This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft File: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft (raw, json) Hash identifier: kNBKjyi0rkZNYLmZC4+VjA+iHfKbnqPGRmoDR7PAzjs= Subject key identifier: 28:2E:34:59:BA:F0:7C:72:CD:5C:19:C3:A8:77:3F:B7:7F:71:AC:73 Authority key identifier: B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95 Certificate issuer: /CN=b53b0a45f060e10eccf126b6f667589b80328c95 Certificate serial: 019B0F37C9BD1C08377A64237B73E12EE5EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft Manifest number: 116C Signing time: Thu 11 Dec 2025 21:01:12 +0000 Manifest this update: Thu 11 Dec 2025 21:01:12 +0000 Manifest next update: Fri 12 Dec 2025 21:01:12 +0000 Files and hashes: 1: QmuYhMxVHMJMwyzvnCygHs-m3Zo.roa (hash: /n3/bE2lrLZKCXuOWQR91nGS2U+GVup7q9CGUuChZsQ=) 2: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl (hash: mrDy7LC9F/L2FaR1II+A7j1rQKtR69WW4BRm395DjBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:c9:bd:1c:08:37:7a:64:23:7b:73:e1:2e:e5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b53b0a45f060e10eccf126b6f667589b80328c95 Validity Not Before: Dec 11 21:01:12 2025 GMT Not After : Dec 12 21:01:12 2025 GMT Subject: CN=282e3459baf07c72cd5c19c3a8773fb77f71ac73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d6:c1:71:a8:45:32:f2:6a:d5:b2:81:a8:de: a0:81:9f:46:6f:39:7f:d1:af:26:77:18:96:14:d3: 9c:63:31:56:42:16:ff:d5:6b:c8:ee:75:6b:f7:be: bd:df:61:ca:db:9c:00:51:d9:4e:e8:24:1d:e3:cd: b4:c8:3f:95:3a:a2:2f:73:90:5c:e5:f5:5c:f1:39: 1e:87:84:02:35:9d:bb:8c:55:8b:2f:6a:22:9c:0e: 2c:73:59:65:e7:f6:92:d5:54:82:99:0f:dc:11:26: d2:13:8e:40:10:e4:f0:fd:b0:d8:b5:5c:58:02:9a: b5:25:4b:35:fa:c2:3c:07:83:f6:e5:eb:9f:12:72: ae:1f:f7:53:43:5f:ce:f0:7b:cf:f9:c4:a6:0a:d1: 72:4b:d0:ef:c4:45:1e:75:76:d2:8c:1b:55:99:d0: 04:ea:5a:b0:4f:26:c9:49:e0:77:e4:cc:8f:be:f2: 80:97:88:18:b8:d1:7b:af:d1:9a:4a:25:5f:6f:e3: 69:a2:66:96:41:d3:cc:45:60:f0:f1:86:b6:e2:8d: 7a:b4:79:c4:f6:f8:6f:ba:01:78:7d:15:a9:b8:a1: b8:8d:e2:03:ea:94:52:a7:96:d9:2a:06:d9:65:0c: 84:10:e4:c9:cc:a8:8a:36:a2:7b:2c:0a:08:98:0a: 8b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2E:34:59:BA:F0:7C:72:CD:5C:19:C3:A8:77:3F:B7:7F:71:AC:73 X509v3 Authority Key Identifier: keyid:B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:8f:45:e1:ba:72:14:8f:02:76:0a:81:a6:8f:7f:5b:ee:1c: 0b:f0:d7:60:b3:ed:28:6e:3b:78:72:b4:4a:80:d8:0c:f6:28: 01:b4:df:b6:21:c8:7c:da:36:6c:ea:a2:0a:3c:42:96:9f:76: 07:2b:e5:4d:20:22:d0:b0:3d:e4:9f:4a:be:b8:82:c2:48:54: d1:cc:bf:23:77:d3:2b:e0:3e:a0:f4:e2:1c:53:16:b1:97:11: 8d:39:ff:29:67:07:aa:7f:9e:d6:8b:a3:44:9d:7e:5f:7e:91: c4:e2:39:de:57:34:07:f0:7d:fe:87:c3:c6:62:c1:58:f6:bb: 38:70:15:b3:96:70:33:da:ad:78:be:28:43:8f:e8:67:d5:11: c5:88:d4:97:25:df:4a:f3:38:7a:e4:1e:08:2d:5b:92:7c:40: fb:aa:d3:aa:06:6f:d0:47:f7:5e:f1:43:0a:62:e6:79:32:f1: 2f:83:4a:1f:7e:04:b2:34:32:97:30:8d:47:48:1a:d0:0f:79: ee:a5:b5:82:aa:3a:3e:dc:be:5f:b8:48:ee:96:fc:39:55:bd: d6:22:ce:c0:1a:c4:e2:09:2d:41:a3:f2:2d:f9:e2:20:55:9e: 83:f1:9c:7b:51:53:55:b6:1a:00:88:52:4b:ac:81:5f:a6:09: ea:3d:c5:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN8m9HAg3emQje3PhLuXqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1M2IwYTQ1ZjA2MGUxMGVjY2YxMjZiNmY2Njc1ODliODAz MjhjOTUwHhcNMjUxMjExMjEwMTEyWhcNMjUxMjEyMjEwMTEyWjAzMTEwLwYDVQQD EygyODJlMzQ1OWJhZjA3YzcyY2Q1YzE5YzNhODc3M2ZiNzdmNzFhYzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19bBcahFMvJq1bKBqN6ggZ9Gbzl/ 0a8mdxiWFNOcYzFWQhb/1WvI7nVr976932HK25wAUdlO6CQd4820yD+VOqIvc5Bc 5fVc8Tkeh4QCNZ27jFWLL2oinA4sc1ll5/aS1VSCmQ/cESbSE45AEOTw/bDYtVxY Apq1JUs1+sI8B4P25eufEnKuH/dTQ1/O8HvP+cSmCtFyS9DvxEUedXbSjBtVmdAE 6lqwTybJSeB35MyPvvKAl4gYuNF7r9GaSiVfb+NpomaWQdPMRWDw8Ya24o16tHnE 9vhvugF4fRWpuKG4jeID6pRSp5bZKgbZZQyEEOTJzKiKNqJ7LAoImAqLcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCguNFm68HxyzVwZw6h3P7d/caxzMB8GA1UdIwQY MBaAFLU7CkXwYOEOzPEmtvZnWJuAMoyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFRzS1JmQmc0UTdNOFNhMjltZFltNEF5akpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lNmYxM2UtZWJlYi00ZTI2LTlmOTEt ODE4Mzc1MTgxM2Q5LzEvdFRzS1JmQmc0UTdNOFNhMjltZFltNEF5akpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9lNmYxM2UtZWJlYi00ZTI2LTlmOTEtODE4Mzc1MTgxM2Q5 LzEvdFRzS1JmQmc0UTdNOFNhMjltZFltNEF5akpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMY9F4bpy FI8CdgqBpo9/W+4cC/DXYLPtKG47eHK0SoDYDPYoAbTftiHIfNo2bOqiCjxClp92 ByvlTSAi0LA95J9KvriCwkhU0cy/I3fTK+A+oPTiHFMWsZcRjTn/KWcHqn+e1ouj RJ1+X36RxOI53lc0B/B9/ofDxmLBWPa7OHAVs5ZwM9qteL4oQ4/oZ9URxYjUlyXf SvM4euQeCC1bknxA+6rTqgZv0Ef3XvFDCmLmeTLxL4NKH34EsjQylzCNR0ga0A95 7qW1gqo6Pty+X7hI7pb8OVW91iLOwBrE4gktQaPyLfniIFWeg/Gce1FTVbYaAIhS S6yBX6YJ6j3FFA== -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:43 2025 by rpki-client