This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json) Hash identifier: nGSI6aXBnvZtArnouCHk/1RHQ4MFikBuRVQxyA4bGuM= Subject key identifier: BF:85:07:00:A3:0B:41:CA:2C:44:F0:F7:CC:4F:D5:AB:12:AF:64:86 Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7 Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7 Certificate serial: 019AF68A9FEA6F020D5D18862E8B1302C920 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft Manifest number: 03EC Signing time: Sun 07 Dec 2025 02:01:11 +0000 Manifest this update: Sun 07 Dec 2025 02:01:11 +0000 Manifest next update: Mon 08 Dec 2025 02:01:11 +0000 Files and hashes: 1: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: r5X2UAqkAzVxGSUYBEQRjapTc3ZlPOnzEhm0yagiZv4=) 2: iTC7AIloz6nQaL3mT_rFGYZ-wig.roa (hash: fesaTZGLmhO2WzwSQegYz6bFqw2Ey8O4XUX49y7XEFA=) 3: uAJKiTWW3Ub4f2F2pRQzTM4uTxQ.roa (hash: QYC9wZJDQP4jalSd59izpnWdNPoZL5WfK7FyvYaliJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:9f:ea:6f:02:0d:5d:18:86:2e:8b:13:02:c9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7 Validity Not Before: Dec 7 02:01:11 2025 GMT Not After : Dec 8 02:01:11 2025 GMT Subject: CN=bf850700a30b41ca2c44f0f7cc4fd5ab12af6486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:86:8a:0f:85:8d:8d:a0:29:ba:d0:90:f1:ad: 91:32:0f:2d:67:a9:df:55:f8:e0:5d:b0:af:01:82: fd:68:6a:c9:2f:61:b3:22:17:f0:7e:6d:07:c1:21: 66:54:00:ef:71:08:1d:71:e5:f5:c4:da:66:da:dd: 4a:9d:14:3c:b7:7e:a1:1f:0a:60:d7:2e:ee:8d:d8: 15:22:e0:c8:8b:e7:38:d9:d2:91:4c:7e:4c:3a:0b: 9e:cd:0b:b5:c6:1d:97:5b:af:4e:ef:f3:49:14:c0: bd:af:65:a4:86:45:5c:7f:9a:69:9e:c2:f2:c9:72: 43:b4:6f:ad:ea:cf:03:36:f2:78:68:f9:27:9e:cd: 9d:5f:cf:70:fb:30:1f:cb:ca:41:31:0b:7a:09:89: 4e:76:bb:54:84:6f:e3:82:df:f3:5d:29:99:74:a4: 37:80:28:2c:b1:24:30:a2:87:2f:d8:2d:56:9c:8f: 20:4f:95:d7:94:8e:0d:bd:cd:a9:33:4a:8d:cc:11: ea:f7:a3:a5:1d:8b:f4:5b:d0:92:c0:05:aa:63:98: a7:16:77:ee:f4:ba:e3:ab:44:8d:81:e5:e1:43:db: f8:30:e2:74:9a:26:36:6d:3f:cb:5b:e4:d5:d8:03: 29:86:47:00:6c:e7:05:59:a0:7f:01:d1:2f:0a:a8: a4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:85:07:00:A3:0B:41:CA:2C:44:F0:F7:CC:4F:D5:AB:12:AF:64:86 X509v3 Authority Key Identifier: keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:cd:65:43:c8:f1:65:70:2b:87:1c:86:26:0e:62:ab:d4:04: 77:26:f3:89:46:f3:75:1f:8f:c3:ff:d8:4d:f0:9a:c5:e9:15: 18:4b:a2:f4:d7:96:ef:cc:3a:12:65:5b:eb:ee:f3:45:44:04: b9:25:b1:6b:7c:da:72:29:cc:2d:18:59:37:dc:be:0e:31:5f: f3:07:24:61:d6:f7:da:ba:c5:dd:13:6b:60:d3:ab:19:f4:4c: b4:08:f8:1d:be:eb:ea:29:d6:5a:f2:f5:6b:30:dd:b1:42:54: 94:19:72:52:2f:9d:47:c1:04:11:78:9c:a9:9b:f7:9f:f8:5c: fa:a0:4d:a4:7b:38:d7:a6:3d:1f:e9:5b:23:d9:0f:28:d9:ac: 73:f0:de:71:db:96:a2:45:a3:9d:ac:1f:87:e5:ea:fc:60:58: 79:17:be:a1:e5:76:15:49:72:50:85:1a:e1:df:ea:e4:28:85: eb:1b:a9:a3:cf:b2:5b:87:fb:db:57:78:f7:b1:75:64:36:0b: 6f:4f:66:2c:4d:f1:77:f5:15:f3:6d:61:3f:2b:33:f8:33:f4: b4:11:67:7f:1e:f9:68:50:d6:58:80:8e:f2:3b:29:98:48:73: c0:a8:a8:ee:b7:8f:0d:9b:a4:2b:ec:36:c0:b8:ca:67:21:62: 80:2c:94:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ip/qbwINXRiGLosTAskgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZGQ2OTczNDkzY2UwYzM4NDliOGI5MTliNzUwMmJhNWZh MDEzZDcwHhcNMjUxMjA3MDIwMTExWhcNMjUxMjA4MDIwMTExWjAzMTEwLwYDVQQD EyhiZjg1MDcwMGEzMGI0MWNhMmM0NGYwZjdjYzRmZDVhYjEyYWY2NDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4aKD4WNjaAputCQ8a2RMg8tZ6nf VfjgXbCvAYL9aGrJL2GzIhfwfm0HwSFmVADvcQgdceX1xNpm2t1KnRQ8t36hHwpg 1y7ujdgVIuDIi+c42dKRTH5MOguezQu1xh2XW69O7/NJFMC9r2WkhkVcf5ppnsLy yXJDtG+t6s8DNvJ4aPknns2dX89w+zAfy8pBMQt6CYlOdrtUhG/jgt/zXSmZdKQ3 gCgssSQwoocv2C1WnI8gT5XXlI4Nvc2pM0qNzBHq96OlHYv0W9CSwAWqY5inFnfu 9Lrjq0SNgeXhQ9v4MOJ0miY2bT/LW+TV2AMphkcAbOcFWaB/AdEvCqiknwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+FBwCjC0HKLETw98xP1asSr2SGMB8GA1UdIwQY MBaAFEzdaXNJPODDhJuLkZt1ArpfoBPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hMzVmN2YtMjE5NC00NmQzLTkxYmQt Y2MwZjUwYmRhMTU5LzEvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hMzVmN2YtMjE5NC00NmQzLTkxYmQtY2MwZjUwYmRhMTU5 LzEvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUc1lQ8jx ZXArhxyGJg5iq9QEdybziUbzdR+Pw//YTfCaxekVGEui9NeW78w6EmVb6+7zRUQE uSWxa3zacinMLRhZN9y+DjFf8wckYdb32rrF3RNrYNOrGfRMtAj4Hb7r6inWWvL1 azDdsUJUlBlyUi+dR8EEEXicqZv3n/hc+qBNpHs416Y9H+lbI9kPKNmsc/DecduW okWjnawfh+Xq/GBYeRe+oeV2FUlyUIUa4d/q5CiF6xupo8+yW4f721d497F1ZDYL b09mLE3xd/UV821hPysz+DP0tBFnfx75aFDWWICO8jspmEhzwKio7rePDZukK+w2 wLjKZyFigCyUxw== -----END CERTIFICATE-----Generated at Sun Dec 7 05:17:49 2025 by rpki-client