This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft File: tRhBzcn2NZTd3CulmkATMYK1efo.mft (raw, json) Hash identifier: FTAzbfrqOFVtxY4dutAV5Edvs06Tm8KwxBH4WJDEQxc= Subject key identifier: 2E:E0:01:7D:50:89:2B:65:02:08:F3:05:6A:78:6F:1E:61:BA:91:C4 Authority key identifier: B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA Certificate issuer: /CN=b51841cdc9f63594dddc2ba59a40133182b579fa Certificate serial: 019B1A29C07A0EB0BE13B9017A142D053D80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft Manifest number: 1779 Signing time: Sun 14 Dec 2025 00:01:42 +0000 Manifest this update: Sun 14 Dec 2025 00:01:42 +0000 Manifest next update: Mon 15 Dec 2025 00:01:42 +0000 Files and hashes: 1: iQxCTqJc23IztH0qMtXGhii78xc.roa (hash: b/32KuHdgss/tEEpqliyL9nGxIGy3IsYTip4QREYlPc=) 2: tRhBzcn2NZTd3CulmkATMYK1efo.crl (hash: E5ezPYlvoXJbPlMmTD3t69zqGeIYcTQF+uwLMo6yeds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:c0:7a:0e:b0:be:13:b9:01:7a:14:2d:05:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b51841cdc9f63594dddc2ba59a40133182b579fa Validity Not Before: Dec 14 00:01:42 2025 GMT Not After : Dec 15 00:01:42 2025 GMT Subject: CN=2ee0017d50892b650208f3056a786f1e61ba91c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:53:bb:2c:de:b2:27:2a:8d:b0:b3:4f:aa:97: 69:43:3e:ce:71:40:c2:86:c5:b6:35:7c:63:e9:06: 48:76:bb:67:23:4c:c9:18:2d:56:2c:7a:9c:2e:ff: 8b:93:a1:e4:e1:43:aa:e8:07:e7:35:3f:de:ae:0e: e2:43:13:a0:10:7a:12:90:0a:f3:b0:4d:d4:5c:89: d5:4b:58:da:cc:79:12:23:a6:74:e8:17:7e:1f:00: 0d:d5:a1:d9:e9:29:f0:2e:3f:85:7a:bf:f9:9d:29: 9a:fa:44:3f:6e:bd:cd:8a:e1:7e:e9:1d:a0:34:ca: 61:f0:8b:e9:26:8a:a5:e6:b4:aa:82:bc:7f:19:9f: ca:92:55:9b:80:40:fc:9c:91:88:06:ee:a2:1b:9f: 45:09:22:e5:b0:5c:52:a0:1b:24:e8:b4:27:57:27: 81:93:cb:60:34:46:62:ec:31:9d:5d:c5:89:f2:78: f6:a8:bd:01:36:65:2d:87:70:a7:29:db:16:21:52: ab:f7:30:e4:c5:50:0a:30:c1:8f:de:3a:15:3f:75: 25:1e:b1:01:11:7c:2b:b9:c3:51:5a:60:1f:70:47: 30:9d:a1:91:e7:a7:75:00:6c:8b:79:b3:31:da:b2: 9e:11:be:bd:6a:c0:5e:f3:c3:cb:6f:9c:86:31:30: 98:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E0:01:7D:50:89:2B:65:02:08:F3:05:6A:78:6F:1E:61:BA:91:C4 X509v3 Authority Key Identifier: keyid:B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:e9:09:fa:73:f1:88:ef:6e:eb:55:1d:6c:53:b8:6a:f6:98: d1:ab:07:f4:1a:03:6c:ed:d2:14:8a:a2:b3:2d:0b:7c:13:bf: c9:e2:b0:3b:62:07:30:5c:fc:10:85:68:fb:bb:ca:b4:02:7e: c9:a9:1a:87:13:ab:21:f4:eb:c2:67:cc:bd:57:c2:b0:b0:ab: 47:d1:98:20:0d:67:2e:1a:43:bd:1e:43:8e:9c:13:ac:3b:03: 63:bc:a0:ba:37:9f:d4:b9:a3:5f:ea:46:8d:76:3a:38:8b:95: 6e:d5:c5:d8:0b:46:2c:6b:ac:3a:ca:5c:10:3f:39:70:0c:cd: 84:23:b9:9d:a6:68:56:25:10:c0:62:a5:1f:4d:58:c3:8a:b8: 2b:c9:3d:60:9a:8f:35:0a:03:7a:7b:a4:d3:2d:01:04:56:0d: 03:ac:39:0c:a9:f7:66:6a:2a:33:3c:27:c4:9b:1b:68:b9:e9: 37:bb:98:cd:15:3d:37:81:a5:dd:cc:b8:5e:cb:16:d4:39:34: 73:50:68:d6:ce:2f:b0:3c:30:50:5e:b3:aa:21:0c:16:46:d0: 39:93:ec:23:c1:34:3e:ec:6e:a4:a7:6f:08:61:a5:6d:70:13: a7:45:b8:1f:c7:53:d8:27:ff:82:9c:2a:23:b5:f5:7b:6f:dc: a3:c7:2e:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKcB6DrC+E7kBehQtBT2AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MTg0MWNkYzlmNjM1OTRkZGRjMmJhNTlhNDAxMzMxODJi NTc5ZmEwHhcNMjUxMjE0MDAwMTQyWhcNMjUxMjE1MDAwMTQyWjAzMTEwLwYDVQQD EygyZWUwMDE3ZDUwODkyYjY1MDIwOGYzMDU2YTc4NmYxZTYxYmE5MWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71O7LN6yJyqNsLNPqpdpQz7OcUDC hsW2NXxj6QZIdrtnI0zJGC1WLHqcLv+Lk6Hk4UOq6AfnNT/erg7iQxOgEHoSkArz sE3UXInVS1jazHkSI6Z06Bd+HwAN1aHZ6SnwLj+Fer/5nSma+kQ/br3NiuF+6R2g NMph8IvpJoql5rSqgrx/GZ/KklWbgED8nJGIBu6iG59FCSLlsFxSoBsk6LQnVyeB k8tgNEZi7DGdXcWJ8nj2qL0BNmUth3CnKdsWIVKr9zDkxVAKMMGP3joVP3UlHrEB EXwrucNRWmAfcEcwnaGR56d1AGyLebMx2rKeEb69asBe88PLb5yGMTCYFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7gAX1QiStlAgjzBWp4bx5hupHEMB8GA1UdIwQY MBaAFLUYQc3J9jWU3dwrpZpAEzGCtXn6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFJoQnpjbjJOWlRkM0N1bG1rQVRNWUsxZWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9mMGFmNjEtOGNjYy00YTNiLTkwMTAt NjkxMGYzOTlkMzhmLzEvdFJoQnpjbjJOWlRkM0N1bG1rQVRNWUsxZWZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9mMGFmNjEtOGNjYy00YTNiLTkwMTAtNjkxMGYzOTlkMzhm LzEvdFJoQnpjbjJOWlRkM0N1bG1rQVRNWUsxZWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOkJ+nPx iO9u61UdbFO4avaY0asH9BoDbO3SFIqisy0LfBO/yeKwO2IHMFz8EIVo+7vKtAJ+ yakahxOrIfTrwmfMvVfCsLCrR9GYIA1nLhpDvR5DjpwTrDsDY7ygujef1LmjX+pG jXY6OIuVbtXF2AtGLGusOspcED85cAzNhCO5naZoViUQwGKlH01Yw4q4K8k9YJqP NQoDenuk0y0BBFYNA6w5DKn3ZmoqMzwnxJsbaLnpN7uYzRU9N4Gl3cy4XssW1Dk0 c1Bo1s4vsDwwUF6zqiEMFkbQOZPsI8E0PuxupKdvCGGlbXATp0W4H8dT2Cf/gpwq I7X1e2/co8cuPQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:43:59 2025 by rpki-client