This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft File: tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json) Hash identifier: 7EIsg4vSEAwQttb83e7LND7YET3yxegA0gI402HHpJk= Subject key identifier: C4:55:C9:A4:22:F6:07:E3:33:00:18:BE:DA:E4:DE:72:5E:9D:4B:D0 Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73 Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073 Certificate serial: 019B1D2A5F9E5FF944DEBB85ECA4D98A095E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft Manifest number: 1383 Signing time: Sun 14 Dec 2025 14:01:14 +0000 Manifest this update: Sun 14 Dec 2025 14:01:14 +0000 Manifest next update: Mon 15 Dec 2025 14:01:14 +0000 Files and hashes: 1: Qy8FTgX-yC1O4CbCQWKLq95mgp4.roa (hash: 8nqh6t/tTyxk7G3+i4dwwKWP/5EMA1y/MU+wzRFmne4=) 2: kj9rgsBpPLepIKPHD5eAEuwwvw0.roa (hash: EHHLSrODdY/NFx0Xqw8ficGV0VFf608vkoi6uBTcBb0=) 3: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: W9X82muZPjR3M0FiAQOkTjJCK40HwFxMdJUaFpzk05o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:2a:5f:9e:5f:f9:44:de:bb:85:ec:a4:d9:8a:09:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073 Validity Not Before: Dec 14 14:01:14 2025 GMT Not After : Dec 15 14:01:14 2025 GMT Subject: CN=c455c9a422f607e3330018bedae4de725e9d4bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c8:62:2a:d7:1b:12:7c:c5:08:3b:13:3a:72: d1:d7:dc:49:b8:27:fc:2d:5f:13:80:a3:ab:8e:e2: 84:3d:da:27:83:1a:66:8b:3a:36:ac:23:8c:14:3e: 73:3a:2a:36:a2:4b:55:c5:f2:76:11:50:6b:57:ab: ec:b3:3c:22:13:7b:65:bc:b0:74:8c:cc:f9:33:ec: 0a:0a:1d:7a:96:c6:6b:ed:3a:b6:cb:fb:2b:e1:2a: 1c:40:b5:f3:77:5c:85:1d:f0:60:66:71:4e:be:a3: e1:a3:a9:a5:44:fb:f8:6e:18:4d:08:ff:37:47:d9: ce:38:ad:8c:7a:ab:a5:42:a9:3f:e0:a2:15:8c:e9: 4d:6d:80:eb:be:60:4c:ed:95:a0:bb:ba:bf:ea:fb: 4f:8a:27:22:ae:d8:58:52:8a:be:9e:48:0c:06:44: 25:de:4f:c5:85:c3:7e:45:60:07:f0:c6:94:23:8c: d7:3c:e5:4c:85:f4:c8:4f:b7:1d:39:3c:a9:fd:e3: 36:76:3f:80:c7:f5:74:20:81:f8:db:e6:64:12:87: 78:c3:b5:ec:25:0e:1d:d9:fe:da:e1:50:f1:cf:8d: 7c:27:5e:17:ff:d0:22:82:53:32:d1:52:15:9e:b9: 7d:15:28:48:a9:53:ba:7b:15:69:fa:9e:71:cd:68: 49:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:55:C9:A4:22:F6:07:E3:33:00:18:BE:DA:E4:DE:72:5E:9D:4B:D0 X509v3 Authority Key Identifier: keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:cd:00:c7:3f:93:f5:6c:a7:49:6f:98:c2:db:26:64:bf:f4: 2b:b4:b2:2c:a3:88:0a:75:1e:53:98:a5:74:3a:a5:40:56:d4: 05:bb:b8:17:f3:06:24:e5:05:73:aa:77:c3:12:09:82:cd:81: c0:5c:1d:40:a2:f0:69:47:23:89:03:9e:28:4e:c3:8c:23:7e: 4c:a9:bc:4a:74:38:40:f4:bc:e6:53:1a:3d:f0:d3:dd:81:cc: f8:1d:9c:1e:b5:30:e1:1a:4a:36:7b:e0:a2:ef:45:d8:42:f4: 72:c1:67:64:54:3d:ce:75:be:c4:52:35:93:c8:b1:93:62:cf: ae:4b:d7:40:36:4a:1f:b0:c9:6c:29:23:00:76:6e:a2:a5:98: 0d:a1:a0:df:bf:6b:a5:ae:aa:04:c4:fe:a3:93:3a:75:d2:3a: c1:73:9b:c7:fd:2f:28:88:78:47:e6:7f:a8:e1:df:1d:91:9a: 7e:90:84:be:e8:69:c4:4b:8b:4f:d8:70:0f:5a:3d:ca:38:d6: 49:83:bf:13:a1:e8:92:b6:c8:5e:12:6e:94:ca:f0:a8:5b:48: 46:e9:9a:a7:52:30:9f:df:c0:b8:53:85:45:f2:0b:7a:81:02: 50:43:45:c0:1c:76:8a:cf:03:30:fe:9f:b5:54:5c:42:45:ef: 2f:c9:86:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdKl+eX/lE3ruF7KTZigleMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NDI1Y2Y1NTAxMzQ0YWM1YWNjMzA3YWJkMGFmMDEzZmFj NjcwNzMwHhcNMjUxMjE0MTQwMTE0WhcNMjUxMjE1MTQwMTE0WjAzMTEwLwYDVQQD EyhjNDU1YzlhNDIyZjYwN2UzMzMwMDE4YmVkYWU0ZGU3MjVlOWQ0YmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArchiKtcbEnzFCDsTOnLR19xJuCf8 LV8TgKOrjuKEPdongxpmizo2rCOMFD5zOio2oktVxfJ2EVBrV6vsszwiE3tlvLB0 jMz5M+wKCh16lsZr7Tq2y/sr4SocQLXzd1yFHfBgZnFOvqPho6mlRPv4bhhNCP83 R9nOOK2MequlQqk/4KIVjOlNbYDrvmBM7ZWgu7q/6vtPiicirthYUoq+nkgMBkQl 3k/FhcN+RWAH8MaUI4zXPOVMhfTIT7cdOTyp/eM2dj+Ax/V0IIH42+ZkEod4w7Xs JQ4d2f7a4VDxz418J14X/9AiglMy0VIVnrl9FShIqVO6exVp+p5xzWhJ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRVyaQi9gfjMwAYvtrk3nJenUvQMB8GA1UdIwQY MBaAFLRCXPVQE0SsWswwer0K8BP6xnBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82YWMwYTItNWM2Yy00MzU3LTk3ZTQt Y2ViOGFiNmQxMTJlLzEvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS82YWMwYTItNWM2Yy00MzU3LTk3ZTQtY2ViOGFiNmQxMTJl LzEvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlM0Axz+T 9WynSW+YwtsmZL/0K7SyLKOICnUeU5ildDqlQFbUBbu4F/MGJOUFc6p3wxIJgs2B wFwdQKLwaUcjiQOeKE7DjCN+TKm8SnQ4QPS85lMaPfDT3YHM+B2cHrUw4RpKNnvg ou9F2EL0csFnZFQ9znW+xFI1k8ixk2LPrkvXQDZKH7DJbCkjAHZuoqWYDaGg379r pa6qBMT+o5M6ddI6wXObx/0vKIh4R+Z/qOHfHZGafpCEvuhpxEuLT9hwD1o9yjjW SYO/E6HokrbIXhJulMrwqFtIRumap1Iwn9/AuFOFRfILeoECUENFwBx2is8DMP6f tVRcQkXvL8mG/g== -----END CERTIFICATE-----Generated at Sun Dec 14 23:17:09 2025 by rpki-client