This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft File: TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft (raw, json) Hash identifier: 3/y3T+KvRnK3RDsry1tkXdbO0GitsNKF7GVrDV+tpB4= Subject key identifier: 21:A4:03:20:A3:16:EF:84:4B:9E:E9:E4:93:BB:EB:33:14:4C:E6:E4 Authority key identifier: 4C:EA:66:AD:DA:9D:F9:62:5A:3D:78:D6:28:FB:05:E2:48:4D:D8:78 Certificate issuer: /CN=4cea66adda9df9625a3d78d628fb05e2484dd878 Certificate serial: 019B36452F5AEC619574B3126D3CB6FFBA24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOpmrdqd-WJaPXjWKPsF4khN2Hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft Manifest number: 042D Signing time: Fri 19 Dec 2025 11:01:02 +0000 Manifest this update: Fri 19 Dec 2025 11:01:02 +0000 Manifest next update: Sat 20 Dec 2025 11:01:02 +0000 Files and hashes: 1: 1-QbsigNOAsIOrzATvCDKf5YVw3s.roa (hash: gWNRwRZG0Ifn0uSFb+Au9uZSZqHds/SqKOwbteITnow=) 2: TOpmrdqd-WJaPXjWKPsF4khN2Hg.crl (hash: A5kfmHrbnDUMUXujl7krbhG+nHX6fRkM7eOUvYgIdj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft rsync://rpki.ripe.net/repository/DEFAULT/TOpmrdqd-WJaPXjWKPsF4khN2Hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:2f:5a:ec:61:95:74:b3:12:6d:3c:b6:ff:ba:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cea66adda9df9625a3d78d628fb05e2484dd878 Validity Not Before: Dec 19 11:01:02 2025 GMT Not After : Dec 20 11:01:02 2025 GMT Subject: CN=21a40320a316ef844b9ee9e493bbeb33144ce6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e7:c0:bd:10:3e:e3:38:71:9f:16:ae:ee:22: 63:88:1a:f6:f5:15:ce:e3:d6:f8:7c:29:ef:f1:70: 2d:7d:f5:e4:a6:03:ad:76:d7:d2:94:bf:7e:99:b3: 7a:8f:4f:d8:af:c2:74:5d:50:79:89:f0:0a:84:8a: 02:ba:c6:bd:4f:20:2c:bd:37:fe:d0:c3:ad:da:c0: d9:77:c2:62:c0:40:e8:6b:39:ed:3e:ac:ac:8c:c1: d3:24:6e:88:8b:2e:0e:6a:e8:63:fc:2a:10:62:3e: 48:92:f2:3a:16:3c:55:e3:b8:38:5b:d8:53:ea:64: e9:d7:da:e6:ef:17:0b:d2:27:2d:0a:d5:39:d3:5f: 12:80:e3:32:32:28:30:6e:65:67:33:c5:dc:93:b3: cf:d5:de:fa:9d:63:e1:24:98:bb:79:8a:d0:db:88: 6c:31:27:e9:8a:fc:06:48:02:15:63:b8:04:20:bc: da:29:f0:38:82:cb:19:1b:4c:d7:7e:d9:ad:67:da: 40:ca:a7:31:8e:2f:a5:ec:56:fc:aa:3e:41:87:2c: 00:d5:f8:7c:a6:b6:8a:4c:9e:ec:8d:d6:56:93:e2: 22:72:51:0e:c6:7f:a7:f0:2f:a5:df:04:7c:89:a0: c8:f1:1f:0c:a8:61:dd:94:30:8f:55:6b:c4:c9:06: 91:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A4:03:20:A3:16:EF:84:4B:9E:E9:E4:93:BB:EB:33:14:4C:E6:E4 X509v3 Authority Key Identifier: keyid:4C:EA:66:AD:DA:9D:F9:62:5A:3D:78:D6:28:FB:05:E2:48:4D:D8:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOpmrdqd-WJaPXjWKPsF4khN2Hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c2:01:24:79:a4:f7:e8:7c:aa:7a:02:58:24:1c:cb:e6:09: 65:38:02:88:6d:c1:19:f6:cb:49:37:ca:c1:b7:cd:8e:b7:07: 5b:e1:5e:84:94:13:5e:2a:96:bd:29:9d:10:73:6f:fc:57:c6: 7c:d3:f2:a9:f6:c9:63:5d:67:9f:fd:ff:d3:ba:76:f3:c0:79: 41:b0:51:4c:04:1b:30:94:55:1f:09:ce:57:7e:f5:09:e1:9c: 28:17:8d:6c:21:a4:47:e7:8b:17:0e:c2:36:89:b2:1a:ee:c2: 9f:5f:46:68:22:2e:e2:8f:5d:e2:b0:c5:50:4a:3f:a3:21:20: c2:d2:6f:15:8d:c7:2f:73:d1:58:d9:ea:5a:6f:e7:83:13:4f: ab:95:6c:9a:11:7f:45:ad:46:f2:67:5c:25:98:59:de:cd:11: 99:c2:52:53:bc:05:4a:b9:0f:60:7c:da:31:d3:68:10:22:39: d1:07:17:25:35:ab:05:ef:f1:dc:5f:f7:ca:b8:8a:b5:67:e4: 70:e4:04:68:23:75:b6:51:5d:f5:a1:a6:6c:b1:90:29:8a:ef: 89:99:65:ff:2e:ff:7b:1e:0c:8c:66:f0:10:59:e0:82:5b:e2: 92:3e:c6:69:06:2e:43:43:cf:18:0a:34:17:18:25:aa:78:95: 86:14:45:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RS9a7GGVdLMSbTy2/7okMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZWE2NmFkZGE5ZGY5NjI1YTNkNzhkNjI4ZmIwNWUyNDg0 ZGQ4NzgwHhcNMjUxMjE5MTEwMTAyWhcNMjUxMjIwMTEwMTAyWjAzMTEwLwYDVQQD EygyMWE0MDMyMGEzMTZlZjg0NGI5ZWU5ZTQ5M2JiZWIzMzE0NGNlNmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+fAvRA+4zhxnxau7iJjiBr29RXO 49b4fCnv8XAtffXkpgOtdtfSlL9+mbN6j0/Yr8J0XVB5ifAKhIoCusa9TyAsvTf+ 0MOt2sDZd8JiwEDoazntPqysjMHTJG6Iiy4Oauhj/CoQYj5IkvI6FjxV47g4W9hT 6mTp19rm7xcL0ictCtU5018SgOMyMigwbmVnM8Xck7PP1d76nWPhJJi7eYrQ24hs MSfpivwGSAIVY7gEILzaKfA4gssZG0zXftmtZ9pAyqcxji+l7Fb8qj5BhywA1fh8 praKTJ7sjdZWk+IiclEOxn+n8C+l3wR8iaDI8R8MqGHdlDCPVWvEyQaRnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGkAyCjFu+ES57p5JO76zMUTObkMB8GA1UdIwQY MBaAFEzqZq3anfliWj141ij7BeJITdh4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9wbXJkcWQtV0phUFhqV0tQc0Y0a2hOMkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi81NzBkOTMtNjk2ZC00N2ViLTkzYjEt Nzc4MzZlMmZjYmRkLzEvVE9wbXJkcWQtV0phUFhqV0tQc0Y0a2hOMkhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi81NzBkOTMtNjk2ZC00N2ViLTkzYjEtNzc4MzZlMmZjYmRk LzEvVE9wbXJkcWQtV0phUFhqV0tQc0Y0a2hOMkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcIBJHmk 9+h8qnoCWCQcy+YJZTgCiG3BGfbLSTfKwbfNjrcHW+FehJQTXiqWvSmdEHNv/FfG fNPyqfbJY11nn/3/07p288B5QbBRTAQbMJRVHwnOV371CeGcKBeNbCGkR+eLFw7C NomyGu7Cn19GaCIu4o9d4rDFUEo/oyEgwtJvFY3HL3PRWNnqWm/ngxNPq5VsmhF/ Ra1G8mdcJZhZ3s0RmcJSU7wFSrkPYHzaMdNoECI50QcXJTWrBe/x3F/3yriKtWfk cOQEaCN1tlFd9aGmbLGQKYrviZll/y7/ex4MjGbwEFngglvikj7GaQYuQ0PPGAo0 FxglqniVhhRFrA== -----END CERTIFICATE-----Generated at Fri Dec 19 21:12:15 2025 by rpki-client