This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json) Hash identifier: Rv/xCRtlw7DvMJyraIGA/7xsBWhf5i7HB6j6YMC8AE0= Subject key identifier: 78:C3:50:61:77:39:80:68:1F:E7:FA:AF:90:71:86:06:D8:9B:56:F2 Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7 Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7 Certificate serial: 019B650CCB5E546E5AD4ACEE49F6A675DC41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft Manifest number: 0A3B Signing time: Sun 28 Dec 2025 13:01:35 +0000 Manifest this update: Sun 28 Dec 2025 13:01:35 +0000 Manifest next update: Mon 29 Dec 2025 13:01:35 +0000 Files and hashes: 1: Tj8ieaPk-ZVdznj4QGZQsDa6PTU.roa (hash: rpKu+SpVkA4o9g3c9SIuQedHFHqzu4mcB4TaNuy/SKw=) 2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: BQ+U1ry663R+/dRzvvRPo6MOI55AZ4t2LsZYMFTr2u4=) 3: uWZIzr5sI_obeqk4P_AP6Hrzzsc.roa (hash: Ao6L2xVS/ORm+dRe6MtZy2PpenoZKqpKXENIdtVG26s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 13:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0c:cb:5e:54:6e:5a:d4:ac:ee:49:f6:a6:75:dc:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7 Validity Not Before: Dec 28 13:01:35 2025 GMT Not After : Dec 29 13:01:35 2025 GMT Subject: CN=78c35061773980681fe7faaf90718606d89b56f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8a:9e:f9:ab:ef:91:26:6b:c1:65:f7:24:4e: b5:df:d6:46:00:8b:c8:4e:ec:1e:27:c5:ec:77:6b: 8b:7e:53:58:66:0b:67:a9:e3:45:e9:05:98:cb:e0: 4a:cc:83:ab:e6:2a:6b:31:e4:5e:b4:22:7c:a8:ba: 6d:68:00:05:bc:3f:a8:43:f2:cd:56:43:e2:42:ad: d6:de:3c:10:6f:e2:2b:3d:2b:a0:eb:97:7f:a8:91: 4a:55:ef:4d:ff:1d:b4:2f:10:a3:37:9a:25:d0:78: 46:a2:d7:fd:73:47:e2:d3:82:8d:f2:34:6e:e9:40: 03:e1:58:21:87:a1:62:30:cc:2e:2c:39:a9:85:b9: 6c:18:3c:c7:14:bc:71:bf:47:3f:91:a3:53:16:62: bb:99:11:b6:d4:15:f6:4b:af:d7:2e:54:8a:48:31: 13:0e:41:d0:1a:d1:a8:95:ed:c4:3b:64:79:29:59: 8e:9b:ea:95:27:02:46:79:d5:50:bd:e4:bd:85:b2: e0:87:ae:01:da:65:ac:4f:2d:4c:c7:f6:f4:87:dc: 7a:04:a3:e4:61:30:b4:03:13:8a:b1:ab:5d:f3:15: b6:ea:fe:c7:8b:b4:0c:f0:d5:73:80:e5:e4:9f:96: 49:47:75:35:a4:80:8e:67:18:b9:93:7d:ba:96:98: 5f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C3:50:61:77:39:80:68:1F:E7:FA:AF:90:71:86:06:D8:9B:56:F2 X509v3 Authority Key Identifier: keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f7:ea:f2:eb:08:df:03:fa:55:21:48:3e:66:ca:1c:aa:55: 50:06:9d:e8:e6:6c:23:ca:09:37:90:03:2f:74:db:e7:97:9f: b4:a5:97:f6:50:9f:a3:07:5c:46:74:b6:98:9e:17:67:08:36: cc:e4:31:c7:d8:dd:2f:9e:61:62:5e:47:be:d7:cb:f7:d9:eb: 94:ac:d9:fa:5c:ac:ec:58:73:2f:3f:3e:a7:56:48:31:2c:d9: f3:4e:97:9b:72:b6:3b:cf:5f:c3:27:14:d4:1f:c3:53:c8:83: b4:f9:f7:d8:e7:ff:b4:25:8c:12:72:28:56:2d:aa:de:8b:56: 5a:5e:55:8e:a6:5b:45:a6:a9:a5:5b:66:cd:6b:df:ba:12:a9: 46:b5:4e:fd:ff:ec:48:b1:ed:a7:fd:38:c8:c5:01:6a:02:24: fe:8d:22:96:12:bc:67:56:4c:73:82:1b:ce:e9:97:7d:bb:ff: 92:d7:d1:55:75:98:09:31:0d:65:26:d7:19:4f:74:5a:e4:1b: 57:e8:db:bf:b8:d6:52:2d:f0:d2:35:d7:64:b5:9c:da:58:45: 7a:1e:0e:82:8c:aa:81:e5:9e:dd:9c:c7:f6:93:28:7f:2e:8f: 8f:a5:7f:ca:1f:11:d8:2b:04:01:f8:49:61:2e:6f:c8:46:5e: cc:3a:56:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDMteVG5a1KzuSfamddxBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NmE4YzkxYWQzMTc0NWZmNzI3ZGEwNDgyZWRlMWIyZmFi NDYyZTcwHhcNMjUxMjI4MTMwMTM1WhcNMjUxMjI5MTMwMTM1WjAzMTEwLwYDVQQD Eyg3OGMzNTA2MTc3Mzk4MDY4MWZlN2ZhYWY5MDcxODYwNmQ4OWI1NmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oqe+avvkSZrwWX3JE6139ZGAIvI TuweJ8Xsd2uLflNYZgtnqeNF6QWYy+BKzIOr5iprMeRetCJ8qLptaAAFvD+oQ/LN VkPiQq3W3jwQb+IrPSug65d/qJFKVe9N/x20LxCjN5ol0HhGotf9c0fi04KN8jRu 6UAD4Vghh6FiMMwuLDmphblsGDzHFLxxv0c/kaNTFmK7mRG21BX2S6/XLlSKSDET DkHQGtGole3EO2R5KVmOm+qVJwJGedVQveS9hbLgh64B2mWsTy1Mx/b0h9x6BKPk YTC0AxOKsatd8xW26v7Hi7QM8NVzgOXkn5ZJR3U1pICOZxi5k326lphfxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjDUGF3OYBoH+f6r5BxhgbYm1byMB8GA1UdIwQY MBaAFLVqjJGtMXRf9yfaBILt4bL6tGLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEt OTg2NDg5MDE2ODhmLzEvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEtOTg2NDg5MDE2ODhm LzEvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvfq8usI 3wP6VSFIPmbKHKpVUAad6OZsI8oJN5ADL3Tb55eftKWX9lCfowdcRnS2mJ4XZwg2 zOQxx9jdL55hYl5HvtfL99nrlKzZ+lys7FhzLz8+p1ZIMSzZ806Xm3K2O89fwycU 1B/DU8iDtPn32Of/tCWMEnIoVi2q3otWWl5VjqZbRaappVtmzWvfuhKpRrVO/f/s SLHtp/04yMUBagIk/o0ilhK8Z1ZMc4IbzumXfbv/ktfRVXWYCTENZSbXGU90WuQb V+jbv7jWUi3w0jXXZLWc2lhFeh4OgoyqgeWe3ZzH9pMofy6Pj6V/yh8R2CsEAfhJ YS5vyEZezDpW1w== -----END CERTIFICATE-----Generated at Sun Dec 28 22:18:29 2025 by rpki-client