This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft File: t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json) Hash identifier: 4PLZ5HxzOb8bSsOJ/5pcHttJcidLQT2fZXONT6Y6oVc= Subject key identifier: 61:D3:06:CA:1C:19:90:7C:AA:59:C8:56:EA:60:CD:11:C5:C4:FD:40 Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0 Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0 Certificate serial: 019B20D02BBB2C4DE951438D787501E1A9A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft Manifest number: 10A3 Signing time: Mon 15 Dec 2025 07:01:12 +0000 Manifest this update: Mon 15 Dec 2025 07:01:12 +0000 Manifest next update: Tue 16 Dec 2025 07:01:12 +0000 Files and hashes: 1: qRT-_MhiSov-WJNuRCh-o1ABg_w.roa (hash: Sgwzeb8jM4K/wZC25rDRhN0A8vnEn9LK1zNCxvWZ1iA=) 2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: L7g51AAjPCvLx7dqtKzOsAHjVKPoXnpIZ408Qu/JGMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:d0:2b:bb:2c:4d:e9:51:43:8d:78:75:01:e1:a9:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0 Validity Not Before: Dec 15 07:01:12 2025 GMT Not After : Dec 16 07:01:12 2025 GMT Subject: CN=61d306ca1c19907caa59c856ea60cd11c5c4fd40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:47:a1:4f:d8:d5:70:0c:89:48:11:fa:b3:69: a1:a0:c5:8b:75:e8:55:7a:8b:21:39:c3:5f:2e:03: ba:a0:f6:43:6e:6e:72:a6:48:4c:97:42:4f:ab:5c: 8e:d6:f6:d2:97:0a:92:4a:86:9b:8c:dc:ad:3e:cd: bd:21:10:8e:b6:5a:f9:1b:2f:23:fc:f9:33:ef:ca: d0:9f:92:71:0e:24:1c:b6:62:29:50:9b:e7:4f:90: c4:6a:ea:70:98:b6:a5:6a:fb:a1:ee:6a:6f:28:da: 28:d5:92:e3:7f:34:97:46:34:b2:a4:72:45:aa:86: e9:f9:58:da:03:52:7b:46:83:5b:45:07:40:ee:09: 66:27:51:da:f5:e0:cb:4a:93:87:36:e7:4e:2a:de: e0:56:fc:50:be:8d:6c:3c:71:89:24:54:ce:b0:ad: ae:3e:87:4c:ea:1c:c7:03:05:04:70:23:19:60:0e: 65:bf:6d:b6:c6:60:c6:0b:3c:ea:b6:76:45:83:b3: 5b:91:a3:08:00:1a:65:d1:b6:23:7a:2f:b4:7b:f4: 0f:45:27:5a:58:74:ad:d0:45:5e:4f:a2:3e:a0:43: be:68:37:92:e2:d1:71:a5:15:d3:7e:a0:d7:d0:34: 33:76:2d:d4:bd:ec:2d:b8:6c:83:2d:18:08:a6:81: 57:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D3:06:CA:1C:19:90:7C:AA:59:C8:56:EA:60:CD:11:C5:C4:FD:40 X509v3 Authority Key Identifier: keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:4a:3f:e5:98:ae:6c:43:05:1a:2d:8e:ba:c9:23:fc:74:c5: 03:77:6c:f5:d5:90:6e:8f:1a:fb:55:79:27:b6:53:3f:38:04: aa:32:3d:30:7a:8d:34:dc:e9:8b:27:78:da:e7:33:5f:7b:b9: 88:dd:09:3f:37:64:5b:29:9f:81:c1:03:e7:39:7e:bd:29:a2: 4b:cb:b4:70:85:c8:50:6a:ad:c8:09:b3:09:93:db:18:56:62: 85:d3:c4:5d:e7:37:f8:e2:b6:0a:cb:f8:1c:da:8a:2e:fc:95: 15:72:54:25:f1:64:19:33:fd:36:4c:ca:81:31:d0:b2:6a:82: 4f:3a:8b:81:ed:49:50:21:6e:94:63:6b:b7:e9:17:0c:5b:0f: 61:c7:a6:ed:a2:0f:71:f5:ba:91:03:57:b9:f1:62:cb:91:c8: 6e:60:6c:08:31:8a:83:76:ae:3f:c7:75:77:d3:b5:ec:c9:4d: a1:1c:9f:91:cc:67:ef:ba:39:20:15:1c:42:ae:3e:07:3c:6b: 13:87:da:02:09:73:92:6e:fb:23:5c:5a:b8:12:1a:37:4c:fd: 9a:ae:f9:74:b2:39:9f:63:55:a2:5d:72:9d:59:0d:59:21:77: 22:dd:5c:74:f5:69:51:ec:20:1c:0b:98:b7:cd:33:6f:14:77: 71:78:97:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsg0Cu7LE3pUUONeHUB4amkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NjExNWQxM2E1ODZhZGEzZDljYzVkZjlhZTAzZTViYWI0 ZjRkYzAwHhcNMjUxMjE1MDcwMTEyWhcNMjUxMjE2MDcwMTEyWjAzMTEwLwYDVQQD Eyg2MWQzMDZjYTFjMTk5MDdjYWE1OWM4NTZlYTYwY2QxMWM1YzRmZDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEehT9jVcAyJSBH6s2mhoMWLdehV eoshOcNfLgO6oPZDbm5ypkhMl0JPq1yO1vbSlwqSSoabjNytPs29IRCOtlr5Gy8j /Pkz78rQn5JxDiQctmIpUJvnT5DEaupwmLalavuh7mpvKNoo1ZLjfzSXRjSypHJF qobp+VjaA1J7RoNbRQdA7glmJ1Ha9eDLSpOHNudOKt7gVvxQvo1sPHGJJFTOsK2u PodM6hzHAwUEcCMZYA5lv222xmDGCzzqtnZFg7NbkaMIABpl0bYjei+0e/QPRSda WHSt0EVeT6I+oEO+aDeS4tFxpRXTfqDX0DQzdi3UvewtuGyDLRgIpoFXJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHTBsocGZB8qlnIVupgzRHFxP1AMB8GA1UdIwQY MBaAFLdhFdE6WGraPZzF35rgPlurT03AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMt MjIzZjUyMjBhN2QzLzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMtMjIzZjUyMjBhN2Qz LzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEo/5Ziu bEMFGi2Ouskj/HTFA3ds9dWQbo8a+1V5J7ZTPzgEqjI9MHqNNNzpiyd42uczX3u5 iN0JPzdkWymfgcED5zl+vSmiS8u0cIXIUGqtyAmzCZPbGFZihdPEXec3+OK2Csv4 HNqKLvyVFXJUJfFkGTP9NkzKgTHQsmqCTzqLge1JUCFulGNrt+kXDFsPYcem7aIP cfW6kQNXufFiy5HIbmBsCDGKg3auP8d1d9O17MlNoRyfkcxn77o5IBUcQq4+Bzxr E4faAglzkm77I1xauBIaN0z9mq75dLI5n2NVol1ynVkNWSF3It1cdPVpUewgHAuY t80zbxR3cXiX6g== -----END CERTIFICATE-----Generated at Mon Dec 15 14:40:22 2025 by rpki-client