This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft File: TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json) Hash identifier: LafJjOqEIuqxGC1g49AWXnWA92tJ/aXqkzLBya9nF9U= Subject key identifier: 02:85:31:44:6E:07:A0:F2:DD:85:66:55:84:B2:12:C5:27:D0:51:9A Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57 Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57 Certificate serial: 019B12036C896B9537DCFEA6206448BA25ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft Manifest number: 07C7 Signing time: Fri 12 Dec 2025 10:02:52 +0000 Manifest this update: Fri 12 Dec 2025 10:02:52 +0000 Manifest next update: Sat 13 Dec 2025 10:02:52 +0000 Files and hashes: 1: 1-deSD0Zx7mZFaKLgvp5MfNNL6B0.roa (hash: 0HLnR/UxvmJgyKOOTOBI/jNtxozr1BfrerbK66hTjvg=) 2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: 0XBNBzgSpGeuw5JVyNCcgmSUlpMAHvuNH76h4bn1qdg=) 3: ztG3iRtcx4pgmD82wNPmhKWPj8w.roa (hash: 7wVFIe2H/2PMSyJC9QSggcK+C7T3Sk0wvSIjn0Idsps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:03:6c:89:6b:95:37:dc:fe:a6:20:64:48:ba:25:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57 Validity Not Before: Dec 12 10:02:52 2025 GMT Not After : Dec 13 10:02:52 2025 GMT Subject: CN=028531446e07a0f2dd85665584b212c527d0519a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6d:99:a3:f5:de:90:7f:08:2b:f3:d8:6f:68: 8f:23:e2:41:06:4b:e7:09:c1:e9:b7:12:b5:60:57: ff:c6:89:5f:c9:a7:76:53:6b:0e:35:b5:28:57:e6: 82:45:91:35:e6:a9:0f:63:7c:1c:a5:0c:f2:bf:69: 9d:3d:94:de:7b:51:55:9f:eb:ed:b1:6f:aa:c6:4f: ab:fc:70:f4:7b:d5:49:05:30:33:90:f2:e9:ff:74: fe:e7:1e:00:46:9b:e3:b0:c3:fe:3c:ce:46:00:fa: 0c:ef:38:4d:12:3c:c0:0b:83:57:ae:01:93:c8:6f: 1e:9b:de:0b:5f:2d:0a:b0:13:17:58:41:55:6c:e2: 08:07:49:ab:68:26:cb:6b:b5:ea:bb:c9:41:fd:df: c1:71:45:5f:9c:94:83:10:dd:83:7e:41:5a:07:0c: 4d:fe:18:70:ca:ee:2e:a2:20:f6:48:f8:3c:ad:9e: 45:43:4d:a4:1f:26:b0:62:2e:56:4e:80:a5:34:57: a3:b4:2c:29:6e:c4:8c:54:f4:21:31:03:fe:39:f1: 81:db:5b:57:ec:20:41:2d:13:98:03:0b:f2:be:99: 24:c0:18:36:6a:78:75:66:ef:df:6c:02:f1:70:e0: b1:41:9a:fe:3e:8b:dc:89:f2:d7:9a:8a:2e:a4:1f: 86:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:85:31:44:6E:07:A0:F2:DD:85:66:55:84:B2:12:C5:27:D0:51:9A X509v3 Authority Key Identifier: keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:77:b1:83:36:e3:3c:74:b4:59:ef:23:a8:8e:ca:19:80:ea: 74:48:0e:75:e6:fb:3f:cb:04:bd:4a:34:0d:22:70:a7:e1:fe: 08:de:94:40:44:85:14:fd:cd:6d:5e:03:90:27:0e:af:5d:eb: 54:dd:f5:e4:ed:06:7e:db:1b:92:b4:a3:0a:78:b5:22:9a:b8: 97:34:45:97:f2:e1:5d:ca:72:ca:6b:6c:14:a1:23:dc:9a:5a: ff:a2:ac:58:46:5d:7f:63:e9:96:c8:56:14:df:6b:94:a0:ba: d4:5f:ec:47:81:d0:a7:c7:de:dc:76:20:35:c4:d6:82:eb:a7: b3:4f:ea:ae:d5:f4:8f:2e:75:da:30:33:89:7e:25:5e:cc:a9: d4:4f:fb:86:47:17:fc:26:b4:8b:e3:c9:18:f5:f9:d9:1f:79: 3e:27:29:bb:88:ae:39:a0:59:b5:b3:44:68:c1:5d:c9:3c:66: 9e:80:8c:43:c1:fb:70:d9:e3:35:90:76:53:20:5d:de:b7:3d: 2b:79:29:b7:57:6e:a6:8d:b3:80:84:0f:58:4c:26:d3:28:25: e5:00:ab:bf:6e:48:cf:d8:2e:db:56:4b:16:6a:f3:dc:b4:eb: f9:77:7b:b9:72:3b:40:91:df:fc:52:8f:29:88:e2:41:42:d4: 3a:48:3d:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSA2yJa5U33P6mIGRIuiXtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNzQ2MTQ3N2I1OWI3YmMwOTA2ZjZjZTYwNjUwYmIzYWQy ZGVlNTcwHhcNMjUxMjEyMTAwMjUyWhcNMjUxMjEzMTAwMjUyWjAzMTEwLwYDVQQD EygwMjg1MzE0NDZlMDdhMGYyZGQ4NTY2NTU4NGIyMTJjNTI3ZDA1MTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt22Zo/XekH8IK/PYb2iPI+JBBkvn CcHptxK1YFf/xolfyad2U2sONbUoV+aCRZE15qkPY3wcpQzyv2mdPZTee1FVn+vt sW+qxk+r/HD0e9VJBTAzkPLp/3T+5x4ARpvjsMP+PM5GAPoM7zhNEjzAC4NXrgGT yG8em94LXy0KsBMXWEFVbOIIB0mraCbLa7Xqu8lB/d/BcUVfnJSDEN2DfkFaBwxN /hhwyu4uoiD2SPg8rZ5FQ02kHyawYi5WToClNFejtCwpbsSMVPQhMQP+OfGB21tX 7CBBLROYAwvyvpkkwBg2anh1Zu/fbALxcOCxQZr+PovcifLXmooupB+GcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKFMURuB6Dy3YVmVYSyEsUn0FGaMB8GA1UdIwQY MBaAFE50YUd7Wbe8CQb2zmBlC7OtLe5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG5SaFIzdFp0N3dKQnZiT1lHVUxzNjB0N2xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MTEwOWYtMmQxOS00MWNlLWJhNmUt ZGRiYzBkZWY4M2UxLzEvVG5SaFIzdFp0N3dKQnZiT1lHVUxzNjB0N2xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MTEwOWYtMmQxOS00MWNlLWJhNmUtZGRiYzBkZWY4M2Ux LzEvVG5SaFIzdFp0N3dKQnZiT1lHVUxzNjB0N2xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXexgzbj PHS0We8jqI7KGYDqdEgOdeb7P8sEvUo0DSJwp+H+CN6UQESFFP3NbV4DkCcOr13r VN315O0GftsbkrSjCni1Ipq4lzRFl/LhXcpyymtsFKEj3Jpa/6KsWEZdf2PplshW FN9rlKC61F/sR4HQp8fe3HYgNcTWguuns0/qrtX0jy512jAziX4lXsyp1E/7hkcX /Ca0i+PJGPX52R95Picpu4iuOaBZtbNEaMFdyTxmnoCMQ8H7cNnjNZB2UyBd3rc9 K3kpt1dupo2zgIQPWEwm0ygl5QCrv25Iz9gu21ZLFmrz3LTr+Xd7uXI7QJHf/FKP KYjiQULUOkg98w== -----END CERTIFICATE-----Generated at Fri Dec 12 14:00:59 2025 by rpki-client