This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft File: t-0w6W6la5gOa3k9GobGLdXAvB8.mft (raw, json) Hash identifier: MUGyPNIVgIKT/AY9mdz+DeHP66AyXjdNngbVbxxDuvU= Subject key identifier: 00:29:26:6B:8A:51:BB:C3:77:12:E6:E0:B9:98:5B:45:B3:4C:74:7B Authority key identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F Certificate issuer: /CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f Certificate serial: 019B59E38AEE0F39690FA76E11EDBF39DC2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft Manifest number: 07CA Signing time: Fri 26 Dec 2025 09:00:43 +0000 Manifest this update: Fri 26 Dec 2025 09:00:43 +0000 Manifest next update: Sat 27 Dec 2025 09:00:43 +0000 Files and hashes: 1: 8HKSdNrm9QMyoSA380bXaBqQQ0o.roa (hash: n0TkThrqHtx1QI4h5bmhzme4/EVU3X+pkCgBWj6DraA=) 2: t-0w6W6la5gOa3k9GobGLdXAvB8.crl (hash: qwqtsOEYUFcLAMejFEvBJOxd8GICmp1GUFPRDt4GKxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:8a:ee:0f:39:69:0f:a7:6e:11:ed:bf:39:dc:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f Validity Not Before: Dec 26 09:00:43 2025 GMT Not After : Dec 27 09:00:43 2025 GMT Subject: CN=0029266b8a51bbc37712e6e0b9985b45b34c747b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:45:84:90:f6:ed:0e:3e:2c:f1:c1:4f:c0:c5: 10:2e:7f:19:58:2e:86:91:f4:38:20:3d:67:c4:f5: bf:f1:42:19:9b:93:85:a9:f4:db:ef:07:c9:e9:8d: 0b:6a:04:ec:b9:e0:38:ee:0a:8a:26:c6:2c:96:1f: 61:82:e4:6f:57:2d:94:51:11:75:5d:0a:08:b5:94: 26:78:f5:89:e8:19:16:a2:6f:7e:40:b0:71:44:55: 82:ca:fb:34:81:8f:e0:cc:10:e7:87:cd:fd:2f:81: ee:02:d1:43:ed:d2:90:d3:c7:db:0c:be:92:3b:f2: c2:90:69:f4:34:9f:75:9e:11:53:23:8c:7c:73:56: d4:e5:44:9f:29:74:19:7e:23:ea:7f:37:2c:d3:10: e1:9c:3c:13:ed:1c:e7:a8:3d:76:33:3f:1c:d4:86: d7:3d:6f:a8:2d:d0:a5:f0:2d:74:aa:85:46:72:73: d8:06:19:3d:6b:87:eb:db:bb:a3:86:c0:bf:55:fc: 13:c1:d9:a1:6f:3d:60:b9:19:e7:f3:9b:e4:13:0c: fc:56:83:db:c9:73:9d:b6:b3:60:92:fe:45:f8:d2: c5:86:46:48:23:91:37:ea:45:e2:44:6d:b8:1e:a7: e8:96:5c:60:79:45:4e:1b:9f:c9:75:8d:7a:a8:ea: 8c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:29:26:6B:8A:51:BB:C3:77:12:E6:E0:B9:98:5B:45:B3:4C:74:7B X509v3 Authority Key Identifier: keyid:B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:41:44:57:fd:6a:c2:52:e1:01:4e:46:61:cd:17:dc:09:38: 3d:e0:d8:4b:7c:83:ad:95:ae:66:06:80:10:e9:8e:37:30:df: 05:97:37:f1:05:90:81:77:59:d6:a3:42:89:95:cb:4f:99:79: 6e:2a:37:a2:71:a2:c3:c3:6a:68:0f:d3:47:eb:d8:04:25:fe: 32:94:2a:26:97:10:7a:44:10:38:7d:ec:91:64:0f:3f:9f:3f: fc:08:35:ff:a9:40:10:ec:4e:bc:41:bb:a6:94:b0:f2:7d:86: 3f:38:d5:69:35:c1:e1:d4:7e:ea:16:cd:0d:d2:59:fd:7e:aa: 95:7b:60:20:e4:7e:98:ed:7b:83:e3:45:dc:6e:81:89:df:a9: 35:90:d0:ec:a8:bd:35:11:8d:61:d0:8a:6f:3d:e1:8d:eb:4e: b5:cb:74:02:6d:aa:23:af:dd:4e:4c:28:85:58:4a:7d:1d:ca: 69:97:b2:28:91:8f:98:cd:d0:a9:18:36:aa:59:e0:ce:88:cc: 2d:63:4d:f3:60:29:8d:77:e9:b3:d0:30:38:a7:db:11:91:32: 62:79:83:60:4f:3b:63:d7:65:5b:64:14:5f:e2:9d:ce:ae:dd: f2:8b:c1:9a:5d:ca:d5:8f:2d:1e:0a:68:e9:65:61:f9:3f:c6: 89:47:fe:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ44ruDzlpD6duEe2/OdwrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ZWQzMGU5NmVhNTZiOTgwZTZiNzkzZDFhODZjNjJkZDVj MGJjMWYwHhcNMjUxMjI2MDkwMDQzWhcNMjUxMjI3MDkwMDQzWjAzMTEwLwYDVQQD EygwMDI5MjY2YjhhNTFiYmMzNzcxMmU2ZTBiOTk4NWI0NWIzNGM3NDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0WEkPbtDj4s8cFPwMUQLn8ZWC6G kfQ4ID1nxPW/8UIZm5OFqfTb7wfJ6Y0LagTsueA47gqKJsYslh9hguRvVy2UURF1 XQoItZQmePWJ6BkWom9+QLBxRFWCyvs0gY/gzBDnh839L4HuAtFD7dKQ08fbDL6S O/LCkGn0NJ91nhFTI4x8c1bU5USfKXQZfiPqfzcs0xDhnDwT7RznqD12Mz8c1IbX PW+oLdCl8C10qoVGcnPYBhk9a4fr27ujhsC/VfwTwdmhbz1guRnn85vkEwz8VoPb yXOdtrNgkv5F+NLFhkZII5E36kXiRG24HqfollxgeUVOG5/JdY16qOqMXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAApJmuKUbvDdxLm4LmYW0WzTHR7MB8GA1UdIwQY MBaAFLftMOlupWuYDmt5PRqGxi3VwLwfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdC0wdzZXNmxhNWdPYTNrOUdvYkdMZFhBdkI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mYTc5ZGQtMGZjYS00NjYxLTg4NjQt OTU1NTM3Y2I2OWYyLzEvdC0wdzZXNmxhNWdPYTNrOUdvYkdMZFhBdkI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9mYTc5ZGQtMGZjYS00NjYxLTg4NjQtOTU1NTM3Y2I2OWYy LzEvdC0wdzZXNmxhNWdPYTNrOUdvYkdMZFhBdkI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0FEV/1q wlLhAU5GYc0X3Ak4PeDYS3yDrZWuZgaAEOmONzDfBZc38QWQgXdZ1qNCiZXLT5l5 bio3onGiw8NqaA/TR+vYBCX+MpQqJpcQekQQOH3skWQPP58//Ag1/6lAEOxOvEG7 ppSw8n2GPzjVaTXB4dR+6hbNDdJZ/X6qlXtgIOR+mO17g+NF3G6Bid+pNZDQ7Ki9 NRGNYdCKbz3hjetOtct0Am2qI6/dTkwohVhKfR3KaZeyKJGPmM3QqRg2qlngzojM LWNN82ApjXfps9AwOKfbEZEyYnmDYE87Y9dlW2QUX+Kdzq7d8ovBml3K1Y8tHgpo 6WVh+T/GiUf+yw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:12 2025 by rpki-client