This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft File: tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json) Hash identifier: euRoyjGhxN/dgcuUmqK+rwbDye1btPjq6p3wtVUeq88= Subject key identifier: 13:50:38:F1:61:B4:53:E5:E4:7A:3C:F3:C8:2B:D3:BA:CD:D1:E1:2C Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE Certificate issuer: /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe Certificate serial: 019ACAC4CEA84B29F20013AB182B822ADCC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft Manifest number: 174D Signing time: Fri 28 Nov 2025 14:01:26 +0000 Manifest this update: Fri 28 Nov 2025 14:01:26 +0000 Manifest next update: Sat 29 Nov 2025 14:01:26 +0000 Files and hashes: 1: YO-tGwbdqI4YYY7I1KqnEaElBoQ.roa (hash: XZFdc4B2lVuIwGuWp8Gzl21H5s/bjgOkXy1zS/FUzmY=) 2: r8uOOwHL3Wt4pGrUJebg8yZ8WaY.roa (hash: Eioa5I9ONK/XZQXZG+CzeC8xkMTpLpCoDVH43Ycxzzc=) 3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: Q/9e7mRJ85tyod37sWwlIrTN5mu7/H1dZNq6ORm5wzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:c4:ce:a8:4b:29:f2:00:13:ab:18:2b:82:2a:dc:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe Validity Not Before: Nov 28 14:01:26 2025 GMT Not After : Nov 29 14:01:26 2025 GMT Subject: CN=135038f161b453e5e47a3cf3c82bd3bacdd1e12c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:17:9a:3d:4c:b0:e6:58:4c:89:e6:e0:de: ff:ad:ae:8f:5f:70:1c:a0:02:d3:ae:49:9a:08:8f: d0:66:cb:27:02:85:39:13:53:ec:e2:54:fa:3a:6e: 27:13:95:d1:a8:6b:b5:d9:56:0a:fa:4b:1b:ff:3c: 91:d8:d6:8e:74:b0:f3:68:00:df:46:c3:92:73:4c: 1d:a1:18:d6:98:39:45:f2:55:13:ee:54:a0:3d:ac: b7:3e:d4:c7:65:de:d3:25:cf:eb:cc:cd:c3:0a:8c: 80:c7:e8:04:bf:c3:0e:c1:37:30:ce:32:98:e1:e8: 8d:48:f0:7c:ea:38:b6:77:13:5c:fc:d8:9a:9a:c0: 24:d5:3d:37:43:44:c5:87:00:ab:19:49:d7:10:28: 5a:fc:42:56:59:1b:43:70:28:92:bd:5d:43:d3:2d: 34:42:97:85:d9:49:8a:f1:1f:1c:6d:ad:b4:4c:21: c3:1a:fe:99:a1:8f:b4:1a:40:49:66:0a:d1:4d:d9: 3f:ef:74:b2:b6:87:13:52:69:8c:13:16:60:cc:8b: 5e:37:de:0b:17:ef:80:30:96:86:2c:22:92:89:64: 08:eb:76:79:71:bf:b9:29:2a:92:d4:cf:84:53:bd: 34:92:4b:64:ac:f8:4a:f5:10:4a:38:f1:b2:9b:d7: b0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:50:38:F1:61:B4:53:E5:E4:7A:3C:F3:C8:2B:D3:BA:CD:D1:E1:2C X509v3 Authority Key Identifier: keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:60:c6:da:d4:80:1d:a4:00:30:f4:40:bf:9f:41:06:8c:55: b0:7f:72:3c:2b:e0:ca:17:f3:c6:39:dd:38:4f:4b:df:23:72: 45:b7:76:dc:fb:76:7c:43:63:6c:28:02:22:b6:38:6c:2f:59: 4c:98:fe:22:f6:b5:fe:1e:a7:eb:3a:61:ca:a0:19:94:a2:fd: 39:55:b3:c0:b0:21:6b:b2:a5:4c:23:4a:5b:ce:2b:29:dd:07: c1:db:ab:6f:d4:b6:f6:96:c9:fc:a2:dd:5e:86:7b:c1:e0:b0: 09:91:5d:b5:68:be:26:dd:30:cb:e2:ad:db:b1:5e:56:de:9e: 34:7f:53:eb:12:5b:9d:7a:3f:d2:88:c0:ad:41:90:8c:8b:e4: 0e:69:9f:30:dd:d7:3a:d8:db:0e:05:3c:46:47:0a:0f:d5:da: 24:88:57:b9:b6:ad:19:c7:e2:83:41:21:77:3d:33:77:60:c5: c4:ad:30:78:5e:4f:49:be:80:b8:43:39:0a:ee:fd:e4:97:97: 75:e2:5f:e0:e8:a5:1f:57:2d:0a:38:a3:9b:e4:15:dd:a4:cf: fe:74:ff:14:e9:6f:73:bb:f8:14:23:ec:7e:21:0b:54:62:22: c7:ab:2c:54:c1:ea:33:c3:6f:a8:bf:84:6a:f3:89:0a:c3:49: 9f:4d:d6:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrKxM6oSynyABOrGCuCKtzCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZDczYTZhZDc3YThmODU5YjQwM2RiMmNlNzE1ZTgyZDFj ZjMyZmUwHhcNMjUxMTI4MTQwMTI2WhcNMjUxMTI5MTQwMTI2WjAzMTEwLwYDVQQD EygxMzUwMzhmMTYxYjQ1M2U1ZTQ3YTNjZjNjODJiZDNiYWNkZDFlMTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg0Xmj1MsOZYTInm4N7/ra6PX3Ac oALTrkmaCI/QZssnAoU5E1Ps4lT6Om4nE5XRqGu12VYK+ksb/zyR2NaOdLDzaADf RsOSc0wdoRjWmDlF8lUT7lSgPay3PtTHZd7TJc/rzM3DCoyAx+gEv8MOwTcwzjKY 4eiNSPB86ji2dxNc/NiamsAk1T03Q0TFhwCrGUnXECha/EJWWRtDcCiSvV1D0y00 QpeF2UmK8R8cba20TCHDGv6ZoY+0GkBJZgrRTdk/73SytocTUmmMExZgzIteN94L F++AMJaGLCKSiWQI63Z5cb+5KSqS1M+EU700kktkrPhK9RBKOPGym9ewqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNQOPFhtFPl5Ho888gr07rN0eEsMB8GA1UdIwQY MBaAFLTXOmrXeo+Fm0A9ss5xXoLRzzL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83ZTdlZTctMWJkNC00NDM1LTg3MWYt NmNmOGU1NjdmZjFjLzEvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS83ZTdlZTctMWJkNC00NDM1LTg3MWYtNmNmOGU1NjdmZjFj LzEvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2DG2tSA HaQAMPRAv59BBoxVsH9yPCvgyhfzxjndOE9L3yNyRbd23Pt2fENjbCgCIrY4bC9Z TJj+Iva1/h6n6zphyqAZlKL9OVWzwLAha7KlTCNKW84rKd0Hwdurb9S29pbJ/KLd XoZ7weCwCZFdtWi+Jt0wy+Kt27FeVt6eNH9T6xJbnXo/0ojArUGQjIvkDmmfMN3X OtjbDgU8RkcKD9XaJIhXubatGcfig0Ehdz0zd2DFxK0weF5PSb6AuEM5Cu795JeX deJf4OilH1ctCjijm+QV3aTP/nT/FOlvc7v4FCPsfiELVGIix6ssVMHqM8NvqL+E avOJCsNJn03WLg== -----END CERTIFICATE-----Generated at Fri Nov 28 17:42:15 2025 by rpki-client