This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json) Hash identifier: XWucr7/JlxIrNE7MLov5BamD2Nng1SmHJbSuppudLVI= Subject key identifier: 5F:49:71:CE:C6:3A:BE:36:4D:14:DE:98:6D:3C:48:2F:98:24:C0:DB Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd Certificate serial: 019B0BC8BF033CAF2738E47EB27EE8CA6F35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft Manifest number: 176D Signing time: Thu 11 Dec 2025 05:01:03 +0000 Manifest this update: Thu 11 Dec 2025 05:01:03 +0000 Manifest next update: Fri 12 Dec 2025 05:01:03 +0000 Files and hashes: 1: bCO5bqFLQTtaSqSwTRLhrpm3wCA.roa (hash: xHiR4ALGk4+cM6JODCM19LWc7pantvAdvK3viET0qj4=) 2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: xtOtr5dl6Kfqt4ATl6kpdGhWrMN5bka83VdFiPNYjcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0b:c8:bf:03:3c:af:27:38:e4:7e:b2:7e:e8:ca:6f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd Validity Not Before: Dec 11 05:01:03 2025 GMT Not After : Dec 12 05:01:03 2025 GMT Subject: CN=5f4971cec63abe364d14de986d3c482f9824c0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a6:e2:e2:68:9f:22:10:b2:8a:15:fd:61:fd: 83:b0:95:93:99:c0:01:df:1a:83:d8:06:dd:07:63: 43:d4:9e:70:c6:f8:2a:52:0b:71:e7:7f:4e:7e:af: 20:50:3a:18:1c:c8:b4:fb:08:ec:92:9b:d1:e3:74: 94:7a:20:a2:91:5b:88:58:3f:81:fb:9b:07:7c:69: 08:23:5d:7b:c6:ea:74:81:b3:d9:cb:4b:9e:58:f5: 67:83:83:99:ea:11:31:21:29:1c:03:a5:2d:9c:67: 43:ba:1a:85:7c:80:48:cd:38:fb:e0:52:5f:87:de: 9b:79:6b:e5:83:20:5e:f8:93:76:98:86:c5:86:4f: 2f:9a:36:39:b3:2c:a9:9a:2f:bd:e2:02:97:43:cb: 26:2c:36:ea:22:08:b5:d9:3f:52:82:6f:fa:97:96: c0:15:d5:8b:0c:ac:83:19:4f:43:37:9a:da:c7:6e: 3a:98:63:36:05:0a:dc:5c:1d:5d:ef:ab:74:ed:52: 3a:c1:a7:8a:47:48:a8:84:ca:ed:6b:6b:0e:39:25: dc:df:14:79:58:f0:e9:e8:a9:14:bf:a6:0d:00:96: 4a:a3:97:3e:e5:ab:e7:c5:6c:f7:e1:a1:85:5d:06: 47:eb:3a:ea:2e:58:51:bd:2c:7d:ff:62:29:ad:8e: a3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:49:71:CE:C6:3A:BE:36:4D:14:DE:98:6D:3C:48:2F:98:24:C0:DB X509v3 Authority Key Identifier: keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:b2:80:d9:55:0c:e0:26:cf:cb:8b:b1:8c:55:d1:86:f6:93: 30:e0:3e:9d:17:63:78:05:13:38:05:1a:10:66:38:92:7e:02: ca:88:e7:6e:e0:79:b7:41:c0:d7:7b:f5:d7:9a:ba:49:29:09: 31:f6:37:94:92:c2:65:8b:11:b7:43:0e:0f:1b:86:0c:a2:93: 40:f5:4a:9c:4e:bc:20:79:29:a9:86:e5:40:04:de:11:5b:d6: f5:96:60:ec:84:01:1c:11:a8:e9:80:c9:9b:68:6d:40:e2:ed: c9:57:8b:e3:9c:b3:4b:ae:41:c7:98:87:44:ed:b8:0d:34:d9: 65:78:e4:14:35:a4:00:4c:08:31:09:af:b0:1e:77:ca:ba:dd: f5:df:86:d9:89:be:e9:73:26:a8:3f:0a:b0:6d:df:31:12:2c: 92:44:a2:38:e6:93:d7:6b:8b:c5:b7:11:35:92:11:af:4c:05: 20:65:9f:5b:4c:60:61:7b:c4:54:7f:35:79:83:56:fb:1e:01: 72:2e:29:49:7f:05:b8:19:01:32:ef:2f:c0:09:3f:0f:52:ab: a1:2a:f4:cc:fa:6c:bd:96:a9:c9:08:df:66:2d:d0:73:0a:52: da:ff:a5:92:c1:54:cb:2f:f7:3d:fc:a2:d8:6f:8a:b5:5a:4f: ae:69:d1:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsLyL8DPK8nOOR+sn7oym81MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0Y2Q5NmIyN2U4ODQzNTA0YmI1YmQ1NWMzMjllYzAyZGI5 ZjBmZmQwHhcNMjUxMjExMDUwMTAzWhcNMjUxMjEyMDUwMTAzWjAzMTEwLwYDVQQD Eyg1ZjQ5NzFjZWM2M2FiZTM2NGQxNGRlOTg2ZDNjNDgyZjk4MjRjMGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyabi4mifIhCyihX9Yf2DsJWTmcAB 3xqD2AbdB2ND1J5wxvgqUgtx539Ofq8gUDoYHMi0+wjskpvR43SUeiCikVuIWD+B +5sHfGkII117xup0gbPZy0ueWPVng4OZ6hExISkcA6UtnGdDuhqFfIBIzTj74FJf h96beWvlgyBe+JN2mIbFhk8vmjY5syypmi+94gKXQ8smLDbqIgi12T9Sgm/6l5bA FdWLDKyDGU9DN5rax246mGM2BQrcXB1d76t07VI6waeKR0iohMrta2sOOSXc3xR5 WPDp6KkUv6YNAJZKo5c+5avnxWz34aGFXQZH6zrqLlhRvSx9/2IprY6j6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9Jcc7GOr42TRTemG08SC+YJMDbMB8GA1UdIwQY MBaAFLTNlrJ+iENQS7W9VcMp7ALbnw/9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE0yV3NuNklRMUJMdGIxVnd5bnNBdHVmRF8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xOWRkYWQtYzQ1OC00NDFlLTk4NGUt NTczZjE3ZDJhZWYzLzEvdE0yV3NuNklRMUJMdGIxVnd5bnNBdHVmRF8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8xOWRkYWQtYzQ1OC00NDFlLTk4NGUtNTczZjE3ZDJhZWYz LzEvdE0yV3NuNklRMUJMdGIxVnd5bnNBdHVmRF8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrKA2VUM 4CbPy4uxjFXRhvaTMOA+nRdjeAUTOAUaEGY4kn4CyojnbuB5t0HA13v115q6SSkJ MfY3lJLCZYsRt0MODxuGDKKTQPVKnE68IHkpqYblQATeEVvW9ZZg7IQBHBGo6YDJ m2htQOLtyVeL45yzS65Bx5iHRO24DTTZZXjkFDWkAEwIMQmvsB53yrrd9d+G2Ym+ 6XMmqD8KsG3fMRIskkSiOOaT12uLxbcRNZIRr0wFIGWfW0xgYXvEVH81eYNW+x4B ci4pSX8FuBkBMu8vwAk/D1KroSr0zPpsvZapyQjfZi3QcwpS2v+lksFUyy/3Pfyi 2G+KtVpPrmnRrA== -----END CERTIFICATE-----Generated at Thu Dec 11 11:32:28 2025 by rpki-client