This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft File: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft (raw, json) Hash identifier: YRz6HGMvUlhFlgI7+ZfgMAqpmpfnUGkRZe36ju/SH8o= Subject key identifier: D7:F7:BB:96:A7:4B:F8:FF:54:05:11:25:24:51:F2:81:BD:E6:60:ED Authority key identifier: B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43 Certificate issuer: /CN=b4bc3f0232303f5b037745ec53a66c738256bf43 Certificate serial: 019B612F3D79336B0655FEBA99E2338E340C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft Manifest number: 1117 Signing time: Sat 27 Dec 2025 19:00:44 +0000 Manifest this update: Sat 27 Dec 2025 19:00:44 +0000 Manifest next update: Sun 28 Dec 2025 19:00:44 +0000 Files and hashes: 1: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl (hash: rps6DVS5k0LySvFlTlj0QnfzeemB1gxEiSBgBaLkvS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:2f:3d:79:33:6b:06:55:fe:ba:99:e2:33:8e:34:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4bc3f0232303f5b037745ec53a66c738256bf43 Validity Not Before: Dec 27 19:00:44 2025 GMT Not After : Dec 28 19:00:44 2025 GMT Subject: CN=d7f7bb96a74bf8ff540511252451f281bde660ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:cd:52:cb:3a:bd:6a:32:98:8b:a3:d1:63:15: dc:b0:e6:e9:8a:11:ff:4f:e4:4c:58:6c:99:ee:66: 0c:8c:29:ab:94:68:64:45:67:38:c4:fe:f3:27:29: 58:6f:98:b3:b9:78:79:a5:8a:08:cc:76:82:2a:ab: 25:2c:ca:a2:71:bf:4c:f5:df:d3:97:96:e7:f4:86: a4:32:ef:38:dc:56:4b:bc:50:6c:39:91:4b:e2:ec: 65:b5:56:c1:0d:da:98:3b:fe:65:75:4f:15:35:e2: 50:54:0a:c1:89:03:2c:ac:ce:ed:9d:0e:fa:67:c8: ac:ed:63:2e:26:2d:c0:12:be:c0:e4:61:5f:d2:90: 22:c0:39:91:72:41:7b:3a:2a:58:9b:ab:c3:f9:56: 79:4b:77:9e:31:41:63:5a:c8:14:a6:d1:01:17:b3: 88:c5:7f:ab:85:8a:67:e9:49:73:bf:a5:36:ab:b6: 39:54:bc:75:8f:99:e1:a1:a6:ce:89:82:03:80:15: 31:21:57:2c:fe:aa:9f:1b:2e:42:e2:93:87:42:c8: c1:04:bf:63:0d:9a:45:c5:83:51:58:32:90:6f:1e: cb:69:43:59:9a:55:6b:4b:93:a1:09:ab:89:60:01: 9e:e1:6e:95:42:84:94:08:62:99:61:60:cf:ef:a1: 2d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F7:BB:96:A7:4B:F8:FF:54:05:11:25:24:51:F2:81:BD:E6:60:ED X509v3 Authority Key Identifier: keyid:B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:63:f1:03:91:29:58:b1:1f:c9:28:bb:25:94:ae:00:45:24: 4f:63:29:4b:bc:d7:b8:30:23:4a:d2:54:f0:73:e2:35:cf:e0: d7:14:43:5a:00:9a:59:40:00:f3:1b:10:fa:14:84:51:d4:44: 2c:04:05:3e:35:4b:19:72:1d:b6:8f:29:a7:3c:39:11:4e:2f: 97:9b:c1:41:b0:37:4d:6c:c8:52:68:f3:c1:97:34:38:f8:38: 88:d5:17:21:b6:ab:7a:19:29:c9:9a:4e:d4:5a:8b:c8:ab:d9: bf:23:f3:9d:4d:6d:d5:d6:e2:da:35:c1:d8:46:4b:fb:25:6a: 7a:c3:f5:83:61:5c:39:c4:dc:4a:0b:9b:d3:ff:bb:f2:64:09: 86:09:40:b2:17:21:56:d7:e7:e2:18:34:35:94:01:e0:60:32: bd:68:17:aa:5e:90:72:d7:3b:03:64:9a:9e:f5:38:3e:a1:b3: 61:a4:4c:b3:d3:7f:1c:40:db:f9:1c:08:f0:90:e8:15:53:b7: d7:9f:e5:a8:41:f8:64:32:32:57:e8:61:cb:dc:3f:01:12:15: 68:48:0a:52:f4:bd:00:50:e6:06:0c:62:9e:1d:49:4b:ef:95: 15:c8:ad:c3:54:8f:20:3c:f8:04:4c:47:8c:d2:b5:c0:17:e9: d4:2e:4e:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthLz15M2sGVf66meIzjjQMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YmMzZjAyMzIzMDNmNWIwMzc3NDVlYzUzYTY2YzczODI1 NmJmNDMwHhcNMjUxMjI3MTkwMDQ0WhcNMjUxMjI4MTkwMDQ0WjAzMTEwLwYDVQQD EyhkN2Y3YmI5NmE3NGJmOGZmNTQwNTExMjUyNDUxZjI4MWJkZTY2MGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/s1Syzq9ajKYi6PRYxXcsObpihH/ T+RMWGyZ7mYMjCmrlGhkRWc4xP7zJylYb5izuXh5pYoIzHaCKqslLMqicb9M9d/T l5bn9IakMu843FZLvFBsOZFL4uxltVbBDdqYO/5ldU8VNeJQVArBiQMsrM7tnQ76 Z8is7WMuJi3AEr7A5GFf0pAiwDmRckF7OipYm6vD+VZ5S3eeMUFjWsgUptEBF7OI xX+rhYpn6Ulzv6U2q7Y5VLx1j5nhoabOiYIDgBUxIVcs/qqfGy5C4pOHQsjBBL9j DZpFxYNRWDKQbx7LaUNZmlVrS5OhCauJYAGe4W6VQoSUCGKZYWDP76Et/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNf3u5anS/j/VAURJSRR8oG95mDtMB8GA1UdIwQY MBaAFLS8PwIyMD9bA3dF7FOmbHOCVr9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEx3X0FqSXdQMXNEZDBYc1U2WnNjNEpXdjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jNTIxZTUtZjU0My00MDI3LTlkYzgt OGY5ZTIzYzYwNjA2LzEvdEx3X0FqSXdQMXNEZDBYc1U2WnNjNEpXdjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9jNTIxZTUtZjU0My00MDI3LTlkYzgtOGY5ZTIzYzYwNjA2 LzEvdEx3X0FqSXdQMXNEZDBYc1U2WnNjNEpXdjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2PxA5Ep WLEfySi7JZSuAEUkT2MpS7zXuDAjStJU8HPiNc/g1xRDWgCaWUAA8xsQ+hSEUdRE LAQFPjVLGXIdto8ppzw5EU4vl5vBQbA3TWzIUmjzwZc0OPg4iNUXIbarehkpyZpO 1FqLyKvZvyPznU1t1dbi2jXB2EZL+yVqesP1g2FcOcTcSgub0/+78mQJhglAshch Vtfn4hg0NZQB4GAyvWgXql6Qctc7A2SanvU4PqGzYaRMs9N/HEDb+RwI8JDoFVO3 15/lqEH4ZDIyV+hhy9w/ARIVaEgKUvS9AFDmBgxinh1JS++VFcitw1SPIDz4BExH jNK1wBfp1C5O0Q== -----END CERTIFICATE-----Generated at Sat Dec 27 20:45:21 2025 by rpki-client