This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft File: t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft (raw, json) Hash identifier: JpJVjfPeWeGWApu/Wdu1Z+7TlG79Zs7W4mtPkidFgFA= Subject key identifier: 46:E7:6E:98:99:BF:3C:E5:FC:1F:23:C1:86:90:5F:70:E2:81:F7:E9 Authority key identifier: B7:9C:2D:E3:EB:30:91:80:F4:F5:A5:AF:2D:56:FE:42:58:78:46:48 Certificate issuer: /CN=b79c2de3eb309180f4f5a5af2d56fe4258784648 Certificate serial: 019B424A269F46540EE6F53DC855D4513C46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft Manifest number: 089D Signing time: Sun 21 Dec 2025 19:01:54 +0000 Manifest this update: Sun 21 Dec 2025 19:01:54 +0000 Manifest next update: Mon 22 Dec 2025 19:01:54 +0000 Files and hashes: 1: NPzS7dKaq70IcGX_A1Qcj_ZLSso.roa (hash: NKVUhSy28Mx3aJChPzTkXureREnDmeAOH1iQ7b+r7LU=) 2: t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl (hash: ltU4WCme9mEVbbzEv3Hk5WBu9qOKRtlWuXimilRAL/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:26:9f:46:54:0e:e6:f5:3d:c8:55:d4:51:3c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b79c2de3eb309180f4f5a5af2d56fe4258784648 Validity Not Before: Dec 21 19:01:54 2025 GMT Not After : Dec 22 19:01:54 2025 GMT Subject: CN=46e76e9899bf3ce5fc1f23c186905f70e281f7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bb:38:da:16:29:e1:e9:a0:00:27:ab:14:96: 6e:c4:44:0c:90:02:01:a8:98:88:ce:a5:fc:8f:66: 44:69:c3:c1:6a:7d:10:f6:a6:84:be:d7:12:13:2e: 5d:f7:52:71:1c:cb:51:db:56:ae:4b:b9:dd:64:08: ff:21:ce:ed:be:2b:e6:f8:71:6f:b2:ae:a5:ee:01: c3:be:b2:14:1c:44:bd:cc:95:14:c9:af:16:a4:86: 73:a4:ec:09:fd:90:13:5a:42:47:7e:d9:63:57:32: 88:c2:8f:49:b1:72:a1:10:cf:21:81:a6:96:05:4b: 7e:9a:c2:8d:f0:4d:1f:02:13:f0:70:51:13:0a:6d: b3:17:9f:b4:1a:4f:ca:c8:d6:8b:57:b0:c4:39:a8: 2d:4a:70:80:41:91:b0:bc:e0:32:cc:79:06:0e:2f: 96:06:96:0d:10:9b:6f:b2:e5:03:e2:62:78:37:3b: 97:ac:37:97:c0:d6:6f:29:f1:15:a9:b2:a7:02:7b: 2a:19:6f:41:da:ee:8c:16:88:6d:d9:3e:26:9e:b9: 64:d2:a6:ec:54:5f:48:ca:53:09:5f:b9:5f:e3:39: 73:65:ea:5e:65:c8:18:e7:ed:b6:f4:b5:29:1c:3f: 57:c7:bd:f0:5a:3d:50:d4:0a:cd:9d:77:a8:d8:bf: 0a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E7:6E:98:99:BF:3C:E5:FC:1F:23:C1:86:90:5F:70:E2:81:F7:E9 X509v3 Authority Key Identifier: keyid:B7:9C:2D:E3:EB:30:91:80:F4:F5:A5:AF:2D:56:FE:42:58:78:46:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b7:d4:50:17:f8:83:9c:88:a7:ae:58:c2:7b:9d:d2:ee:ec: ee:17:ff:c7:b2:2a:8a:ff:b9:30:8a:78:74:bd:d4:2d:57:ed: e4:ca:7c:45:68:ec:fb:52:22:ff:35:5b:3e:bc:1e:58:9a:e6: eb:c4:fa:8f:64:9f:c6:54:86:bc:fd:d6:37:d1:7b:cd:8b:ec: 68:99:9e:12:70:69:8f:7f:52:61:59:29:df:9a:56:47:d7:e1: 25:f2:c1:2a:28:1b:b9:07:fe:98:0c:86:05:e8:29:d6:91:d1: 26:e3:96:5d:c6:58:f5:ce:c7:45:10:34:46:df:01:3f:7a:82: ae:1e:0b:37:14:2d:72:a4:1d:bc:76:c6:46:b2:45:4b:04:a6: 35:61:57:7a:bf:51:5f:26:2a:10:7b:85:fd:f6:57:5b:2d:96: b1:8f:69:4c:15:65:76:0a:05:f2:5b:12:f8:b1:b8:d7:63:2f: dd:3c:7e:0e:51:56:e8:52:03:c8:ec:98:33:51:ae:40:7f:5d: 53:9a:4e:80:d7:94:06:09:70:af:de:63:7c:f9:55:45:e8:71: 11:99:6c:74:4c:0d:82:93:a5:70:fd:cd:d8:1a:f4:4a:a0:8a: 53:e7:c0:f8:a8:96:ac:7e:67:f1:30:00:38:dd:59:0b:b0:7a: 11:8f:8e:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSiafRlQO5vU9yFXUUTxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OWMyZGUzZWIzMDkxODBmNGY1YTVhZjJkNTZmZTQyNTg3 ODQ2NDgwHhcNMjUxMjIxMTkwMTU0WhcNMjUxMjIyMTkwMTU0WjAzMTEwLwYDVQQD Eyg0NmU3NmU5ODk5YmYzY2U1ZmMxZjIzYzE4NjkwNWY3MGUyODFmN2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rs42hYp4emgACerFJZuxEQMkAIB qJiIzqX8j2ZEacPBan0Q9qaEvtcSEy5d91JxHMtR21auS7ndZAj/Ic7tvivm+HFv sq6l7gHDvrIUHES9zJUUya8WpIZzpOwJ/ZATWkJHftljVzKIwo9JsXKhEM8hgaaW BUt+msKN8E0fAhPwcFETCm2zF5+0Gk/KyNaLV7DEOagtSnCAQZGwvOAyzHkGDi+W BpYNEJtvsuUD4mJ4NzuXrDeXwNZvKfEVqbKnAnsqGW9B2u6MFoht2T4mnrlk0qbs VF9IylMJX7lf4zlzZepeZcgY5+229LUpHD9Xx73wWj1Q1ArNnXeo2L8KNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbnbpiZvzzl/B8jwYaQX3DigffpMB8GA1UdIwQY MBaAFLecLePrMJGA9PWlry1W/kJYeEZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDV3dDQtc3drWUQwOWFXdkxWYi1RbGg0UmtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81NmEwMDYtOTE5Zi00ODdjLTkzMTYt MGJiNmE4M2Y5ZjQwLzEvdDV3dDQtc3drWUQwOWFXdkxWYi1RbGg0UmtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81NmEwMDYtOTE5Zi00ODdjLTkzMTYtMGJiNmE4M2Y5ZjQw LzEvdDV3dDQtc3drWUQwOWFXdkxWYi1RbGg0UmtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLfUUBf4 g5yIp65Ywnud0u7s7hf/x7Iqiv+5MIp4dL3ULVft5Mp8RWjs+1Ii/zVbPrweWJrm 68T6j2SfxlSGvP3WN9F7zYvsaJmeEnBpj39SYVkp35pWR9fhJfLBKigbuQf+mAyG Begp1pHRJuOWXcZY9c7HRRA0Rt8BP3qCrh4LNxQtcqQdvHbGRrJFSwSmNWFXer9R XyYqEHuF/fZXWy2WsY9pTBVldgoF8lsS+LG412Mv3Tx+DlFW6FIDyOyYM1GuQH9d U5pOgNeUBglwr95jfPlVRehxEZlsdEwNgpOlcP3N2Br0SqCKU+fA+KiWrH5n8TAA ON1ZC7B6EY+OpA== -----END CERTIFICATE-----Generated at Sun Dec 21 23:10:24 2025 by rpki-client