This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft File: a-tglLyrS9Ox9vVsUYK6EiDiK28.mft (raw, json) Hash identifier: +/3HmXG5gAD/9gImtm4rZA72B0ykRyuYFs/tJlYJxqo= Subject key identifier: 1C:96:30:EF:E8:BC:6B:5D:4B:3C:65:F3:6E:90:FC:48:66:B9:02:1B Authority key identifier: 6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F Certificate issuer: /CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f Certificate serial: 019B3B6B2E417F6A07BA774D8BFFB8DCA719 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft Manifest number: 0608 Signing time: Sat 20 Dec 2025 11:00:38 +0000 Manifest this update: Sat 20 Dec 2025 11:00:38 +0000 Manifest next update: Sun 21 Dec 2025 11:00:38 +0000 Files and hashes: 1: a-tglLyrS9Ox9vVsUYK6EiDiK28.crl (hash: YXx9s2TkLC2j3IgqS7E3Q1h1Rhxk9smxs6oY6ofDDRQ=) 2: n5XgGF0QABmUyoOQIOrUJsmd7XI.roa (hash: 4ZvkFvvFhalquvSw4fZG8bfQWR2v7HF+beZ3cnlKIAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:2e:41:7f:6a:07:ba:77:4d:8b:ff:b8:dc:a7:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f Validity Not Before: Dec 20 11:00:38 2025 GMT Not After : Dec 21 11:00:38 2025 GMT Subject: CN=1c9630efe8bc6b5d4b3c65f36e90fc4866b9021b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:b1:7b:e1:b1:cb:4d:0d:dd:46:f7:6f:5f: 8a:79:95:7b:ea:01:b8:65:59:82:65:02:8d:31:e7: 4b:d1:a9:7f:2b:91:58:2c:d9:de:b4:bc:b9:8a:91: 0f:16:c2:ac:f7:97:67:3b:30:fb:28:1c:83:49:2f: ad:1a:66:1c:53:59:3c:93:cc:6a:22:07:e5:14:3a: ce:ef:fa:64:40:03:4f:70:81:67:6c:62:a6:a3:41: a5:7e:d7:9c:e2:c6:fe:f9:8a:7b:43:18:f7:a0:bd: 49:aa:47:82:c1:09:9d:ea:ce:cd:d2:ca:ed:c7:0c: e5:03:00:d5:74:94:4c:00:e1:64:ec:59:57:a4:b1: 25:f8:81:ee:cd:3e:48:5e:75:bb:81:a3:fe:8c:66: 3e:3b:d1:0b:2f:f5:f3:04:19:61:1a:00:55:a7:58: e9:57:18:6b:03:8e:6f:6b:dc:51:c3:f5:53:43:1c: e6:c7:b2:0a:d6:a5:22:ac:64:b8:30:42:78:a7:46: 84:4d:4d:97:29:2b:ee:ec:94:bb:e9:0c:7e:e0:ad: 90:c7:3e:cb:fc:f9:86:25:1a:c8:b5:f5:e3:39:eb: e0:00:c5:72:82:bc:45:21:63:4a:66:c2:fe:51:e9: 4f:a5:1c:37:89:dc:e1:39:ac:f0:88:c7:70:f7:09: b3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:96:30:EF:E8:BC:6B:5D:4B:3C:65:F3:6E:90:FC:48:66:B9:02:1B X509v3 Authority Key Identifier: keyid:6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:f5:9e:fc:1d:1b:12:92:07:c6:67:f6:97:78:98:a8:5a:cf: 65:34:8e:30:4a:3b:69:dc:0c:7c:1a:a2:8f:3f:e1:3d:07:90: 4c:9b:6c:5e:8d:54:23:e3:e3:84:0e:f6:96:a0:b0:a0:8e:28: e0:1b:7e:bd:ee:58:a5:b5:e3:64:8c:92:2e:6c:00:09:00:c5: 47:22:aa:47:46:d0:d1:4c:db:2b:cb:3b:b0:8a:d3:1b:be:99: 22:ff:2d:ac:28:20:fc:48:69:9a:46:f1:30:2a:48:1f:45:34: cc:f4:62:a8:e2:33:60:62:bd:23:ec:66:87:56:30:91:01:15: 6c:cf:b8:a6:af:cd:29:ac:4e:79:77:e5:d4:fe:cc:54:ae:54: 1c:4e:c8:80:4f:5b:74:86:03:7a:77:2c:35:16:34:d4:f5:d1: b5:df:36:55:66:42:31:71:3f:3c:ea:f6:31:9d:d8:05:de:b2: 39:48:46:77:44:cb:be:cb:24:51:d4:41:46:e7:f4:42:d9:bc: ee:7a:5e:e8:fb:bd:33:e8:bb:ea:da:6a:e7:5c:2b:1a:41:57: 04:70:0d:08:16:8d:53:1e:dc:82:56:4c:44:5f:bd:a1:a4:03: 11:5d:b0:12:ad:bb:f8:f6:86:7c:6a:2a:c9:e6:94:4b:80:e0: 7f:2c:94:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ay5Bf2oHundNi/+43KcZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZWI2MDk0YmNhYjRiZDNiMWY2ZjU2YzUxODJiYTEyMjBl MjJiNmYwHhcNMjUxMjIwMTEwMDM4WhcNMjUxMjIxMTEwMDM4WjAzMTEwLwYDVQQD EygxYzk2MzBlZmU4YmM2YjVkNGIzYzY1ZjM2ZTkwZmM0ODY2YjkwMjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8yxe+Gxy00N3Ub3b1+KeZV76gG4 ZVmCZQKNMedL0al/K5FYLNnetLy5ipEPFsKs95dnOzD7KByDSS+tGmYcU1k8k8xq IgflFDrO7/pkQANPcIFnbGKmo0Glftec4sb++Yp7Qxj3oL1JqkeCwQmd6s7N0srt xwzlAwDVdJRMAOFk7FlXpLEl+IHuzT5IXnW7gaP+jGY+O9ELL/XzBBlhGgBVp1jp VxhrA45va9xRw/VTQxzmx7IK1qUirGS4MEJ4p0aETU2XKSvu7JS76Qx+4K2Qxz7L /PmGJRrItfXjOevgAMVygrxFIWNKZsL+UelPpRw3idzhOazwiMdw9wmzhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByWMO/ovGtdSzxl826Q/EhmuQIbMB8GA1UdIwQY MBaAFGvrYJS8q0vTsfb1bFGCuhIg4itvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iYTQ2NDAtMTYzZS00NjVmLTkwZjkt ZWE1ODdmZDY1OGIyLzEvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iYTQ2NDAtMTYzZS00NjVmLTkwZjktZWE1ODdmZDY1OGIy LzEvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPWe/B0b EpIHxmf2l3iYqFrPZTSOMEo7adwMfBqijz/hPQeQTJtsXo1UI+PjhA72lqCwoI4o 4Bt+ve5YpbXjZIySLmwACQDFRyKqR0bQ0UzbK8s7sIrTG76ZIv8trCgg/Ehpmkbx MCpIH0U0zPRiqOIzYGK9I+xmh1YwkQEVbM+4pq/NKaxOeXfl1P7MVK5UHE7IgE9b dIYDencsNRY01PXRtd82VWZCMXE/POr2MZ3YBd6yOUhGd0TLvsskUdRBRuf0Qtm8 7npe6Pu9M+i76tpq51wrGkFXBHANCBaNUx7cglZMRF+9oaQDEV2wEq27+PaGfGoq yeaUS4DgfyyUxg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:59:05 2025 by rpki-client