This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json) Hash identifier: zEPEYpjBWA+iRwog9aUY4TEGlD0ScRrYvRNaqYwY0C4= Subject key identifier: 30:77:55:DD:96:08:F3:53:7B:FD:60:66:13:E4:59:D3:93:34:E2:DF Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9 Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9 Certificate serial: 019B318C689470B86016543B23EB787804EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft Manifest number: 07AB Signing time: Thu 18 Dec 2025 13:00:43 +0000 Manifest this update: Thu 18 Dec 2025 13:00:43 +0000 Manifest next update: Fri 19 Dec 2025 13:00:43 +0000 Files and hashes: 1: CvcmVd2qiQMCtgnMEuQp7Q5S4Vg.roa (hash: 6oEqjna8oaHJiSK9+x9VxezwWYrKn62GKKSEaLSxdDU=) 2: UKY-oSMIFmmicltNFFzSJHvvmLM.roa (hash: cA262Na30QfQdhfhBPxJOrAeDIB1dyAnD2XIGiuSUOI=) 3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: HlBndkZO0rpd1E7GumtOTcCDA+9MhAPJUEy0AZZCzwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:68:94:70:b8:60:16:54:3b:23:eb:78:78:04:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9 Validity Not Before: Dec 18 13:00:43 2025 GMT Not After : Dec 19 13:00:43 2025 GMT Subject: CN=307755dd9608f3537bfd606613e459d39334e2df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:94:05:9b:81:f7:9d:8e:62:fe:5c:dc:ae:c5: fb:6e:a7:33:af:93:57:e8:9e:a7:b4:d7:04:7a:54: 04:f3:bf:41:13:74:96:c6:68:ad:80:d0:b8:7c:e6: 56:cd:f3:14:26:bb:66:83:c4:be:54:45:39:06:db: c4:53:a0:5e:9e:17:f3:e4:e0:ef:d5:d3:7a:db:5f: 92:54:6e:b7:b6:da:d1:13:0f:49:39:bc:05:c5:47: 2f:48:36:5f:1b:2e:95:54:1a:c9:b0:c5:bf:1c:f0: b5:00:2a:3d:ed:c5:4f:cc:5b:42:15:e6:4b:1a:83: 78:11:15:8d:c3:30:6b:53:f6:d6:a1:fb:2a:c4:89: 73:bb:44:b1:df:58:1c:cb:30:03:eb:bc:3f:a1:f0: 5e:8a:62:21:5b:f8:a9:8c:52:04:15:f1:fc:b3:3e: 69:ff:05:23:ed:3b:dc:30:a6:6c:96:4d:3b:d8:fa: a4:78:d1:4f:5a:eb:29:94:5b:0c:86:af:36:0b:ab: c8:a0:0e:a5:65:96:01:80:be:85:ee:06:9e:b5:23: 73:0e:71:15:fa:a2:46:9d:1d:da:eb:cf:71:ad:31: 0f:aa:82:99:fd:43:52:55:7b:c7:34:36:d0:59:7c: a5:24:a2:3a:c5:97:2d:e7:4d:fe:5c:6a:8f:76:c2: 3d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:77:55:DD:96:08:F3:53:7B:FD:60:66:13:E4:59:D3:93:34:E2:DF X509v3 Authority Key Identifier: keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:b8:34:58:62:c4:ad:55:f9:93:50:8e:2d:a3:02:41:b5:ec: 8f:2a:71:e4:3c:a3:9f:80:d8:96:d3:47:7a:23:9c:bd:c6:19: 13:0e:3b:2c:7e:0b:01:b1:aa:ba:76:c5:84:26:39:96:dd:48: aa:e4:cd:c8:9d:db:1f:57:06:61:29:a2:e8:1f:e2:b3:89:08: 3b:28:4a:b3:fc:97:eb:94:85:c0:9f:ea:2b:81:bf:d1:fe:f8: e4:53:cb:39:a4:d7:9d:ec:21:ff:e1:78:42:1d:50:d9:f5:31: f2:43:4f:39:11:a5:97:be:f4:c9:1e:d4:f1:b7:94:b0:20:68: 13:79:a6:51:69:3a:bc:81:da:f2:f6:b6:29:d5:76:c3:3a:36: 04:b3:8d:77:07:4a:29:45:ea:91:20:9e:a2:a9:c7:3d:1b:35: 5b:ac:04:28:b1:56:07:7e:b3:3e:0c:d3:5c:ca:7b:e9:b5:82: 98:87:3a:6f:a4:09:3a:19:58:fc:3e:e0:22:fc:20:8e:aa:05: cb:cf:a3:e0:6d:e8:f1:03:12:99:7e:c5:54:02:ee:0e:9a:b7: 42:e0:93:d2:49:cf:a5:86:fd:a3:52:64:99:95:f1:94:b5:98: 6e:0c:b3:0d:ee:38:b4:a4:65:f0:41:c2:20:a6:de:26:1a:74: 98:38:a4:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjGiUcLhgFlQ7I+t4eATsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OThjOTdiMTRjMzc0YTUyODMzZGI2YTQwMDdiNTRiNDY2 MmM1YTkwHhcNMjUxMjE4MTMwMDQzWhcNMjUxMjE5MTMwMDQzWjAzMTEwLwYDVQQD EygzMDc3NTVkZDk2MDhmMzUzN2JmZDYwNjYxM2U0NTlkMzkzMzRlMmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJQFm4H3nY5i/lzcrsX7bqczr5NX 6J6ntNcEelQE879BE3SWxmitgNC4fOZWzfMUJrtmg8S+VEU5BtvEU6Benhfz5ODv 1dN621+SVG63ttrREw9JObwFxUcvSDZfGy6VVBrJsMW/HPC1ACo97cVPzFtCFeZL GoN4ERWNwzBrU/bWofsqxIlzu0Sx31gcyzAD67w/ofBeimIhW/ipjFIEFfH8sz5p /wUj7TvcMKZslk072PqkeNFPWusplFsMhq82C6vIoA6lZZYBgL6F7gaetSNzDnEV +qJGnR3a689xrTEPqoKZ/UNSVXvHNDbQWXylJKI6xZct503+XGqPdsI9FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDB3Vd2WCPNTe/1gZhPkWdOTNOLfMB8GA1UdIwQY MBaAFLSYyXsUw3SlKDPbakAHtUtGYsWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzct ODY1NDI2NjQ1N2M2LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzctODY1NDI2NjQ1N2M2 LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7g0WGLE rVX5k1COLaMCQbXsjypx5Dyjn4DYltNHeiOcvcYZEw47LH4LAbGqunbFhCY5lt1I quTNyJ3bH1cGYSmi6B/is4kIOyhKs/yX65SFwJ/qK4G/0f745FPLOaTXnewh/+F4 Qh1Q2fUx8kNPORGll770yR7U8beUsCBoE3mmUWk6vIHa8va2KdV2wzo2BLONdwdK KUXqkSCeoqnHPRs1W6wEKLFWB36zPgzTXMp76bWCmIc6b6QJOhlY/D7gIvwgjqoF y8+j4G3o8QMSmX7FVALuDpq3QuCT0knPpYb9o1JkmZXxlLWYbgyzDe44tKRl8EHC IKbeJhp0mDikrA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:38:11 2025 by rpki-client