This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft File: tGTgryi3VcTsiAENlCmGl9GIOTM.mft (raw, json) Hash identifier: 6KaaNsC5bagULYdFmke+g1eHlhAOH8eNuyMqvACyYmQ= Subject key identifier: 2C:DF:DF:91:A6:02:83:61:48:52:22:CE:B2:26:BB:F4:20:EF:0A:36 Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33 Certificate issuer: /CN=b464e0af28b755c4ec88010d94298697d1883933 Certificate serial: 019B0ECA0FBEA47782350A0A9CF792D3D2CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft Manifest number: 0934 Signing time: Thu 11 Dec 2025 19:01:21 +0000 Manifest this update: Thu 11 Dec 2025 19:01:21 +0000 Manifest next update: Fri 12 Dec 2025 19:01:21 +0000 Files and hashes: 1: 4ZUimyMSrmZMeMTJpofdIprKN0Y.roa (hash: +sbrqZ7npPQY0M7RUiP5uMAuk7XGp56zDb3oxzfgBs8=) 2: D6cOOwuzIu0b1VD3IEBzEJwwwCo.roa (hash: v5PJLnM3bwyGnG1xvGzcUgGuOEM5ARi6RIpoEpY7P4s=) 3: fyoJ9a9SSU9QMOOAnopUi24XOCI.roa (hash: Oq4G4KqExdW+YSWtwOksmXAFXdtGTgedgjAZaCPW9DM=) 4: tGTgryi3VcTsiAENlCmGl9GIOTM.crl (hash: kzNpv67PYvVby8VXRtMhioecRI90lggJ5YeR4sV2e4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:ca:0f:be:a4:77:82:35:0a:0a:9c:f7:92:d3:d2:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933 Validity Not Before: Dec 11 19:01:21 2025 GMT Not After : Dec 12 19:01:21 2025 GMT Subject: CN=2cdfdf91a6028361485222ceb226bbf420ef0a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:a9:03:bb:ac:05:36:05:f1:0e:15:27:7f: c3:d0:af:71:f4:8c:ec:02:c7:5a:8a:0e:b4:d1:5e: 09:4c:89:73:31:a5:3b:2f:2e:bc:11:23:dd:a3:c7: 3d:31:63:de:38:37:7b:c5:3c:72:9b:58:a2:34:04: 9f:18:11:b4:b8:db:c2:65:19:10:66:ed:cd:c3:ea: d3:25:34:c6:6a:2b:6f:f6:79:4f:50:74:52:4c:ce: f4:f8:ee:23:ad:93:74:06:25:5c:2a:61:30:35:97: 31:18:bc:4c:1a:ff:ac:47:c4:0b:cd:31:02:f7:86: ad:c9:1d:e5:53:ab:76:af:3e:d3:4c:cb:bb:cd:05: b9:07:b6:99:dd:7d:1a:e7:7c:af:f0:12:a5:ae:f7: 7b:62:70:6b:0b:60:09:69:fb:8d:0c:58:da:42:78: ce:4f:c4:3c:d7:0e:d0:00:71:66:2f:68:5d:f7:a2: 7d:1c:0f:22:52:d0:f7:e4:83:75:94:a5:09:50:ff: be:cb:9c:fd:d4:57:53:7a:ec:d7:6a:a1:f1:89:6e: 42:7e:8e:55:2e:bc:27:f3:75:a9:6e:79:69:be:17: ea:a5:da:33:66:4e:60:ba:65:36:ee:70:cc:2c:88: 64:39:cb:76:b1:b0:2e:0a:f2:49:87:fd:ce:f8:c8: c0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DF:DF:91:A6:02:83:61:48:52:22:CE:B2:26:BB:F4:20:EF:0A:36 X509v3 Authority Key Identifier: keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e4:76:ac:f5:db:6d:d2:12:7a:d6:25:7a:90:53:64:f1:ab: f7:af:a9:d2:f6:ae:85:a5:25:94:0b:2a:e6:b5:6c:03:28:84: 2c:cb:df:fc:9c:55:3b:74:f8:6e:e2:2e:68:24:13:aa:70:55: 05:16:d9:70:d5:16:11:e4:4c:4f:90:25:2f:17:7a:b9:ae:c2: 90:7f:5a:3a:56:14:2c:ad:57:55:b8:f5:27:f4:c5:e2:47:9f: bb:bd:c3:bf:2b:10:71:3b:b3:53:56:9c:e0:43:19:3c:bd:c0: b1:ee:4f:9c:11:0c:db:5b:23:a7:58:72:fa:65:49:7d:bc:61: 11:4c:3c:ca:1a:bf:70:9b:7f:19:f3:af:03:9d:06:e2:bd:65: 30:8b:91:98:a6:74:20:66:c6:25:ff:42:2f:ba:d4:96:74:d7: 8a:b7:72:06:cd:2c:87:c5:5d:6d:c7:db:f2:ed:90:dd:a1:44: 35:ff:f5:46:b1:ab:bd:4f:e1:f3:74:cb:46:54:ef:b1:81:55: 15:ff:74:90:83:38:ec:08:07:9f:5a:4b:db:02:03:cb:67:e2: d5:35:56:d4:5b:f1:ad:bf:8b:dc:54:3f:d4:fd:06:36:2b:50: 4f:b5:58:b6:7d:fc:26:64:62:d1:96:1b:a4:3f:c2:1c:b9:85: 91:8a:d9:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyg++pHeCNQoKnPeS09LPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NjRlMGFmMjhiNzU1YzRlYzg4MDEwZDk0Mjk4Njk3ZDE4 ODM5MzMwHhcNMjUxMjExMTkwMTIxWhcNMjUxMjEyMTkwMTIxWjAzMTEwLwYDVQQD EygyY2RmZGY5MWE2MDI4MzYxNDg1MjIyY2ViMjI2YmJmNDIwZWYwYTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSipA7usBTYF8Q4VJ3/D0K9x9Izs Asdaig600V4JTIlzMaU7Ly68ESPdo8c9MWPeODd7xTxym1iiNASfGBG0uNvCZRkQ Zu3Nw+rTJTTGaitv9nlPUHRSTM70+O4jrZN0BiVcKmEwNZcxGLxMGv+sR8QLzTEC 94atyR3lU6t2rz7TTMu7zQW5B7aZ3X0a53yv8BKlrvd7YnBrC2AJafuNDFjaQnjO T8Q81w7QAHFmL2hd96J9HA8iUtD35IN1lKUJUP++y5z91FdTeuzXaqHxiW5Cfo5V Lrwn83WpbnlpvhfqpdozZk5gumU27nDMLIhkOct2sbAuCvJJh/3O+MjATQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzf35GmAoNhSFIizrImu/Qg7wo2MB8GA1UdIwQY MBaAFLRk4K8ot1XE7IgBDZQphpfRiDkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wY2FhNmQtMTA5ZS00NWYzLWE5MzIt NDc1YzVjOTFmNDc0LzEvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8wY2FhNmQtMTA5ZS00NWYzLWE5MzItNDc1YzVjOTFmNDc0 LzEvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeR2rPXb bdISetYlepBTZPGr96+p0vauhaUllAsq5rVsAyiELMvf/JxVO3T4buIuaCQTqnBV BRbZcNUWEeRMT5AlLxd6ua7CkH9aOlYULK1XVbj1J/TF4kefu73DvysQcTuzU1ac 4EMZPL3Ase5PnBEM21sjp1hy+mVJfbxhEUw8yhq/cJt/GfOvA50G4r1lMIuRmKZ0 IGbGJf9CL7rUlnTXirdyBs0sh8Vdbcfb8u2Q3aFENf/1RrGrvU/h83TLRlTvsYFV Ff90kIM47AgHn1pL2wIDy2fi1TVW1Fvxrb+L3FQ/1P0GNitQT7VYtn38JmRi0ZYb pD/CHLmFkYrZnA== -----END CERTIFICATE-----Generated at Thu Dec 11 22:46:57 2025 by rpki-client