This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft File: wT40HB4U01p0ls54KOMFX4Y5Nc8.mft (raw, json) Hash identifier: Ksq2ryw7iPd7h5nHIVWNA0dDnaxbtl+aPoO3OIcqCpM= Subject key identifier: 27:EE:CA:45:A9:7D:BE:5C:39:8E:F7:52:3E:9B:2D:3E:4B:94:26:88 Authority key identifier: C1:3E:34:1C:1E:14:D3:5A:74:96:CE:78:28:E3:05:5F:86:39:35:CF Certificate issuer: /CN=c13e341c1e14d35a7496ce7828e3055f863935cf Certificate serial: 019B6DA195A83E02893A214BCAE21788D490 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft Manifest number: 17A5 Signing time: Tue 30 Dec 2025 05:01:04 +0000 Manifest this update: Tue 30 Dec 2025 05:01:04 +0000 Manifest next update: Wed 31 Dec 2025 05:01:04 +0000 Files and hashes: 1: f1wBKCsXK0uC2nsel0GIe5b0KZk.roa (hash: G9RLd4HtWguPLDAL1JjtSWQmaqJ7AZGAeDkABfQH220=) 2: wT40HB4U01p0ls54KOMFX4Y5Nc8.crl (hash: opYfP3mUpoUQU4f7RXVDcJoPK7j47F5nD9cYQXsj/yA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 05:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a1:95:a8:3e:02:89:3a:21:4b:ca:e2:17:88:d4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c13e341c1e14d35a7496ce7828e3055f863935cf Validity Not Before: Dec 30 05:01:04 2025 GMT Not After : Dec 31 05:01:04 2025 GMT Subject: CN=27eeca45a97dbe5c398ef7523e9b2d3e4b942688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:ed:59:42:11:f4:e5:0d:1f:7b:da:b2:2e: 0b:5f:25:3c:31:b9:81:0e:3e:55:1b:2a:83:d5:bd: 15:40:37:8b:e6:05:50:8a:c8:8c:1a:ce:7e:9f:a5: 49:44:f0:5e:29:4a:b0:9a:46:6e:cb:23:c6:40:f1: ec:c6:67:bd:01:2b:18:64:05:e1:a7:30:8d:c7:3b: 18:99:2a:6d:6d:30:49:b6:ae:69:e3:3f:b4:ac:c2: 7f:7d:e2:d6:7a:e7:00:9b:74:1c:d1:b3:1f:55:b5: 18:e7:c7:dd:51:2e:e6:48:f9:6f:05:4c:8f:38:3d: 68:2f:7d:0b:9c:79:c4:69:39:1c:39:28:cd:44:2c: bb:65:ec:2d:b6:dc:f1:46:e3:15:67:3c:d4:8b:61: 82:38:d2:ad:96:a5:13:15:73:5e:2f:fa:2e:1c:82: 42:10:79:8c:fd:d8:f1:e5:3c:01:50:b5:d2:8b:61: 48:9b:a9:b9:9b:e7:f8:33:3a:19:d3:2c:57:53:31: 02:a9:0e:76:06:5d:c3:8a:3e:b5:b6:66:e9:1e:14: 3a:52:07:0d:f7:58:bb:f2:01:6f:38:7d:52:f9:f9: b0:fd:e0:79:02:df:94:83:b8:10:7d:64:78:ea:3c: 13:6a:9d:70:9e:76:ca:d1:6e:3e:6a:49:a9:a2:19: 63:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:EE:CA:45:A9:7D:BE:5C:39:8E:F7:52:3E:9B:2D:3E:4B:94:26:88 X509v3 Authority Key Identifier: keyid:C1:3E:34:1C:1E:14:D3:5A:74:96:CE:78:28:E3:05:5F:86:39:35:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:de:c5:52:03:c8:7e:c5:94:bc:bc:9b:32:73:df:cc:e1:37: 3b:38:aa:71:2f:0d:43:e3:31:e9:82:15:6f:c7:a0:26:84:0f: 13:20:49:26:13:32:81:c0:8f:96:44:17:be:7b:4e:e8:dd:e0: 43:32:b7:83:df:8a:3b:f9:af:1b:15:ec:bc:ac:d2:2c:68:a0: 50:1a:06:82:fa:38:b0:c2:af:b4:c8:9e:25:c7:63:db:c7:35: f7:47:f1:1a:17:d1:34:ac:db:e8:af:1f:f7:38:b1:01:02:ef: 90:22:d1:4e:ed:3b:6f:2c:fd:6c:1b:e1:83:87:d9:1d:84:b0: fd:c2:8f:78:cf:71:0f:f0:7c:48:67:6a:b8:e3:7a:90:d1:7e: c9:83:d2:43:57:3a:48:a3:3f:0c:28:02:59:ed:b3:f1:ee:0f: 7e:ba:a7:e6:cc:a0:7a:61:e6:80:2c:75:e3:d2:78:02:f1:e5: e8:2f:29:38:31:34:be:5b:df:81:ea:d2:fb:11:bd:35:2a:56: 78:91:93:f9:c6:eb:fa:98:f1:1e:0d:d6:c7:cc:9b:21:1f:bb: 4c:cf:f4:f9:f0:ce:29:2e:d5:db:20:b0:24:1d:a2:86:7d:f2: 3f:aa:a1:9c:5b:10:84:13:f2:8a:42:e2:e1:fc:6d:21:53:34: 7c:80:0a:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttoZWoPgKJOiFLyuIXiNSQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxM2UzNDFjMWUxNGQzNWE3NDk2Y2U3ODI4ZTMwNTVmODYz OTM1Y2YwHhcNMjUxMjMwMDUwMTA0WhcNMjUxMjMxMDUwMTA0WjAzMTEwLwYDVQQD EygyN2VlY2E0NWE5N2RiZTVjMzk4ZWY3NTIzZTliMmQzZTRiOTQyNjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmDtWUIR9OUNH3vasi4LXyU8MbmB Dj5VGyqD1b0VQDeL5gVQisiMGs5+n6VJRPBeKUqwmkZuyyPGQPHsxme9ASsYZAXh pzCNxzsYmSptbTBJtq5p4z+0rMJ/feLWeucAm3Qc0bMfVbUY58fdUS7mSPlvBUyP OD1oL30LnHnEaTkcOSjNRCy7ZewtttzxRuMVZzzUi2GCONKtlqUTFXNeL/ouHIJC EHmM/djx5TwBULXSi2FIm6m5m+f4MzoZ0yxXUzECqQ52Bl3Dij61tmbpHhQ6UgcN 91i78gFvOH1S+fmw/eB5At+Ug7gQfWR46jwTap1wnnbK0W4+akmpohljjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfuykWpfb5cOY73Uj6bLT5LlCaIMB8GA1UdIwQY MBaAFME+NBweFNNadJbOeCjjBV+GOTXPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1Q0MEhCNFUwMXAwbHM1NEtPTUZYNFk1TmM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNGFiZjMtNGFmMy00MTgwLTgzNDAt YjEzYTFmMjBkMTVmLzEvd1Q0MEhCNFUwMXAwbHM1NEtPTUZYNFk1TmM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9hNGFiZjMtNGFmMy00MTgwLTgzNDAtYjEzYTFmMjBkMTVm LzEvd1Q0MEhCNFUwMXAwbHM1NEtPTUZYNFk1TmM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjd7FUgPI fsWUvLybMnPfzOE3OziqcS8NQ+Mx6YIVb8egJoQPEyBJJhMygcCPlkQXvntO6N3g QzK3g9+KO/mvGxXsvKzSLGigUBoGgvo4sMKvtMieJcdj28c190fxGhfRNKzb6K8f 9zixAQLvkCLRTu07byz9bBvhg4fZHYSw/cKPeM9xD/B8SGdquON6kNF+yYPSQ1c6 SKM/DCgCWe2z8e4Pfrqn5sygemHmgCx149J4AvHl6C8pODE0vlvfgerS+xG9NSpW eJGT+cbr+pjxHg3Wx8ybIR+7TM/0+fDOKS7V2yCwJB2ihn3yP6qhnFsQhBPyikLi 4fxtIVM0fIAKeg== -----END CERTIFICATE-----Generated at Tue Dec 30 12:29:26 2025 by rpki-client