This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft File: tWyxebPbXGs2zTMINAgB_tsrfRk.mft (raw, json) Hash identifier: Lb5nCt233EZ5A9qiI9L+QavYLTRYNeuLEavJmQT7cjk= Subject key identifier: DF:8D:BA:E6:CE:C0:FA:D9:3E:6C:77:03:60:42:41:74:A4:D1:67:E0 Authority key identifier: B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19 Certificate issuer: /CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19 Certificate serial: 019B1E05A9A6C58680B0E40C53C6D6101913 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft Manifest number: 177A Signing time: Sun 14 Dec 2025 18:00:46 +0000 Manifest this update: Sun 14 Dec 2025 18:00:46 +0000 Manifest next update: Mon 15 Dec 2025 18:00:46 +0000 Files and hashes: 1: egERklG4JDoNVaiZcO7pQtm8HwI.roa (hash: UCPCOxDDKaXVSI1SbOM7CcRIC7mRuotxlKVUCRUv8VQ=) 2: tWyxebPbXGs2zTMINAgB_tsrfRk.crl (hash: 2Q5EUHUODtAzbhhJ8Oy95oxGXb2moCX8LeosYkhH2AU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:05:a9:a6:c5:86:80:b0:e4:0c:53:c6:d6:10:19:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19 Validity Not Before: Dec 14 18:00:46 2025 GMT Not After : Dec 15 18:00:46 2025 GMT Subject: CN=df8dbae6cec0fad93e6c770360424174a4d167e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1e:16:0c:72:58:f0:44:ee:fa:b9:b4:9b:ca: ff:03:09:6e:41:c8:99:dc:0b:8b:d0:ae:33:32:6a: 01:8d:09:b0:8f:e4:ad:c1:76:76:6f:71:dc:81:7f: 2e:05:04:8c:08:6c:f8:0d:fd:14:3d:a9:d0:0b:d4: dc:66:09:60:8d:36:fa:69:0c:11:82:a3:c5:22:ad: c6:80:ff:86:1f:02:54:49:31:7a:ba:6c:d0:ec:c3: 76:5e:88:5d:f4:b6:c3:00:dc:4f:46:99:08:95:6b: b1:cc:9b:b7:2f:a7:ed:6d:a4:1d:7f:06:2e:3b:85: 69:24:d3:18:25:d9:0c:e1:a3:9b:f8:db:d0:a2:26: 18:b0:92:f9:ac:79:0b:dc:b8:f0:25:e4:cd:37:fd: 15:fd:52:f5:b8:d1:95:fc:ea:90:70:e2:a2:41:5a: 07:6c:83:6b:d4:0a:71:31:73:ed:c1:e7:b8:82:97: 3e:67:77:4e:8c:a0:3f:38:11:f2:14:bf:d5:f3:e5: 57:f8:3c:2f:dc:cd:45:0f:cf:7e:6b:5b:a4:9c:dc: 6b:92:8d:7f:db:b8:d3:b1:05:4f:ec:e1:e6:81:c4: d6:37:58:e8:6c:92:76:1e:b3:de:95:94:3b:48:64: 77:79:0b:8f:e3:1f:87:5d:9f:fc:23:78:f1:ed:c8: 37:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8D:BA:E6:CE:C0:FA:D9:3E:6C:77:03:60:42:41:74:A4:D1:67:E0 X509v3 Authority Key Identifier: keyid:B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ae:01:59:d6:5e:88:85:35:b0:bf:06:f5:b9:b7:6d:31:ab: 63:8c:38:08:bb:fd:fd:b4:59:4a:1f:32:d7:a9:5e:bd:b3:2e: 1c:33:47:f4:29:10:88:3d:b1:8b:ac:1c:16:37:cc:e5:6b:2c: 6f:b8:28:10:df:2e:e1:e9:fa:c3:8a:20:ab:ab:e2:7a:d8:a4: 4c:6c:a5:6f:da:5a:49:c2:b1:d4:bd:81:d6:9b:eb:a4:0e:48: 95:c0:96:87:29:7f:e9:32:28:81:ec:bd:f6:16:88:7e:8f:bc: 4b:17:9b:04:50:e6:af:d3:22:b0:ac:2c:da:97:a8:d2:bd:2d: e1:88:e7:9f:29:45:ee:99:8d:c7:bc:d3:cf:b9:7f:1b:ed:b4: 92:94:b0:bb:ff:07:89:b9:76:d3:8b:3d:b6:8c:cd:80:9f:09: 9c:e2:82:d1:75:14:80:15:33:98:7a:8c:5a:4b:da:55:ec:d4: 38:4b:0f:18:fd:c7:21:e1:63:40:66:d8:6e:cb:8e:92:cc:83: 06:20:df:88:2a:25:2a:16:48:7f:1d:4d:d8:18:5c:af:5c:93: 1f:64:74:84:16:4f:2c:3b:c9:95:48:ba:14:b2:4d:8c:e4:59: 0e:23:49:a7:e9:a9:11:65:4e:4e:21:40:9b:0e:e3:6c:92:6c: ca:e1:c8:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBammxYaAsOQMU8bWEBkTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NmNiMTc5YjNkYjVjNmIzNmNkMzMwODM0MDgwMWZlZGIy YjdkMTkwHhcNMjUxMjE0MTgwMDQ2WhcNMjUxMjE1MTgwMDQ2WjAzMTEwLwYDVQQD EyhkZjhkYmFlNmNlYzBmYWQ5M2U2Yzc3MDM2MDQyNDE3NGE0ZDE2N2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx4WDHJY8ETu+rm0m8r/AwluQciZ 3AuL0K4zMmoBjQmwj+StwXZ2b3HcgX8uBQSMCGz4Df0UPanQC9TcZglgjTb6aQwR gqPFIq3GgP+GHwJUSTF6umzQ7MN2Xohd9LbDANxPRpkIlWuxzJu3L6ftbaQdfwYu O4VpJNMYJdkM4aOb+NvQoiYYsJL5rHkL3LjwJeTNN/0V/VL1uNGV/OqQcOKiQVoH bINr1ApxMXPtwee4gpc+Z3dOjKA/OBHyFL/V8+VX+Dwv3M1FD89+a1uknNxrko1/ 27jTsQVP7OHmgcTWN1jobJJ2HrPelZQ7SGR3eQuP4x+HXZ/8I3jx7cg3MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+NuubOwPrZPmx3A2BCQXSk0WfgMB8GA1UdIwQY MBaAFLVssXmz21xrNs0zCDQIAf7bK30ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFd5eGViUGJYR3MyelRNSU5BZ0JfdHNyZlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy82NDlhOTgtMzM5YS00ZjRiLTg3NTAt NmU5ZDNiNzMyYjA4LzEvdFd5eGViUGJYR3MyelRNSU5BZ0JfdHNyZlJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy82NDlhOTgtMzM5YS00ZjRiLTg3NTAtNmU5ZDNiNzMyYjA4 LzEvdFd5eGViUGJYR3MyelRNSU5BZ0JfdHNyZlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP64BWdZe iIU1sL8G9bm3bTGrY4w4CLv9/bRZSh8y16levbMuHDNH9CkQiD2xi6wcFjfM5Wss b7goEN8u4en6w4ogq6vietikTGylb9paScKx1L2B1pvrpA5IlcCWhyl/6TIogey9 9haIfo+8SxebBFDmr9MisKws2peo0r0t4YjnnylF7pmNx7zTz7l/G+20kpSwu/8H ibl204s9tozNgJ8JnOKC0XUUgBUzmHqMWkvaVezUOEsPGP3HIeFjQGbYbsuOksyD BiDfiColKhZIfx1N2Bhcr1yTH2R0hBZPLDvJlUi6FLJNjORZDiNJp+mpEWVOTiFA mw7jbJJsyuHI7g== -----END CERTIFICATE-----Generated at Sun Dec 14 23:13:34 2025 by rpki-client