This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft File: tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft (raw, json) Hash identifier: XXU6RqwkyplAYs4xXdcM8OAgtc3Sn52gBuCCWO4J9zI= Subject key identifier: A2:0C:06:F9:17:7B:6D:D9:B6:40:4C:85:DC:5F:33:58:E5:9A:FF:05 Authority key identifier: B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97 Certificate issuer: /CN=b414b09beeab905ff41e6813256054b182294297 Certificate serial: 019B5976C3916FC19EE8C1F6C88EA64DE9F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft Manifest number: 0CF8 Signing time: Fri 26 Dec 2025 07:01:54 +0000 Manifest this update: Fri 26 Dec 2025 07:01:54 +0000 Manifest next update: Sat 27 Dec 2025 07:01:54 +0000 Files and hashes: 1: 9ie56jozGctsQMPeP2PnRQlQSUc.roa (hash: 5kDUdIA6jw7l4e4ssTIC7py/rMtiw/D++uBoc2CI0Qo=) 2: mT-8_dVnmXbsJKgoN35LXNaAywM.roa (hash: o5cN5KMUIwn/VQVHMV9OAvcCU4Z7KPV9dR9Yvh1kUlg=) 3: tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl (hash: uiNEW0FustMMMASWuVHfgAx5dngPl+aDvcM4tdKkdKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:c3:91:6f:c1:9e:e8:c1:f6:c8:8e:a6:4d:e9:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b414b09beeab905ff41e6813256054b182294297 Validity Not Before: Dec 26 07:01:54 2025 GMT Not After : Dec 27 07:01:54 2025 GMT Subject: CN=a20c06f9177b6dd9b6404c85dc5f3358e59aff05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8b:17:fa:a3:1c:bf:9d:f6:37:af:7b:e2:2d: 39:b8:6a:ad:cc:c1:11:31:33:72:ec:b8:6a:cf:ce: 0d:1a:5e:77:0e:23:d7:9b:93:2f:05:30:bf:49:88: 0b:d0:8b:40:3d:a6:db:9a:c1:69:84:22:db:cd:6e: 73:d5:87:ca:11:2f:47:d3:d9:64:33:3b:9a:a3:6d: e1:4a:0c:10:27:2a:28:ba:96:66:ac:33:fa:9f:eb: f1:58:0a:b4:f6:0d:6d:5b:79:32:26:e6:fd:ea:8b: 2f:7a:e8:07:fd:aa:a2:00:c7:73:05:98:37:75:61: 75:f7:81:f6:53:11:bf:ef:9b:85:35:11:4b:26:e5: d4:7e:e3:c2:ee:78:06:0f:e6:e2:28:ae:02:05:6c: 1d:b5:43:df:30:c0:03:48:34:34:1e:40:8c:8c:bd: 9a:0e:db:1c:20:98:d4:0d:ae:4e:94:41:b1:02:e7: 0b:70:18:62:0a:83:5c:03:98:36:cb:1a:93:96:03: b3:be:6f:7a:81:16:46:e0:a1:c8:f2:da:b8:52:23: 65:9d:62:97:9d:d4:c2:9d:30:60:1a:34:f8:ec:22: cb:1e:58:b7:43:da:2f:bc:c2:62:86:03:3e:78:82: fc:0e:66:89:db:9e:e2:19:e5:60:4f:f1:57:ee:b0: e0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0C:06:F9:17:7B:6D:D9:B6:40:4C:85:DC:5F:33:58:E5:9A:FF:05 X509v3 Authority Key Identifier: keyid:B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:bd:ea:74:c0:e3:5d:ff:33:79:36:ae:2e:10:07:02:bf:c3: 81:69:5f:d5:f6:be:b1:56:a3:cc:e4:8a:22:d0:5e:be:28:9a: e9:fc:77:a8:ce:79:88:df:3d:11:b3:65:b4:f2:6e:36:14:25: cf:fe:79:5b:4b:6a:d5:e7:78:bb:94:22:90:2b:63:7f:0a:cf: f2:54:f6:96:7e:24:fb:07:83:3a:39:8b:9d:23:e2:f9:d5:92: b6:2c:75:a9:1b:ea:a8:20:06:6d:af:da:fc:84:63:ed:f4:7e: 5c:bd:ab:0f:6e:c5:bd:57:25:62:52:c4:cf:6b:e0:d8:4e:9e: 2a:72:49:3a:94:c6:af:0c:65:42:f3:e9:44:b5:eb:c7:61:f5: 46:ee:92:9d:98:64:53:2c:d4:99:7f:f3:d4:60:4e:83:ec:ae: 1b:e1:31:06:66:3f:ee:8f:4f:ca:e5:72:41:0c:fb:18:1d:b0: ba:fd:16:3f:d6:67:b1:aa:53:24:4e:af:b7:7c:04:59:04:f0: 2a:05:91:27:18:84:4c:02:9a:d7:5c:af:64:19:80:ca:2e:20: 8f:05:eb:b9:38:fd:0d:7e:02:08:d9:08:7b:17:e2:f0:4f:cd: 01:3d:74:f2:fc:24:8c:94:5e:c2:cc:15:8e:da:a5:ef:09:50: d7:56:1d:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdsORb8Ge6MH2yI6mTenyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MTRiMDliZWVhYjkwNWZmNDFlNjgxMzI1NjA1NGIxODIy OTQyOTcwHhcNMjUxMjI2MDcwMTU0WhcNMjUxMjI3MDcwMTU0WjAzMTEwLwYDVQQD EyhhMjBjMDZmOTE3N2I2ZGQ5YjY0MDRjODVkYzVmMzM1OGU1OWFmZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4sX+qMcv532N6974i05uGqtzMER MTNy7Lhqz84NGl53DiPXm5MvBTC/SYgL0ItAPabbmsFphCLbzW5z1YfKES9H09lk Mzuao23hSgwQJyooupZmrDP6n+vxWAq09g1tW3kyJub96osveugH/aqiAMdzBZg3 dWF194H2UxG/75uFNRFLJuXUfuPC7ngGD+biKK4CBWwdtUPfMMADSDQ0HkCMjL2a DtscIJjUDa5OlEGxAucLcBhiCoNcA5g2yxqTlgOzvm96gRZG4KHI8tq4UiNlnWKX ndTCnTBgGjT47CLLHli3Q9ovvMJihgM+eIL8DmaJ257iGeVgT/FX7rDgiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIMBvkXe23ZtkBMhdxfM1jlmv8FMB8GA1UdIwQY MBaAFLQUsJvuq5Bf9B5oEyVgVLGCKUKXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEJTd20tNnJrRl8wSG1nVEpXQlVzWUlwUXBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84MDBlYjYtODY4Yi00YTMwLWI0MDIt NGJjZTQyNDcyM2Q5LzEvdEJTd20tNnJrRl8wSG1nVEpXQlVzWUlwUXBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84MDBlYjYtODY4Yi00YTMwLWI0MDItNGJjZTQyNDcyM2Q5 LzEvdEJTd20tNnJrRl8wSG1nVEpXQlVzWUlwUXBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm73qdMDj Xf8zeTauLhAHAr/DgWlf1fa+sVajzOSKItBeviia6fx3qM55iN89EbNltPJuNhQl z/55W0tq1ed4u5QikCtjfwrP8lT2ln4k+weDOjmLnSPi+dWStix1qRvqqCAGba/a /IRj7fR+XL2rD27FvVclYlLEz2vg2E6eKnJJOpTGrwxlQvPpRLXrx2H1Ru6SnZhk UyzUmX/z1GBOg+yuG+ExBmY/7o9PyuVyQQz7GB2wuv0WP9ZnsapTJE6vt3wEWQTw KgWRJxiETAKa11yvZBmAyi4gjwXruTj9DX4CCNkIexfi8E/NAT108vwkjJRewswV jtql7wlQ11YdRQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:56:19 2025 by rpki-client