This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft File: tRQMX448e8JKGtTIQGQVJj62ur8.mft (raw, json) Hash identifier: pocLDs093u9v4PlL/nu6rB0QInGbsOGCAP/OwStBCz4= Subject key identifier: F1:EC:FC:BB:C8:C6:F1:A7:D2:2F:B3:30:70:A6:73:8B:1C:E0:72:32 Authority key identifier: B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF Certificate issuer: /CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf Certificate serial: 019B2C2EFF01FE248896E7BA3031A64BCED2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft Manifest number: 153B Signing time: Wed 17 Dec 2025 12:00:35 +0000 Manifest this update: Wed 17 Dec 2025 12:00:35 +0000 Manifest next update: Thu 18 Dec 2025 12:00:35 +0000 Files and hashes: 1: tRQMX448e8JKGtTIQGQVJj62ur8.crl (hash: hZENnzQQx7o21aM4/FrbSgfXwk5MxnmGZF9fwptF5KY=) 2: vBSjooCv1VbYtFGvr_WsQil5zco.roa (hash: 9TpEuhk1/IC2lzmVZHygO3k9GcTIx0s6uCEc0lzgzlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2e:ff:01:fe:24:88:96:e7:ba:30:31:a6:4b:ce:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5140c5f8e3c7bc24a1ad4c8406415263eb6babf Validity Not Before: Dec 17 12:00:35 2025 GMT Not After : Dec 18 12:00:35 2025 GMT Subject: CN=f1ecfcbbc8c6f1a7d22fb33070a6738b1ce07232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:a7:e0:52:90:9f:93:53:de:e9:0f:8a:87: f5:5a:85:48:6c:09:d1:37:c4:b6:29:71:4a:f4:d7: 74:59:f8:cf:3f:bb:4a:f4:d8:9d:53:1d:21:00:6c: fc:3a:18:e6:95:4e:44:60:1a:dd:5a:d8:52:a5:d5: 90:98:44:8e:1c:42:5d:f6:2a:c8:c9:ae:07:b3:86: 6f:53:1c:0c:17:11:af:a9:18:2a:21:35:0d:b5:62: 56:64:4e:ac:9e:49:8d:7e:0b:40:91:0a:c6:7c:33: de:b6:9b:c8:cb:5c:cf:dd:d7:2f:0d:a4:d0:2c:5f: 4f:23:51:c8:79:f8:12:4e:97:8c:2f:25:3b:03:3d: 72:f9:9e:d3:66:91:d0:c1:11:9c:7d:a5:0c:41:74: cf:60:75:9a:be:a8:80:3b:2b:8e:02:fd:79:90:5a: 3b:fc:99:63:da:36:df:03:e7:c5:bd:c8:72:aa:39: 75:50:40:3f:7c:85:3f:86:56:11:43:e7:e1:1f:fd: 4d:e8:d5:63:42:1d:ef:5e:16:4e:fa:0e:51:0b:15: 59:09:c2:75:93:46:35:d3:e1:de:69:61:12:ed:49: 3b:ec:91:2d:a5:28:0d:c1:93:08:59:27:a6:03:26: 01:1c:68:5c:3c:d5:82:ca:d2:43:5a:1c:19:0d:83: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EC:FC:BB:C8:C6:F1:A7:D2:2F:B3:30:70:A6:73:8B:1C:E0:72:32 X509v3 Authority Key Identifier: keyid:B5:14:0C:5F:8E:3C:7B:C2:4A:1A:D4:C8:40:64:15:26:3E:B6:BA:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRQMX448e8JKGtTIQGQVJj62ur8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/94b73a-a3d5-40c4-9224-cdc2490393a6/1/tRQMX448e8JKGtTIQGQVJj62ur8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:b9:77:db:aa:08:a7:56:17:69:be:0a:91:b9:66:fc:ee:58: d4:56:41:17:c8:7a:ea:e9:b9:50:eb:4a:ea:a7:6b:b2:3e:11: af:8d:9a:5b:5d:d4:7a:98:57:ad:7f:dc:2a:3a:69:f5:99:24: 1b:c9:99:4f:76:66:af:7a:7b:b1:0b:79:fc:f4:ba:e1:e2:12: 34:e2:68:75:e0:8f:17:9d:22:c3:a3:41:e1:b1:c5:dc:e9:ac: cc:8d:1a:f0:b8:05:a8:61:26:6f:53:cb:50:73:b7:5a:03:c8: 2d:6f:f5:6d:8a:96:7c:2b:d1:be:5d:70:0e:56:5e:d9:1b:36: 5a:67:02:e8:c4:2e:92:8e:d4:2c:2b:79:6d:db:25:cc:15:f1: 99:da:c8:87:75:bc:64:6d:4a:2c:5b:19:f3:6f:e5:82:ae:60: f6:b9:01:c6:82:24:a1:73:d0:a1:32:b8:eb:3c:59:d5:9e:b2: 8a:f9:5d:69:b7:a8:d4:ec:af:7d:0f:34:1f:46:bb:e9:ee:a5: 19:a7:91:1a:90:66:83:8c:2a:78:52:b8:be:f9:14:fc:80:f0: 45:53:9a:d6:e6:01:ef:1d:df:0f:c6:11:6e:66:60:32:e3:b9: bf:fa:32:ef:c6:18:3d:f2:13:e1:93:f9:ff:fd:a3:fb:35:81: 44:3d:17:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLv8B/iSIlue6MDGmS87SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MTQwYzVmOGUzYzdiYzI0YTFhZDRjODQwNjQxNTI2M2Vi NmJhYmYwHhcNMjUxMjE3MTIwMDM1WhcNMjUxMjE4MTIwMDM1WjAzMTEwLwYDVQQD EyhmMWVjZmNiYmM4YzZmMWE3ZDIyZmIzMzA3MGE2NzM4YjFjZTA3MjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5Sn4FKQn5NT3ukPiof1WoVIbAnR N8S2KXFK9Nd0WfjPP7tK9NidUx0hAGz8OhjmlU5EYBrdWthSpdWQmESOHEJd9irI ya4Hs4ZvUxwMFxGvqRgqITUNtWJWZE6snkmNfgtAkQrGfDPetpvIy1zP3dcvDaTQ LF9PI1HIefgSTpeMLyU7Az1y+Z7TZpHQwRGcfaUMQXTPYHWavqiAOyuOAv15kFo7 /Jlj2jbfA+fFvchyqjl1UEA/fIU/hlYRQ+fhH/1N6NVjQh3vXhZO+g5RCxVZCcJ1 k0Y10+HeaWES7Uk77JEtpSgNwZMIWSemAyYBHGhcPNWCytJDWhwZDYNZKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHs/LvIxvGn0i+zMHCmc4sc4HIyMB8GA1UdIwQY MBaAFLUUDF+OPHvCShrUyEBkFSY+trq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFJRTVg0NDhlOEpLR3RUSVFHUVZKajYydXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85NGI3M2EtYTNkNS00MGM0LTkyMjQt Y2RjMjQ5MDM5M2E2LzEvdFJRTVg0NDhlOEpLR3RUSVFHUVZKajYydXI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC85NGI3M2EtYTNkNS00MGM0LTkyMjQtY2RjMjQ5MDM5M2E2 LzEvdFJRTVg0NDhlOEpLR3RUSVFHUVZKajYydXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbl326oI p1YXab4Kkblm/O5Y1FZBF8h66um5UOtK6qdrsj4Rr42aW13UephXrX/cKjpp9Zkk G8mZT3Zmr3p7sQt5/PS64eISNOJodeCPF50iw6NB4bHF3OmszI0a8LgFqGEmb1PL UHO3WgPILW/1bYqWfCvRvl1wDlZe2Rs2WmcC6MQuko7ULCt5bdslzBXxmdrIh3W8 ZG1KLFsZ82/lgq5g9rkBxoIkoXPQoTK46zxZ1Z6yivldabeo1OyvfQ80H0a76e6l GaeRGpBmg4wqeFK4vvkU/IDwRVOa1uYB7x3fD8YRbmZgMuO5v/oy78YYPfIT4ZP5 //2j+zWBRD0XJA== -----END CERTIFICATE-----Generated at Wed Dec 17 22:27:36 2025 by rpki-client