This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft File: tRhBzcn2NZTd3CulmkATMYK1efo.mft (raw, json) Hash identifier: GKZYJQRVIwl9sB4kRPCYLUKGCBas0+cqh3NZCiPVMHg= Subject key identifier: 50:06:85:3F:14:B7:FD:E9:C0:45:C3:C3:7E:AD:A9:6A:86:63:94:73 Authority key identifier: B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA Certificate issuer: /CN=b51841cdc9f63594dddc2ba59a40133182b579fa Certificate serial: 019B0E92E7F55CF8158AA364000C3E8C1F29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 18:01:07 +0000 Manifest this update: Thu 11 Dec 2025 18:01:07 +0000 Manifest next update: Fri 12 Dec 2025 18:01:07 +0000 Files and hashes: 1: iQxCTqJc23IztH0qMtXGhii78xc.roa (hash: b/32KuHdgss/tEEpqliyL9nGxIGy3IsYTip4QREYlPc=) 2: tRhBzcn2NZTd3CulmkATMYK1efo.crl (hash: QYer66FGW7fJ18siT73nJN9JIRkymvLUfMSkklxjwF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:e7:f5:5c:f8:15:8a:a3:64:00:0c:3e:8c:1f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b51841cdc9f63594dddc2ba59a40133182b579fa Validity Not Before: Dec 11 18:01:07 2025 GMT Not After : Dec 12 18:01:07 2025 GMT Subject: CN=5006853f14b7fde9c045c3c37eada96a86639473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fd:65:7a:09:c2:0d:25:10:f2:98:f5:d3:64: 1e:46:d3:8e:72:9d:11:83:04:0a:d5:f9:b0:88:9b: 87:35:29:aa:ae:7d:ec:b5:e1:e4:e6:d7:f8:d7:b0: 7e:2c:21:be:ed:55:8d:0c:8d:55:59:95:58:57:63: 48:3c:91:f4:9f:77:1b:31:f4:29:4d:c8:e9:7c:12: 42:27:69:cf:ad:cd:39:6e:d2:60:45:51:b4:b2:4f: 53:a3:75:57:70:44:78:93:1d:05:50:d1:85:83:f9: e0:2d:91:ea:df:59:a1:a5:ce:75:bc:2b:31:35:63: 8d:85:aa:28:c0:50:c3:45:a8:9a:64:87:ad:4b:31: 32:79:b1:12:70:12:e6:b1:b0:c9:26:38:05:61:f8: 57:50:ab:33:95:cb:f5:f1:6e:fa:c9:7c:9a:aa:cb: f7:e6:41:7d:a5:bd:b2:20:4c:7f:d9:66:69:e0:54: 57:5e:91:e6:d6:8e:03:15:fb:59:46:a5:1b:4a:3a: da:e7:32:2c:2d:f5:d3:b7:b5:57:7b:3e:2d:d9:f9: 37:92:0a:e2:80:35:94:83:0e:cc:3f:1f:43:9e:43: 6a:09:d7:ed:8b:de:37:bb:91:65:d9:64:a0:9f:ce: 63:29:92:ab:2d:5a:b4:75:4e:ba:31:52:63:ed:38: 3d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:06:85:3F:14:B7:FD:E9:C0:45:C3:C3:7E:AD:A9:6A:86:63:94:73 X509v3 Authority Key Identifier: keyid:B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:36:4c:26:a6:c4:af:d7:6f:be:67:ca:a5:2a:75:66:02:8d: 81:46:28:7b:0d:94:f6:fd:6a:25:52:26:7a:47:cc:62:60:5a: 08:32:d2:80:00:24:c1:d6:d4:5d:1e:b1:a7:91:cd:68:ee:9e: 2a:bc:26:c5:02:0c:65:e8:95:8f:17:bc:22:40:29:45:f4:c1: 73:0f:76:c2:b2:24:e3:17:01:ab:73:18:71:1e:01:2c:30:8c: bb:eb:67:ae:bb:97:9b:0d:97:91:f5:39:4e:ab:65:68:3c:25: e0:85:2a:c3:cd:be:48:6c:0c:8d:96:c6:5f:75:7b:c0:1a:3d: d4:23:f9:6b:62:71:70:33:cc:10:3c:d5:7f:d4:5b:44:eb:ae: d3:b6:24:41:0f:5d:81:8b:d0:fe:a1:5f:f6:e7:d8:b4:70:b1: ac:6e:be:f7:fe:be:33:11:ba:82:d0:c2:9d:15:86:41:14:00: 8a:47:d4:e9:c3:14:c7:40:13:63:1a:f5:e5:44:77:47:f2:3b: 25:6c:05:00:8f:d7:a9:ab:cd:73:f5:7d:e3:89:4f:34:32:9d: d2:aa:40:1a:b7:2b:33:d5:dc:43:81:8f:54:3b:77:5d:8f:ae: a7:d6:34:b9:eb:90:d7:e4:82:a9:04:91:e1:fd:6b:b1:59:1b: f2:4c:a6:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkuf1XPgViqNkAAw+jB8pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MTg0MWNkYzlmNjM1OTRkZGRjMmJhNTlhNDAxMzMxODJi NTc5ZmEwHhcNMjUxMjExMTgwMTA3WhcNMjUxMjEyMTgwMTA3WjAzMTEwLwYDVQQD Eyg1MDA2ODUzZjE0YjdmZGU5YzA0NWMzYzM3ZWFkYTk2YTg2NjM5NDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP1legnCDSUQ8pj102QeRtOOcp0R gwQK1fmwiJuHNSmqrn3steHk5tf417B+LCG+7VWNDI1VWZVYV2NIPJH0n3cbMfQp TcjpfBJCJ2nPrc05btJgRVG0sk9To3VXcER4kx0FUNGFg/ngLZHq31mhpc51vCsx NWONhaoowFDDRaiaZIetSzEyebEScBLmsbDJJjgFYfhXUKszlcv18W76yXyaqsv3 5kF9pb2yIEx/2WZp4FRXXpHm1o4DFftZRqUbSjra5zIsLfXTt7VXez4t2fk3kgri gDWUgw7MPx9DnkNqCdfti943u5Fl2WSgn85jKZKrLVq0dU66MVJj7Tg9MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAGhT8Ut/3pwEXDw36tqWqGY5RzMB8GA1UdIwQY MBaAFLUYQc3J9jWU3dwrpZpAEzGCtXn6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFJoQnpjbjJOWlRkM0N1bG1rQVRNWUsxZWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9mMGFmNjEtOGNjYy00YTNiLTkwMTAt NjkxMGYzOTlkMzhmLzEvdFJoQnpjbjJOWlRkM0N1bG1rQVRNWUsxZWZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9mMGFmNjEtOGNjYy00YTNiLTkwMTAtNjkxMGYzOTlkMzhm LzEvdFJoQnpjbjJOWlRkM0N1bG1rQVRNWUsxZWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwTZMJqbE r9dvvmfKpSp1ZgKNgUYoew2U9v1qJVImekfMYmBaCDLSgAAkwdbUXR6xp5HNaO6e KrwmxQIMZeiVjxe8IkApRfTBcw92wrIk4xcBq3MYcR4BLDCMu+tnrruXmw2XkfU5 TqtlaDwl4IUqw82+SGwMjZbGX3V7wBo91CP5a2JxcDPMEDzVf9RbROuu07YkQQ9d gYvQ/qFf9ufYtHCxrG6+9/6+MxG6gtDCnRWGQRQAikfU6cMUx0ATYxr15UR3R/I7 JWwFAI/XqavNc/V944lPNDKd0qpAGrcrM9XcQ4GPVDt3XY+up9Y0ueuQ1+SCqQSR 4f1rsVkb8kymKA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:12:22 2025 by rpki-client