This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft File: tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft (raw, json) Hash identifier: tInw/EiuTj/uIerX819QOztturu6Y1rzQ6UOBpysu8I= Subject key identifier: BC:2D:89:D6:AB:A4:A6:61:87:C9:0B:C5:81:23:A5:22:3D:DD:0F:5C Authority key identifier: B4:85:84:EF:FA:05:1F:0C:BC:39:C3:19:16:3E:4F:23:38:60:49:82 Certificate issuer: /CN=b48584effa051f0cbc39c319163e4f2338604982 Certificate serial: 019B38A16548BCBDF47D4353561FEE8BB62E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft Manifest number: 1E Signing time: Fri 19 Dec 2025 22:00:59 +0000 Manifest this update: Fri 19 Dec 2025 22:00:59 +0000 Manifest next update: Sat 20 Dec 2025 22:00:59 +0000 Files and hashes: 1: 8kE0tO9uvlKB37lyd62GPmDaFQI.roa (hash: D46kiJCVXFUzhMwUZ2ixZDFAlgrG2JSsYU6GUwRkFeY=) 2: tIWE7_oFHwy8OcMZFj5PIzhgSYI.crl (hash: LpPu1NKowxlRAP98e4yUaVpIQY6ZeRMyBFsLKU0EP10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft rsync://rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:65:48:bc:bd:f4:7d:43:53:56:1f:ee:8b:b6:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b48584effa051f0cbc39c319163e4f2338604982 Validity Not Before: Dec 19 22:00:59 2025 GMT Not After : Dec 20 22:00:59 2025 GMT Subject: CN=bc2d89d6aba4a66187c90bc58123a5223ddd0f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e9:25:fe:e3:1d:fa:7b:b8:6e:6f:ad:7e:24: fc:47:58:f5:97:a2:e7:45:c8:33:a9:7b:25:cf:d4: fe:38:cb:cf:3c:2e:88:9f:f0:81:7d:d5:b9:77:16: 10:8d:79:8b:f8:04:1f:8c:02:dd:52:c1:da:49:c2: c9:5c:8e:ab:84:ee:71:b6:09:11:6a:8c:45:90:cf: 20:ff:d8:f6:a8:43:e1:56:e7:51:14:02:47:3d:26: 6b:2a:20:20:42:fc:b9:81:89:f5:27:d8:93:d2:bb: b3:d4:6a:42:1e:63:f5:e6:9a:cf:f1:6a:02:bd:29: a1:c4:23:b3:56:fb:96:49:59:96:50:bc:52:7c:f0: 4d:6d:41:74:59:bb:c6:00:aa:dc:86:f0:43:78:1b: c0:af:5e:6c:89:62:7b:f9:eb:b8:6d:58:d6:b0:af: bf:63:53:8a:8a:22:b3:68:e8:58:4f:79:ca:dc:cb: 35:23:a0:bb:5d:79:94:a5:73:7d:8b:96:a9:3b:7e: c0:64:a4:34:dd:82:bb:8d:7b:c3:1e:7e:19:5d:2b: 9d:fc:4e:51:6c:d9:23:8d:75:1c:b4:f2:85:24:74: d8:9f:ee:2b:88:80:de:71:f7:23:1a:ec:03:a9:65: 1f:0d:53:b5:9f:4f:11:a0:fc:25:58:4f:78:4b:6f: 37:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2D:89:D6:AB:A4:A6:61:87:C9:0B:C5:81:23:A5:22:3D:DD:0F:5C X509v3 Authority Key Identifier: keyid:B4:85:84:EF:FA:05:1F:0C:BC:39:C3:19:16:3E:4F:23:38:60:49:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:fe:ca:e8:39:4f:76:25:ea:07:23:27:89:11:f9:8e:91:07: 03:7b:0b:ae:2a:89:3a:82:a0:e7:a7:ff:2b:38:77:7d:32:c9: 61:97:d6:96:d2:0c:e3:33:b3:f9:16:26:3e:f6:02:79:99:22: 7e:fe:58:8f:d0:67:9b:94:26:6f:01:5f:18:44:b7:d0:24:f4: 78:14:ed:55:3e:71:3a:20:cf:0e:76:e6:59:52:d1:6b:2d:39: b6:29:1e:0a:39:ed:12:aa:09:46:31:c8:4d:06:bc:db:f5:d4: 88:28:9a:3b:b4:bc:cd:93:1b:aa:ee:b2:99:05:33:31:f2:54: 0b:16:4e:43:e0:a4:61:c9:b1:a9:9f:dd:c1:92:86:53:18:99: c8:50:43:70:37:be:a1:c9:0f:77:c3:86:6a:91:1d:5a:d4:9a: b9:76:4a:e5:31:05:75:98:45:85:4c:c7:b1:6f:35:00:8d:d6: ba:e2:17:62:aa:cf:fc:82:60:56:a5:33:ed:42:96:a3:35:7f: c8:48:e2:96:f9:2e:4f:80:63:43:60:44:f9:36:28:c9:19:63: cb:ba:1c:8e:15:8b:52:b6:11:52:e8:7d:ac:18:13:64:2f:c9: ea:1c:67:75:3d:1f:2b:f7:13:53:3d:08:c0:d3:23:c6:78:81: cd:6d:6e:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oWVIvL30fUNTVh/ui7YuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODU4NGVmZmEwNTFmMGNiYzM5YzMxOTE2M2U0ZjIzMzg2 MDQ5ODIwHhcNMjUxMjE5MjIwMDU5WhcNMjUxMjIwMjIwMDU5WjAzMTEwLwYDVQQD EyhiYzJkODlkNmFiYTRhNjYxODdjOTBiYzU4MTIzYTUyMjNkZGQwZjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+kl/uMd+nu4bm+tfiT8R1j1l6Ln RcgzqXslz9T+OMvPPC6In/CBfdW5dxYQjXmL+AQfjALdUsHaScLJXI6rhO5xtgkR aoxFkM8g/9j2qEPhVudRFAJHPSZrKiAgQvy5gYn1J9iT0ruz1GpCHmP15prP8WoC vSmhxCOzVvuWSVmWULxSfPBNbUF0WbvGAKrchvBDeBvAr15siWJ7+eu4bVjWsK+/ Y1OKiiKzaOhYT3nK3Ms1I6C7XXmUpXN9i5apO37AZKQ03YK7jXvDHn4ZXSud/E5R bNkjjXUctPKFJHTYn+4riIDecfcjGuwDqWUfDVO1n08RoPwlWE94S2830QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwtidarpKZhh8kLxYEjpSI93Q9cMB8GA1UdIwQY MBaAFLSFhO/6BR8MvDnDGRY+TyM4YEmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElXRTdfb0ZId3k4T2NNWkZqNVBJemhnU1lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yMWUwMzItMDczZC00MDY4LWFlNDUt YzY2MTNmOWMxNGNhLzEvdElXRTdfb0ZId3k4T2NNWkZqNVBJemhnU1lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yMWUwMzItMDczZC00MDY4LWFlNDUtYzY2MTNmOWMxNGNh LzEvdElXRTdfb0ZId3k4T2NNWkZqNVBJemhnU1lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvf7K6DlP diXqByMniRH5jpEHA3sLriqJOoKg56f/Kzh3fTLJYZfWltIM4zOz+RYmPvYCeZki fv5Yj9Bnm5QmbwFfGES30CT0eBTtVT5xOiDPDnbmWVLRay05tikeCjntEqoJRjHI TQa82/XUiCiaO7S8zZMbqu6ymQUzMfJUCxZOQ+CkYcmxqZ/dwZKGUxiZyFBDcDe+ ockPd8OGapEdWtSauXZK5TEFdZhFhUzHsW81AI3WuuIXYqrP/IJgVqUz7UKWozV/ yEjilvkuT4BjQ2BE+TYoyRljy7ocjhWLUrYRUuh9rBgTZC/J6hxndT0fK/cTUz0I wNMjxniBzW1uRg== -----END CERTIFICATE-----Generated at Sat Dec 20 00:48:00 2025 by rpki-client