This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft File: TrwmqzTIMZdDMt05mo5W6aqbe4U.mft (raw, json) Hash identifier: sUNR8cvVGAHeiqxKSTfG3LlUoEstGnoVorC3JMGKsEE= Subject key identifier: 23:84:0E:19:19:20:C8:3B:89:75:30:AA:0F:1E:A2:DA:69:75:46:99 Authority key identifier: 4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85 Certificate issuer: /CN=4ebc26ab34c831974332dd399a8e56e9aa9b7b85 Certificate serial: 019B24E35B596FC635A993187E11877EFB36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft Manifest number: B9 Signing time: Tue 16 Dec 2025 02:00:38 +0000 Manifest this update: Tue 16 Dec 2025 02:00:38 +0000 Manifest next update: Wed 17 Dec 2025 02:00:38 +0000 Files and hashes: 1: TrwmqzTIMZdDMt05mo5W6aqbe4U.crl (hash: OaUbioyBwpuVQ5HpiietB8rsI72GelLLfYj6uFtErX4=) 2: zYL449gEhOrSRUOWk45-5w_QwxY.asa (hash: 2I3JzyYDlWOa37LiRrfqotSTSjqIyf07yQPMZe4sNg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:5b:59:6f:c6:35:a9:93:18:7e:11:87:7e:fb:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ebc26ab34c831974332dd399a8e56e9aa9b7b85 Validity Not Before: Dec 16 02:00:38 2025 GMT Not After : Dec 17 02:00:38 2025 GMT Subject: CN=23840e191920c83b897530aa0f1ea2da69754699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:39:b1:26:17:be:7b:6e:7f:0f:8d:42:e2:ee: 8c:a6:92:69:07:39:5c:88:ce:b8:c7:b6:83:72:ef: 6c:a2:20:47:a7:04:c5:7b:41:de:2e:3a:49:7e:19: 74:f9:ec:04:6b:01:2a:c7:97:03:be:9e:f7:e4:37: 4c:a0:4a:4a:29:5d:a5:30:9e:2f:03:fe:16:05:a6: 83:32:87:0d:a8:91:a1:a5:59:69:4d:1c:88:a6:fa: 1d:d8:71:a8:df:ed:ba:e5:c9:ee:61:4a:00:b7:2e: 75:54:a4:08:16:46:89:d6:6b:df:a0:69:39:1b:fe: 0a:64:75:40:22:e7:5b:26:63:a1:fb:84:43:f9:27: 00:f7:b1:45:1a:f0:cc:0c:2d:cf:14:08:be:cc:4f: 97:b3:97:bc:90:39:e8:be:64:61:1b:82:d4:49:4e: a4:ab:69:bd:12:18:31:31:bf:7f:73:e5:60:e1:67: bf:93:ed:08:e4:6f:1d:78:eb:47:16:a1:5f:d9:eb: c4:17:e0:d3:4f:70:7e:f3:94:c0:a4:3c:6b:ba:81: 87:c2:58:c5:59:02:47:41:5b:bb:95:9f:c8:e0:c3: 2b:81:d3:73:03:4e:6e:7f:dc:a8:a6:aa:8e:ea:96: 56:36:4f:3e:f2:37:59:c7:a9:83:9e:8c:bc:bb:3b: ec:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:84:0E:19:19:20:C8:3B:89:75:30:AA:0F:1E:A2:DA:69:75:46:99 X509v3 Authority Key Identifier: keyid:4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b6:15:83:f6:9b:88:83:4b:22:59:65:fc:6f:55:a9:ef:0d: 3a:c3:d7:48:d3:94:8b:62:b5:39:68:af:c8:51:2f:18:c3:87: 17:08:76:d5:8b:35:ed:e1:a7:5c:ea:22:b7:77:44:9b:66:fe: 63:e8:92:77:87:15:2a:42:d4:02:53:b8:6f:02:34:c5:5c:7e: 65:e8:2d:c8:3c:94:3d:7e:06:24:36:f1:3a:5a:48:b4:d6:9f: 80:e5:ae:13:02:8d:2a:54:69:e0:a1:4d:fc:40:23:32:f2:61: 32:38:48:10:3a:6e:a4:8b:71:43:cd:0c:5e:1c:43:a1:10:ff: 59:4d:cd:cb:af:96:7d:64:32:4f:d4:05:ef:1d:28:59:8d:0a: a2:ff:e0:a8:35:cf:5e:b6:1c:10:46:d8:e6:d3:63:2b:a3:c4: 75:03:9f:b1:30:1f:0b:4c:01:ac:7f:d3:21:f6:a0:d4:dc:a8: dd:cb:89:3d:61:34:58:c6:b2:3b:56:38:0c:ed:8b:b4:aa:10: 66:22:4b:de:6f:29:4b:e6:a9:5f:a0:4e:0a:b1:0b:a5:5f:1c: 8b:48:f1:39:82:c8:f1:d7:e7:60:81:7b:db:e2:67:08:47:e5: 7c:ee:39:ab:be:0f:8b:f3:33:fa:bc:44:f2:07:32:c9:fe:79: 45:68:b8:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk41tZb8Y1qZMYfhGHfvs2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYmMyNmFiMzRjODMxOTc0MzMyZGQzOTlhOGU1NmU5YWE5 YjdiODUwHhcNMjUxMjE2MDIwMDM4WhcNMjUxMjE3MDIwMDM4WjAzMTEwLwYDVQQD EygyMzg0MGUxOTE5MjBjODNiODk3NTMwYWEwZjFlYTJkYTY5NzU0Njk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTmxJhe+e25/D41C4u6MppJpBzlc iM64x7aDcu9soiBHpwTFe0HeLjpJfhl0+ewEawEqx5cDvp735DdMoEpKKV2lMJ4v A/4WBaaDMocNqJGhpVlpTRyIpvod2HGo3+265cnuYUoAty51VKQIFkaJ1mvfoGk5 G/4KZHVAIudbJmOh+4RD+ScA97FFGvDMDC3PFAi+zE+Xs5e8kDnovmRhG4LUSU6k q2m9EhgxMb9/c+Vg4We/k+0I5G8deOtHFqFf2evEF+DTT3B+85TApDxruoGHwljF WQJHQVu7lZ/I4MMrgdNzA05uf9yopqqO6pZWNk8+8jdZx6mDnoy8uzvsKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOEDhkZIMg7iXUwqg8eotppdUaZMB8GA1UdIwQY MBaAFE68Jqs0yDGXQzLdOZqOVumqm3uFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHJ3bXF6VElNWmRETXQwNW1vNVc2YXFiZTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85MmM0OTctNmYyMy00Y2E5LTk5NzQt YmViNzkwZGE1YjRmLzEvVHJ3bXF6VElNWmRETXQwNW1vNVc2YXFiZTRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85MmM0OTctNmYyMy00Y2E5LTk5NzQtYmViNzkwZGE1YjRm LzEvVHJ3bXF6VElNWmRETXQwNW1vNVc2YXFiZTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7YVg/ab iINLIlll/G9Vqe8NOsPXSNOUi2K1OWivyFEvGMOHFwh21Ys17eGnXOoit3dEm2b+ Y+iSd4cVKkLUAlO4bwI0xVx+ZegtyDyUPX4GJDbxOlpItNafgOWuEwKNKlRp4KFN /EAjMvJhMjhIEDpupItxQ80MXhxDoRD/WU3Ny6+WfWQyT9QF7x0oWY0Kov/gqDXP XrYcEEbY5tNjK6PEdQOfsTAfC0wBrH/TIfag1Nyo3cuJPWE0WMayO1Y4DO2LtKoQ ZiJL3m8pS+apX6BOCrELpV8ci0jxOYLI8dfnYIF72+JnCEflfO45q74Pi/Mz+rxE 8gcyyf55RWi41A== -----END CERTIFICATE-----Generated at Tue Dec 16 12:41:56 2025 by rpki-client