This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json) Hash identifier: UCdaQYpybyjQ2vdN9g5Mtx4sogRUidt2MAo/MSyo6xU= Subject key identifier: 90:F9:B8:A4:95:B9:CD:14:AB:25:42:F1:B7:E0:F4:4B:6F:8C:E7:BB Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c Certificate serial: 019B0F00A301F51CF9634D575B3E8AEDB3A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 20:00:58 +0000 Manifest this update: Thu 11 Dec 2025 20:00:58 +0000 Manifest next update: Fri 12 Dec 2025 20:00:58 +0000 Files and hashes: 1: 1lSa1sl-dNBGB6RIspgIufADhjs.roa (hash: ZUkq8NELozqtJDfHgnQK7IOC8L6Hnu5OT9um+2WKleM=) 2: TB1SNMK17klLvRw1OV09EGXDsjg.roa (hash: 3s2Ua7bRSNfwEdFtiO4U1p/wzm3QtvPjfYSSDJ4385k=) 3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: UL3RwbZaHmxzEEVDhu7bxmF3cfrlMvEpvg8pORuIPZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:a3:01:f5:1c:f9:63:4d:57:5b:3e:8a:ed:b3:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c Validity Not Before: Dec 11 20:00:58 2025 GMT Not After : Dec 12 20:00:58 2025 GMT Subject: CN=90f9b8a495b9cd14ab2542f1b7e0f44b6f8ce7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cb:4d:53:f6:fd:18:5e:c2:d0:3b:73:33:00: ba:1f:bd:0b:33:bd:92:93:e6:d4:2d:b6:95:5e:74: 9b:58:d4:6b:8c:bd:67:c3:fe:d1:36:38:3c:09:5a: f1:34:d7:ed:76:06:54:97:f3:29:df:32:c6:d1:2b: d2:6d:2f:bd:37:89:6c:0a:11:d7:f8:02:59:d6:1d: fb:53:ba:33:87:4e:37:66:e9:77:7d:02:38:f1:d3: df:b6:59:42:80:18:38:66:8c:97:e3:63:a6:91:c5: a5:11:a2:62:6d:da:b3:f7:5a:13:2e:8e:ec:d9:30: 58:84:73:0f:9d:ce:0d:c3:15:e8:ca:47:b5:0b:f7: 24:6f:19:8e:8b:57:4f:2b:99:f4:9e:75:38:2c:b6: 6f:94:79:69:77:e8:65:f0:5f:ca:63:36:07:5e:16: aa:05:0d:16:90:86:7f:60:38:b2:4a:86:dc:82:13: d6:a1:82:a3:81:e0:61:eb:c4:dc:21:eb:ae:68:62: ed:d1:87:70:e1:fd:cd:ea:a2:37:af:e4:bb:ee:49: 8f:89:ae:7e:dc:94:3e:d1:8d:b2:fb:20:17:68:e9: 1a:cc:21:43:25:e3:0c:af:4c:a1:e6:8f:7c:e0:a8: 4e:a7:2f:6b:11:5c:9f:37:3d:08:19:59:ea:95:44: 7e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F9:B8:A4:95:B9:CD:14:AB:25:42:F1:B7:E0:F4:4B:6F:8C:E7:BB X509v3 Authority Key Identifier: keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:66:96:b2:aa:d7:1a:e6:fb:6a:d3:77:55:8d:d2:66:50:23: e7:40:fb:ba:ae:59:b7:4e:b6:55:a5:7d:8b:44:d9:12:85:8f: 4a:59:ba:6a:16:ea:1f:40:1a:75:38:84:6b:da:fe:e1:00:ba: 9c:b5:d5:17:8b:f6:50:fd:22:24:eb:36:d1:8e:bf:31:c9:ba: dd:5f:91:4c:31:18:f2:6d:4f:33:b9:21:40:33:a8:61:f9:9c: 6c:ad:a9:49:01:ed:68:bb:93:bf:89:35:b0:52:f7:41:de:bc: 48:e7:c0:c1:88:d0:9d:ad:04:1e:5a:6d:39:a1:64:0e:a2:48: 17:44:bb:2d:0d:65:90:68:75:9a:ca:bd:a2:e2:46:01:fb:28: 97:0f:2d:02:10:08:bd:c9:7e:1c:b5:33:6b:18:9a:1d:81:02: 9b:85:9c:d8:55:1b:f8:7c:be:16:f8:69:27:ba:e7:93:0f:71: d0:2a:d4:dd:de:3c:27:20:8c:5f:c7:d5:32:a5:11:8b:74:f2: 2a:1d:b8:69:4a:07:de:1b:0f:a6:9d:e0:60:0d:f3:e2:d2:92: 17:7e:b7:df:02:5b:ab:b7:8d:47:e5:e1:5f:5a:6f:70:0f:80: 21:55:ac:e8:ba:eb:a9:80:b2:8d:9e:bd:86:20:dd:88:67:d6: a4:3b:a5:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAKMB9Rz5Y01XWz6K7bOkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1OTkwOWVkMTcxYjM4YzFmZGM0MzYyMjI5ZTc4ZDY5ODUx ZGUxMWMwHhcNMjUxMjExMjAwMDU4WhcNMjUxMjEyMjAwMDU4WjAzMTEwLwYDVQQD Eyg5MGY5YjhhNDk1YjljZDE0YWIyNTQyZjFiN2UwZjQ0YjZmOGNlN2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxctNU/b9GF7C0DtzMwC6H70LM72S k+bULbaVXnSbWNRrjL1nw/7RNjg8CVrxNNftdgZUl/Mp3zLG0SvSbS+9N4lsChHX +AJZ1h37U7ozh043Zul3fQI48dPftllCgBg4ZoyX42OmkcWlEaJibdqz91oTLo7s 2TBYhHMPnc4NwxXoyke1C/ckbxmOi1dPK5n0nnU4LLZvlHlpd+hl8F/KYzYHXhaq BQ0WkIZ/YDiySobcghPWoYKjgeBh68TcIeuuaGLt0Ydw4f3N6qI3r+S77kmPia5+ 3JQ+0Y2y+yAXaOkazCFDJeMMr0yh5o984KhOpy9rEVyfNz0IGVnqlUR+pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJD5uKSVuc0UqyVC8bfg9EtvjOe7MB8GA1UdIwQY MBaAFLWZCe0XGzjB/cQ2IinnjWmFHeEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2Et ZmRlMDczNTg4ZjBmLzEvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi85ZWU5ODAtNjdhMi00ZDNjLWI2Y2EtZmRlMDczNTg4ZjBm LzEvdFprSjdSY2JPTUg5eERZaUtlZU5hWVVkNFJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomaWsqrX Gub7atN3VY3SZlAj50D7uq5Zt062VaV9i0TZEoWPSlm6ahbqH0AadTiEa9r+4QC6 nLXVF4v2UP0iJOs20Y6/Mcm63V+RTDEY8m1PM7khQDOoYfmcbK2pSQHtaLuTv4k1 sFL3Qd68SOfAwYjQna0EHlptOaFkDqJIF0S7LQ1lkGh1msq9ouJGAfsolw8tAhAI vcl+HLUzaxiaHYECm4Wc2FUb+Hy+FvhpJ7rnkw9x0CrU3d48JyCMX8fVMqURi3Ty Kh24aUoH3hsPpp3gYA3z4tKSF3633wJbq7eNR+XhX1pvcA+AIVWs6LrrqYCyjZ69 hiDdiGfWpDulTQ== -----END CERTIFICATE-----Generated at Thu Dec 11 22:48:09 2025 by rpki-client