This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft File: 1-TmwPxKU69NaOxXWldfpH4y0H6A.mft (raw, json) Hash identifier: BgC7GwjQ8AfXKlv43s3uy6xHDkWSeg7T5Cb7DyYAn8U= Subject key identifier: C4:94:10:7C:0F:77:4C:5B:58:57:2B:12:8D:FF:A3:35:7A:74:6D:9E Authority key identifier: F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0 Certificate issuer: /CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0 Certificate serial: 019B514E184AA4A09BBA5C583C9A549C6E26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft Manifest number: 13DE Signing time: Wed 24 Dec 2025 17:00:30 +0000 Manifest this update: Wed 24 Dec 2025 17:00:30 +0000 Manifest next update: Thu 25 Dec 2025 17:00:30 +0000 Files and hashes: 1: 1-TmwPxKU69NaOxXWldfpH4y0H6A.crl (hash: SmDLusYQvL9SNboNLd7XnY+CTL4gcvJvGmiij/Rkf6E=) 2: S1K-LNOfEdqMwJPR6JwjXy3twNM.roa (hash: 6+dgtQWWnCxkd6rViHnDLK3NWbLzGQNeNx6DA6f+PL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:18:4a:a4:a0:9b:ba:5c:58:3c:9a:54:9c:6e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0 Validity Not Before: Dec 24 17:00:30 2025 GMT Not After : Dec 25 17:00:30 2025 GMT Subject: CN=c494107c0f774c5b58572b128dffa3357a746d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:78:06:ef:f5:da:e4:d1:c2:d6:e6:f4:40:87: cc:02:97:6c:78:6b:ca:39:70:62:31:1b:86:7d:05: 1a:c2:74:4c:27:fb:9c:0b:b4:90:a3:6c:87:ed:e2: 7f:b2:05:6b:0f:0b:2b:8e:66:03:50:7d:cc:9e:d1: 67:f8:08:df:e5:bf:cb:ba:62:b0:47:b2:2b:3b:e8: 1b:5d:5b:26:50:1c:95:a1:4d:a7:c0:c9:47:02:2b: f4:4e:4b:d5:e1:31:9e:57:7b:d2:8a:cd:71:e6:ca: e4:68:f6:6a:1a:e2:3e:57:6f:34:b9:3f:ba:20:c7: 4b:2e:6d:b0:6c:5b:99:87:49:85:a0:b1:8e:b7:94: f7:b9:1c:c7:f9:27:ab:c1:90:3d:7f:8b:fa:74:60: e8:fc:27:d9:f0:1c:1d:53:0e:77:e4:79:07:42:50: 61:5f:7a:56:ca:6f:2d:13:53:23:e9:28:de:33:1d: 17:66:05:f7:07:0b:41:66:45:b6:bb:0b:c8:d1:3d: df:34:e7:1a:b9:2f:77:51:f1:57:bc:a0:b8:75:b7: f5:8c:8a:b2:72:6a:0f:b4:98:5a:f7:14:9c:09:51: 55:3f:d3:ff:c5:8b:c9:66:a3:de:da:39:aa:ef:84: af:7a:8f:2a:34:32:cf:57:cc:5f:2e:c6:39:fb:fb: 54:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:94:10:7C:0F:77:4C:5B:58:57:2B:12:8D:FF:A3:35:7A:74:6D:9E X509v3 Authority Key Identifier: keyid:F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:38:68:5f:cf:e2:bf:37:90:25:56:d4:85:cc:32:73:de:3d: 65:18:34:27:3c:89:13:4e:82:a1:7b:ad:2a:7d:a7:58:66:fa: 71:c6:5b:ef:c9:c8:8a:c1:50:c3:bd:75:76:8a:02:d8:7b:d9: 0d:a5:6a:f6:11:17:f5:c8:0e:8e:f4:b1:94:20:a8:b9:b1:18: de:4e:77:f6:a4:2a:b5:48:7c:75:39:4c:c2:1e:10:56:cf:62: 8f:f7:0a:a3:3e:14:81:5b:92:83:06:60:a7:78:3f:37:b2:a5: 68:92:b7:48:78:8c:b4:47:9d:b1:6f:c3:ce:7f:f0:51:d7:89: 4c:7c:ec:a9:a8:1c:a8:6a:f0:c4:7c:e8:eb:91:22:7c:53:a3: 83:a7:9a:e2:dd:e0:08:e1:89:32:2b:3c:5b:97:65:8b:e6:32: 6f:71:e1:69:d9:da:a9:d6:a4:e1:32:c8:f0:27:3e:aa:f0:73: 38:64:a2:49:13:03:7b:f2:cd:57:0c:02:d3:c9:e8:7a:1b:75: f3:ab:75:f2:e8:9a:04:3e:4f:03:d9:1d:39:d7:73:df:c5:04: 4c:41:06:ff:cd:3d:95:bb:0d:45:91:db:fb:f2:86:f1:da:ba: dc:2c:ae:73:c1:ef:91:56:a2:bb:56:57:aa:64:d5:28:8b:be: 9f:6d:2d:14 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtRThhKpKCbulxYPJpUnG4mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MzliMDNmMTI5NGViZDM1YTNiMTVkNjk1ZDdlOTFmOGNi NDFmYTAwHhcNMjUxMjI0MTcwMDMwWhcNMjUxMjI1MTcwMDMwWjAzMTEwLwYDVQQD EyhjNDk0MTA3YzBmNzc0YzViNTg1NzJiMTI4ZGZmYTMzNTdhNzQ2ZDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3gG7/Xa5NHC1ub0QIfMApdseGvK OXBiMRuGfQUawnRMJ/ucC7SQo2yH7eJ/sgVrDwsrjmYDUH3MntFn+Ajf5b/LumKw R7IrO+gbXVsmUByVoU2nwMlHAiv0TkvV4TGeV3vSis1x5srkaPZqGuI+V280uT+6 IMdLLm2wbFuZh0mFoLGOt5T3uRzH+SerwZA9f4v6dGDo/CfZ8BwdUw535HkHQlBh X3pWym8tE1Mj6SjeMx0XZgX3BwtBZkW2uwvI0T3fNOcauS93UfFXvKC4dbf1jIqy cmoPtJha9xScCVFVP9P/xYvJZqPe2jmq74Sveo8qNDLPV8xfLsY5+/tUJQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMSUEHwPd0xbWFcrEo3/ozV6dG2eMB8GA1UdIwQY MBaAFPk5sD8SlOvTWjsV1pXX6R+MtB+gMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1UbXdQeEtVNjlOYU94WFdsZGZwSDR5MEg2QS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvMGM5ZGU4LWNlZjItNGQ4ZC1hOTIw LTc2NTk0YTE5MTc3Yy8xLzEtVG13UHhLVTY5TmFPeFhXbGRmcEg0eTBINkEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2E3LzBjOWRlOC1jZWYyLTRkOGQtYTkyMC03NjU5NGExOTE3 N2MvMS8xLVRtd1B4S1U2OU5hT3hYV2xkZnBINHkwSDZBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyDho X8/ivzeQJVbUhcwyc949ZRg0JzyJE06CoXutKn2nWGb6ccZb78nIisFQw711dooC 2HvZDaVq9hEX9cgOjvSxlCCoubEY3k539qQqtUh8dTlMwh4QVs9ij/cKoz4UgVuS gwZgp3g/N7KlaJK3SHiMtEedsW/Dzn/wUdeJTHzsqagcqGrwxHzo65EifFOjg6ea 4t3gCOGJMis8W5dli+Yyb3Hhadnaqdak4TLI8Cc+qvBzOGSiSRMDe/LNVwwC08no eht186t18uiaBD5PA9kdOddz38UETEEG/809lbsNRZHb+/KG8dq63Cyuc8HvkVai u1ZXqmTVKIu+n20tFA== -----END CERTIFICATE-----Generated at Wed Dec 24 23:27:44 2025 by rpki-client