This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft File: tBW-756h3Udywu6VJ2HWVdmGUCY.mft (raw, json) Hash identifier: LjvzxxBxIz3/c0w6vModJyCm3cLtXS3nyZWDMGnSseY= Subject key identifier: 94:46:DE:4B:CE:73:FC:59:33:9B:A3:08:3A:2B:2D:C5:30:4E:FD:14 Authority key identifier: B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26 Certificate issuer: /CN=b415beef9ea1dd4772c2ee952761d655d9865026 Certificate serial: 019B5E2E8483D1B5AFE17D4C6762A3CFE269 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft Manifest number: 17A0 Signing time: Sat 27 Dec 2025 05:01:05 +0000 Manifest this update: Sat 27 Dec 2025 05:01:05 +0000 Manifest next update: Sun 28 Dec 2025 05:01:05 +0000 Files and hashes: 1: 0geUHc19NNaDsvmjgLb1gNOrEbQ.roa (hash: NWxuANUmBjc/z+ICKyxtOl6ZHIhQCmMbyKrbsYf09/k=) 2: tBW-756h3Udywu6VJ2HWVdmGUCY.crl (hash: hlfXcY15c5NfVtBRdctjLkPSpxoNKaG5gIuUPl1RBeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:2e:84:83:d1:b5:af:e1:7d:4c:67:62:a3:cf:e2:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b415beef9ea1dd4772c2ee952761d655d9865026 Validity Not Before: Dec 27 05:01:05 2025 GMT Not After : Dec 28 05:01:05 2025 GMT Subject: CN=9446de4bce73fc59339ba3083a2b2dc5304efd14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2b:06:d9:6a:6e:7b:52:f6:11:ee:fa:6c:84: e0:1f:28:49:10:c7:6d:22:ef:3b:6d:86:96:23:6a: cd:65:22:d6:40:a7:5f:d4:7b:24:e3:d0:05:e2:0d: ca:76:99:04:35:10:f7:fd:95:19:7b:a0:ca:ba:02: 59:be:3e:88:8d:be:4b:61:66:9a:a5:d2:fd:70:b8: 45:3c:e6:99:fc:2d:8c:a5:34:31:1e:67:19:aa:cc: cc:3a:3a:60:31:a2:29:98:f2:c5:45:03:f9:21:93: 28:84:21:8f:43:77:e9:47:9d:82:29:54:dd:45:2a: 54:57:1a:3f:80:1b:87:cc:d1:4c:3f:9e:4f:a8:1a: 9e:1d:6e:27:2f:91:2e:bd:b5:39:e1:36:bc:a3:bb: e9:0e:65:d3:9f:df:c2:59:f9:6e:bb:a6:6b:d0:8a: d9:45:c4:8c:86:1d:9e:38:df:be:bd:8d:10:1c:27: 42:c9:db:f9:e2:62:8e:3a:b6:78:f2:88:53:70:f3: 5f:69:66:b9:ff:67:f1:d9:24:06:e6:f6:05:39:29: 55:60:b7:70:e2:02:d0:aa:b7:5c:ae:23:1e:6e:3c: 18:fc:6a:53:99:79:19:ec:84:e1:be:91:58:6a:06: a6:92:10:4b:13:5f:81:92:2e:f0:80:2f:15:4e:58: 66:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:46:DE:4B:CE:73:FC:59:33:9B:A3:08:3A:2B:2D:C5:30:4E:FD:14 X509v3 Authority Key Identifier: keyid:B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:ac:1d:c2:c1:91:14:e0:8c:f5:1c:0e:4a:1a:e6:cf:04:10: 75:cb:50:15:ef:ca:dc:9c:91:4b:8f:96:05:ab:21:98:6f:d2: 29:fe:fe:11:6a:8a:19:b4:ce:88:9e:cc:43:df:9a:5f:c2:4d: 66:d0:ed:ee:f5:46:6f:54:ab:b4:7f:53:45:84:93:9b:37:c9: 73:7c:f3:e6:b6:39:5f:e5:12:d6:a7:09:ab:67:91:ad:d3:47: bb:e4:a1:1d:a1:95:4c:ec:7a:8a:c4:63:c9:ac:66:96:09:2f: 0e:51:95:fb:ac:fd:32:8e:1c:ac:93:87:56:5c:0d:ea:00:fe: d3:a7:cc:13:47:39:7e:df:1a:f6:d0:1e:00:73:58:65:40:d9: 48:a8:2e:28:06:04:6e:ba:25:21:e2:50:e8:c8:ec:36:b2:5a: ef:b7:99:11:a3:48:5b:08:56:e7:70:31:bc:63:dc:5d:f4:78: 4b:db:e8:c3:10:ee:55:64:f9:3d:2e:44:f8:17:07:7a:da:52: e8:2c:46:b1:7f:4b:96:c0:e2:63:05:7a:1a:4a:59:ec:63:82: 73:e8:5b:01:db:27:ac:01:6e:f2:58:c4:22:97:ee:dc:88:23: 2d:57:32:e8:cd:ad:46:c4:62:85:8d:0d:2f:73:56:b2:69:02: 7e:05:fd:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZteLoSD0bWv4X1MZ2Kjz+JpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MTViZWVmOWVhMWRkNDc3MmMyZWU5NTI3NjFkNjU1ZDk4 NjUwMjYwHhcNMjUxMjI3MDUwMTA1WhcNMjUxMjI4MDUwMTA1WjAzMTEwLwYDVQQD Eyg5NDQ2ZGU0YmNlNzNmYzU5MzM5YmEzMDgzYTJiMmRjNTMwNGVmZDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCsG2Wpue1L2Ee76bITgHyhJEMdt Iu87bYaWI2rNZSLWQKdf1Hsk49AF4g3KdpkENRD3/ZUZe6DKugJZvj6Ijb5LYWaa pdL9cLhFPOaZ/C2MpTQxHmcZqszMOjpgMaIpmPLFRQP5IZMohCGPQ3fpR52CKVTd RSpUVxo/gBuHzNFMP55PqBqeHW4nL5EuvbU54Ta8o7vpDmXTn9/CWfluu6Zr0IrZ RcSMhh2eON++vY0QHCdCydv54mKOOrZ48ohTcPNfaWa5/2fx2SQG5vYFOSlVYLdw 4gLQqrdcriMebjwY/GpTmXkZ7IThvpFYagamkhBLE1+Bki7wgC8VTlhmCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRG3kvOc/xZM5ujCDorLcUwTv0UMB8GA1UdIwQY MBaAFLQVvu+eod1HcsLulSdh1lXZhlAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEJXLTc1NmgzVWR5d3U2VkoySFdWZG1HVUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iZjEyODMtOGQxYi00YjFhLWI5ZDkt MGUxOTVlYzY1YjcyLzEvdEJXLTc1NmgzVWR5d3U2VkoySFdWZG1HVUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9iZjEyODMtOGQxYi00YjFhLWI5ZDktMGUxOTVlYzY1Yjcy LzEvdEJXLTc1NmgzVWR5d3U2VkoySFdWZG1HVUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqwdwsGR FOCM9RwOShrmzwQQdctQFe/K3JyRS4+WBashmG/SKf7+EWqKGbTOiJ7MQ9+aX8JN ZtDt7vVGb1SrtH9TRYSTmzfJc3zz5rY5X+US1qcJq2eRrdNHu+ShHaGVTOx6isRj yaxmlgkvDlGV+6z9Mo4crJOHVlwN6gD+06fME0c5ft8a9tAeAHNYZUDZSKguKAYE brolIeJQ6MjsNrJa77eZEaNIWwhW53AxvGPcXfR4S9vowxDuVWT5PS5E+BcHetpS 6CxGsX9LlsDiYwV6GkpZ7GOCc+hbAdsnrAFu8ljEIpfu3IgjLVcy6M2tRsRihY0N L3NWsmkCfgX9Jg== -----END CERTIFICATE-----Generated at Sat Dec 27 06:17:17 2025 by rpki-client