This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft File: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft (raw, json) Hash identifier: BowyknIVKySrR/UBD1jRMbnjlnm69KiAxLZ/rPAA2PM= Subject key identifier: 03:AA:8C:4A:5A:4B:5D:1B:87:FD:97:06:3D:C4:5F:11:65:1C:CD:A5 Authority key identifier: B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60 Certificate issuer: /CN=b48184549e12e9934bffb7615bca3d0c25681360 Certificate serial: 019B39EB6D4D807CA3BF412EF636671DE9ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 04:01:28 +0000 Manifest this update: Sat 20 Dec 2025 04:01:28 +0000 Manifest next update: Sun 21 Dec 2025 04:01:28 +0000 Files and hashes: 1: Pmrx9HZexDjQdROL1xOD1S-BjzQ.roa (hash: aBRM8zJUU2ZF0wAF5h20OpU3VGQ3W++oIRE8v06cZXM=) 2: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl (hash: LKF8G9wj8X7T5Xka8M5qJa5CQQCF+9vIQtJA6DR0y58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:6d:4d:80:7c:a3:bf:41:2e:f6:36:67:1d:e9:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b48184549e12e9934bffb7615bca3d0c25681360 Validity Not Before: Dec 20 04:01:28 2025 GMT Not After : Dec 21 04:01:28 2025 GMT Subject: CN=03aa8c4a5a4b5d1b87fd97063dc45f11651ccda5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4f:f9:67:6e:e2:19:a3:37:af:03:56:a8:c1: fd:6b:c3:68:eb:64:9b:50:61:c5:10:25:c1:21:14: da:82:4b:a8:46:a4:da:5c:c7:2d:bb:aa:67:41:7d: 67:ca:a4:bb:94:62:73:5b:96:d9:e1:a9:ef:3e:8a: ea:93:0f:a3:cd:a7:bd:cf:3e:79:cb:a4:8e:dd:6c: 36:ef:d1:37:5b:51:ad:87:00:06:e9:85:d8:fd:5c: b2:ba:d9:9c:2c:87:1a:df:65:59:53:a7:06:85:ac: ac:6e:16:16:09:cd:a3:15:5a:d9:09:b7:34:a2:7a: 9c:3c:b3:0d:a9:5b:f7:1b:e7:08:ca:fe:b5:65:e8: 9b:d1:1d:0c:1f:1d:17:aa:e3:a7:27:14:21:fa:4e: 13:5e:0c:ef:84:24:eb:1a:59:d5:ab:69:ec:a4:84: 35:c2:9e:7e:7b:1d:16:c4:bf:89:38:cd:21:4d:fe: ca:c4:39:5c:f0:b4:4e:52:b5:59:b2:b0:8b:9a:cd: bf:52:04:7b:3b:88:b0:0b:f4:e1:34:49:9c:d1:14: b9:cf:8a:88:6c:cb:9d:75:a1:47:10:40:60:e7:a2: d4:5a:17:3f:a4:e9:25:58:41:fe:db:be:31:01:ab: f2:34:c2:1a:67:a2:05:8b:1f:51:fe:5e:f4:c5:c8: 87:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AA:8C:4A:5A:4B:5D:1B:87:FD:97:06:3D:C4:5F:11:65:1C:CD:A5 X509v3 Authority Key Identifier: keyid:B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:f3:4a:11:78:7d:43:1e:64:37:71:24:04:ce:21:7b:49:c4: b1:69:c6:a4:e7:8d:ce:6f:03:cf:e6:47:78:3a:42:c9:9d:0d: b7:34:7a:c9:a9:8f:13:c0:10:06:27:ef:3a:d3:1a:ac:ad:6e: 8d:3b:19:af:4a:5e:ee:09:80:f8:df:26:2d:ee:62:e0:15:2c: 6c:e6:20:d3:36:fb:ef:f7:4d:b0:02:0a:f1:5a:1d:bc:b9:e7: 42:19:d0:6c:e3:d2:96:5f:a9:d2:f6:d1:07:a3:42:9f:ef:8d: fa:01:ae:f8:f8:29:b5:b3:62:34:ba:85:c3:c3:ae:7c:bf:65: e4:6d:dc:24:69:60:af:cc:13:ea:12:81:6f:5a:6e:30:db:fb: db:7a:dd:cb:0b:3f:80:92:ec:f8:e4:b2:a4:9a:9b:e2:4c:c4: f0:47:12:be:88:28:cb:4b:40:11:33:3b:dd:5f:ba:02:60:55: d8:f2:77:e3:99:3f:f3:92:1d:82:cf:4e:bb:e2:fe:4b:a1:51: eb:d3:33:aa:08:ff:ad:34:77:ac:3f:d8:61:b5:79:7b:6f:85: aa:ad:85:c0:87:ce:24:ea:63:68:a1:dd:f4:46:f8:b6:44:92: 64:45:66:0a:43:ab:e0:c2:df:e5:5b:bb:56:c2:81:69:1d:fc: 34:23:93:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5621NgHyjv0Eu9jZnHentMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODE4NDU0OWUxMmU5OTM0YmZmYjc2MTViY2EzZDBjMjU2 ODEzNjAwHhcNMjUxMjIwMDQwMTI4WhcNMjUxMjIxMDQwMTI4WjAzMTEwLwYDVQQD EygwM2FhOGM0YTVhNGI1ZDFiODdmZDk3MDYzZGM0NWYxMTY1MWNjZGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU/5Z27iGaM3rwNWqMH9a8No62Sb UGHFECXBIRTagkuoRqTaXMctu6pnQX1nyqS7lGJzW5bZ4anvPorqkw+jzae9zz55 y6SO3Ww279E3W1GthwAG6YXY/VyyutmcLIca32VZU6cGhaysbhYWCc2jFVrZCbc0 onqcPLMNqVv3G+cIyv61Zeib0R0MHx0XquOnJxQh+k4TXgzvhCTrGlnVq2nspIQ1 wp5+ex0WxL+JOM0hTf7KxDlc8LROUrVZsrCLms2/UgR7O4iwC/ThNEmc0RS5z4qI bMuddaFHEEBg56LUWhc/pOklWEH+274xAavyNMIaZ6IFix9R/l70xciHWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOqjEpaS10bh/2XBj3EXxFlHM2lMB8GA1UdIwQY MBaAFLSBhFSeEumTS/+3YVvKPQwlaBNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElHRVZKNFM2Wk5MXzdkaFc4bzlEQ1ZvRTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mNjcxNzctNzhkNS00Mzg4LWEyMWEt MjgyNjM2NTZjNmRlLzEvdElHRVZKNFM2Wk5MXzdkaFc4bzlEQ1ZvRTJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mNjcxNzctNzhkNS00Mzg4LWEyMWEtMjgyNjM2NTZjNmRl LzEvdElHRVZKNFM2Wk5MXzdkaFc4bzlEQ1ZvRTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt/NKEXh9 Qx5kN3EkBM4he0nEsWnGpOeNzm8Dz+ZHeDpCyZ0NtzR6yamPE8AQBifvOtMarK1u jTsZr0pe7gmA+N8mLe5i4BUsbOYg0zb77/dNsAIK8VodvLnnQhnQbOPSll+p0vbR B6NCn++N+gGu+PgptbNiNLqFw8OufL9l5G3cJGlgr8wT6hKBb1puMNv723rdyws/ gJLs+OSypJqb4kzE8EcSvogoy0tAETM73V+6AmBV2PJ345k/85Idgs9Ou+L+S6FR 69Mzqgj/rTR3rD/YYbV5e2+Fqq2FwIfOJOpjaKHd9Eb4tkSSZEVmCkOr4MLf5Vu7 VsKBaR38NCOT7Q== -----END CERTIFICATE-----Generated at Sat Dec 20 07:36:06 2025 by rpki-client