This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft File: tPSWmNCOjCg8DfKoLxaZfmJZurY.mft (raw, json) Hash identifier: 0Y3YW8KcQ6s19M4z3bSLr7Vl/bxJr2cKXXoBn7akbdg= Subject key identifier: E6:F1:7C:BF:F9:94:F4:70:C9:BF:08:CD:03:4D:3E:5A:95:40:A2:AB Authority key identifier: B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6 Certificate issuer: /CN=b4f49698d08e8c283c0df2a82f16997e6259bab6 Certificate serial: 019B3F48BC45D2D683B41B0C2B3754D537FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft Manifest number: 0956 Signing time: Sun 21 Dec 2025 05:01:29 +0000 Manifest this update: Sun 21 Dec 2025 05:01:29 +0000 Manifest next update: Mon 22 Dec 2025 05:01:29 +0000 Files and hashes: 1: tPSWmNCOjCg8DfKoLxaZfmJZurY.crl (hash: SVK+yfccZGTVfSiFXxCulKRdcQhd1kytDC91TFGs4Z8=) 2: xzawIGSZ9gaUq6klJYybOrl_u8k.roa (hash: 1673awjNQrA/kSjVn3AcQmjZN9mvF8MpaJPKmYa0E/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:bc:45:d2:d6:83:b4:1b:0c:2b:37:54:d5:37:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f49698d08e8c283c0df2a82f16997e6259bab6 Validity Not Before: Dec 21 05:01:29 2025 GMT Not After : Dec 22 05:01:29 2025 GMT Subject: CN=e6f17cbff994f470c9bf08cd034d3e5a9540a2ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6f:a9:e6:5e:a2:76:c0:9b:f3:b3:a9:e9:e6: 08:9e:3e:ca:af:da:05:35:02:ef:f2:e2:76:f2:0d: 9c:f2:ce:27:8b:78:79:6c:8f:bd:6d:de:87:52:0b: 44:62:67:3a:0f:c1:85:d2:f3:7a:e8:22:cb:36:0f: e5:db:0d:f0:fd:95:77:46:2f:db:50:32:64:ec:54: 01:79:28:92:d2:83:ee:6e:2f:e9:70:8a:84:04:28: c7:82:a2:dd:e5:52:a3:a6:c5:77:3d:55:90:05:fa: ba:15:82:8e:18:08:99:e7:76:e9:1e:b4:19:c9:5d: 8a:c0:a6:76:b8:48:d2:d8:5e:ee:0b:0b:d2:22:88: 5c:e0:76:cf:5c:7c:69:8c:2c:f7:94:b2:3b:97:7d: 73:54:5f:0c:b9:1a:68:66:55:19:e3:61:f2:43:50: ce:20:4e:82:44:83:fd:71:0d:78:58:5a:03:fd:a2: 23:08:d6:29:bd:2f:97:f1:74:2f:a0:74:b8:8b:1e: 9e:1f:fb:a4:e5:ca:19:c9:50:52:4f:fe:27:41:7d: 41:d8:e0:8e:e1:30:e3:92:04:e5:16:f6:bb:7f:a0: 76:16:0c:ea:75:60:95:19:5a:a4:f1:76:8f:67:1c: 9c:a3:d5:73:d0:28:9f:ec:0d:49:e0:e8:31:a8:5a: 4c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F1:7C:BF:F9:94:F4:70:C9:BF:08:CD:03:4D:3E:5A:95:40:A2:AB X509v3 Authority Key Identifier: keyid:B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ea:d0:55:6a:8a:6f:81:45:b1:4e:12:15:f7:cf:2d:a7:cc: 21:c8:9f:8e:5b:4a:d5:8a:48:58:57:77:55:ad:90:b3:ad:5d: ca:25:4c:74:e5:80:0a:4e:38:1d:6b:49:c4:a2:f6:cf:50:3a: 53:55:7e:7e:31:49:21:07:b0:6f:28:d2:83:74:ff:02:e3:9f: b0:66:57:8f:1b:c4:2a:19:e9:8a:97:10:f5:6e:f4:1b:81:30: 3f:a3:35:23:a6:76:3b:51:a4:07:1f:b7:f7:8b:7e:eb:04:73: 64:ba:dc:4b:3b:b7:c1:49:2b:f2:a4:36:d5:6c:a8:ed:d6:1c: 56:c9:1c:4b:af:db:6c:de:f7:2c:e5:52:7e:45:61:6f:a8:66: 0e:86:6e:d9:60:3d:d0:d5:cb:a3:ce:9a:94:45:09:a9:3d:c8: db:11:95:44:4d:12:de:0d:25:92:04:fa:48:f3:11:56:0d:9a: b2:ff:ff:0b:ab:fa:50:62:a4:a5:28:6d:5a:2a:08:55:77:04: d0:d6:65:ae:68:8b:44:77:d6:ae:b9:50:ae:c0:70:2b:99:58: d2:ae:c0:15:59:c4:a5:c9:2a:58:07:f3:2a:80:01:b8:37:4b: 30:1f:d2:77:cf:36:76:8e:88:f6:62:16:db:f0:e0:90:3c:4f: 29:a7:dd:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SLxF0taDtBsMKzdU1Tf8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZjQ5Njk4ZDA4ZThjMjgzYzBkZjJhODJmMTY5OTdlNjI1 OWJhYjYwHhcNMjUxMjIxMDUwMTI5WhcNMjUxMjIyMDUwMTI5WjAzMTEwLwYDVQQD EyhlNmYxN2NiZmY5OTRmNDcwYzliZjA4Y2QwMzRkM2U1YTk1NDBhMmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW+p5l6idsCb87Op6eYInj7Kr9oF NQLv8uJ28g2c8s4ni3h5bI+9bd6HUgtEYmc6D8GF0vN66CLLNg/l2w3w/ZV3Ri/b UDJk7FQBeSiS0oPubi/pcIqEBCjHgqLd5VKjpsV3PVWQBfq6FYKOGAiZ53bpHrQZ yV2KwKZ2uEjS2F7uCwvSIohc4HbPXHxpjCz3lLI7l31zVF8MuRpoZlUZ42HyQ1DO IE6CRIP9cQ14WFoD/aIjCNYpvS+X8XQvoHS4ix6eH/uk5coZyVBST/4nQX1B2OCO 4TDjkgTlFva7f6B2FgzqdWCVGVqk8XaPZxyco9Vz0Cif7A1J4OgxqFpMaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObxfL/5lPRwyb8IzQNNPlqVQKKrMB8GA1UdIwQY MBaAFLT0lpjQjowoPA3yqC8WmX5iWbq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBTV21OQ09qQ2c4RGZLb0x4YVpmbUpadXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mNjNkNzYtMmZiNi00M2EyLWJmZWMt OWY3YWEwOTQzMDNiLzEvdFBTV21OQ09qQ2c4RGZLb0x4YVpmbUpadXJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mNjNkNzYtMmZiNi00M2EyLWJmZWMtOWY3YWEwOTQzMDNi LzEvdFBTV21OQ09qQ2c4RGZLb0x4YVpmbUpadXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+rQVWqK b4FFsU4SFffPLafMIcifjltK1YpIWFd3Va2Qs61dyiVMdOWACk44HWtJxKL2z1A6 U1V+fjFJIQewbyjSg3T/AuOfsGZXjxvEKhnpipcQ9W70G4EwP6M1I6Z2O1GkBx+3 94t+6wRzZLrcSzu3wUkr8qQ21Wyo7dYcVskcS6/bbN73LOVSfkVhb6hmDoZu2WA9 0NXLo86alEUJqT3I2xGVRE0S3g0lkgT6SPMRVg2asv//C6v6UGKkpShtWioIVXcE 0NZlrmiLRHfWrrlQrsBwK5lY0q7AFVnEpckqWAfzKoABuDdLMB/Sd882do6I9mIW 2/DgkDxPKafdOg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:20:31 2025 by rpki-client