This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dde736-2730-4bfe-a5b3-082e11363f0a/1/tWpL1vXr8vf_2ajRzZparN5iKFw.mft File: tWpL1vXr8vf_2ajRzZparN5iKFw.mft (raw, json) Hash identifier: AgqPmGBEpxyxLWeDfI9X+WiFRNePwKquabExeeRBUZo= Subject key identifier: F9:64:38:72:86:CC:4C:EC:FC:D6:81:50:14:E7:C9:C1:8D:C0:46:0D Authority key identifier: B5:6A:4B:D6:F5:EB:F2:F7:FF:D9:A8:D1:CD:9A:5A:AC:DE:62:28:5C Certificate issuer: /CN=b56a4bd6f5ebf2f7ffd9a8d1cd9a5aacde62285c Certificate serial: 019B42EE9658390D07ECD93130FF93B31CB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWpL1vXr8vf_2ajRzZparN5iKFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dde736-2730-4bfe-a5b3-082e11363f0a/1/tWpL1vXr8vf_2ajRzZparN5iKFw.mft Manifest number: 0945 Signing time: Sun 21 Dec 2025 22:01:30 +0000 Manifest this update: Sun 21 Dec 2025 22:01:30 +0000 Manifest next update: Mon 22 Dec 2025 22:01:30 +0000 Files and hashes: 1: tWpL1vXr8vf_2ajRzZparN5iKFw.crl (hash: Uiqc0l5bIE0R1pYqQG84lUqWjHDijhHnMF0KWf7LPEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dde736-2730-4bfe-a5b3-082e11363f0a/1/tWpL1vXr8vf_2ajRzZparN5iKFw.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dde736-2730-4bfe-a5b3-082e11363f0a/1/tWpL1vXr8vf_2ajRzZparN5iKFw.mft rsync://rpki.ripe.net/repository/DEFAULT/tWpL1vXr8vf_2ajRzZparN5iKFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:96:58:39:0d:07:ec:d9:31:30:ff:93:b3:1c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56a4bd6f5ebf2f7ffd9a8d1cd9a5aacde62285c Validity Not Before: Dec 21 22:01:30 2025 GMT Not After : Dec 22 22:01:30 2025 GMT Subject: CN=f964387286cc4cecfcd6815014e7c9c18dc0460d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b9:8f:4a:1c:7c:bc:2a:b0:bb:dd:da:47:76: e9:9a:0d:7b:7f:21:1b:4a:af:61:f0:c0:2f:5b:ae: 5a:19:18:18:96:eb:ec:0d:0e:28:a0:b5:c8:d1:aa: de:ff:62:c4:a6:3e:2d:96:fe:6e:7e:9d:1b:23:ff: fb:ed:e6:60:e8:09:41:66:a1:ef:c4:89:17:2f:94: 41:bf:19:a7:b2:9e:c3:8f:33:81:71:e3:cd:90:53: c8:23:b3:e9:b6:e2:3d:fc:8a:aa:77:79:e3:02:87: 12:24:b7:e5:f1:00:81:2c:9c:c8:b7:47:c9:03:25: df:92:d6:7b:33:d8:31:8b:7a:b1:86:ef:74:a3:24: 98:c6:8d:ce:fb:a5:ff:96:96:9b:cc:5d:78:0c:97: c7:1e:b1:22:0e:87:8e:4d:57:3a:7f:09:42:ca:85: 63:04:c2:51:bb:10:6d:b3:b6:1a:82:e1:d2:d7:00: e0:43:b8:a5:e2:98:b9:00:3e:f9:dc:d6:6b:6b:25: 08:18:9a:7c:70:d3:e1:e7:a2:18:c7:af:b2:13:49: e4:92:77:94:81:dc:18:00:fc:1e:19:cb:cb:75:54: 98:7f:37:ff:1e:45:55:38:7d:03:23:c4:6d:e6:29: f0:85:62:8f:05:b0:c7:67:97:70:72:ff:d0:ba:7b: fc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:64:38:72:86:CC:4C:EC:FC:D6:81:50:14:E7:C9:C1:8D:C0:46:0D X509v3 Authority Key Identifier: keyid:B5:6A:4B:D6:F5:EB:F2:F7:FF:D9:A8:D1:CD:9A:5A:AC:DE:62:28:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWpL1vXr8vf_2ajRzZparN5iKFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dde736-2730-4bfe-a5b3-082e11363f0a/1/tWpL1vXr8vf_2ajRzZparN5iKFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dde736-2730-4bfe-a5b3-082e11363f0a/1/tWpL1vXr8vf_2ajRzZparN5iKFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:58:a2:8c:36:3c:02:ad:76:12:69:81:2e:81:d4:35:db:e5: 4d:de:a7:3d:f0:dd:47:b9:de:87:a5:e6:f7:6e:26:19:50:5e: dc:21:d9:ea:b7:9b:22:51:ef:af:ad:4b:0a:d3:f3:b5:8b:4c: 8e:8e:ee:a3:fc:0c:e9:ce:e3:59:a8:18:44:20:39:c6:b1:ad: 44:ca:3b:fb:ff:d3:13:f2:42:31:fc:05:75:c6:c7:30:25:a4: 49:34:31:35:ae:0a:b5:a5:a6:e1:c5:ce:50:79:30:48:5e:95: 9f:39:ee:cb:17:d6:6a:e1:80:b7:03:15:c4:fa:ae:65:c0:25: b5:e1:c6:98:3c:cc:a3:10:0f:d5:26:7c:8f:33:05:a4:93:f9: 4a:aa:f2:20:3c:c3:b6:9f:87:c2:3a:73:39:c5:8e:5c:e5:a5: 8f:cf:7a:1d:f3:7b:92:c2:bf:a7:59:3b:07:a1:28:cd:37:af: 49:be:40:72:ac:ea:19:b2:9e:64:8a:8b:84:d6:9e:ac:3e:52: d5:1b:f7:ba:1c:5e:8c:3e:1a:bf:79:ed:49:ad:46:77:26:66: 7e:ef:09:2a:37:0b:fa:13:37:d8:15:ab:9b:a6:9d:aa:75:83: 3e:f9:82:92:2c:62:15:28:58:c4:57:70:3b:44:81:63:c3:c4: 9d:05:37:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7pZYOQ0H7NkxMP+Tsxy5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NmE0YmQ2ZjVlYmYyZjdmZmQ5YThkMWNkOWE1YWFjZGU2 MjI4NWMwHhcNMjUxMjIxMjIwMTMwWhcNMjUxMjIyMjIwMTMwWjAzMTEwLwYDVQQD EyhmOTY0Mzg3Mjg2Y2M0Y2VjZmNkNjgxNTAxNGU3YzljMThkYzA0NjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybmPShx8vCqwu93aR3bpmg17fyEb Sq9h8MAvW65aGRgYluvsDQ4ooLXI0are/2LEpj4tlv5ufp0bI//77eZg6AlBZqHv xIkXL5RBvxmnsp7DjzOBcePNkFPII7PptuI9/Iqqd3njAocSJLfl8QCBLJzIt0fJ AyXfktZ7M9gxi3qxhu90oySYxo3O+6X/lpabzF14DJfHHrEiDoeOTVc6fwlCyoVj BMJRuxBts7YaguHS1wDgQ7il4pi5AD753NZrayUIGJp8cNPh56IYx6+yE0nkkneU gdwYAPweGcvLdVSYfzf/HkVVOH0DI8Rt5inwhWKPBbDHZ5dwcv/Qunv8iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlkOHKGzEzs/NaBUBTnycGNwEYNMB8GA1UdIwQY MBaAFLVqS9b16/L3/9mo0c2aWqzeYihcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFdwTDF2WHI4dmZfMmFqUnpacGFyTjVpS0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kZGU3MzYtMjczMC00YmZlLWE1YjMt MDgyZTExMzYzZjBhLzEvdFdwTDF2WHI4dmZfMmFqUnpacGFyTjVpS0Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kZGU3MzYtMjczMC00YmZlLWE1YjMtMDgyZTExMzYzZjBh LzEvdFdwTDF2WHI4dmZfMmFqUnpacGFyTjVpS0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1iijDY8 Aq12EmmBLoHUNdvlTd6nPfDdR7neh6Xm924mGVBe3CHZ6rebIlHvr61LCtPztYtM jo7uo/wM6c7jWagYRCA5xrGtRMo7+//TE/JCMfwFdcbHMCWkSTQxNa4KtaWm4cXO UHkwSF6VnznuyxfWauGAtwMVxPquZcAlteHGmDzMoxAP1SZ8jzMFpJP5SqryIDzD tp+HwjpzOcWOXOWlj896HfN7ksK/p1k7B6EozTevSb5AcqzqGbKeZIqLhNaerD5S 1Rv3uhxejD4av3ntSa1GdyZmfu8JKjcL+hM32BWrm6adqnWDPvmCkixiFShYxFdw O0SBY8PEnQU3fw== -----END CERTIFICATE-----Generated at Mon Dec 22 01:41:58 2025 by rpki-client