This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft File: TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft (raw, json) Hash identifier: xqrBIiSADA3GK4X2CBo3zgifZWRlSBo1a5zc5ySNjak= Subject key identifier: EF:2C:01:33:F1:CA:2D:CC:A8:4A:4C:21:33:34:C3:DB:23:E3:E7:EB Authority key identifier: 4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD Certificate issuer: /CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd Certificate serial: 019B3A9098D18F0C536C559FA27AD026AFBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft Manifest number: 0EE3 Signing time: Sat 20 Dec 2025 07:01:53 +0000 Manifest this update: Sat 20 Dec 2025 07:01:53 +0000 Manifest next update: Sun 21 Dec 2025 07:01:53 +0000 Files and hashes: 1: PVatpozxq2iSr5EjDz4p95PO1D8.roa (hash: jnj6J4YwXSNpdZA8cx57mMPaW12cBZG8T42Zb5JhBQ4=) 2: TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl (hash: FstGAc7eAjgZJ9mDGC8jMBwAHdkbrsnCMlYMuUATFVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:98:d1:8f:0c:53:6c:55:9f:a2:7a:d0:26:af:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd Validity Not Before: Dec 20 07:01:53 2025 GMT Not After : Dec 21 07:01:53 2025 GMT Subject: CN=ef2c0133f1ca2dcca84a4c213334c3db23e3e7eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:65:a7:fb:ce:66:44:2b:7b:11:ae:be:34: 8a:37:29:5d:06:40:3b:fe:3e:61:7b:ae:d5:9a:d1: f6:44:8b:86:ba:23:e2:fc:5a:30:42:57:d0:61:d5: 89:65:61:f8:30:8a:67:14:43:08:8e:64:ea:44:65: 49:1a:1e:09:9c:2e:25:b0:79:f8:32:29:1a:80:1c: 2c:35:27:bc:41:9d:38:70:61:64:8f:6b:18:91:2b: 9b:05:0e:5d:6f:b7:96:a2:fe:f9:7b:1e:1c:32:5f: 59:14:b0:74:ac:ca:ea:59:77:0a:f6:19:a9:0c:58: 2c:dc:e6:5a:da:fd:27:b0:76:8c:52:e5:a9:d3:72: 1d:84:d6:4a:86:23:46:29:05:59:92:c0:59:2c:6f: 5b:9e:97:ea:f2:39:90:36:dd:32:20:62:d5:fc:1d: 4b:b3:44:14:7e:b0:d9:6f:52:43:c1:1a:70:64:67: 0b:59:f9:a8:5d:f8:c0:ff:3c:fa:ac:e1:42:a7:3a: 06:80:48:63:87:85:e9:2a:10:aa:65:fe:62:ba:da: 80:06:de:73:0c:c0:7c:e7:92:d1:47:9c:88:d8:75: 93:1f:84:9b:c4:41:ec:17:0e:ed:35:34:a9:85:1b: b5:4b:c5:c5:ea:08:af:9c:f1:cd:26:df:5e:da:91: 58:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2C:01:33:F1:CA:2D:CC:A8:4A:4C:21:33:34:C3:DB:23:E3:E7:EB X509v3 Authority Key Identifier: keyid:4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a9:0c:ce:82:c0:4b:30:76:0a:fc:72:4b:16:84:22:76:75: 37:c1:df:6a:d8:d6:b5:3c:af:19:93:37:65:88:d5:30:00:7a: ef:c2:2f:be:b8:13:7f:ec:cb:34:a5:40:c9:27:4c:8a:13:d0: 94:b1:13:a3:25:25:a5:71:3b:98:dc:39:78:da:67:38:0d:a2: 28:4d:c8:56:f2:2a:58:af:20:62:db:ef:ea:65:33:94:d3:e4: d6:1c:ab:e3:19:b6:7b:0f:03:c8:95:2f:a7:f7:27:1e:75:4a: 9c:f8:4e:5f:18:2a:84:e6:41:a2:1c:4c:0d:a9:89:d6:a9:de: df:60:85:f2:69:fe:52:96:77:ff:3e:9b:db:d8:a4:f1:c7:89: 6c:ba:94:e9:ad:0f:09:fd:a9:ab:80:e2:f2:0f:6f:db:f7:d8: f5:66:a0:5e:8a:a2:26:c4:36:2c:bf:09:6e:b8:15:f6:35:95: a8:4d:28:92:e3:6b:50:5a:cd:73:d8:7b:fa:e4:dd:5f:7f:b0: 43:e1:49:98:df:f3:23:a2:35:9f:5b:2a:78:e1:ed:35:9f:3f: 26:3c:9a:69:f5:1d:43:14:0c:d0:e7:db:4e:32:79:97:ee:7a: d0:8b:28:c1:a0:0f:8e:08:47:75:65:0d:63:ac:b2:9c:cf:43: 4f:59:f7:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kJjRjwxTbFWfonrQJq+8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMGYyZWU3NzYyMWVhMjVjMjgxOWQ0ZWFjOTVjNTgxODc3 ZTMwY2QwHhcNMjUxMjIwMDcwMTUzWhcNMjUxMjIxMDcwMTUzWjAzMTEwLwYDVQQD EyhlZjJjMDEzM2YxY2EyZGNjYTg0YTRjMjEzMzM0YzNkYjIzZTNlN2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniplp/vOZkQrexGuvjSKNyldBkA7 /j5he67VmtH2RIuGuiPi/FowQlfQYdWJZWH4MIpnFEMIjmTqRGVJGh4JnC4lsHn4 MikagBwsNSe8QZ04cGFkj2sYkSubBQ5db7eWov75ex4cMl9ZFLB0rMrqWXcK9hmp DFgs3OZa2v0nsHaMUuWp03IdhNZKhiNGKQVZksBZLG9bnpfq8jmQNt0yIGLV/B1L s0QUfrDZb1JDwRpwZGcLWfmoXfjA/zz6rOFCpzoGgEhjh4XpKhCqZf5iutqABt5z DMB855LRR5yI2HWTH4SbxEHsFw7tNTSphRu1S8XF6givnPHNJt9e2pFYcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8sATPxyi3MqEpMITM0w9sj4+frMB8GA1UdIwQY MBaAFE0PLud2IeolwoGdTqyVxYGHfjDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFE4dTUzWWg2aVhDZ1oxT3JKWEZnWWQtTU0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lODI4YjctYjFkOC00ZjQwLWJkMzAt N2MwNDk3OTEzYWYwLzEvVFE4dTUzWWg2aVhDZ1oxT3JKWEZnWWQtTU0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9lODI4YjctYjFkOC00ZjQwLWJkMzAtN2MwNDk3OTEzYWYw LzEvVFE4dTUzWWg2aVhDZ1oxT3JKWEZnWWQtTU0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqkMzoLA SzB2CvxySxaEInZ1N8HfatjWtTyvGZM3ZYjVMAB678IvvrgTf+zLNKVAySdMihPQ lLEToyUlpXE7mNw5eNpnOA2iKE3IVvIqWK8gYtvv6mUzlNPk1hyr4xm2ew8DyJUv p/cnHnVKnPhOXxgqhOZBohxMDamJ1qne32CF8mn+UpZ3/z6b29ik8ceJbLqU6a0P Cf2pq4Di8g9v2/fY9WagXoqiJsQ2LL8JbrgV9jWVqE0okuNrUFrNc9h7+uTdX3+w Q+FJmN/zI6I1n1sqeOHtNZ8/JjyaafUdQxQM0OfbTjJ5l+560IsowaAPjghHdWUN Y6yynM9DT1n3ww== -----END CERTIFICATE-----Generated at Sat Dec 20 12:20:58 2025 by rpki-client