ3OUFPqw2mF/exXPhVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:6a:54:04:45:f3:8e:5f:f8:d0:b1:99:2c:27:02:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e Validity Not Before: Dec 9 14:00:58 2025 GMT Not After : Dec 10 14:00:58 2025 GMT Subject: CN=00270edb30bf29f99774c3343e274fa6558ccc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3f:ca:13:7c:79:e8:ca:d0:c1:aa:53:1f:df: 25:da:ab:4c:be:57:0a:63:83:2b:88:73:59:56:70: 4b:1d:f6:1f:0e:25:07:0c:43:6a:fd:e0:2a:8a:7f: d3:92:ad:da:78:bc:0f:d8:52:52:b3:2d:52:17:95: 12:47:17:c3:1b:90:05:5d:c8:26:d6:84:3c:92:86: 0d:68:98:42:cf:00:84:86:60:dc:8f:56:56:d1:4d: 07:13:40:50:29:9f:17:3b:a7:9e:07:61:cf:ee:a2: fa:72:d5:99:8e:5f:52:6a:5a:17:62:6b:cb:3a:72: f2:74:e8:bb:28:c8:e1:4d:8a:a3:9c:67:f8:7e:ee: ed:d1:47:77:e2:70:aa:8f:fd:d9:ea:3c:ee:f1:54: 5b:19:01:ae:cc:7a:22:ec:29:6d:0c:e5:34:71:39: 09:69:22:e0:93:3c:a1:57:1b:7b:bc:2c:12:07:e1: 99:9e:fa:d0:63:53:05:d1:b2:50:f2:47:d3:eb:d9: f8:51:16:8f:ea:c7:2a:50:98:52:82:cb:08:c3:6e: 60:a1:ec:be:15:81:75:b1:65:89:7e:5a:fd:fe:63: 73:3c:12:0e:81:a7:c5:96:d3:54:7c:fa:94:48:9c: 28:fd:87:57:b1:14:d1:e6:18:4c:09:1d:b7:d0:e4: 08:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:27:0E:DB:30:BF:29:F9:97:74:C3:34:3E:27:4F:A6:55:8C:CC:54 X509v3 Authority Key Identifier: keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:69:a7:9f:06:9a:90:a5:1a:8f:87:74:5d:f2:e4:24:8e:f3: 3a:42:97:72:4d:04:bb:3c:ea:83:bb:f1:f1:c3:59:c9:2d:20: 2f:01:37:d9:42:ec:12:9b:1d:ee:b2:62:54:b6:76:b8:f1:16: 7b:ad:95:04:bd:c4:39:32:0d:f6:a3:d1:a0:24:1b:c6:ea:47: 04:cc:08:8d:c6:05:8f:77:55:ef:06:7a:47:34:75:7e:50:22: f1:98:d0:1c:12:21:ce:63:b1:28:1a:fb:07:54:1f:f5:98:d0: fc:58:b8:7b:3e:35:4b:d6:e2:c4:7c:27:2a:d2:96:51:4e:10: df:81:ad:a8:be:06:30:37:42:14:5c:9e:a9:e2:ad:e1:4e:08: fa:90:1e:44:4b:c8:b0:6a:57:41:84:ce:fa:43:68:73:9a:f5: ef:ea:d6:97:03:be:ef:4d:d5:ac:d8:be:11:fc:59:60:c3:91: 85:70:27:5d:fb:f5:4e:76:bb:ba:b9:af:fb:00:fa:40:72:07: 75:70:d2:1f:5e:f8:3e:0b:1e:3b:38:52:5a:29:26:6e:dc:ed: 8c:77:3a:93:ab:7c:37:ed:87:60:16:53:0f:2e:d3:f5:7d:31: 60:8d:91:9a:ed:a3:d7:ff:00:b1:ac:8c:5c:df:12:cd:41:5b: 4d:a9:44:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsDalQERfOOX/jQsZksJwJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZGQ2ZDY1OGUxNDU3MWU4MzlmNzgxM2RhMzFmMjIxNzQy MjgxOGUwHhcNMjUxMjA5MTQwMDU4WhcNMjUxMjEwMTQwMDU4WjAzMTEwLwYDVQQD EygwMDI3MGVkYjMwYmYyOWY5OTc3NGMzMzQzZTI3NGZhNjU1OGNjYzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD/KE3x56MrQwapTH98l2qtMvlcK Y4MriHNZVnBLHfYfDiUHDENq/eAqin/Tkq3aeLwP2FJSsy1SF5USRxfDG5AFXcgm 1oQ8koYNaJhCzwCEhmDcj1ZW0U0HE0BQKZ8XO6eeB2HP7qL6ctWZjl9SaloXYmvL OnLydOi7KMjhTYqjnGf4fu7t0Ud34nCqj/3Z6jzu8VRbGQGuzHoi7CltDOU0cTkJ aSLgkzyhVxt7vCwSB+GZnvrQY1MF0bJQ8kfT69n4URaP6scqUJhSgssIw25goey+ FYF1sWWJflr9/mNzPBIOgafFltNUfPqUSJwo/YdXsRTR5hhMCR230OQIpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAnDtswvyn5l3TDND4nT6ZVjMxUMB8GA1UdIwQY MBaAFLTdbWWOFFceg594E9ox8iF0IoGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUt ODFkMjE0ZWRmMjk4LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUtODFkMjE0ZWRmMjk4 LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGmnnwaa kKUaj4d0XfLkJI7zOkKXck0Euzzqg7vx8cNZyS0gLwE32ULsEpsd7rJiVLZ2uPEW e62VBL3EOTIN9qPRoCQbxupHBMwIjcYFj3dV7wZ6RzR1flAi8ZjQHBIhzmOxKBr7 B1Qf9ZjQ/Fi4ez41S9bixHwnKtKWUU4Q34GtqL4GMDdCFFyeqeKt4U4I+pAeREvI sGpXQYTO+kNoc5r17+rWlwO+703VrNi+EfxZYMORhXAnXfv1Tna7urmv+wD6QHIH dXDSH174PgseOzhSWikmbtztjHc6k6t8N+2HYBZTDy7T9X0xYI2Rmu2j1/8AsayM XN8SzUFbTalE5A== -----END CERTIFICATE-----Generated at Tue Dec 9 21:34:46 2025 by rpki-client