This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft File: tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft (raw, json) Hash identifier: Qf85opEdgm7ZE460mxK1U2Cijl9DAPVvDGqtHYP77Tg= Subject key identifier: A7:8B:A1:6A:95:A2:7E:0B:6D:DB:1E:36:A7:B5:20:9B:E7:DC:1F:CC Authority key identifier: B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9 Certificate issuer: /CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9 Certificate serial: 019B25524C61C93B6EB469517BFB0FFF9509 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft Manifest number: 1630 Signing time: Tue 16 Dec 2025 04:01:48 +0000 Manifest this update: Tue 16 Dec 2025 04:01:48 +0000 Manifest next update: Wed 17 Dec 2025 04:01:48 +0000 Files and hashes: 1: EMcvovEYE0weVYExSrcia69GSOA.roa (hash: OJBdQmyJiJbXqpTEN6hCoMQhIqdAMMZRqxqDd5UOvg4=) 2: TUnXBzr-7-tBP6GdN78mI5ahxe8.roa (hash: xFiJ6sW6C+HN63QoP5r6OyDOw7tPBAVqmIPMSnDnKbc=) 3: qS4NQoySScwU3zHXzq6HsEt5IDs.roa (hash: jlv4YTMjTvaq8qodzyyZpHbeudK0kBUwOoEXewAmNyo=) 4: t_X4QuW3--N3561kP8RWk8vRzAw.roa (hash: 2ahNsLwCOZ1nVC1o0aItVno4KD1+MsUZ68JOkj0O5Wo=) 5: tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl (hash: I/0s2fjnh39gc1u/Nc7GowIvbAZyJXNlrloZYJqLYfo=) 6: xtJ3lZ04sv_4bqAlJ24ZbtoJeiU.roa (hash: ZKVGTwwxi9fVOYidTSfA/TmCkWo94r19B530igg9je4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:4c:61:c9:3b:6e:b4:69:51:7b:fb:0f:ff:95:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9 Validity Not Before: Dec 16 04:01:48 2025 GMT Not After : Dec 17 04:01:48 2025 GMT Subject: CN=a78ba16a95a27e0b6ddb1e36a7b5209be7dc1fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d6:2f:12:63:68:9a:39:78:c5:97:a8:a3:b5: 45:16:1b:c8:cd:e1:43:86:a9:98:b8:93:16:05:cc: 8f:af:bd:66:30:b0:59:43:06:d7:61:6d:d0:33:a2: 6e:50:e8:64:49:2a:07:b7:f2:fd:d1:dc:ff:56:27: 89:66:ef:b5:58:23:e5:ab:8a:b8:aa:84:57:44:06: 75:c2:09:68:14:c8:9d:f4:c9:9c:32:0b:14:d6:3b: 2c:ef:6f:5e:c4:94:87:4e:64:2f:9c:b5:88:38:6a: 72:97:70:46:f7:bf:34:2a:1d:21:d5:e5:d0:a6:36: 94:44:19:dd:29:94:6f:37:dc:9d:6b:94:2d:a2:43: dd:3f:43:40:5e:9e:66:ec:24:12:44:be:dc:15:5b: 23:be:b3:79:be:81:7b:56:ff:84:08:6c:1f:48:48: b5:4a:7c:62:e1:ca:24:02:47:c6:7c:c4:b9:be:6f: 74:2c:88:b0:7b:26:f4:bc:be:e1:c9:45:d4:26:e6: 5b:9e:42:9f:4d:f5:65:57:b4:c7:1a:7c:eb:5a:6c: a8:b4:10:d4:0d:2b:b3:23:26:1c:10:70:ad:fc:c9: 11:ba:17:9c:06:fd:3f:6b:7d:89:97:6b:b0:5a:e8: d0:f7:5b:0c:c5:29:a5:2f:f2:e7:5c:04:57:25:c6: 50:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8B:A1:6A:95:A2:7E:0B:6D:DB:1E:36:A7:B5:20:9B:E7:DC:1F:CC X509v3 Authority Key Identifier: keyid:B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c6:cb:4f:b3:4c:80:b2:75:67:5f:03:52:19:53:97:8e:b2: 60:2a:78:df:a0:f5:c8:2d:05:03:9b:68:e9:3d:fb:1b:6c:ac: d7:71:8f:4b:0f:d1:db:be:64:e5:ec:6f:f4:a2:05:7c:98:87: ae:7b:bd:ae:ff:13:a0:ba:02:0e:5c:47:d7:5c:d0:e1:2a:7d: 86:b1:b6:9e:da:6d:e6:95:75:03:e3:86:09:cb:18:79:7c:6d: b0:c5:7f:3a:d2:3a:76:8c:20:25:d7:90:b0:67:43:49:c2:c1: 81:be:4c:41:24:8a:54:96:9d:39:72:a6:58:74:87:c2:cf:48: 76:46:59:31:e8:77:38:cd:ef:9e:0b:f1:d6:57:d4:a2:b6:54: 0f:37:46:3b:28:d6:4f:15:fb:b4:12:04:56:82:88:29:a7:20: 68:b4:8a:81:23:7c:b0:14:fb:d3:30:3d:fb:10:cd:97:ca:dd: 58:99:f6:fa:d0:94:36:9a:53:4c:b2:f1:58:9f:89:cf:e2:c1: 10:32:67:ab:02:80:06:bc:99:41:b6:7b:7e:6d:06:e8:0e:e4: a4:3f:3b:62:73:86:19:5d:38:0a:5e:52:18:1d:d2:41:0d:1d: a1:0d:36:6b:a6:84:1f:57:14:17:a0:58:9b:ca:48:05:c2:6d: 6e:32:d5:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUkxhyTtutGlRe/sP/5UJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YjBhODY2NTllYzMxNGYxM2EwNGUzYTAzZGJkYjEyNDRh MGUwYTkwHhcNMjUxMjE2MDQwMTQ4WhcNMjUxMjE3MDQwMTQ4WjAzMTEwLwYDVQQD EyhhNzhiYTE2YTk1YTI3ZTBiNmRkYjFlMzZhN2I1MjA5YmU3ZGMxZmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNYvEmNomjl4xZeoo7VFFhvIzeFD hqmYuJMWBcyPr71mMLBZQwbXYW3QM6JuUOhkSSoHt/L90dz/VieJZu+1WCPlq4q4 qoRXRAZ1wgloFMid9MmcMgsU1jss729exJSHTmQvnLWIOGpyl3BG9780Kh0h1eXQ pjaURBndKZRvN9yda5QtokPdP0NAXp5m7CQSRL7cFVsjvrN5voF7Vv+ECGwfSEi1 Snxi4cokAkfGfMS5vm90LIiweyb0vL7hyUXUJuZbnkKfTfVlV7THGnzrWmyotBDU DSuzIyYcEHCt/MkRuhecBv0/a32Jl2uwWujQ91sMxSmlL/LnXARXJcZQzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeLoWqVon4LbdseNqe1IJvn3B/MMB8GA1UdIwQY MBaAFLWwqGZZ7DFPE6BOOgPb2xJEoOCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wNDQ0MDItYzRkNC00MjU5LTkzZTIt N2ZiZjVlZTI5MGFjLzEvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wNDQ0MDItYzRkNC00MjU5LTkzZTItN2ZiZjVlZTI5MGFj LzEvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacbLT7NM gLJ1Z18DUhlTl46yYCp436D1yC0FA5to6T37G2ys13GPSw/R275k5exv9KIFfJiH rnu9rv8ToLoCDlxH11zQ4Sp9hrG2ntpt5pV1A+OGCcsYeXxtsMV/OtI6dowgJdeQ sGdDScLBgb5MQSSKVJadOXKmWHSHws9IdkZZMeh3OM3vngvx1lfUorZUDzdGOyjW TxX7tBIEVoKIKacgaLSKgSN8sBT70zA9+xDNl8rdWJn2+tCUNppTTLLxWJ+Jz+LB EDJnqwKABryZQbZ7fm0G6A7kpD87YnOGGV04Cl5SGB3SQQ0doQ02a6aEH1cUF6BY m8pIBcJtbjLVCw== -----END CERTIFICATE-----Generated at Tue Dec 16 13:30:50 2025 by rpki-client