This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json) Hash identifier: zl6KL/zIgwE9xUXkvz2MO+7P5fDSwUNo42LHyQnwUm4= Subject key identifier: 53:1E:E4:DC:8D:FA:2A:CE:D5:EA:B9:E8:96:87:33:46:42:45:B9:9D Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa Certificate serial: 019B1013BB9C3B52AF78A4051EB7B537F496 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft Manifest number: 1771 Signing time: Fri 12 Dec 2025 01:01:27 +0000 Manifest this update: Fri 12 Dec 2025 01:01:27 +0000 Manifest next update: Sat 13 Dec 2025 01:01:27 +0000 Files and hashes: 1: J7n-Yd5XTH7n67jouruR47yViJQ.roa (hash: uOcoBZNZsx1gjsqlLawiv97uMdypKgT5mBdaC/TonUs=) 2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: v68ORGd+8Qf/voQoPylzOhQ2oLOeyLgQk16T70LErbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:bb:9c:3b:52:af:78:a4:05:1e:b7:b5:37:f4:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa Validity Not Before: Dec 12 01:01:27 2025 GMT Not After : Dec 13 01:01:27 2025 GMT Subject: CN=531ee4dc8dfa2aced5eab9e8968733464245b99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:81:69:ed:25:0e:e0:ac:85:6e:ea:04:fa:2c: 0b:53:5d:21:6a:e3:31:bf:03:2f:76:eb:ef:19:0c: dd:47:50:52:22:5e:f0:d5:01:08:e2:d9:9b:d1:47: e9:b1:9b:88:d8:61:ab:9c:9d:9f:5e:54:a3:21:3b: 72:31:b3:a6:37:9c:84:83:08:17:78:82:1b:13:59: 57:09:41:81:10:0d:20:a7:05:65:36:a2:d4:34:ac: 93:eb:5a:e4:3a:ab:d4:49:80:29:cf:93:6b:64:50: 8f:90:42:77:13:c2:3e:47:cf:f3:07:e9:5d:c5:3a: fb:52:e7:c8:49:fc:5c:4a:6d:c6:5a:41:b1:33:1d: c2:f7:c6:e9:dc:60:cf:ea:5b:ee:36:b1:12:c8:2c: 7a:48:07:f9:25:00:79:56:ab:55:a6:c3:78:9a:75: 65:3b:35:29:c5:1c:26:e3:f7:ac:b4:89:f1:b2:6b: 1f:c9:29:7c:b0:5e:57:4e:1c:ae:f2:4e:77:98:8a: 56:58:f9:c0:f4:b4:83:02:ed:86:05:22:e8:d2:4e: 93:f3:8e:f0:21:cb:ec:84:b9:3d:62:d0:be:42:1d: 8a:17:c4:22:80:ee:ea:4b:f3:48:07:49:c6:9e:5d: de:27:1d:6e:ea:54:69:ec:7d:5f:c3:0a:10:1f:2c: 4d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1E:E4:DC:8D:FA:2A:CE:D5:EA:B9:E8:96:87:33:46:42:45:B9:9D X509v3 Authority Key Identifier: keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ef:ab:68:1f:04:e6:dc:b2:2f:79:ea:e0:d2:b6:8b:2c:8a: 5f:4b:05:23:7a:00:fd:61:45:22:96:5d:19:41:2f:fe:06:70: 8c:23:3d:f4:4a:15:79:0e:98:ba:9c:72:f1:17:85:aa:89:f4: 87:0d:91:3d:dd:f5:10:b4:46:74:97:60:05:75:8f:d2:55:19: b2:70:9d:da:98:6b:36:2b:0c:38:74:11:83:77:a1:7a:6c:6c: 0f:18:03:70:04:18:55:cd:4a:b5:f3:4d:44:a4:fe:f2:8a:b7: 41:4b:e3:c2:b2:7b:91:5f:7a:1c:1f:8d:c6:59:1f:3f:f8:28: 50:05:74:88:2c:28:0b:3f:ed:89:83:53:a8:0f:55:19:25:45: 77:dd:14:5e:1c:17:98:d1:a9:59:24:95:af:fc:9a:ad:7b:8d: cb:1c:85:12:b8:cb:ad:b0:25:a5:23:85:c6:f1:fc:0c:93:ee: 10:d8:66:ae:52:98:ae:2d:00:d6:d7:61:3d:5c:18:a4:20:b4: 53:c4:ef:da:cd:0c:ff:85:d7:59:1f:ac:a3:37:01:4c:20:5d: 62:89:c4:b6:0b:e3:7e:fb:53:44:24:06:15:d4:37:76:be:5f: 8a:01:a1:40:03:d2:51:ca:20:0a:b5:ff:6b:7d:23:78:89:71: 64:e9:01:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE7ucO1KveKQFHre1N/SWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OWViNTBjYjhiYWM5MmRjMTc2ZThhODdjZjI1NTUyODIy MTk0ZmEwHhcNMjUxMjEyMDEwMTI3WhcNMjUxMjEzMDEwMTI3WjAzMTEwLwYDVQQD Eyg1MzFlZTRkYzhkZmEyYWNlZDVlYWI5ZTg5Njg3MzM0NjQyNDViOTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Fp7SUO4KyFbuoE+iwLU10hauMx vwMvduvvGQzdR1BSIl7w1QEI4tmb0UfpsZuI2GGrnJ2fXlSjITtyMbOmN5yEgwgX eIIbE1lXCUGBEA0gpwVlNqLUNKyT61rkOqvUSYApz5NrZFCPkEJ3E8I+R8/zB+ld xTr7UufISfxcSm3GWkGxMx3C98bp3GDP6lvuNrESyCx6SAf5JQB5VqtVpsN4mnVl OzUpxRwm4/estInxsmsfySl8sF5XThyu8k53mIpWWPnA9LSDAu2GBSLo0k6T847w IcvshLk9YtC+Qh2KF8QigO7qS/NIB0nGnl3eJx1u6lRp7H1fwwoQHyxNrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMe5NyN+irO1eq56JaHM0ZCRbmdMB8GA1UdIwQY MBaAFLSetQy4usktwXboqHzyVVKCIZT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zZWFhNzAtMDUyMC00NTU5LTg0MWEt NGNhOTU2YjA4YTQxLzEvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zZWFhNzAtMDUyMC00NTU5LTg0MWEtNGNhOTU2YjA4YTQx LzEvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAu+raB8E 5tyyL3nq4NK2iyyKX0sFI3oA/WFFIpZdGUEv/gZwjCM99EoVeQ6Yupxy8ReFqon0 hw2RPd31ELRGdJdgBXWP0lUZsnCd2phrNisMOHQRg3ehemxsDxgDcAQYVc1KtfNN RKT+8oq3QUvjwrJ7kV96HB+NxlkfP/goUAV0iCwoCz/tiYNTqA9VGSVFd90UXhwX mNGpWSSVr/yarXuNyxyFErjLrbAlpSOFxvH8DJPuENhmrlKYri0A1tdhPVwYpCC0 U8Tv2s0M/4XXWR+sozcBTCBdYonEtgvjfvtTRCQGFdQ3dr5figGhQAPSUcogCrX/ a30jeIlxZOkBDQ== -----END CERTIFICATE-----Generated at Fri Dec 12 11:04:51 2025 by rpki-client