This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft File: tIoonrst1oBtYLjFrQNseY9mugY.mft (raw, json) Hash identifier: PA4RXkQvyo1d9JzRRPdApe4MNPIFG4MVhWVYsw38VC4= Subject key identifier: 29:F5:1A:4F:92:CD:60:B4:48:05:17:12:6E:08:9A:D0:BA:13:3B:CB Authority key identifier: B4:8A:28:9E:BB:2D:D6:80:6D:60:B8:C5:AD:03:6C:79:8F:66:BA:06 Certificate issuer: /CN=b48a289ebb2dd6806d60b8c5ad036c798f66ba06 Certificate serial: 019B37C570C4EE8C8027F7875713BE5EBE76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft Manifest number: 0640 Signing time: Fri 19 Dec 2025 18:00:44 +0000 Manifest this update: Fri 19 Dec 2025 18:00:44 +0000 Manifest next update: Sat 20 Dec 2025 18:00:44 +0000 Files and hashes: 1: nKxswHwUBE_XIOIyQ1Qpw5XOFvo.roa (hash: xZYcCOMTf00TiuBXWvG+qaD8S6ouJ5YlmrR2oW0i9z0=) 2: tIoonrst1oBtYLjFrQNseY9mugY.crl (hash: RRFS2cdn404uNeJA70katP7j4RVFD4Yv56us2xlIc3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:70:c4:ee:8c:80:27:f7:87:57:13:be:5e:be:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b48a289ebb2dd6806d60b8c5ad036c798f66ba06 Validity Not Before: Dec 19 18:00:44 2025 GMT Not After : Dec 20 18:00:44 2025 GMT Subject: CN=29f51a4f92cd60b4480517126e089ad0ba133bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0f:ef:e4:84:cd:5e:e8:2b:60:b7:32:1f:35: d1:75:1f:7d:13:ab:e4:8e:df:fd:72:e6:17:a1:a0: 92:f0:47:3c:ab:a5:c6:e3:da:e7:e9:4f:e9:d6:c9: b2:6f:5c:84:4a:b0:2f:86:df:93:5c:39:65:f7:1f: 82:5f:9d:0f:51:ca:6a:32:65:c4:ee:6d:c9:78:9b: c9:4c:2e:20:a2:45:15:ac:d5:83:84:8d:42:7d:63: ea:b6:96:5e:90:e7:af:cb:32:47:49:be:d5:a1:d7: c7:9c:a7:8f:52:fe:33:00:a8:94:9f:2b:c6:bf:07: 09:ac:46:f6:1e:8c:85:d3:69:e8:f2:0f:72:80:c2: 5c:c8:04:ff:d2:75:7e:9b:42:c4:1b:9e:a7:b3:bb: eb:33:2d:3e:f7:71:80:98:33:42:00:ef:de:72:84: 3d:38:f4:ea:c9:ae:0f:80:1c:cd:6a:ac:9a:46:c0: 6e:0f:4e:d7:e8:f7:be:67:4d:d0:d7:33:b5:22:4c: 36:01:72:62:bc:ab:7f:61:9c:94:c0:59:77:1d:93: 81:5b:48:24:ef:b3:47:c2:46:8b:9c:50:a8:cb:01: d8:43:d7:07:62:90:21:fe:56:76:e9:fe:34:bc:5a: 78:5f:79:13:2e:d0:7f:f5:57:56:dd:19:5f:8f:96: 71:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F5:1A:4F:92:CD:60:B4:48:05:17:12:6E:08:9A:D0:BA:13:3B:CB X509v3 Authority Key Identifier: keyid:B4:8A:28:9E:BB:2D:D6:80:6D:60:B8:C5:AD:03:6C:79:8F:66:BA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:af:23:34:8b:ab:69:b8:b1:15:95:bf:c1:8c:11:cb:ac:98: 25:a2:da:99:82:ae:8d:3f:ef:ff:ce:b9:ac:ae:18:fc:d2:30: 70:11:36:ca:b6:e1:98:e7:b6:24:e6:bc:0c:51:09:25:3b:f0: 64:d3:d8:85:01:0e:80:6a:f4:55:e3:b8:86:ed:aa:a8:e3:5b: 70:de:46:1e:d6:59:11:90:02:32:a2:d4:58:94:22:a4:01:42: 3c:5f:85:34:b9:8a:42:24:50:ac:a6:8e:d2:b0:eb:d7:67:fa: 4a:09:97:1d:ea:c0:3a:2b:0b:f3:d9:14:d3:a1:82:4b:a5:c9: 17:48:aa:04:d2:b5:81:c4:79:84:0c:56:7a:42:38:95:64:26: 1d:c5:f5:4e:99:34:ef:45:f9:f1:bd:1b:bb:91:5d:7c:63:17: 6c:6a:d7:a3:03:55:3b:e4:6d:52:0c:5f:43:5b:c3:5a:16:cd: f0:ef:09:ba:48:c9:b7:f2:05:68:f7:9c:ca:5a:83:4e:be:2e: ed:69:62:16:9d:0a:f1:c9:b2:6a:64:c5:bd:15:fa:cb:10:a6: b0:f4:5a:cf:25:41:f1:35:70:b4:9f:02:43:ae:18:26:f4:40: 34:5d:4a:6a:11:91:d3:ab:38:32:48:fe:57:7c:b6:68:5e:ad: 53:03:3c:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xXDE7oyAJ/eHVxO+Xr52MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OGEyODllYmIyZGQ2ODA2ZDYwYjhjNWFkMDM2Yzc5OGY2 NmJhMDYwHhcNMjUxMjE5MTgwMDQ0WhcNMjUxMjIwMTgwMDQ0WjAzMTEwLwYDVQQD EygyOWY1MWE0ZjkyY2Q2MGI0NDgwNTE3MTI2ZTA4OWFkMGJhMTMzYmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA/v5ITNXugrYLcyHzXRdR99E6vk jt/9cuYXoaCS8Ec8q6XG49rn6U/p1smyb1yESrAvht+TXDll9x+CX50PUcpqMmXE 7m3JeJvJTC4gokUVrNWDhI1CfWPqtpZekOevyzJHSb7VodfHnKePUv4zAKiUnyvG vwcJrEb2HoyF02no8g9ygMJcyAT/0nV+m0LEG56ns7vrMy0+93GAmDNCAO/ecoQ9 OPTqya4PgBzNaqyaRsBuD07X6Pe+Z03Q1zO1Ikw2AXJivKt/YZyUwFl3HZOBW0gk 77NHwkaLnFCoywHYQ9cHYpAh/lZ26f40vFp4X3kTLtB/9VdW3Rlfj5ZxRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCn1Gk+SzWC0SAUXEm4ImtC6EzvLMB8GA1UdIwQY MBaAFLSKKJ67LdaAbWC4xa0DbHmPZroGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElvb25yc3Qxb0J0WUxqRnJRTnNlWTltdWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81OTkyZWItNGI4Mi00ZmQzLTkxMjEt ZmVlMTM3Yzg5MGJjLzEvdElvb25yc3Qxb0J0WUxqRnJRTnNlWTltdWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC81OTkyZWItNGI4Mi00ZmQzLTkxMjEtZmVlMTM3Yzg5MGJj LzEvdElvb25yc3Qxb0J0WUxqRnJRTnNlWTltdWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEa8jNIur abixFZW/wYwRy6yYJaLamYKujT/v/865rK4Y/NIwcBE2yrbhmOe2JOa8DFEJJTvw ZNPYhQEOgGr0VeO4hu2qqONbcN5GHtZZEZACMqLUWJQipAFCPF+FNLmKQiRQrKaO 0rDr12f6SgmXHerAOisL89kU06GCS6XJF0iqBNK1gcR5hAxWekI4lWQmHcX1Tpk0 70X58b0bu5FdfGMXbGrXowNVO+RtUgxfQ1vDWhbN8O8JukjJt/IFaPecylqDTr4u 7WliFp0K8cmyamTFvRX6yxCmsPRazyVB8TVwtJ8CQ64YJvRANF1KahGR06s4Mkj+ V3y2aF6tUwM8ZA== -----END CERTIFICATE-----Generated at Fri Dec 19 21:14:37 2025 by rpki-client