This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft File: tWGrEAAXphJTFvzGEzhKr73mAYk.mft (raw, json) Hash identifier: 1KfshsLMLNAPU4aisLykg/8V/di0rp1CzMQlKNfEUKg= Subject key identifier: 40:DD:77:B1:4C:DA:C0:37:F9:AE:9A:A4:5F:F8:2F:E6:BB:87:0F:3C Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89 Certificate issuer: /CN=b561ab100017a6125316fcc613384aafbde60189 Certificate serial: 019B07B559FD6024FF004E063F2510BFB6D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft Manifest number: 07E8 Signing time: Wed 10 Dec 2025 10:01:24 +0000 Manifest this update: Wed 10 Dec 2025 10:01:24 +0000 Manifest next update: Thu 11 Dec 2025 10:01:24 +0000 Files and hashes: 1: 54hiEVCu42nmTIhQ3bS5shMqgPg.roa (hash: Rk0IIWWSef2+X2JeCku/njRK3YOnsndfGq7YFCHBZaw=) 2: tWGrEAAXphJTFvzGEzhKr73mAYk.crl (hash: g8xKlTPMYcbvuyVQ6LIRe0iXDCTWCAZvMemGH/O6XVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:59:fd:60:24:ff:00:4e:06:3f:25:10:bf:b6:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b561ab100017a6125316fcc613384aafbde60189 Validity Not Before: Dec 10 10:01:24 2025 GMT Not After : Dec 11 10:01:24 2025 GMT Subject: CN=40dd77b14cdac037f9ae9aa45ff82fe6bb870f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b1:7f:6a:09:70:fa:90:e6:57:ca:88:03:f4: d7:36:ea:9c:e3:38:11:ea:11:ed:be:8c:4c:47:19: d5:cf:2f:96:78:53:2f:0b:d3:41:04:19:b7:37:6f: 94:1d:22:3a:f4:3c:9b:18:35:a1:84:b0:52:bf:ea: 58:0f:25:4d:4c:8a:ae:2d:1f:7c:30:86:93:04:a8: a1:bc:0e:3d:ce:a1:e8:af:7e:a0:90:51:04:e5:22: 84:f0:5f:19:5a:f4:67:d7:6a:1d:bd:ef:a5:bb:96: e1:8f:f7:87:f2:31:1c:e5:9d:a6:0a:98:f7:5b:9d: 8f:58:01:5b:9a:25:79:a6:41:c5:53:55:3f:54:3b: 33:f6:ab:f0:45:07:0e:db:37:a3:1f:db:9f:d3:f1: 92:ba:ec:6c:5d:23:89:6b:71:d3:79:5e:4f:10:f6: 65:03:a4:3b:bc:6a:70:27:0e:d8:e7:ce:d4:ec:de: ee:01:52:a2:33:01:72:c8:22:ad:de:0e:ee:11:0c: bb:1c:9e:c8:e5:d4:58:e9:88:79:a2:af:3e:ad:c3: a8:2d:9c:20:8e:f4:16:88:21:d9:e9:63:3e:8a:76: 53:83:20:e6:fa:8e:9d:e9:d1:00:f1:c1:c7:6f:ce: aa:1f:91:66:64:f2:5a:bf:9f:56:e0:48:b6:6e:33: dd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DD:77:B1:4C:DA:C0:37:F9:AE:9A:A4:5F:F8:2F:E6:BB:87:0F:3C X509v3 Authority Key Identifier: keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:1b:2f:53:21:33:95:f9:58:4a:d1:3c:d8:e7:d4:2f:a0:f2: 6a:bc:61:95:e9:eb:20:64:b0:ea:fd:f8:37:62:ea:73:c6:f1: f1:2e:42:bc:63:2f:76:0f:18:2c:01:d3:9b:86:ff:c1:e0:10: 8a:1c:6d:ed:68:6b:3a:ce:82:d2:a8:a4:57:08:11:26:04:c8: b9:8a:85:31:2f:d8:cf:71:b7:6f:c3:fa:01:90:8e:21:70:5a: 2d:74:fe:70:ce:9e:58:a3:3b:22:c8:ae:5c:34:9b:84:d3:40: 82:61:e4:b4:d7:66:ea:75:75:ce:6f:2e:f9:53:1b:2d:c9:d1: f1:52:0d:b3:6d:43:19:6e:21:c9:ec:8d:ad:47:68:48:93:1d: 86:99:35:d6:90:32:b2:da:c5:ca:74:b5:96:c7:32:78:2e:a2: 69:ad:65:6c:17:af:79:05:53:67:40:0e:00:12:a5:15:eb:5c: 77:da:da:10:4c:5d:67:4b:5f:2a:f0:17:b2:a7:ba:e8:b7:15: b5:7e:c4:09:c6:26:7b:67:c7:fa:55:66:31:2a:fa:14:3a:f9: b0:3e:f8:99:4c:3d:d2:bb:93:f3:71:e0:25:e3:38:27:05:3f: 49:46:cf:38:96:32:cd:13:7b:d1:8a:31:fd:77:30:bd:23:0d: 12:bd:3f:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtVn9YCT/AE4GPyUQv7bXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NjFhYjEwMDAxN2E2MTI1MzE2ZmNjNjEzMzg0YWFmYmRl NjAxODkwHhcNMjUxMjEwMTAwMTI0WhcNMjUxMjExMTAwMTI0WjAzMTEwLwYDVQQD Eyg0MGRkNzdiMTRjZGFjMDM3ZjlhZTlhYTQ1ZmY4MmZlNmJiODcwZjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLF/aglw+pDmV8qIA/TXNuqc4zgR 6hHtvoxMRxnVzy+WeFMvC9NBBBm3N2+UHSI69DybGDWhhLBSv+pYDyVNTIquLR98 MIaTBKihvA49zqHor36gkFEE5SKE8F8ZWvRn12odve+lu5bhj/eH8jEc5Z2mCpj3 W52PWAFbmiV5pkHFU1U/VDsz9qvwRQcO2zejH9uf0/GSuuxsXSOJa3HTeV5PEPZl A6Q7vGpwJw7Y587U7N7uAVKiMwFyyCKt3g7uEQy7HJ7I5dRY6Yh5oq8+rcOoLZwg jvQWiCHZ6WM+inZTgyDm+o6d6dEA8cHHb86qH5FmZPJav59W4Ei2bjPd0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDdd7FM2sA3+a6apF/4L+a7hw88MB8GA1UdIwQY MBaAFLVhqxAAF6YSUxb8xhM4Sq+95gGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFdHckVBQVhwaEpURnZ6R0V6aEtyNzNtQVlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84MGVlOGYtODY3YS00YjI1LWFlNWQt OTJiOWRhYTAwMzc5LzEvdFdHckVBQVhwaEpURnZ6R0V6aEtyNzNtQVlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS84MGVlOGYtODY3YS00YjI1LWFlNWQtOTJiOWRhYTAwMzc5 LzEvdFdHckVBQVhwaEpURnZ6R0V6aEtyNzNtQVlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBsvUyEz lflYStE82OfUL6DyarxhlenrIGSw6v34N2Lqc8bx8S5CvGMvdg8YLAHTm4b/weAQ ihxt7WhrOs6C0qikVwgRJgTIuYqFMS/Yz3G3b8P6AZCOIXBaLXT+cM6eWKM7Isiu XDSbhNNAgmHktNdm6nV1zm8u+VMbLcnR8VINs21DGW4hyeyNrUdoSJMdhpk11pAy strFynS1lscyeC6iaa1lbBeveQVTZ0AOABKlFetcd9raEExdZ0tfKvAXsqe66LcV tX7ECcYme2fH+lVmMSr6FDr5sD74mUw90ruT83HgJeM4JwU/SUbPOJYyzRN70Yox /XcwvSMNEr0/Rg== -----END CERTIFICATE-----Generated at Wed Dec 10 18:39:51 2025 by rpki-client