This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft File: t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft (raw, json) Hash identifier: 5fQrPXWeQ0aaTrF95JtJkm5MlHwRRcQ6pqODgqstXhA= Subject key identifier: B8:A8:FE:2D:CD:ED:8E:47:55:9C:F9:E5:1F:6D:76:DD:51:CC:BC:EA Authority key identifier: B7:9C:2D:E3:EB:30:91:80:F4:F5:A5:AF:2D:56:FE:42:58:78:46:48 Certificate issuer: /CN=b79c2de3eb309180f4f5a5af2d56fe4258784648 Certificate serial: 019B4438BB2BF29A817650D9694493BC1348 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft Manifest number: 089E Signing time: Mon 22 Dec 2025 04:02:07 +0000 Manifest this update: Mon 22 Dec 2025 04:02:07 +0000 Manifest next update: Tue 23 Dec 2025 04:02:07 +0000 Files and hashes: 1: NPzS7dKaq70IcGX_A1Qcj_ZLSso.roa (hash: NKVUhSy28Mx3aJChPzTkXureREnDmeAOH1iQ7b+r7LU=) 2: t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl (hash: +wGNnYICg93+A5zPaRx0gwLDnKbeEhHWuRqZWcXhkUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:bb:2b:f2:9a:81:76:50:d9:69:44:93:bc:13:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b79c2de3eb309180f4f5a5af2d56fe4258784648 Validity Not Before: Dec 22 04:02:07 2025 GMT Not After : Dec 23 04:02:07 2025 GMT Subject: CN=b8a8fe2dcded8e47559cf9e51f6d76dd51ccbcea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ac:56:98:c3:af:3f:ac:a2:3a:44:7c:a9:09: d3:61:61:19:86:71:02:36:3a:72:b0:da:e5:91:31: 2d:e8:d4:4d:f4:47:7f:d1:f9:b3:29:18:ae:a4:6b: c4:84:0c:96:78:af:21:29:f6:c6:6f:18:ee:43:65: f7:60:2d:e3:d8:62:de:63:3b:0f:d5:85:ff:c6:ea: e5:ac:e4:58:1b:dd:59:60:65:e8:43:06:ed:5b:d4: 49:c1:58:95:49:98:e2:57:a4:8f:72:8f:40:78:d6: c1:ab:7f:6d:fc:1f:71:4f:bf:3b:1c:17:74:11:78: 93:79:a2:8f:90:56:fb:77:53:2f:87:36:ea:55:73: fc:dd:48:63:a8:55:30:84:ad:60:e0:a3:13:34:8b: 0d:bb:2d:27:eb:1a:b1:03:83:ef:f7:e6:94:0f:80: 7c:60:65:27:d6:c5:e5:86:85:e8:1c:d9:6a:c9:b8: e6:43:f9:6a:84:5b:7d:f1:8b:9b:49:81:53:1d:7b: 4e:1a:fc:7b:d9:19:6a:1c:a0:9e:38:08:0c:32:69: 5a:b5:21:2f:77:99:0a:d0:1c:86:5a:cc:78:13:ab: 4c:3e:72:62:76:31:d3:c9:c6:0c:5c:24:8c:44:ab: 04:4a:10:40:d9:c2:16:89:b8:86:d6:6d:3d:b0:67: ff:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A8:FE:2D:CD:ED:8E:47:55:9C:F9:E5:1F:6D:76:DD:51:CC:BC:EA X509v3 Authority Key Identifier: keyid:B7:9C:2D:E3:EB:30:91:80:F4:F5:A5:AF:2D:56:FE:42:58:78:46:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:8e:b5:95:e6:ee:1a:bb:a7:d6:b7:24:2c:a7:6d:ff:5a:9e: 8c:3b:40:06:44:57:5d:2f:8a:89:78:3f:92:07:1c:06:a4:08: 0a:4c:10:ad:ef:db:68:07:a0:43:0f:79:cb:28:e1:25:86:9e: 00:76:d4:17:b5:5d:8d:60:f7:ed:d3:83:6e:e9:91:04:b3:f3: c0:2c:6a:e1:62:4e:0c:e9:46:f4:c7:f4:ef:6e:6d:3c:a3:6d: b8:76:59:6d:64:d7:c1:b8:8b:74:2a:10:48:21:99:41:75:dc: d3:f7:08:6e:6f:db:48:50:34:0e:73:66:d0:34:32:73:5e:3d: 50:2b:04:7d:14:65:db:24:f3:01:dc:d2:5f:c4:14:54:f0:3b: af:a6:37:e2:ad:1d:3a:74:30:f7:fa:f2:e2:72:06:5a:ef:89: 11:1c:fe:d0:90:44:02:9e:4e:39:14:81:e8:7d:bd:19:1f:7d: 41:44:d3:a1:8e:d6:33:0e:75:b2:41:48:5a:cd:f5:28:36:02: f8:83:dd:00:94:9d:a3:e5:da:b2:0e:69:d8:86:fe:4b:c5:72: d1:62:7f:a7:a7:2f:35:95:41:2c:1e:ef:a8:9f:7f:0e:53:c2: dd:0e:14:70:cd:a5:f6:cf:a3:14:33:61:6a:8e:dc:59:11:a2: 1c:36:5a:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOLsr8pqBdlDZaUSTvBNIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OWMyZGUzZWIzMDkxODBmNGY1YTVhZjJkNTZmZTQyNTg3 ODQ2NDgwHhcNMjUxMjIyMDQwMjA3WhcNMjUxMjIzMDQwMjA3WjAzMTEwLwYDVQQD EyhiOGE4ZmUyZGNkZWQ4ZTQ3NTU5Y2Y5ZTUxZjZkNzZkZDUxY2NiY2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6xWmMOvP6yiOkR8qQnTYWEZhnEC NjpysNrlkTEt6NRN9Ed/0fmzKRiupGvEhAyWeK8hKfbGbxjuQ2X3YC3j2GLeYzsP 1YX/xurlrORYG91ZYGXoQwbtW9RJwViVSZjiV6SPco9AeNbBq39t/B9xT787HBd0 EXiTeaKPkFb7d1MvhzbqVXP83UhjqFUwhK1g4KMTNIsNuy0n6xqxA4Pv9+aUD4B8 YGUn1sXlhoXoHNlqybjmQ/lqhFt98YubSYFTHXtOGvx72RlqHKCeOAgMMmlatSEv d5kK0ByGWsx4E6tMPnJidjHTycYMXCSMRKsEShBA2cIWibiG1m09sGf/SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLio/i3N7Y5HVZz55R9tdt1RzLzqMB8GA1UdIwQY MBaAFLecLePrMJGA9PWlry1W/kJYeEZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDV3dDQtc3drWUQwOWFXdkxWYi1RbGg0UmtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81NmEwMDYtOTE5Zi00ODdjLTkzMTYt MGJiNmE4M2Y5ZjQwLzEvdDV3dDQtc3drWUQwOWFXdkxWYi1RbGg0UmtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81NmEwMDYtOTE5Zi00ODdjLTkzMTYtMGJiNmE4M2Y5ZjQw LzEvdDV3dDQtc3drWUQwOWFXdkxWYi1RbGg0UmtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFo61lebu Grun1rckLKdt/1qejDtABkRXXS+KiXg/kgccBqQICkwQre/baAegQw95yyjhJYae AHbUF7VdjWD37dODbumRBLPzwCxq4WJODOlG9Mf0725tPKNtuHZZbWTXwbiLdCoQ SCGZQXXc0/cIbm/bSFA0DnNm0DQyc149UCsEfRRl2yTzAdzSX8QUVPA7r6Y34q0d OnQw9/ry4nIGWu+JERz+0JBEAp5OORSB6H29GR99QUTToY7WMw51skFIWs31KDYC +IPdAJSdo+Xasg5p2Ib+S8Vy0WJ/p6cvNZVBLB7vqJ9/DlPC3Q4UcM2l9s+jFDNh ao7cWRGiHDZa2A== -----END CERTIFICATE-----Generated at Mon Dec 22 05:47:51 2025 by rpki-client