This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft File: t-0w6W6la5gOa3k9GobGLdXAvB8.mft (raw, json) Hash identifier: tphYclb2Z1PS36p4MXDen+VR+AMHBKAIUcjKxJ4sgso= Subject key identifier: B3:B9:DB:B4:68:8B:28:C6:31:AA:27:E8:13:52:C2:67:FE:97:55:3A Authority key identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F Certificate issuer: /CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f Certificate serial: 019B503BCEAF0135C5D0796F7AD6222D742C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft Manifest number: 07C5 Signing time: Wed 24 Dec 2025 12:00:55 +0000 Manifest this update: Wed 24 Dec 2025 12:00:55 +0000 Manifest next update: Thu 25 Dec 2025 12:00:55 +0000 Files and hashes: 1: 8HKSdNrm9QMyoSA380bXaBqQQ0o.roa (hash: n0TkThrqHtx1QI4h5bmhzme4/EVU3X+pkCgBWj6DraA=) 2: t-0w6W6la5gOa3k9GobGLdXAvB8.crl (hash: thXFeKgZf+ffL/TSLY19MYL4pP2LWUrClaAw1UKU3n0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3b:ce:af:01:35:c5:d0:79:6f:7a:d6:22:2d:74:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f Validity Not Before: Dec 24 12:00:55 2025 GMT Not After : Dec 25 12:00:55 2025 GMT Subject: CN=b3b9dbb4688b28c631aa27e81352c267fe97553a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a6:b8:9f:d3:f9:41:c7:bd:94:26:0f:d3:40: 8d:77:0c:34:a7:73:ac:2a:b1:68:ea:cc:31:c0:47: a8:77:46:12:f3:b3:d2:70:be:44:42:7f:70:6b:b8: 4f:86:d0:22:6a:50:41:27:cd:5f:a8:73:c8:7d:62: 52:e1:07:e7:dd:79:d3:5d:3c:de:87:da:f0:21:37: 75:17:15:fd:e6:3b:02:c6:87:d6:87:5c:85:67:58: 55:44:58:6d:ee:89:60:9a:3b:c5:88:f1:30:c8:ef: 94:8d:cb:73:43:62:95:e6:c7:5d:54:46:57:4b:af: 33:79:66:df:64:73:57:b8:43:c5:65:7c:8d:ac:ba: 34:52:f6:f9:05:0e:17:2f:07:43:76:09:d0:ed:68: 4a:00:3e:42:fe:f5:07:8d:92:07:06:b4:7b:1b:01: 84:c3:6e:b3:0b:8e:04:95:ee:ed:27:a8:25:0b:08: 90:a0:e7:23:dc:60:8c:d7:e1:0e:df:60:89:cc:41: 49:36:29:4a:e4:1d:d1:38:d5:81:09:7a:82:bb:18: ad:e8:b6:d9:f4:23:05:48:ff:95:69:4f:82:7d:30: 57:40:79:2f:cc:f0:b1:fd:14:20:2f:99:8e:c6:40: dc:f6:b0:07:82:f7:8e:b9:10:01:fc:da:6d:98:7b: 1f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B9:DB:B4:68:8B:28:C6:31:AA:27:E8:13:52:C2:67:FE:97:55:3A X509v3 Authority Key Identifier: keyid:B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:0f:52:60:4c:c6:23:5d:02:d4:dd:07:50:31:eb:13:9a:e8: 5e:b3:f4:4e:f2:a5:71:8e:7b:d1:6e:3c:da:02:6b:0e:48:51: c7:fe:c7:ef:74:b0:ed:da:24:4a:fd:28:f6:a5:ee:3f:b8:97: 01:a3:ef:ff:b6:f3:1a:6b:10:f3:56:71:bc:0b:65:2f:0d:a9: b7:75:84:81:25:16:2c:a3:22:16:09:67:ec:cf:26:f1:22:17: 97:d3:76:5b:78:3d:bc:84:43:0b:8d:19:ca:1a:63:4f:ab:4e: 52:71:cf:6e:dd:8c:8e:bc:18:04:42:2b:f6:8c:c3:b3:52:7c: 0c:7d:b2:1c:4c:92:94:5a:7d:97:96:c9:6c:3c:1c:b8:08:0e: fd:9b:c7:7a:ef:d2:40:04:8a:53:c4:65:68:ae:52:1f:d5:8a: 89:86:5a:cf:63:0f:e0:17:f8:e0:91:6f:35:18:af:b7:da:d5: a2:cc:69:80:b9:48:36:40:c3:9c:98:62:73:e2:07:1e:a6:0f: 0f:f0:96:2a:34:31:59:af:96:5c:09:02:00:c1:af:a6:37:13: 95:a2:20:f3:a9:73:aa:39:e8:61:4e:1b:f5:85:6d:12:8c:b0: a7:bb:3a:64:ea:84:ee:18:1a:9b:8d:c2:e5:80:52:2a:5e:d1: a5:36:0d:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQO86vATXF0HlvetYiLXQsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ZWQzMGU5NmVhNTZiOTgwZTZiNzkzZDFhODZjNjJkZDVj MGJjMWYwHhcNMjUxMjI0MTIwMDU1WhcNMjUxMjI1MTIwMDU1WjAzMTEwLwYDVQQD EyhiM2I5ZGJiNDY4OGIyOGM2MzFhYTI3ZTgxMzUyYzI2N2ZlOTc1NTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6a4n9P5Qce9lCYP00CNdww0p3Os KrFo6swxwEeod0YS87PScL5EQn9wa7hPhtAialBBJ81fqHPIfWJS4Qfn3XnTXTze h9rwITd1FxX95jsCxofWh1yFZ1hVRFht7olgmjvFiPEwyO+UjctzQ2KV5sddVEZX S68zeWbfZHNXuEPFZXyNrLo0Uvb5BQ4XLwdDdgnQ7WhKAD5C/vUHjZIHBrR7GwGE w26zC44Ele7tJ6glCwiQoOcj3GCM1+EO32CJzEFJNilK5B3RONWBCXqCuxit6LbZ 9CMFSP+VaU+CfTBXQHkvzPCx/RQgL5mOxkDc9rAHgveOuRAB/NptmHsfqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLO527RoiyjGMaon6BNSwmf+l1U6MB8GA1UdIwQY MBaAFLftMOlupWuYDmt5PRqGxi3VwLwfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdC0wdzZXNmxhNWdPYTNrOUdvYkdMZFhBdkI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mYTc5ZGQtMGZjYS00NjYxLTg4NjQt OTU1NTM3Y2I2OWYyLzEvdC0wdzZXNmxhNWdPYTNrOUdvYkdMZFhBdkI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9mYTc5ZGQtMGZjYS00NjYxLTg4NjQtOTU1NTM3Y2I2OWYy LzEvdC0wdzZXNmxhNWdPYTNrOUdvYkdMZFhBdkI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAag9SYEzG I10C1N0HUDHrE5roXrP0TvKlcY570W482gJrDkhRx/7H73Sw7dokSv0o9qXuP7iX AaPv/7bzGmsQ81ZxvAtlLw2pt3WEgSUWLKMiFgln7M8m8SIXl9N2W3g9vIRDC40Z yhpjT6tOUnHPbt2MjrwYBEIr9ozDs1J8DH2yHEySlFp9l5bJbDwcuAgO/ZvHeu/S QASKU8RlaK5SH9WKiYZaz2MP4Bf44JFvNRivt9rVosxpgLlINkDDnJhic+IHHqYP D/CWKjQxWa+WXAkCAMGvpjcTlaIg86lzqjnoYU4b9YVtEoywp7s6ZOqE7hgam43C 5YBSKl7RpTYNAg== -----END CERTIFICATE-----Generated at Wed Dec 24 21:47:17 2025 by rpki-client