This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft File: t-0w6W6la5gOa3k9GobGLdXAvB8.mft (raw, json) Hash identifier: i6urmMkfwXPPs49HOSEJcJToVSXvvSAdKuDnNr/10PI= Subject key identifier: DD:B2:90:0C:6C:F7:CD:AA:3B:A5:F6:AB:81:30:48:E3:BB:42:8F:D2 Authority key identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F Certificate issuer: /CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f Certificate serial: 019B54185E2327907095E19E1CC8B6568221 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft Manifest number: 07C7 Signing time: Thu 25 Dec 2025 06:00:41 +0000 Manifest this update: Thu 25 Dec 2025 06:00:41 +0000 Manifest next update: Fri 26 Dec 2025 06:00:41 +0000 Files and hashes: 1: 8HKSdNrm9QMyoSA380bXaBqQQ0o.roa (hash: n0TkThrqHtx1QI4h5bmhzme4/EVU3X+pkCgBWj6DraA=) 2: t-0w6W6la5gOa3k9GobGLdXAvB8.crl (hash: l8cu47wI7qRYQio78JfNVSO4yKp5iXsoSpyauSSTmko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:5e:23:27:90:70:95:e1:9e:1c:c8:b6:56:82:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f Validity Not Before: Dec 25 06:00:41 2025 GMT Not After : Dec 26 06:00:41 2025 GMT Subject: CN=ddb2900c6cf7cdaa3ba5f6ab813048e3bb428fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ed:8d:32:bf:9e:f7:5e:6e:c5:6c:f2:f3:4f: 63:f2:f1:20:12:3b:5a:a3:79:66:06:9e:d9:48:2b: 13:18:b4:fe:74:6b:8f:d9:43:f6:80:ea:c1:df:ca: d8:2f:aa:c2:9e:b3:a0:a6:43:c6:c8:4d:e7:31:29: 4a:8e:2c:2b:24:22:b5:ae:c8:36:f2:b6:1f:f2:ef: 1a:18:78:89:9a:99:5d:96:00:a2:6f:6f:bf:bd:33: 05:c2:e8:a8:b6:0e:19:a8:7a:4f:93:db:00:e9:77: 1d:9c:98:ed:9c:d0:6d:23:69:55:1d:72:da:9b:3f: af:c4:b2:ef:2b:83:d0:e1:48:1a:20:eb:57:5f:23: 24:47:36:e6:0f:ba:57:0a:bc:5c:3e:7e:de:ae:b0: ac:b9:39:83:2e:e8:8a:1c:c8:60:da:90:cd:c8:71: 72:56:0e:e1:bc:a9:d5:67:76:f8:2c:11:5c:76:90: 6b:d3:c1:b5:69:a2:50:2c:3f:c0:71:f4:6d:85:18: e0:5c:ae:f2:7a:08:67:20:19:e6:b0:e4:00:6a:8f: 53:01:77:77:48:d9:bf:22:40:1e:1f:b7:ff:c3:0e: 49:ec:ce:5d:4f:33:4e:b9:fa:4f:e0:2a:4c:bf:b2: f9:be:2f:76:ce:c7:cb:14:95:af:52:58:e1:6b:9a: a7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B2:90:0C:6C:F7:CD:AA:3B:A5:F6:AB:81:30:48:E3:BB:42:8F:D2 X509v3 Authority Key Identifier: keyid:B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:0a:f6:55:24:61:fe:2f:2e:fd:25:07:63:ef:c2:b4:3c:99: bf:ef:3e:05:38:5f:0d:78:2c:b2:0d:e2:95:48:9f:5c:2a:04: 6a:4c:52:9d:8e:8c:9b:c7:29:54:b1:ca:14:ce:59:96:e9:02: 43:05:82:3d:dd:18:54:02:c5:fd:a0:39:eb:bb:ef:65:7c:19: c3:6e:41:54:2f:ee:0f:68:f9:6a:e5:a1:a1:bd:59:dd:98:28: 6f:fc:b1:7e:96:48:a9:26:4b:5d:61:96:8a:01:a4:c4:36:8d: 0f:21:69:c7:f5:23:81:d3:4d:2a:1c:bc:8d:fe:de:17:de:53: 48:4c:b8:a8:aa:4e:3b:39:ec:4e:6c:ba:a6:cc:c2:ce:33:2b: 25:be:4a:33:aa:31:0d:bc:4d:84:d7:3a:ed:03:44:f3:c3:c6: 9b:ea:6e:0c:22:56:0f:cc:96:cd:09:23:a1:3c:f9:66:76:e5: 00:a6:5c:dd:5d:21:98:46:a7:b2:d8:aa:0f:5b:b4:07:40:ff: e9:e2:92:5a:71:07:2a:c1:d0:9a:3f:23:a1:12:b0:33:06:2f: c3:13:0f:bb:86:db:3e:00:6b:fc:f9:de:da:8c:d6:49:d6:e9: fd:43:6f:45:e8:f8:5c:f9:50:4b:b9:43:4b:4f:58:d2:94:bb: 00:f7:6d:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGF4jJ5BwleGeHMi2VoIhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ZWQzMGU5NmVhNTZiOTgwZTZiNzkzZDFhODZjNjJkZDVj MGJjMWYwHhcNMjUxMjI1MDYwMDQxWhcNMjUxMjI2MDYwMDQxWjAzMTEwLwYDVQQD EyhkZGIyOTAwYzZjZjdjZGFhM2JhNWY2YWI4MTMwNDhlM2JiNDI4ZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+2NMr+e915uxWzy809j8vEgEjta o3lmBp7ZSCsTGLT+dGuP2UP2gOrB38rYL6rCnrOgpkPGyE3nMSlKjiwrJCK1rsg2 8rYf8u8aGHiJmpldlgCib2+/vTMFwuiotg4ZqHpPk9sA6XcdnJjtnNBtI2lVHXLa mz+vxLLvK4PQ4UgaIOtXXyMkRzbmD7pXCrxcPn7errCsuTmDLuiKHMhg2pDNyHFy Vg7hvKnVZ3b4LBFcdpBr08G1aaJQLD/AcfRthRjgXK7yeghnIBnmsOQAao9TAXd3 SNm/IkAeH7f/ww5J7M5dTzNOufpP4CpMv7L5vi92zsfLFJWvUljha5qnIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2ykAxs982qO6X2q4EwSOO7Qo/SMB8GA1UdIwQY MBaAFLftMOlupWuYDmt5PRqGxi3VwLwfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdC0wdzZXNmxhNWdPYTNrOUdvYkdMZFhBdkI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mYTc5ZGQtMGZjYS00NjYxLTg4NjQt OTU1NTM3Y2I2OWYyLzEvdC0wdzZXNmxhNWdPYTNrOUdvYkdMZFhBdkI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9mYTc5ZGQtMGZjYS00NjYxLTg4NjQtOTU1NTM3Y2I2OWYy LzEvdC0wdzZXNmxhNWdPYTNrOUdvYkdMZFhBdkI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQr2VSRh /i8u/SUHY+/CtDyZv+8+BThfDXgssg3ilUifXCoEakxSnY6Mm8cpVLHKFM5ZlukC QwWCPd0YVALF/aA567vvZXwZw25BVC/uD2j5auWhob1Z3Zgob/yxfpZIqSZLXWGW igGkxDaNDyFpx/UjgdNNKhy8jf7eF95TSEy4qKpOOznsTmy6pszCzjMrJb5KM6ox DbxNhNc67QNE88PGm+puDCJWD8yWzQkjoTz5ZnblAKZc3V0hmEanstiqD1u0B0D/ 6eKSWnEHKsHQmj8joRKwMwYvwxMPu4bbPgBr/Pne2ozWSdbp/UNvRej4XPlQS7lD S09Y0pS7APdtlQ== -----END CERTIFICATE-----Generated at Thu Dec 25 09:05:34 2025 by rpki-client