This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json) Hash identifier: XFRY7XA6U1ihGzSUE5yBORxk+qv3j8Sy4VdhDaPQq6I= Subject key identifier: DF:36:F5:72:D9:84:41:3D:D5:C9:61:E2:D3:C8:D7:51:C7:C4:C6:BD Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a Certificate serial: 019B08C75D4D754EB29B3749A40B6E6CDF1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft Manifest number: 1082 Signing time: Wed 10 Dec 2025 15:00:41 +0000 Manifest this update: Wed 10 Dec 2025 15:00:41 +0000 Manifest next update: Thu 11 Dec 2025 15:00:41 +0000 Files and hashes: 1: VYJ9qKilNSj9Z30pGpYaNAGU4Z0.roa (hash: j29BGrdUX9gZWLn/MqLu3C1IYATOJG6BtpBREfenzkc=) 2: dek1yBz9hU9Sw_jKA33of_zM9K4.roa (hash: yub3ufVUEc3WS+XkUJMCp9euptnf3DjONJgSPtRCvNQ=) 3: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: MuCp7AgiC3YkGOX3aqIg53BVpGitPdwnke1dwhOs9co=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:c7:5d:4d:75:4e:b2:9b:37:49:a4:0b:6e:6c:df:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a Validity Not Before: Dec 10 15:00:41 2025 GMT Not After : Dec 11 15:00:41 2025 GMT Subject: CN=df36f572d984413dd5c961e2d3c8d751c7c4c6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:31:b0:ec:f3:ef:c3:25:1f:d0:74:4a:ed:34: 51:24:eb:99:52:81:3a:65:bc:32:0d:ff:2a:ee:8a: 14:df:3c:df:15:24:68:4d:f6:c1:17:b6:40:03:e7: 01:8f:2a:c7:62:6a:0b:91:fe:68:73:65:11:d2:3f: b0:ee:6d:79:6c:7a:48:d5:a7:77:ca:b4:f0:fd:56: 4e:4a:2f:e0:0b:65:7c:f2:f3:b4:fa:e6:15:62:4b: fc:26:14:bd:e1:2f:f0:f9:c2:2c:73:cc:b1:03:c1: 79:15:88:64:19:33:21:8d:3a:9e:10:91:c2:65:5a: 69:95:11:a3:e9:28:49:b7:27:21:ab:10:d1:c9:26: 7d:e2:d1:74:00:09:61:72:65:0c:55:0b:34:a1:6c: d3:76:3b:0d:a7:d3:32:91:8d:45:44:a6:a7:a4:dd: 1a:43:0c:27:e3:56:58:5c:8c:39:7c:ba:ec:48:7f: 02:a0:97:7e:34:ce:d5:0c:69:da:1b:8f:a6:eb:59: 49:8f:e9:44:af:89:a9:12:49:49:ac:02:7e:b4:e7: ae:1c:43:de:38:73:32:66:75:f3:00:d0:51:7c:64: bf:23:ea:c9:ca:d5:f1:59:95:67:f6:4c:5d:b0:b5: bb:90:f0:fa:b8:4f:56:2f:48:ee:c1:01:d6:55:e5: 48:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:36:F5:72:D9:84:41:3D:D5:C9:61:E2:D3:C8:D7:51:C7:C4:C6:BD X509v3 Authority Key Identifier: keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:fe:9d:33:93:3b:21:2d:97:6d:a6:b6:e4:e0:6f:4c:0f:45: 11:ab:d2:c5:12:7f:8f:43:38:d6:c7:f2:fe:86:fc:12:88:2d: 18:5b:ee:10:8b:76:ce:14:e7:64:10:94:dc:36:21:24:14:8f: bd:b5:c0:29:f2:4d:64:ce:b8:c5:79:a1:ec:ec:e8:01:0b:a5: f3:69:b1:4a:79:37:02:5a:80:89:6d:49:91:1d:66:50:96:44: 4f:d9:96:e2:79:68:1a:62:8c:f5:95:d1:23:2c:80:e9:5f:7b: 33:2d:67:82:e9:d7:02:e9:c4:60:58:4e:a4:e2:ae:7c:ba:9d: ad:48:8b:ff:ea:a9:ad:9a:ff:f1:95:66:ad:31:bf:30:37:50: 2f:09:44:d5:fa:f9:7c:f8:bb:3e:40:8b:e0:8e:df:35:3d:1e: 46:e5:74:c5:1c:42:21:53:1c:41:fa:99:1a:b6:e1:17:b6:c4: 19:43:d2:62:87:a0:ca:b2:c2:68:26:85:82:52:1d:35:2f:32: 1a:ab:54:3c:88:d2:96:68:db:2d:f1:79:b7:82:99:cb:b7:d9: ac:af:4e:8a:88:cc:37:a6:88:e8:e1:78:13:38:0b:ef:77:ee: c0:a7:de:d2:5c:c7:d0:d2:3b:9d:5c:28:0b:c9:50:e7:0d:46: c2:1a:8d:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIx11NdU6ymzdJpAtubN8cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MGQ0OTQzMzNjYjRkOWU1ZmQxMGM4NDZjNDdjZjU2NDQ1 YzUwM2EwHhcNMjUxMjEwMTUwMDQxWhcNMjUxMjExMTUwMDQxWjAzMTEwLwYDVQQD EyhkZjM2ZjU3MmQ5ODQ0MTNkZDVjOTYxZTJkM2M4ZDc1MWM3YzRjNmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzGw7PPvwyUf0HRK7TRRJOuZUoE6 ZbwyDf8q7ooU3zzfFSRoTfbBF7ZAA+cBjyrHYmoLkf5oc2UR0j+w7m15bHpI1ad3 yrTw/VZOSi/gC2V88vO0+uYVYkv8JhS94S/w+cIsc8yxA8F5FYhkGTMhjTqeEJHC ZVpplRGj6ShJtychqxDRySZ94tF0AAlhcmUMVQs0oWzTdjsNp9MykY1FRKanpN0a Qwwn41ZYXIw5fLrsSH8CoJd+NM7VDGnaG4+m61lJj+lEr4mpEklJrAJ+tOeuHEPe OHMyZnXzANBRfGS/I+rJytXxWZVn9kxdsLW7kPD6uE9WL0juwQHWVeVIIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN829XLZhEE91clh4tPI11HHxMa9MB8GA1UdIwQY MBaAFLQNSUMzy02eX9EMhGxHz1ZEXFA6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMt MTgzZjk5NzVmYzk0LzEvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMtMTgzZjk5NzVmYzk0 LzEvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUf6dM5M7 IS2Xbaa25OBvTA9FEavSxRJ/j0M41sfy/ob8EogtGFvuEIt2zhTnZBCU3DYhJBSP vbXAKfJNZM64xXmh7OzoAQul82mxSnk3AlqAiW1JkR1mUJZET9mW4nloGmKM9ZXR IyyA6V97My1ngunXAunEYFhOpOKufLqdrUiL/+qprZr/8ZVmrTG/MDdQLwlE1fr5 fPi7PkCL4I7fNT0eRuV0xRxCIVMcQfqZGrbhF7bEGUPSYoegyrLCaCaFglIdNS8y GqtUPIjSlmjbLfF5t4KZy7fZrK9OiojMN6aI6OF4EzgL73fuwKfe0lzH0NI7nVwo C8lQ5w1GwhqNog== -----END CERTIFICATE-----Generated at Wed Dec 10 18:06:12 2025 by rpki-client