This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json) Hash identifier: KRP3+vXaIiS6ebeW97LEppI+VzxiYYxBTWmHx5kyXxk= Subject key identifier: E3:2B:DD:CE:F2:C5:0C:4E:E4:84:92:4C:99:C7:57:C9:FA:46:A9:AF Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7 Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7 Certificate serial: 019B424AD59EFE2743F5E4D27CA0C183D354 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft Manifest number: 0A29 Signing time: Sun 21 Dec 2025 19:02:39 +0000 Manifest this update: Sun 21 Dec 2025 19:02:39 +0000 Manifest next update: Mon 22 Dec 2025 19:02:39 +0000 Files and hashes: 1: Tj8ieaPk-ZVdznj4QGZQsDa6PTU.roa (hash: rpKu+SpVkA4o9g3c9SIuQedHFHqzu4mcB4TaNuy/SKw=) 2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: S0TzJqMXjr2Mjww/EbrFRWwuRZkjJFoegrPy5Efoe38=) 3: uWZIzr5sI_obeqk4P_AP6Hrzzsc.roa (hash: Ao6L2xVS/ORm+dRe6MtZy2PpenoZKqpKXENIdtVG26s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:d5:9e:fe:27:43:f5:e4:d2:7c:a0:c1:83:d3:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7 Validity Not Before: Dec 21 19:02:39 2025 GMT Not After : Dec 22 19:02:39 2025 GMT Subject: CN=e32bddcef2c50c4ee484924c99c757c9fa46a9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:74:e8:f5:3e:4c:34:98:10:86:b1:2b:67:e9: dd:ae:f6:58:19:77:69:3c:75:3a:ff:44:f4:ca:73: 95:07:12:fb:0a:64:f9:0d:3f:e5:17:2e:a2:5a:04: 14:c9:dd:14:40:43:9d:ba:58:8a:8c:88:3d:7f:a9: 95:d0:3a:e0:7d:fc:59:81:59:35:18:e5:44:02:c6: ec:22:5c:f6:cb:27:45:59:0e:6e:47:94:d5:96:9b: 03:6f:d5:17:e2:bb:80:2d:c9:f9:4a:b4:06:ba:33: dd:bd:bd:4f:78:8b:48:1d:3a:ae:a0:31:fc:63:de: 01:98:ce:b6:b3:f4:5a:ef:00:79:71:17:2f:04:a7: e3:56:70:42:78:ab:51:8b:08:f2:ab:e5:57:03:8f: de:16:d5:d2:5c:e9:72:a1:88:de:21:1f:cc:bb:46: 61:a6:03:f3:35:74:2d:e1:0c:38:97:25:9e:a4:bb: 8d:14:99:2e:d4:c9:c8:b7:17:a7:42:ef:3f:0e:01: 01:4e:74:37:4c:fa:48:12:02:46:65:1b:f2:cd:da: e7:ab:53:a7:6f:06:80:dc:8c:5d:af:1f:63:fe:29: b8:bf:9b:59:2b:2b:1e:c4:eb:cc:ee:21:c5:b3:06: c5:9a:a4:e4:e6:d0:49:6d:bd:c2:97:8a:30:be:f8: 2e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2B:DD:CE:F2:C5:0C:4E:E4:84:92:4C:99:C7:57:C9:FA:46:A9:AF X509v3 Authority Key Identifier: keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:6c:98:69:66:f0:cb:0f:73:6f:1e:58:14:74:e5:9c:4a:10: 3e:f0:01:bb:45:2a:84:a3:c5:fd:27:37:a0:98:ab:30:5e:e0: eb:eb:a0:b8:b9:b8:bd:12:f5:4a:bf:1a:30:45:54:02:3f:ad: 11:7c:82:e6:99:73:61:a6:93:66:6c:1d:89:89:d6:ce:cd:db: 60:df:83:fe:f6:c6:f3:aa:86:37:87:66:17:f8:06:36:12:2b: 98:8c:aa:cc:1e:47:d3:bd:a2:28:d4:29:13:c2:89:98:ba:11: 28:99:56:e2:e9:3e:21:b4:b9:21:7f:d2:fe:2e:ad:e2:14:9e: 66:80:34:f1:02:95:ba:35:1b:23:ed:b0:14:41:73:a3:3d:ba: ed:59:b5:7f:14:2d:dc:83:98:1e:82:7e:65:44:38:14:f9:0a: 9b:27:dd:4a:a0:97:74:63:f2:50:1c:d4:df:22:dd:e3:b2:24: 28:f8:af:c3:29:6e:e4:28:74:6c:00:3e:ce:cc:76:78:64:16: 0c:ad:8a:01:24:d6:bf:bd:e1:b5:93:d4:8a:71:a7:03:e3:23: 13:a6:62:a6:23:dd:af:7a:a7:12:16:2b:60:89:93:01:9f:4e: 64:9f:42:f1:36:4a:13:e5:6b:58:90:7f:8b:c8:82:0f:ad:22: 7a:a2:25:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCStWe/idD9eTSfKDBg9NUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NmE4YzkxYWQzMTc0NWZmNzI3ZGEwNDgyZWRlMWIyZmFi NDYyZTcwHhcNMjUxMjIxMTkwMjM5WhcNMjUxMjIyMTkwMjM5WjAzMTEwLwYDVQQD EyhlMzJiZGRjZWYyYzUwYzRlZTQ4NDkyNGM5OWM3NTdjOWZhNDZhOWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nTo9T5MNJgQhrErZ+ndrvZYGXdp PHU6/0T0ynOVBxL7CmT5DT/lFy6iWgQUyd0UQEOduliKjIg9f6mV0DrgffxZgVk1 GOVEAsbsIlz2yydFWQ5uR5TVlpsDb9UX4ruALcn5SrQGujPdvb1PeItIHTquoDH8 Y94BmM62s/Ra7wB5cRcvBKfjVnBCeKtRiwjyq+VXA4/eFtXSXOlyoYjeIR/Mu0Zh pgPzNXQt4Qw4lyWepLuNFJku1MnItxenQu8/DgEBTnQ3TPpIEgJGZRvyzdrnq1On bwaA3Ixdrx9j/im4v5tZKysexOvM7iHFswbFmqTk5tBJbb3Cl4owvvguhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMr3c7yxQxO5ISSTJnHV8n6RqmvMB8GA1UdIwQY MBaAFLVqjJGtMXRf9yfaBILt4bL6tGLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEt OTg2NDg5MDE2ODhmLzEvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEtOTg2NDg5MDE2ODhm LzEvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmyYaWbw yw9zbx5YFHTlnEoQPvABu0UqhKPF/Sc3oJirMF7g6+uguLm4vRL1Sr8aMEVUAj+t EXyC5plzYaaTZmwdiYnWzs3bYN+D/vbG86qGN4dmF/gGNhIrmIyqzB5H072iKNQp E8KJmLoRKJlW4uk+IbS5IX/S/i6t4hSeZoA08QKVujUbI+2wFEFzoz267Vm1fxQt 3IOYHoJ+ZUQ4FPkKmyfdSqCXdGPyUBzU3yLd47IkKPivwylu5Ch0bAA+zsx2eGQW DK2KASTWv73htZPUinGnA+MjE6ZipiPdr3qnEhYrYImTAZ9OZJ9C8TZKE+VrWJB/ i8iCD60ieqIlWg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:51:49 2025 by rpki-client