This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json) Hash identifier: CR2r2QleVTjmuBafzlHnGhS2Zjph/aT6qU6ERxqoj1U= Subject key identifier: D3:7B:7D:E0:5B:92:E7:D4:11:29:80:1D:B9:95:87:8E:3C:5B:BF:F4 Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd Certificate serial: 019B3FED2CBBFC4306EB4FC13EAD2AF8705B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 08:01:06 +0000 Manifest this update: Sun 21 Dec 2025 08:01:06 +0000 Manifest next update: Mon 22 Dec 2025 08:01:06 +0000 Files and hashes: 1: bCO5bqFLQTtaSqSwTRLhrpm3wCA.roa (hash: xHiR4ALGk4+cM6JODCM19LWc7pantvAdvK3viET0qj4=) 2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: GyQGHgc99Rey88eF0LaRSX9P45YqWBhxKdZ6hVUEf4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:2c:bb:fc:43:06:eb:4f:c1:3e:ad:2a:f8:70:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd Validity Not Before: Dec 21 08:01:06 2025 GMT Not After : Dec 22 08:01:06 2025 GMT Subject: CN=d37b7de05b92e7d41129801db995878e3c5bbff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e6:b5:fb:84:0b:54:98:4e:eb:1e:3e:14:9a: 0c:46:ed:aa:8a:d7:6e:f9:23:2a:5d:15:50:c3:7b: db:4d:eb:5c:a2:cf:e2:90:72:5d:5f:24:b8:eb:3a: 7a:18:a2:1f:f2:0d:78:6c:44:f5:15:4b:fa:1b:f5: a3:bb:9e:ec:ee:fa:e2:55:f5:48:59:e2:1c:18:91: 9f:38:a0:37:ec:97:42:ed:5a:59:0d:44:f9:24:28: c7:ae:35:0e:98:31:19:f0:a4:ce:9c:de:dc:44:58: dc:d6:a7:af:cf:fc:dd:c7:1c:94:3d:01:3b:52:f6: be:5d:2b:3c:a7:77:5a:89:61:ea:20:49:11:1e:27: 1c:0a:23:06:b6:54:7c:ed:bc:a0:ec:4c:63:8f:57: 04:7d:c3:8c:3a:8c:e0:e6:d7:3e:12:a9:21:eb:e8: 8e:b9:de:7a:62:90:7e:a4:0e:f3:6e:2b:aa:2b:f4: 81:f1:be:07:cd:6b:65:eb:d3:a5:c4:3a:60:e7:43: e3:e7:72:80:84:19:26:c1:21:f5:0a:ab:48:d8:d8: d0:12:8c:9f:63:d9:ac:0a:b7:9e:f7:c8:43:29:a0: 97:22:13:0a:2d:5b:9f:7e:25:59:af:e2:83:8a:5c: fb:a6:7c:25:f4:e0:71:d1:f1:f4:56:4f:6b:45:5f: e0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7B:7D:E0:5B:92:E7:D4:11:29:80:1D:B9:95:87:8E:3C:5B:BF:F4 X509v3 Authority Key Identifier: keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:c1:c3:d5:0b:23:78:58:27:43:2a:b4:0c:d3:f5:83:ef:d7: ab:78:47:21:fc:05:87:8e:25:76:18:bf:da:7a:f2:43:13:00: 4f:4d:b5:4a:80:18:1c:f5:26:9f:c9:37:04:84:30:94:9e:c5: eb:1d:7d:46:c5:1f:5e:d9:4f:f9:cd:43:c0:63:a3:7f:b0:b2: eb:05:b3:db:01:6d:bb:51:ad:06:ba:49:76:74:44:dc:c3:bf: b4:15:d7:08:0a:4b:a6:69:f2:9c:5d:55:40:c7:02:a1:6c:1b: 82:35:62:84:b3:8f:1a:c7:75:24:30:f1:6c:77:af:2d:86:3d: 13:bc:4c:ab:d9:fd:6a:d4:5e:e9:62:10:ff:3b:9e:52:4a:0e: 60:93:d0:d8:8f:83:5a:2a:19:d8:86:92:0d:c4:ee:cb:42:23: c0:17:f8:5c:66:82:cc:43:c7:ae:d3:c3:45:de:eb:f1:c0:97: f2:55:b8:a1:2d:74:b5:68:dc:6c:a6:3c:1f:ac:c3:f5:cf:d6: 6c:03:b9:f7:45:29:77:01:06:e9:3f:b4:d1:ff:19:38:37:d4: 90:49:f0:bd:cd:9e:1a:38:49:0c:69:77:21:5d:c6:61:49:f9: 75:25:c3:27:96:ac:39:d2:26:03:58:05:59:31:76:46:6f:31: 8a:94:a4:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7Sy7/EMG60/BPq0q+HBbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0Y2Q5NmIyN2U4ODQzNTA0YmI1YmQ1NWMzMjllYzAyZGI5 ZjBmZmQwHhcNMjUxMjIxMDgwMTA2WhcNMjUxMjIyMDgwMTA2WjAzMTEwLwYDVQQD EyhkMzdiN2RlMDViOTJlN2Q0MTEyOTgwMWRiOTk1ODc4ZTNjNWJiZmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoea1+4QLVJhO6x4+FJoMRu2qitdu +SMqXRVQw3vbTetcos/ikHJdXyS46zp6GKIf8g14bET1FUv6G/Wju57s7vriVfVI WeIcGJGfOKA37JdC7VpZDUT5JCjHrjUOmDEZ8KTOnN7cRFjc1qevz/zdxxyUPQE7 Uva+XSs8p3daiWHqIEkRHiccCiMGtlR87byg7Exjj1cEfcOMOozg5tc+Eqkh6+iO ud56YpB+pA7zbiuqK/SB8b4HzWtl69OlxDpg50Pj53KAhBkmwSH1CqtI2NjQEoyf Y9msCree98hDKaCXIhMKLVuffiVZr+KDilz7pnwl9OBx0fH0Vk9rRV/gRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNN7feBbkufUESmAHbmVh448W7/0MB8GA1UdIwQY MBaAFLTNlrJ+iENQS7W9VcMp7ALbnw/9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE0yV3NuNklRMUJMdGIxVnd5bnNBdHVmRF8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xOWRkYWQtYzQ1OC00NDFlLTk4NGUt NTczZjE3ZDJhZWYzLzEvdE0yV3NuNklRMUJMdGIxVnd5bnNBdHVmRF8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8xOWRkYWQtYzQ1OC00NDFlLTk4NGUtNTczZjE3ZDJhZWYz LzEvdE0yV3NuNklRMUJMdGIxVnd5bnNBdHVmRF8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8HD1Qsj eFgnQyq0DNP1g+/Xq3hHIfwFh44ldhi/2nryQxMAT021SoAYHPUmn8k3BIQwlJ7F 6x19RsUfXtlP+c1DwGOjf7Cy6wWz2wFtu1GtBrpJdnRE3MO/tBXXCApLpmnynF1V QMcCoWwbgjVihLOPGsd1JDDxbHevLYY9E7xMq9n9atRe6WIQ/zueUkoOYJPQ2I+D WioZ2IaSDcTuy0IjwBf4XGaCzEPHrtPDRd7r8cCX8lW4oS10tWjcbKY8H6zD9c/W bAO590UpdwEG6T+00f8ZODfUkEnwvc2eGjhJDGl3IV3GYUn5dSXDJ5asOdImA1gF WTF2Rm8xipSkRg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:55:19 2025 by rpki-client