This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft File: tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft (raw, json) Hash identifier: o8KtXCRS4Xvff5XUf/RHGzITDQZLm3xwATZuEfMIID4= Subject key identifier: 6A:16:1C:1B:BB:EC:EB:E5:08:98:E7:B5:1C:BB:48:CD:6E:08:CE:04 Authority key identifier: B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C Certificate issuer: /CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c Certificate serial: 019B59E431E4BA0E5FB19A67AF8437814FD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft Manifest number: 15AD Signing time: Fri 26 Dec 2025 09:01:25 +0000 Manifest this update: Fri 26 Dec 2025 09:01:25 +0000 Manifest next update: Sat 27 Dec 2025 09:01:25 +0000 Files and hashes: 1: VMjps0TDOc6vg4EVncBcfziPs7o.roa (hash: F5yYItxb8pdHFsuwCVpmcCXEuMNoj5mX3+RkzMDL76c=) 2: tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl (hash: CDBva2kl4TfE7nPOlZ6V0oP79KNGCmY4uMB5prrhIwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:31:e4:ba:0e:5f:b1:9a:67:af:84:37:81:4f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c Validity Not Before: Dec 26 09:01:25 2025 GMT Not After : Dec 27 09:01:25 2025 GMT Subject: CN=6a161c1bbbecebe50898e7b51cbb48cd6e08ce04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:22:ca:89:fd:87:ec:6b:98:a3:98:72:dd:e6: 6b:ba:c2:10:2b:51:24:7e:f6:00:7c:40:2f:3a:f4: 95:62:e7:95:9e:a2:94:80:e8:aa:72:6b:bf:78:40: 1b:94:7f:22:08:85:e6:73:0c:0d:54:fb:fb:e8:db: a0:cf:83:fd:77:3d:d0:23:94:76:59:10:95:96:9b: 60:f4:de:56:9f:cc:c8:50:b3:66:e3:64:a9:2a:b0: 3f:39:3f:a4:d8:6e:e6:10:d7:a7:eb:98:64:5d:9d: d8:4f:d8:f9:75:10:4b:71:d0:d4:23:e2:81:73:5e: 23:e3:9d:de:67:7f:f6:3d:05:a3:4c:47:1c:eb:d3: 3a:0d:16:ee:8d:0a:93:12:20:25:3d:71:18:ea:83: df:85:27:03:41:a9:f6:a9:0a:ce:1f:9a:d7:d9:84: 9b:35:79:41:05:92:bc:12:3a:0f:74:02:72:7f:de: b7:4d:be:f9:c0:27:34:ea:36:1d:d2:52:ec:5d:aa: 4f:c1:20:9c:a8:72:4f:63:0e:89:ee:b8:00:4e:a1: 7d:c9:52:ed:2c:23:8e:38:cf:77:9f:ca:99:5e:2e: dc:dd:be:6b:e9:03:f1:96:fe:db:9a:67:21:e3:1a: c5:7f:83:f2:e5:b4:c6:df:52:32:a2:09:d5:a3:24: 7d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:16:1C:1B:BB:EC:EB:E5:08:98:E7:B5:1C:BB:48:CD:6E:08:CE:04 X509v3 Authority Key Identifier: keyid:B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:e8:60:b5:52:6e:00:f1:82:87:34:fd:09:f9:6f:c4:0b:5d: a2:6e:f6:62:73:0f:ce:89:c8:8f:21:df:6b:38:d9:14:da:47: 77:c1:dc:1d:50:8e:68:dd:5b:22:e8:59:42:74:6e:5c:05:a2: 96:86:38:94:73:2f:0f:ba:24:4a:40:ab:bd:20:cc:7e:95:04: d1:e3:62:bd:08:c1:15:80:1f:f7:0f:b4:14:24:6f:b7:fa:32: cd:3b:a6:db:9f:95:47:f4:35:ab:be:c8:49:dd:0e:03:70:d4: f1:93:8a:93:63:e1:78:27:13:a5:9c:0a:b1:5d:01:f4:a0:2b: 2d:da:78:f1:9a:85:f4:2f:88:13:92:d1:a1:ac:36:86:78:33: eb:70:51:ca:d0:df:f9:1f:32:18:28:e1:e2:1f:ca:e5:fe:3e: 3b:cc:c4:96:bc:58:c1:9a:26:ef:e5:7d:fc:92:01:90:86:e0: 7a:be:74:a4:44:21:b0:44:04:29:fa:c3:19:a2:a4:b9:81:bb: 93:db:b4:2d:e8:26:98:ff:9d:65:f2:b9:2a:10:80:ee:7f:14: 6a:99:a9:b9:9e:27:cf:76:57:8b:da:48:00:b9:29:12:62:68: d4:ed:46:74:5a:22:00:dd:91:d1:fe:e4:59:e4:ae:9f:9f:a0: 76:e6:2d:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5DHkug5fsZpnr4Q3gU/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OTU3Y2E0ODNhZjBiNjdmOTczYjA4NTk3MmNjYzVjNWVk MDNmN2MwHhcNMjUxMjI2MDkwMTI1WhcNMjUxMjI3MDkwMTI1WjAzMTEwLwYDVQQD Eyg2YTE2MWMxYmJiZWNlYmU1MDg5OGU3YjUxY2JiNDhjZDZlMDhjZTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCLKif2H7GuYo5hy3eZrusIQK1Ek fvYAfEAvOvSVYueVnqKUgOiqcmu/eEAblH8iCIXmcwwNVPv76Nugz4P9dz3QI5R2 WRCVlptg9N5Wn8zIULNm42SpKrA/OT+k2G7mENen65hkXZ3YT9j5dRBLcdDUI+KB c14j453eZ3/2PQWjTEcc69M6DRbujQqTEiAlPXEY6oPfhScDQan2qQrOH5rX2YSb NXlBBZK8EjoPdAJyf963Tb75wCc06jYd0lLsXapPwSCcqHJPYw6J7rgATqF9yVLt LCOOOM93n8qZXi7c3b5r6QPxlv7bmmch4xrFf4Py5bTG31IyognVoyR9eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoWHBu77OvlCJjntRy7SM1uCM4EMB8GA1UdIwQY MBaAFLaVfKSDrwtn+XOwhZcszFxe0D98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHBWOHBJT3ZDMmY1YzdDRmx5ek1YRjdRUDN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82NjM2OWMtMDJmOS00OTQ3LTljYjQt ODRiNzI1MTU4MzQ3LzEvdHBWOHBJT3ZDMmY1YzdDRmx5ek1YRjdRUDN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy82NjM2OWMtMDJmOS00OTQ3LTljYjQtODRiNzI1MTU4MzQ3 LzEvdHBWOHBJT3ZDMmY1YzdDRmx5ek1YRjdRUDN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEehgtVJu APGChzT9CflvxAtdom72YnMPzonIjyHfazjZFNpHd8HcHVCOaN1bIuhZQnRuXAWi loY4lHMvD7okSkCrvSDMfpUE0eNivQjBFYAf9w+0FCRvt/oyzTum25+VR/Q1q77I Sd0OA3DU8ZOKk2PheCcTpZwKsV0B9KArLdp48ZqF9C+IE5LRoaw2hngz63BRytDf +R8yGCjh4h/K5f4+O8zElrxYwZom7+V9/JIBkIbger50pEQhsEQEKfrDGaKkuYG7 k9u0LegmmP+dZfK5KhCA7n8UapmpuZ4nz3ZXi9pIALkpEmJo1O1GdFoiAN2R0f7k WeSun5+gduYtbw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:21 2025 by rpki-client