This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json) Hash identifier: lvX5Y/53Cj9ksLc0vFooyXoGOl9c4S5XDZIX7izUf1E= Subject key identifier: 7E:83:7B:94:3E:74:93:6F:EA:EA:80:51:E3:7A:75:22:08:71:EC:BB Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89 Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189 Certificate serial: 019B3B34C2E25BBFD4EE3E7CA15D813C804E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 10:01:12 +0000 Manifest this update: Sat 20 Dec 2025 10:01:12 +0000 Manifest next update: Sun 21 Dec 2025 10:01:12 +0000 Files and hashes: 1: WmxX7pBfpD5c2m2kHOUO4M_bBgA.roa (hash: q0DpW8XtR4IxHRwLJz0IGFkpb8cJ4HYo8d4HsEmNl8o=) 2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: gIzzOri5AXE69xcO6bbKpXlYL/q94PPVrialISojJgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:c2:e2:5b:bf:d4:ee:3e:7c:a1:5d:81:3c:80:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189 Validity Not Before: Dec 20 10:01:12 2025 GMT Not After : Dec 21 10:01:12 2025 GMT Subject: CN=7e837b943e74936feaea8051e37a75220871ecbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7f:b0:cc:12:c4:69:97:6c:95:62:56:43:7d: f8:f3:c7:87:0a:3f:91:3f:f1:1d:12:7f:2a:84:6f: 79:18:80:4a:1c:95:fc:51:fc:48:58:d5:dd:f2:0d: e3:70:2b:8b:19:77:c8:cb:28:e1:93:e0:b8:4f:9f: a6:2e:a2:c2:23:14:31:81:e6:4c:04:10:11:3c:dd: 76:a8:1a:c1:61:1a:c8:ff:47:9a:81:01:08:3f:a5: 02:ce:a7:7d:cf:8b:d8:c4:50:32:bf:bf:c7:27:3c: 4c:6f:78:5b:d8:90:03:42:08:ae:99:f5:47:0d:0b: dd:29:cf:2d:bd:e1:c3:a5:f2:e2:d1:b1:ad:28:15: bf:a9:9e:e5:25:94:3a:f2:2d:4a:92:01:be:c6:9a: d3:cc:da:c0:25:cf:38:39:63:86:e2:fe:97:c9:43: e1:fa:a1:7c:bc:13:ae:f9:61:b5:35:89:21:e6:ae: 00:7e:63:ba:76:8b:af:00:76:62:bf:be:77:cd:c6: d9:8a:48:c7:50:bc:0b:e0:35:34:3f:08:c0:f9:5d: 32:0d:4c:29:58:36:48:57:63:cf:da:99:14:eb:c9: 58:bc:34:fc:fd:e2:b4:d8:41:a3:15:14:5f:e7:0f: 51:50:92:07:76:da:f3:79:69:48:ca:54:e1:9b:89: c7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:83:7B:94:3E:74:93:6F:EA:EA:80:51:E3:7A:75:22:08:71:EC:BB X509v3 Authority Key Identifier: keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:7c:da:a1:fa:e5:90:6c:08:98:26:f7:e1:58:c1:55:25:81: 68:73:02:99:28:69:14:ba:df:1d:6a:cf:0c:28:86:78:27:54: 2d:76:b9:0a:0c:88:15:1b:b9:bc:46:51:5f:fe:60:c2:cc:91: 4b:7a:f5:d4:e2:32:f4:48:5a:eb:64:c9:d3:6a:f8:88:54:2f: 30:0a:bb:7d:ab:d7:ad:02:3d:32:06:20:66:dc:2d:52:c2:dc: 06:98:f2:ec:d6:48:53:34:ca:29:07:0e:d5:c4:69:0e:b5:fa: 30:ab:62:81:fd:14:a9:a7:ce:c9:fa:38:1e:52:a3:64:ac:b9: b0:46:5b:af:97:9f:be:9f:81:43:eb:9a:71:ea:46:cc:e7:6d: fe:5c:11:dc:4d:20:f8:c7:1c:e2:eb:52:ac:37:c6:73:a3:51: 04:fa:ec:25:45:b6:20:71:6f:57:4d:62:fe:dc:62:27:06:15: ca:26:ba:05:83:7f:b9:86:ba:cc:37:9e:34:5d:13:d6:da:d9: 7a:97:ee:d1:bc:20:82:1d:b6:d1:17:60:92:7e:a4:73:a9:11: 13:5b:d0:64:e3:bf:dd:a8:3b:52:03:93:97:0c:18:da:89:74: eb:e2:2c:aa:9b:92:73:2b:24:34:c6:e8:d2:5f:a5:11:90:be: 80:74:bd:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NMLiW7/U7j58oV2BPIBOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTg4MmY3MTcxYWY2ZGNkY2NjOWNkNzlmOThkZWM2NzU3 ZmUxODkwHhcNMjUxMjIwMTAwMTEyWhcNMjUxMjIxMTAwMTEyWjAzMTEwLwYDVQQD Eyg3ZTgzN2I5NDNlNzQ5MzZmZWFlYTgwNTFlMzdhNzUyMjA4NzFlY2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3+wzBLEaZdslWJWQ33488eHCj+R P/EdEn8qhG95GIBKHJX8UfxIWNXd8g3jcCuLGXfIyyjhk+C4T5+mLqLCIxQxgeZM BBARPN12qBrBYRrI/0eagQEIP6UCzqd9z4vYxFAyv7/HJzxMb3hb2JADQgiumfVH DQvdKc8tveHDpfLi0bGtKBW/qZ7lJZQ68i1KkgG+xprTzNrAJc84OWOG4v6XyUPh +qF8vBOu+WG1NYkh5q4AfmO6douvAHZiv753zcbZikjHULwL4DU0PwjA+V0yDUwp WDZIV2PP2pkU68lYvDT8/eK02EGjFRRf5w9RUJIHdtrzeWlIylThm4nHHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6De5Q+dJNv6uqAUeN6dSIIcey7MB8GA1UdIwQY MBaAFLTogvcXGvbc3Myc15+Y3sZ1f+GJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAt ZmVmZThlMzQwMDZjLzEvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAtZmVmZThlMzQwMDZj LzEvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnzaofrl kGwImCb34VjBVSWBaHMCmShpFLrfHWrPDCiGeCdULXa5CgyIFRu5vEZRX/5gwsyR S3r11OIy9Eha62TJ02r4iFQvMAq7favXrQI9MgYgZtwtUsLcBpjy7NZIUzTKKQcO 1cRpDrX6MKtigf0UqafOyfo4HlKjZKy5sEZbr5efvp+BQ+uacepGzOdt/lwR3E0g +Mcc4utSrDfGc6NRBPrsJUW2IHFvV01i/txiJwYVyia6BYN/uYa6zDeeNF0T1trZ epfu0bwggh220Rdgkn6kc6kRE1vQZOO/3ag7UgOTlwwY2ol06+IsqpuScyskNMbo 0l+lEZC+gHS9lQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:03:04 2025 by rpki-client