This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft File: tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft (raw, json) Hash identifier: Vmb3f2FU3NFoEMrVeE5E9aGIaN0HvRDDRtiDdQaiK94= Subject key identifier: E4:23:7E:8A:F1:A5:C2:87:1D:3E:02:4C:33:E7:CF:E6:FD:C5:9B:2F Authority key identifier: B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31 Certificate issuer: /CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31 Certificate serial: 019B1BA95B9D23E44E99D1D70B49F2E89197 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft Manifest number: 1771 Signing time: Sun 14 Dec 2025 07:00:42 +0000 Manifest this update: Sun 14 Dec 2025 07:00:42 +0000 Manifest next update: Mon 15 Dec 2025 07:00:42 +0000 Files and hashes: 1: tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl (hash: kJkyjQVe6dWWYuzE+evUsq8BYC49aWcZ7T17v323lD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:a9:5b:9d:23:e4:4e:99:d1:d7:0b:49:f2:e8:91:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31 Validity Not Before: Dec 14 07:00:42 2025 GMT Not After : Dec 15 07:00:42 2025 GMT Subject: CN=e4237e8af1a5c2871d3e024c33e7cfe6fdc59b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b3:51:ba:3d:46:2d:3c:f9:5d:59:75:bc:67: 42:af:9f:55:4d:48:03:65:55:0d:3b:c7:c3:da:04: 26:ac:88:99:fd:68:9a:df:38:09:d7:e9:0a:30:b8: 1f:b3:55:3a:48:c7:b2:76:a1:04:21:cc:70:84:b2: d1:94:b4:c0:ee:f3:aa:4f:16:ef:1c:a9:88:f6:f7: b8:2d:0b:85:05:ec:61:b8:30:a2:65:dd:1a:10:af: 91:48:0a:49:32:c5:4b:76:16:90:3a:9d:8a:ca:3d: 57:02:4a:1b:6d:64:90:13:7c:0e:9e:fc:3d:bc:ef: 42:0c:cc:3b:1b:b9:41:d5:04:0e:15:3a:a7:39:4a: f7:5b:66:32:f9:88:2f:00:a6:3d:55:95:9d:98:2f: d7:dc:6a:47:ec:bd:da:ae:f4:de:8d:dc:a3:cf:ac: 72:8c:57:ec:81:8b:bf:cb:b7:87:0b:b6:5b:3c:0c: 69:28:ac:2c:b1:bf:9b:cf:e0:6a:e5:ef:da:a2:d5: 78:34:d3:9f:4e:5b:cb:6e:a4:b7:89:8b:48:76:9b: 00:89:b3:b9:d0:33:09:70:ce:b9:06:2c:38:c9:14: 23:91:0d:25:26:a2:d4:bc:fe:c1:3a:64:62:13:b6: a9:3d:f9:97:3c:c1:f4:cf:b9:fe:2d:de:0a:43:8b: 15:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:23:7E:8A:F1:A5:C2:87:1D:3E:02:4C:33:E7:CF:E6:FD:C5:9B:2F X509v3 Authority Key Identifier: keyid:B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:08:f2:a2:d1:36:be:13:70:11:3c:6e:bb:87:07:a1:87:2f: 83:56:84:19:6b:f6:aa:fd:ce:1e:3f:14:a1:ab:4a:21:96:ac: 3b:9a:34:6f:71:10:3c:42:70:67:09:c7:c2:97:36:30:c2:75: c6:3a:1e:7f:11:be:3d:8d:a3:76:10:35:c3:a0:39:c2:e9:f6: cc:aa:83:9a:de:f7:d3:84:4f:7f:98:fa:18:6a:65:00:43:96: 5a:58:cb:c6:2d:71:3a:e3:03:a7:13:2c:22:dc:91:0e:67:1b: 89:fa:a7:83:1d:2c:65:c2:63:75:85:de:ea:2b:be:b0:8e:8b: ac:61:66:67:3a:0c:bb:e6:2f:fa:ae:4f:f6:1a:07:c1:18:d9: 5a:ab:96:2d:52:85:f7:a7:76:28:e9:1c:b8:c8:7f:14:16:dc: 96:3e:3b:25:75:dc:31:de:16:93:0b:20:1e:b3:87:09:f1:3c: 56:bb:a4:af:63:98:3c:c1:67:0c:75:3d:54:72:0a:11:02:04: 2e:38:32:b5:e1:0f:f6:fd:cf:e4:18:a8:bd:2b:a7:37:09:22: 97:9d:04:b7:76:0b:5a:6a:48:c8:33:c3:16:e9:9f:ed:9b:5f: 07:1b:9c:0a:27:55:dc:73:48:53:4b:f2:74:f5:89:f9:ec:78: aa:d2:00:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqVudI+ROmdHXC0ny6JGXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NmE4OTU3Y2NjMzBhYTRlYzJkNDc4ZTUzZjM4NzI2Yzk5 NTVhMzEwHhcNMjUxMjE0MDcwMDQyWhcNMjUxMjE1MDcwMDQyWjAzMTEwLwYDVQQD EyhlNDIzN2U4YWYxYTVjMjg3MWQzZTAyNGMzM2U3Y2ZlNmZkYzU5YjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorNRuj1GLTz5XVl1vGdCr59VTUgD ZVUNO8fD2gQmrIiZ/Wia3zgJ1+kKMLgfs1U6SMeydqEEIcxwhLLRlLTA7vOqTxbv HKmI9ve4LQuFBexhuDCiZd0aEK+RSApJMsVLdhaQOp2Kyj1XAkobbWSQE3wOnvw9 vO9CDMw7G7lB1QQOFTqnOUr3W2Yy+YgvAKY9VZWdmC/X3GpH7L3arvTejdyjz6xy jFfsgYu/y7eHC7ZbPAxpKKwssb+bz+Bq5e/aotV4NNOfTlvLbqS3iYtIdpsAibO5 0DMJcM65Biw4yRQjkQ0lJqLUvP7BOmRiE7apPfmXPMH0z7n+Ld4KQ4sVhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQjforxpcKHHT4CTDPnz+b9xZsvMB8GA1UdIwQY MBaAFLVqiVfMwwqk7C1HjlPzhybJlVoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFdxSlY4ekRDcVRzTFVlT1VfT0hKc21WV2pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xNmUyYWEtZGRiZC00ZWUxLWFlNjAt MDhiYzY0MGFlZDY3LzEvdFdxSlY4ekRDcVRzTFVlT1VfT0hKc21WV2pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xNmUyYWEtZGRiZC00ZWUxLWFlNjAtMDhiYzY0MGFlZDY3 LzEvdFdxSlY4ekRDcVRzTFVlT1VfT0hKc21WV2pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAjyotE2 vhNwETxuu4cHoYcvg1aEGWv2qv3OHj8UoatKIZasO5o0b3EQPEJwZwnHwpc2MMJ1 xjoefxG+PY2jdhA1w6A5wun2zKqDmt7304RPf5j6GGplAEOWWljLxi1xOuMDpxMs ItyRDmcbifqngx0sZcJjdYXe6iu+sI6LrGFmZzoMu+Yv+q5P9hoHwRjZWquWLVKF 96d2KOkcuMh/FBbclj47JXXcMd4WkwsgHrOHCfE8Vrukr2OYPMFnDHU9VHIKEQIE LjgyteEP9v3P5BiovSunNwkil50Et3YLWmpIyDPDFumf7ZtfBxucCidV3HNIU0vy dPWJ+ex4qtIA8g== -----END CERTIFICATE-----Generated at Sun Dec 14 09:17:07 2025 by rpki-client