This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft File: tGS0UjqJcrni9GpPShY06XAnrt8.mft (raw, json) Hash identifier: 36RDk2wDr+kK7SsjXRt4/JzHxBt87peDuzipK/JfJi8= Subject key identifier: 88:CE:1C:AF:88:1F:53:69:C9:12:6C:03:E1:AB:A1:EC:9E:50:CC:CD Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf Certificate serial: 019AABDD9C36AE5FBC3D437A7B5C7FA4F2D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft Manifest number: 0707 Signing time: Sat 22 Nov 2025 14:00:18 +0000 Manifest this update: Sat 22 Nov 2025 14:00:18 +0000 Manifest next update: Sun 23 Nov 2025 14:00:18 +0000 Files and hashes: 1: LCm5HjjBIgE4kc53Y1x9V3jEK5E.roa (hash: gidlYB2yA995VC/sjZRH4fK+Z2xDnArATR8jcQsRBeo=) 2: Vo2AEZubMry-8LbxfP3bd7koV9U.roa (hash: Fh0uHUq/PCCkV86hQ4ARdMVMrk3QlRXqnTaAy7kodnk=) 3: g8C52r-HgjcOKaKK01GccaiLGqY.roa (hash: yFMdULn9+zrpJgeM+fVWlj0c0e8CtPQGd00H0hnJUEs=) 4: tGS0UjqJcrni9GpPShY06XAnrt8.crl (hash: s9bcFGe2s9So8MCF7sVTNCovTOct6jpPcBtqlClgB9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:dd:9c:36:ae:5f:bc:3d:43:7a:7b:5c:7f:a4:f2:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf Validity Not Before: Nov 22 14:00:18 2025 GMT Not After : Nov 23 14:00:18 2025 GMT Subject: CN=88ce1caf881f5369c9126c03e1aba1ec9e50cccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:14:20:e4:7b:a4:aa:02:44:46:c7:48:63:7d: 64:29:b3:b6:a7:6b:92:ff:d4:c1:1d:05:88:ba:9a: 64:e9:60:34:69:69:f9:02:45:6e:ff:b4:80:66:b0: 8d:f6:4b:e0:1a:5f:e1:0f:16:af:49:e4:29:92:ac: da:a0:62:be:76:cc:86:10:0d:f7:f4:48:cf:ca:fb: 67:26:53:06:2f:30:74:a2:dd:01:5f:64:03:12:b5: c1:3e:aa:5f:00:6d:f7:7f:b0:e4:dd:0a:1b:32:62: 56:93:78:ae:54:2f:64:e6:08:05:7e:c7:19:0d:a8: 90:6a:ce:47:17:2e:f3:d3:41:f1:b8:3a:a5:54:71: 3d:3f:c8:4b:31:f4:f0:04:24:a6:af:1b:f7:85:8d: ad:cc:02:4c:d8:5e:d5:24:9b:eb:34:fe:26:4e:79: fd:89:7e:db:a6:99:3f:0a:05:37:cd:dc:0a:e6:b8: a4:1b:98:ac:3d:20:02:80:19:78:f2:a4:28:ae:f5: 41:67:1e:fc:c4:d6:2b:21:fe:0e:a9:bb:6b:20:78: 06:20:e3:ef:98:59:ac:be:9b:6c:9e:9f:7d:d8:ae: b7:af:86:38:a1:9c:44:7b:58:8f:93:a2:a2:74:1d: b4:13:51:aa:ef:b7:f8:9c:fe:68:68:6a:11:41:eb: 2c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CE:1C:AF:88:1F:53:69:C9:12:6C:03:E1:AB:A1:EC:9E:50:CC:CD X509v3 Authority Key Identifier: keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:dd:25:ce:f0:66:60:65:29:22:ac:a1:50:d6:62:22:96:e9: 43:b3:1d:6e:49:6f:93:fc:ef:8d:3e:8d:31:7f:7e:b1:51:69: 95:80:1a:9d:43:16:c2:9c:61:8f:a3:8a:ec:ab:61:1d:3b:8b: 9e:be:02:38:f2:7f:8a:bf:aa:f5:a7:80:1d:4d:90:60:f3:b1: 6b:f9:74:94:48:c5:23:f1:66:9a:e5:a0:4f:a5:fd:5a:f5:e2: c6:ea:28:d6:32:45:51:7c:e8:b5:46:26:e2:c9:08:5b:67:53: e1:bb:c8:75:e2:23:1d:0a:e6:ea:21:08:aa:fd:47:dc:38:a8: dc:48:0e:70:d2:84:ea:06:81:07:7c:2a:5a:96:9b:75:d2:67: 75:ba:8d:c9:1d:37:5b:dc:06:65:40:65:87:6d:2f:d0:56:62: 62:dd:84:ba:2d:75:dd:0c:0f:37:16:d8:ec:c2:03:35:24:b5: 48:87:cd:b6:26:e6:a9:7f:8b:08:0e:0e:79:7d:34:98:76:2e: 05:8b:42:16:3b:d2:d5:97:5a:2b:68:9f:45:f6:76:2a:81:02: e1:eb:78:a0:de:15:72:eb:6f:0f:c3:83:61:b3:66:2d:55:64: cd:24:02:79:2d:4a:e9:6f:ea:d4:df:5e:be:ab:72:1d:be:3d: f3:0d:83:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqr3Zw2rl+8PUN6e1x/pPLZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NjRiNDUyM2E4OTcyYjllMmY0NmE0ZjRhMTYzNGU5NzAy N2FlZGYwHhcNMjUxMTIyMTQwMDE4WhcNMjUxMTIzMTQwMDE4WjAzMTEwLwYDVQQD Eyg4OGNlMWNhZjg4MWY1MzY5YzkxMjZjMDNlMWFiYTFlYzllNTBjY2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRQg5HukqgJERsdIY31kKbO2p2uS /9TBHQWIuppk6WA0aWn5AkVu/7SAZrCN9kvgGl/hDxavSeQpkqzaoGK+dsyGEA33 9EjPyvtnJlMGLzB0ot0BX2QDErXBPqpfAG33f7Dk3QobMmJWk3iuVC9k5ggFfscZ DaiQas5HFy7z00HxuDqlVHE9P8hLMfTwBCSmrxv3hY2tzAJM2F7VJJvrNP4mTnn9 iX7bppk/CgU3zdwK5rikG5isPSACgBl48qQorvVBZx78xNYrIf4OqbtrIHgGIOPv mFmsvptsnp992K63r4Y4oZxEe1iPk6KidB20E1Gq77f4nP5oaGoRQessIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjOHK+IH1NpyRJsA+GroeyeUMzNMB8GA1UdIwQY MBaAFLRktFI6iXK54vRqT0oWNOlwJ67fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jN2NhZjMtZWIwOC00NTU2LWE1Yjct ZmM2ZTc3ODg0MDU0LzEvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jN2NhZjMtZWIwOC00NTU2LWE1YjctZmM2ZTc3ODg0MDU0 LzEvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAON0lzvBm YGUpIqyhUNZiIpbpQ7Mdbklvk/zvjT6NMX9+sVFplYAanUMWwpxhj6OK7KthHTuL nr4COPJ/ir+q9aeAHU2QYPOxa/l0lEjFI/FmmuWgT6X9WvXixuoo1jJFUXzotUYm 4skIW2dT4bvIdeIjHQrm6iEIqv1H3Dio3EgOcNKE6gaBB3wqWpabddJndbqNyR03 W9wGZUBlh20v0FZiYt2Eui113QwPNxbY7MIDNSS1SIfNtibmqX+LCA4OeX00mHYu BYtCFjvS1ZdaK2ifRfZ2KoEC4et4oN4VcutvD8ODYbNmLVVkzSQCeS1K6W/q1N9e vqtyHb498w2DtA== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:54 2025 by rpki-client