This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft File: tWKscBwU00uy5EdexRFSpAydPTw.mft (raw, json) Hash identifier: bdxR+ryHTYCbxk3nb0eZwq9ncSJrIVtoHQtgCMBxHfE= Subject key identifier: 4B:0D:49:6E:09:0A:82:91:6F:55:79:3F:91:D4:11:68:3C:18:17:7C Authority key identifier: B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C Certificate issuer: /CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c Certificate serial: 019B2BF897ED45805839A4FFDB433A60C164 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft Manifest number: 0866 Signing time: Wed 17 Dec 2025 11:01:10 +0000 Manifest this update: Wed 17 Dec 2025 11:01:10 +0000 Manifest next update: Thu 18 Dec 2025 11:01:10 +0000 Files and hashes: 1: J4oSsE5CcGCiSDFTMI_mpkGNGGI.roa (hash: 8nhOBC3zyNvV6fERAZhV/f/NVIfJdmZ3Tk+7d8j6/i8=) 2: tWKscBwU00uy5EdexRFSpAydPTw.crl (hash: 9vD1AvLwDVu+iuVXfpsBDuaQuw9z+/XAiuZ7/eL2s3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:97:ed:45:80:58:39:a4:ff:db:43:3a:60:c1:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c Validity Not Before: Dec 17 11:01:10 2025 GMT Not After : Dec 18 11:01:10 2025 GMT Subject: CN=4b0d496e090a82916f55793f91d411683c18177c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fe:09:13:71:f1:fa:ac:60:d3:fd:8f:6b:e1: 81:67:a4:2c:c2:9c:6d:4e:1c:05:ce:6a:b5:d6:9e: de:18:ce:78:39:81:e5:fc:35:6f:e5:e9:a2:48:11: 3a:e8:71:72:5a:d3:68:a0:ca:44:8b:cf:6c:7b:f1: ae:45:83:92:7f:5c:dc:d4:4d:37:cf:b3:ec:c2:30: d6:72:8c:48:3b:8b:9f:e3:be:e5:a9:eb:ab:7b:48: f4:86:20:28:d7:43:51:fe:83:e2:58:2d:49:4e:89: 58:3a:38:44:33:30:96:3e:7e:e5:e2:db:04:86:2b: c9:e0:bb:36:15:56:d3:85:9f:cf:16:86:47:14:95: f6:97:65:c5:21:d2:0e:d6:9a:84:12:85:96:3d:f1: d0:3c:cf:75:f2:33:31:dd:da:c7:bd:bc:f9:31:e1: 9b:98:28:6b:b6:68:30:68:ed:9b:c0:4d:c5:4f:b3: ef:42:19:83:6e:d5:e5:3a:b0:55:a8:22:c4:61:29: 9c:71:9c:10:ee:e7:5b:ce:28:01:89:3c:42:30:58: 05:db:e8:43:da:ec:cc:c9:1e:9a:78:da:e4:41:3c: 7d:64:70:7e:8f:e1:f0:a9:23:b6:15:5a:f4:3a:89: 8d:92:56:01:88:14:f4:a9:ca:c1:ca:8f:b8:65:89: b9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0D:49:6E:09:0A:82:91:6F:55:79:3F:91:D4:11:68:3C:18:17:7C X509v3 Authority Key Identifier: keyid:B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a1:20:ed:e6:9f:ea:4b:c9:8c:db:d0:0b:87:40:16:1d:ce: 65:b9:c1:20:0a:39:43:f1:92:b7:bf:05:71:3c:09:08:12:32: a9:30:1e:a3:01:2e:58:0d:c9:12:b9:8b:88:a8:90:28:cd:f9: cb:a1:e0:09:c9:a0:30:07:ef:4c:ed:09:2a:88:57:85:e7:2c: 7c:95:b1:86:bd:46:e3:0f:04:72:67:d5:66:fe:5f:46:7f:14: 77:e9:7d:97:bf:62:85:ca:fb:2c:ae:e3:ff:fe:6c:06:eb:00: e7:98:ed:09:3c:7c:72:64:79:49:2a:c9:ac:b2:1d:6f:fe:be: 9f:82:0a:5d:45:3f:72:1b:36:44:9a:99:b2:dd:c5:59:5a:5d: 5d:86:10:27:5c:d0:38:aa:b4:a8:9c:c9:53:d6:7b:0c:0d:c6: a5:70:7d:a1:0d:5a:db:9f:a6:07:0c:d8:7a:e5:0c:ff:ad:ef: 50:29:6f:ad:ef:a3:21:bb:38:90:33:7f:b2:45:49:1d:e6:83: f8:4f:0f:bf:11:11:03:67:40:f3:7d:4e:62:88:89:c2:4d:f4: 11:cf:29:78:16:6b:f8:b1:20:3f:c1:3a:69:b5:42:a9:be:b8: 94:6b:1f:5e:2b:e5:a7:98:31:68:17:fb:92:6d:de:7c:d2:e3: 59:89:1a:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+JftRYBYOaT/20M6YMFkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NjJhYzcwMWMxNGQzNGJiMmU0NDc1ZWM1MTE1MmE0MGM5 ZDNkM2MwHhcNMjUxMjE3MTEwMTEwWhcNMjUxMjE4MTEwMTEwWjAzMTEwLwYDVQQD Eyg0YjBkNDk2ZTA5MGE4MjkxNmY1NTc5M2Y5MWQ0MTE2ODNjMTgxNzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP4JE3Hx+qxg0/2Pa+GBZ6Qswpxt ThwFzmq11p7eGM54OYHl/DVv5emiSBE66HFyWtNooMpEi89se/GuRYOSf1zc1E03 z7PswjDWcoxIO4uf477lqeure0j0hiAo10NR/oPiWC1JTolYOjhEMzCWPn7l4tsE hivJ4Ls2FVbThZ/PFoZHFJX2l2XFIdIO1pqEEoWWPfHQPM918jMx3drHvbz5MeGb mChrtmgwaO2bwE3FT7PvQhmDbtXlOrBVqCLEYSmccZwQ7udbzigBiTxCMFgF2+hD 2uzMyR6aeNrkQTx9ZHB+j+HwqSO2FVr0OomNklYBiBT0qcrByo+4ZYm5vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsNSW4JCoKRb1V5P5HUEWg8GBd8MB8GA1UdIwQY MBaAFLVirHAcFNNLsuRHXsURUqQMnT08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFdLc2NCd1UwMHV5NUVkZXhSRlNwQXlkUFR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84ZjAxYjMtMjU3Yi00OGQ1LTgyZTIt MDk3MzI0ZGQ5ZWM4LzEvdFdLc2NCd1UwMHV5NUVkZXhSRlNwQXlkUFR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84ZjAxYjMtMjU3Yi00OGQ1LTgyZTItMDk3MzI0ZGQ5ZWM4 LzEvdFdLc2NCd1UwMHV5NUVkZXhSRlNwQXlkUFR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqEg7eaf 6kvJjNvQC4dAFh3OZbnBIAo5Q/GSt78FcTwJCBIyqTAeowEuWA3JErmLiKiQKM35 y6HgCcmgMAfvTO0JKohXhecsfJWxhr1G4w8EcmfVZv5fRn8Ud+l9l79ihcr7LK7j //5sBusA55jtCTx8cmR5SSrJrLIdb/6+n4IKXUU/chs2RJqZst3FWVpdXYYQJ1zQ OKq0qJzJU9Z7DA3GpXB9oQ1a25+mBwzYeuUM/63vUClvre+jIbs4kDN/skVJHeaD +E8PvxERA2dA831OYoiJwk30Ec8peBZr+LEgP8E6abVCqb64lGsfXivlp5gxaBf7 km3efNLjWYkawg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:05:40 2025 by rpki-client