This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json) Hash identifier: dEiuc+IsCxxan19f8Cs+/P1+FpL9Vv0GNiIznnfS/qg= Subject key identifier: A7:4B:5E:AE:EF:85:AC:44:16:8D:46:C2:B6:E0:D3:62:99:7C:08:AA Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76 Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176 Certificate serial: 019B37C60D692AB197E758F3B8B3E0DD92CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft Manifest number: 178D Signing time: Fri 19 Dec 2025 18:01:24 +0000 Manifest this update: Fri 19 Dec 2025 18:01:24 +0000 Manifest next update: Sat 20 Dec 2025 18:01:24 +0000 Files and hashes: 1: F0xtYGfQ_s_LJkUkk89IHcL9J5M.roa (hash: JVjlGGRIJlPuTdOW/N8SfdRvr3fAH3HHybxJ5aP4RD0=) 2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: r4+EPjrYCmhO8fBhTQOtCE2Luegc23wGIXIaKK1frL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c6:0d:69:2a:b1:97:e7:58:f3:b8:b3:e0:dd:92:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176 Validity Not Before: Dec 19 18:01:24 2025 GMT Not After : Dec 20 18:01:24 2025 GMT Subject: CN=a74b5eaeef85ac44168d46c2b6e0d362997c08aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ba:de:7b:56:2b:14:d4:6e:50:f4:b1:97:3b: c0:2a:73:93:f0:de:c4:43:ec:f9:dd:5b:7a:74:de: 7d:3a:88:fd:ad:58:4a:db:6d:cf:85:4e:2c:64:8d: e5:31:3a:1a:0c:b6:e2:c1:0b:2d:6e:c1:aa:a1:94: 73:dc:27:10:66:03:e4:74:7e:19:c5:21:f8:0e:04: cd:62:af:0b:27:b3:0f:ff:f5:3d:80:ce:33:f3:da: 72:82:ed:fe:6e:91:b6:bc:e6:74:d9:a4:09:c9:08: 9a:06:24:34:49:ef:4f:3c:a2:36:4a:9f:20:e7:fd: 91:9d:25:61:25:34:e9:8f:14:8a:1b:8c:71:f8:d8: 27:52:5e:4f:94:fb:ec:bf:be:e7:1f:04:f0:62:f9: 69:d1:fb:88:6f:09:3c:5c:11:e5:32:96:b7:36:c8: db:ff:7c:22:c8:b9:3c:c6:d5:52:69:21:9f:d2:ab: e9:c0:18:35:71:a9:26:63:83:6c:c8:63:ba:53:6c: 72:28:84:42:d5:f4:81:cd:2a:27:b0:56:f5:f1:23: 87:9f:ee:ac:ce:17:f9:ee:c1:dd:9e:eb:b4:0b:ee: b2:ea:07:9b:af:29:db:0d:82:25:17:fd:d2:28:79: ee:15:7f:0a:69:fc:e8:b3:2a:ad:ad:ff:29:3d:88: c5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4B:5E:AE:EF:85:AC:44:16:8D:46:C2:B6:E0:D3:62:99:7C:08:AA X509v3 Authority Key Identifier: keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:85:b2:27:68:1d:5b:5d:f9:f6:09:18:f6:9b:e4:9e:ea:e2: 11:3d:7f:d5:46:a3:18:c9:b5:63:ad:0a:c8:93:73:c2:22:7c: aa:be:e6:8b:19:40:80:27:95:bb:6d:76:da:e2:3b:6a:c0:c7: 80:18:37:78:02:c9:0e:de:c5:24:e4:6f:a4:02:a1:5f:af:39: 7b:02:47:8e:d6:b5:32:b9:ce:73:b8:9f:34:56:41:1d:e9:16: e2:4b:11:bd:32:ba:2e:c8:90:c1:b8:7f:cd:ab:60:4c:b6:07: 46:ab:66:b7:35:53:33:6a:f9:a4:2f:42:c7:a9:a1:81:f6:37: 0c:d8:d2:a6:11:68:d7:68:3a:0f:39:80:41:a3:d0:ac:7f:69: ae:ad:3d:ae:d8:6d:f3:d7:ef:92:06:73:56:c6:2f:26:e4:3a: cd:d4:f4:fd:77:a0:41:84:7c:27:42:ab:c6:de:ce:e0:98:72: 7b:4c:50:79:b1:c0:1e:8e:5c:d8:c0:7d:f8:5a:0a:cb:f1:7d: e2:69:03:97:b5:83:f7:85:c2:15:3f:fc:83:8b:5f:85:66:bd: 69:65:9a:c1:b1:6d:df:bd:b5:da:08:65:c7:9c:3b:ce:51:e4: 54:c3:a9:39:43:5b:17:ef:05:4d:b9:78:51:57:7d:4c:ad:68: ba:46:a8:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xg1pKrGX51jzuLPg3ZLLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YmRjMzc2YTE1OWQwNWUyYWY5NzE3NmEzZWJhODM2MGU2 MGQxNzYwHhcNMjUxMjE5MTgwMTI0WhcNMjUxMjIwMTgwMTI0WjAzMTEwLwYDVQQD EyhhNzRiNWVhZWVmODVhYzQ0MTY4ZDQ2YzJiNmUwZDM2Mjk5N2MwOGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbree1YrFNRuUPSxlzvAKnOT8N7E Q+z53Vt6dN59Ooj9rVhK223PhU4sZI3lMToaDLbiwQstbsGqoZRz3CcQZgPkdH4Z xSH4DgTNYq8LJ7MP//U9gM4z89pygu3+bpG2vOZ02aQJyQiaBiQ0Se9PPKI2Sp8g 5/2RnSVhJTTpjxSKG4xx+NgnUl5PlPvsv77nHwTwYvlp0fuIbwk8XBHlMpa3Nsjb /3wiyLk8xtVSaSGf0qvpwBg1cakmY4NsyGO6U2xyKIRC1fSBzSonsFb18SOHn+6s zhf57sHdnuu0C+6y6gebrynbDYIlF/3SKHnuFX8Kafzosyqtrf8pPYjFkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdLXq7vhaxEFo1Gwrbg02KZfAiqMB8GA1UdIwQY MBaAFLS9w3ahWdBeKvlxdqPrqDYOYNF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEwzRGRxRlowRjRxLVhGMm8tdW9OZzVnMFhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80MGVhMTQtZGM1MC00YWEwLWFhODUt MjhkMDEwNjAzNTI5LzEvdEwzRGRxRlowRjRxLVhGMm8tdW9OZzVnMFhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80MGVhMTQtZGM1MC00YWEwLWFhODUtMjhkMDEwNjAzNTI5 LzEvdEwzRGRxRlowRjRxLVhGMm8tdW9OZzVnMFhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIWyJ2gd W1359gkY9pvknuriET1/1UajGMm1Y60KyJNzwiJ8qr7mixlAgCeVu2122uI7asDH gBg3eALJDt7FJORvpAKhX685ewJHjta1MrnOc7ifNFZBHekW4ksRvTK6LsiQwbh/ zatgTLYHRqtmtzVTM2r5pC9Cx6mhgfY3DNjSphFo12g6DzmAQaPQrH9prq09rtht 89fvkgZzVsYvJuQ6zdT0/XegQYR8J0Krxt7O4Jhye0xQebHAHo5c2MB9+FoKy/F9 4mkDl7WD94XCFT/8g4tfhWa9aWWawbFt37212ghlx5w7zlHkVMOpOUNbF+8FTbl4 UVd9TK1oukaoxQ== -----END CERTIFICATE-----Generated at Fri Dec 19 21:13:20 2025 by rpki-client