This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft File: tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft (raw, json) Hash identifier: Vmhzq7alVufsTXAF6aH0y03I0bG8ScnP5cZ7IAkTKzQ= Subject key identifier: 10:C9:51:42:86:B4:27:0D:F3:32:6D:52:A2:C9:3A:88:B2:51:E0:6B Authority key identifier: B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94 Certificate issuer: /CN=b56b5b54decf43e964f4be6d304e480a386cb794 Certificate serial: 019B25C00573F00DA0C042FC97FF3043EF63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft Manifest number: 0C Signing time: Tue 16 Dec 2025 06:01:39 +0000 Manifest this update: Tue 16 Dec 2025 06:01:39 +0000 Manifest next update: Wed 17 Dec 2025 06:01:39 +0000 Files and hashes: 1: tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl (hash: O5I+4tJnb6rjRPaORm8+Egmdr8YF4Cy5z5HCh/eMni4=) 2: wc35MgYGPiVoITK8dBRVt7Icluk.asa (hash: A16HGxaZ77Lcix1Lc05fm2biWcgZ/EQMJRjj60DKa2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:c0:05:73:f0:0d:a0:c0:42:fc:97:ff:30:43:ef:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56b5b54decf43e964f4be6d304e480a386cb794 Validity Not Before: Dec 16 06:01:39 2025 GMT Not After : Dec 17 06:01:39 2025 GMT Subject: CN=10c9514286b4270df3326d52a2c93a88b251e06b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:63:07:a0:6a:7a:0f:71:7b:29:66:f7:3a: 2b:db:e3:f4:a8:47:49:7a:b9:3e:e1:20:7b:7b:0a: be:33:65:ae:42:7c:c2:1e:d7:0c:9c:38:dd:0e:b7: d0:c4:9b:90:e6:85:fb:d8:6b:b2:33:e0:6b:63:71: 1f:45:dc:53:86:b7:d9:48:1c:a6:da:01:fe:76:c8: f7:c0:64:a3:3c:56:49:22:f5:c9:59:5b:cf:62:8b: 97:69:c6:82:8c:0e:4c:d1:4e:3b:dd:34:c3:7e:fe: 57:9f:7c:91:06:75:fb:dd:61:97:70:ea:63:df:76: 35:0f:24:4b:44:05:52:b7:01:88:fa:71:45:23:70: 1d:bc:59:a5:11:66:de:ff:30:46:f8:85:dc:b8:64: 97:d2:db:40:b5:24:b8:2f:a0:e2:dc:56:24:7a:1f: 5f:c5:79:c3:79:15:6c:dc:9c:21:43:df:48:d2:6c: 2d:74:bc:1c:9e:f3:3a:fd:4c:f9:14:85:0a:62:e1: 20:88:ed:c6:55:1a:33:fc:98:46:e4:18:b6:a9:9b: 11:87:9e:0b:5f:61:d7:b8:06:c5:08:19:c0:72:44: 6c:5d:3b:c1:4e:2e:bf:e1:4f:a3:88:ef:a9:3b:98: 0c:69:8e:e2:cd:52:b8:27:6f:60:60:41:50:e9:d4: 53:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C9:51:42:86:B4:27:0D:F3:32:6D:52:A2:C9:3A:88:B2:51:E0:6B X509v3 Authority Key Identifier: keyid:B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:5f:8d:a6:c6:a5:32:dc:ee:38:22:61:b4:4c:76:2d:ce:af: 49:f6:4a:a2:d9:8a:85:bd:a4:49:16:e4:41:38:39:54:ad:23: 37:5b:3b:4b:a7:7e:3f:4b:e7:5e:b9:c9:4a:9f:14:d6:44:02: 29:c6:38:3e:cf:9d:4d:19:09:91:06:17:fa:ce:a9:7c:ee:69: 12:88:71:39:6d:1c:f4:99:e6:ca:fe:e8:44:f1:63:89:e2:6d: d4:47:bf:dd:ec:fb:b8:72:3b:ab:8f:61:fd:4a:c6:f9:e8:71: b1:1a:ef:b0:e3:df:46:f3:92:9d:44:cf:32:f1:17:e3:51:dc: 5d:85:af:e0:3d:a1:2c:80:bd:bb:17:82:95:68:7d:d7:c6:15: 26:f2:c0:a6:68:f2:dc:25:a7:05:ea:75:44:6d:c2:a9:e3:99: 04:fc:88:2d:b0:d2:29:0b:fb:e2:19:b4:cd:91:3c:11:32:e5: 62:72:c8:c2:5f:ee:56:85:e2:a4:4c:b9:bb:39:31:d9:21:79: ea:8d:ca:ec:c9:ab:28:18:2a:6a:29:4a:3e:2a:52:5b:33:a4: f2:8e:4a:cf:da:61:13:4f:be:24:66:d1:b8:c2:0c:8c:b4:26: 0b:cf:81:57:46:d9:a0:b2:2e:7a:fe:06:84:af:78:64:ae:8d: 18:90:d1:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslwAVz8A2gwEL8l/8wQ+9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NmI1YjU0ZGVjZjQzZTk2NGY0YmU2ZDMwNGU0ODBhMzg2 Y2I3OTQwHhcNMjUxMjE2MDYwMTM5WhcNMjUxMjE3MDYwMTM5WjAzMTEwLwYDVQQD EygxMGM5NTE0Mjg2YjQyNzBkZjMzMjZkNTJhMmM5M2E4OGIyNTFlMDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrpjB6Bqeg9xeylm9zor2+P0qEdJ erk+4SB7ewq+M2WuQnzCHtcMnDjdDrfQxJuQ5oX72GuyM+BrY3EfRdxThrfZSBym 2gH+dsj3wGSjPFZJIvXJWVvPYouXacaCjA5M0U473TTDfv5Xn3yRBnX73WGXcOpj 33Y1DyRLRAVStwGI+nFFI3AdvFmlEWbe/zBG+IXcuGSX0ttAtSS4L6Di3FYkeh9f xXnDeRVs3JwhQ99I0mwtdLwcnvM6/Uz5FIUKYuEgiO3GVRoz/JhG5Bi2qZsRh54L X2HXuAbFCBnAckRsXTvBTi6/4U+jiO+pO5gMaY7izVK4J29gYEFQ6dRTiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDJUUKGtCcN8zJtUqLJOoiyUeBrMB8GA1UdIwQY MBaAFLVrW1Tez0PpZPS+bTBOSAo4bLeUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFd0YlZON1BRLWxrOUw1dE1FNUlDamhzdDVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84NzRlOGEtM2ExNi00ZjViLThmMTkt MzdhZDBlZWJlMTliLzEvdFd0YlZON1BRLWxrOUw1dE1FNUlDamhzdDVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC84NzRlOGEtM2ExNi00ZjViLThmMTktMzdhZDBlZWJlMTli LzEvdFd0YlZON1BRLWxrOUw1dE1FNUlDamhzdDVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIV+Npsal MtzuOCJhtEx2Lc6vSfZKotmKhb2kSRbkQTg5VK0jN1s7S6d+P0vnXrnJSp8U1kQC KcY4Ps+dTRkJkQYX+s6pfO5pEohxOW0c9Jnmyv7oRPFjieJt1Ee/3ez7uHI7q49h /UrG+ehxsRrvsOPfRvOSnUTPMvEX41HcXYWv4D2hLIC9uxeClWh918YVJvLApmjy 3CWnBep1RG3CqeOZBPyILbDSKQv74hm0zZE8ETLlYnLIwl/uVoXipEy5uzkx2SF5 6o3K7MmrKBgqailKPipSWzOk8o5Kz9phE0++JGbRuMIMjLQmC8+BV0bZoLIuev4G hK94ZK6NGJDRcg== -----END CERTIFICATE-----Generated at Tue Dec 16 14:05:06 2025 by rpki-client