This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft File: tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft (raw, json) Hash identifier: fIbh2C9EOOjxhZPv0BMDvcXRI/e9iMv16vhJk0Zt44A= Subject key identifier: 9B:1B:0E:8F:B8:BE:4B:4D:AA:CE:2B:06:44:7A:A0:BD:0D:A2:C6:8D Authority key identifier: B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94 Certificate issuer: /CN=b56b5b54decf43e964f4be6d304e480a386cb794 Certificate serial: 019B299CB1F07A9A1EC697819CA6311E537D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft Manifest number: 0E Signing time: Wed 17 Dec 2025 00:01:33 +0000 Manifest this update: Wed 17 Dec 2025 00:01:33 +0000 Manifest next update: Thu 18 Dec 2025 00:01:33 +0000 Files and hashes: 1: tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl (hash: rZGYV0mA7KbwAClAens+vH2ZUtgpHxHTHlZZsdsufLo=) 2: wc35MgYGPiVoITK8dBRVt7Icluk.asa (hash: A16HGxaZ77Lcix1Lc05fm2biWcgZ/EQMJRjj60DKa2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:9c:b1:f0:7a:9a:1e:c6:97:81:9c:a6:31:1e:53:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56b5b54decf43e964f4be6d304e480a386cb794 Validity Not Before: Dec 17 00:01:33 2025 GMT Not After : Dec 18 00:01:33 2025 GMT Subject: CN=9b1b0e8fb8be4b4daace2b06447aa0bd0da2c68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f6:ce:5b:33:13:d0:3e:28:eb:da:7b:68:6d: 40:e5:e8:57:c0:87:53:7d:64:8f:d7:87:6f:80:82: b2:0d:cd:9a:5c:29:f3:33:74:90:d2:e4:a3:c9:d5: 9e:d0:11:6d:fe:c5:db:e9:27:02:37:00:ce:79:51: 26:1b:fa:d6:fa:f3:fa:1b:b4:7a:b5:aa:f3:7c:32: 86:08:5c:fb:2f:6d:e1:11:22:12:41:d3:51:be:01: 0f:7b:ba:28:f8:9c:2b:61:c2:bc:aa:f9:19:11:20: f7:eb:81:e4:40:a5:5c:ed:aa:e8:78:7e:a1:39:7d: e5:be:ba:36:63:e8:11:07:61:2a:7f:dc:d5:c0:89: fa:10:1d:bb:93:94:ae:09:67:7b:cf:17:2b:c5:a5: d4:58:1f:56:08:d0:32:72:98:33:af:4c:f6:cb:5b: ef:c4:e0:8f:f6:01:64:7e:cb:34:e0:83:2e:6b:41: 6b:99:ed:a7:31:a3:8b:1a:12:8c:de:9f:62:c2:c4: 45:bd:e5:61:79:b7:ea:e5:20:3a:21:46:d7:87:63: f9:a1:0e:bc:fe:66:c2:ab:fa:83:de:1a:53:b3:22: 31:17:f6:9f:74:c9:94:41:58:43:ad:3e:ef:8b:1b: 16:0e:f2:fe:b9:9b:ed:b0:3e:4b:39:90:31:c0:18: be:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1B:0E:8F:B8:BE:4B:4D:AA:CE:2B:06:44:7A:A0:BD:0D:A2:C6:8D X509v3 Authority Key Identifier: keyid:B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:71:dd:ab:b9:18:11:7c:bf:e7:5a:2e:e6:79:46:f3:1d:8a: ab:b4:bf:fb:38:b4:ff:52:b4:c1:85:25:67:ad:a1:4c:67:20: 3f:89:b3:90:75:eb:f7:97:65:c7:6f:d0:c7:75:f6:27:5d:7e: e4:b5:7f:6a:4e:ae:45:e8:00:40:ff:c1:04:47:aa:51:7f:ca: e0:22:57:eb:95:f0:5c:44:f8:9c:51:3a:7f:e2:7a:6a:b4:5a: 4b:1f:04:d0:38:4b:d9:94:67:34:ad:67:cd:d3:dc:65:5d:bb: 30:7a:7c:b8:22:a7:41:e4:dd:ad:7e:64:41:2d:95:16:ad:d2: 95:e6:34:73:69:8f:e5:b7:b3:86:56:78:58:6a:46:f5:21:f5: 12:dd:d1:56:07:0c:5d:2c:41:0c:af:46:08:31:dd:17:a0:aa: 92:bd:c5:48:aa:41:00:b5:15:b5:4f:c1:f1:f9:0e:5f:f1:43: e7:66:18:7a:61:c5:1a:b8:c3:af:62:59:0d:27:1b:d1:8b:b1: cc:5d:0f:16:e2:e8:92:4d:99:19:b4:36:11:70:ff:ba:9b:9e: 27:26:67:4f:f0:0c:fa:de:2e:a3:c6:c6:fb:b4:6f:76:e9:cc: 4c:41:05:a8:e8:3c:3e:13:0d:0b:dc:89:34:f6:1c:a2:e3:55: 57:7f:4e:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspnLHwepoexpeBnKYxHlN9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NmI1YjU0ZGVjZjQzZTk2NGY0YmU2ZDMwNGU0ODBhMzg2 Y2I3OTQwHhcNMjUxMjE3MDAwMTMzWhcNMjUxMjE4MDAwMTMzWjAzMTEwLwYDVQQD Eyg5YjFiMGU4ZmI4YmU0YjRkYWFjZTJiMDY0NDdhYTBiZDBkYTJjNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvbOWzMT0D4o69p7aG1A5ehXwIdT fWSP14dvgIKyDc2aXCnzM3SQ0uSjydWe0BFt/sXb6ScCNwDOeVEmG/rW+vP6G7R6 tarzfDKGCFz7L23hESISQdNRvgEPe7oo+JwrYcK8qvkZESD364HkQKVc7aroeH6h OX3lvro2Y+gRB2Eqf9zVwIn6EB27k5SuCWd7zxcrxaXUWB9WCNAycpgzr0z2y1vv xOCP9gFkfss04IMua0Frme2nMaOLGhKM3p9iwsRFveVhebfq5SA6IUbXh2P5oQ68 /mbCq/qD3hpTsyIxF/afdMmUQVhDrT7vixsWDvL+uZvtsD5LOZAxwBi+nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsbDo+4vktNqs4rBkR6oL0NosaNMB8GA1UdIwQY MBaAFLVrW1Tez0PpZPS+bTBOSAo4bLeUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFd0YlZON1BRLWxrOUw1dE1FNUlDamhzdDVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84NzRlOGEtM2ExNi00ZjViLThmMTkt MzdhZDBlZWJlMTliLzEvdFd0YlZON1BRLWxrOUw1dE1FNUlDamhzdDVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC84NzRlOGEtM2ExNi00ZjViLThmMTktMzdhZDBlZWJlMTli LzEvdFd0YlZON1BRLWxrOUw1dE1FNUlDamhzdDVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHHdq7kY EXy/51ou5nlG8x2Kq7S/+zi0/1K0wYUlZ62hTGcgP4mzkHXr95dlx2/Qx3X2J11+ 5LV/ak6uRegAQP/BBEeqUX/K4CJX65XwXET4nFE6f+J6arRaSx8E0DhL2ZRnNK1n zdPcZV27MHp8uCKnQeTdrX5kQS2VFq3SleY0c2mP5bezhlZ4WGpG9SH1Et3RVgcM XSxBDK9GCDHdF6Cqkr3FSKpBALUVtU/B8fkOX/FD52YYemHFGrjDr2JZDScb0Yux zF0PFuLokk2ZGbQ2EXD/upueJyZnT/AM+t4uo8bG+7RvdunMTEEFqOg8PhMNC9yJ NPYcouNVV39OXg== -----END CERTIFICATE-----Generated at Wed Dec 17 06:34:54 2025 by rpki-client