This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft File: tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft (raw, json) Hash identifier: N6TVPhU5/wcm0FwN3xbUMG4RZSee/hEID4F1niD7FUE= Subject key identifier: 45:A0:71:4E:2F:EF:E8:C6:9C:BA:0C:6D:CA:94:73:3F:AB:2B:FB:F9 Authority key identifier: B5:64:58:57:6B:A2:39:21:DD:79:2D:C0:05:2F:8F:82:86:7D:62:7B Certificate issuer: /CN=b56458576ba23921dd792dc0052f8f82867d627b Certificate serial: 019B544FB9D9347D6948ED0E546E2D90DE1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft Manifest number: 1468 Signing time: Thu 25 Dec 2025 07:01:09 +0000 Manifest this update: Thu 25 Dec 2025 07:01:09 +0000 Manifest next update: Fri 26 Dec 2025 07:01:09 +0000 Files and hashes: 1: E7d_b0PflOY76P_uC3WM3xFdSrc.roa (hash: n1OXhuOXloaQfjIyVDut9dhlUxv9V7SaFL6+utmdzjI=) 2: tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl (hash: aFcKvCeAmTrsgrFBQeoCjcs81y7YWWOkhlHJnOEBraY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:b9:d9:34:7d:69:48:ed:0e:54:6e:2d:90:de:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56458576ba23921dd792dc0052f8f82867d627b Validity Not Before: Dec 25 07:01:09 2025 GMT Not After : Dec 26 07:01:09 2025 GMT Subject: CN=45a0714e2fefe8c69cba0c6dca94733fab2bfbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6c:d9:cb:eb:b9:98:ae:9e:0d:33:c7:17:bc: b7:ec:fa:c9:34:df:77:88:0c:85:6c:85:55:1b:43: ce:ab:21:b6:08:93:fd:f4:08:36:ee:59:a2:04:d0: 69:8e:7f:38:1e:78:62:2c:e9:a3:9a:d8:07:fd:10: ea:bc:53:74:a5:14:12:46:86:b5:d7:55:a5:1d:30: 78:86:3b:9c:3b:2b:10:0b:05:d2:57:1a:8b:eb:c2: e0:c7:6c:71:f2:b1:cf:9c:90:3d:45:51:d5:d1:b9: c2:8a:be:3c:b5:ee:f8:6d:af:08:08:57:3f:dd:4b: 4f:63:fd:ef:68:97:81:79:ca:db:0b:da:cd:ab:97: 7b:96:f6:55:61:ee:b4:4f:5f:17:0c:80:87:aa:9f: ce:53:33:77:66:1c:92:e6:c6:d5:75:e2:3d:ba:c6: 64:5c:0b:10:78:51:f5:a1:3d:ae:af:ef:0f:47:8b: 0a:57:22:3d:72:52:3e:a7:6d:fd:ab:32:0b:d3:53: a7:5f:0a:b7:99:c0:f0:8a:ad:ee:7b:51:d9:43:a6: 04:06:9d:d0:43:5d:70:24:4c:3d:b9:29:fd:ac:ab: be:0b:df:30:0d:8b:09:de:be:9d:3e:a9:ab:c2:6e: aa:0a:ef:80:df:f8:d5:a1:50:59:b1:42:0a:64:57: d9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A0:71:4E:2F:EF:E8:C6:9C:BA:0C:6D:CA:94:73:3F:AB:2B:FB:F9 X509v3 Authority Key Identifier: keyid:B5:64:58:57:6B:A2:39:21:DD:79:2D:C0:05:2F:8F:82:86:7D:62:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d2:f2:27:d9:fe:fa:7e:17:bb:86:a1:47:34:e2:7d:e5:6e: 5e:1a:40:e2:76:5d:c3:ce:f0:a7:f7:7f:16:bd:eb:e1:8a:ee: ba:b1:5b:7c:07:6d:a7:e5:25:b2:e5:6d:15:fe:8d:b1:39:a8: 65:e4:da:7a:b7:15:1a:6d:89:c8:02:80:23:a9:80:75:d2:e3: f6:94:57:c8:c8:3c:09:aa:29:ec:6b:76:16:53:43:87:28:6b: 04:9a:69:01:21:51:bf:26:f8:39:06:6b:3e:86:73:b4:47:07: ee:43:0e:e3:ae:f9:3d:38:c0:0a:bb:29:72:8e:8b:54:6c:98: 68:be:7b:59:e6:c6:20:20:4a:fb:c1:2c:0b:0f:1c:c3:e7:3e: fc:9a:51:3f:d7:28:ca:80:0b:0c:12:19:1a:4f:c4:3a:24:34: 19:26:a3:5b:dc:1b:fd:7f:54:2b:a8:81:91:8f:bf:3b:6c:92: 6a:11:8d:3d:f5:3a:e4:b5:56:b8:d9:d3:f9:eb:71:b0:d1:93: c4:6e:45:e2:0d:3a:bf:4e:17:10:b4:39:49:99:58:5a:b6:88: b8:7b:8e:fd:e3:cb:e5:eb:b6:ce:8b:27:3b:9c:eb:06:dd:4f: 8c:ac:d7:bb:db:64:73:92:d5:ce:0e:4c:d2:56:d8:7c:fd:ac: c5:51:ce:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUT7nZNH1pSO0OVG4tkN4eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NjQ1ODU3NmJhMjM5MjFkZDc5MmRjMDA1MmY4ZjgyODY3 ZDYyN2IwHhcNMjUxMjI1MDcwMTA5WhcNMjUxMjI2MDcwMTA5WjAzMTEwLwYDVQQD Eyg0NWEwNzE0ZTJmZWZlOGM2OWNiYTBjNmRjYTk0NzMzZmFiMmJmYmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmzZy+u5mK6eDTPHF7y37PrJNN93 iAyFbIVVG0POqyG2CJP99Ag27lmiBNBpjn84HnhiLOmjmtgH/RDqvFN0pRQSRoa1 11WlHTB4hjucOysQCwXSVxqL68Lgx2xx8rHPnJA9RVHV0bnCir48te74ba8ICFc/ 3UtPY/3vaJeBecrbC9rNq5d7lvZVYe60T18XDICHqp/OUzN3ZhyS5sbVdeI9usZk XAsQeFH1oT2ur+8PR4sKVyI9clI+p239qzIL01OnXwq3mcDwiq3ue1HZQ6YEBp3Q Q11wJEw9uSn9rKu+C98wDYsJ3r6dPqmrwm6qCu+A3/jVoVBZsUIKZFfZbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWgcU4v7+jGnLoMbcqUcz+rK/v5MB8GA1UdIwQY MBaAFLVkWFdrojkh3XktwAUvj4KGfWJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFdSWVYydWlPU0hkZVMzQUJTLVBnb1o5WW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9kNDkzY2MtMzI1NC00ZDk1LWJkZWUt MWEyM2UxNWYzYjg0LzEvdFdSWVYydWlPU0hkZVMzQUJTLVBnb1o5WW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9kNDkzY2MtMzI1NC00ZDk1LWJkZWUtMWEyM2UxNWYzYjg0 LzEvdFdSWVYydWlPU0hkZVMzQUJTLVBnb1o5WW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtLyJ9n+ +n4Xu4ahRzTifeVuXhpA4nZdw87wp/d/Fr3r4YruurFbfAdtp+UlsuVtFf6NsTmo ZeTaercVGm2JyAKAI6mAddLj9pRXyMg8Caop7Gt2FlNDhyhrBJppASFRvyb4OQZr PoZztEcH7kMO4675PTjACrspco6LVGyYaL57WebGICBK+8EsCw8cw+c+/JpRP9co yoALDBIZGk/EOiQ0GSajW9wb/X9UK6iBkY+/O2ySahGNPfU65LVWuNnT+etxsNGT xG5F4g06v04XELQ5SZlYWraIuHuO/ePL5eu2zosnO5zrBt1PjKzXu9tkc5LVzg5M 0lbYfP2sxVHO7A== -----END CERTIFICATE-----Generated at Thu Dec 25 09:14:27 2025 by rpki-client