This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft File: v1Tb8A10WQyJE97Isc8ITY_PaTw.mft (raw, json) Hash identifier: H18h/JYStVCA1CChbxU9/6Gx+uBbulCDZituPjKW+RI= Subject key identifier: 48:39:55:90:FB:27:94:BB:1A:55:65:30:39:D8:71:B7:F1:89:FD:A9 Authority key identifier: BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C Certificate issuer: /CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c Certificate serial: 019B3D5A3AC897F4566CD2E7E6902A17A456 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft Manifest number: 05C1 Signing time: Sat 20 Dec 2025 20:01:22 +0000 Manifest this update: Sat 20 Dec 2025 20:01:22 +0000 Manifest next update: Sun 21 Dec 2025 20:01:22 +0000 Files and hashes: 1: v1Tb8A10WQyJE97Isc8ITY_PaTw.crl (hash: 0on6RJhYo/EdR67drE1Z0wiLE/LZFjCsacNQrutPxdQ=) 2: wvpX23IN2w8d2-KXP6RepnCHP3g.roa (hash: hX6rM9w+qzbC1N6GJKikByFvvKJf6X+cuAHLvYTMLZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:3a:c8:97:f4:56:6c:d2:e7:e6:90:2a:17:a4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c Validity Not Before: Dec 20 20:01:22 2025 GMT Not After : Dec 21 20:01:22 2025 GMT Subject: CN=48395590fb2794bb1a55653039d871b7f189fda9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:55:5b:e0:2d:56:30:93:0c:76:64:a7:ee:57: 5a:2f:dd:63:1e:53:5b:1c:85:d9:1f:84:97:10:a6: 27:56:19:63:6a:b7:ce:7e:47:ae:4f:a9:dd:70:40: ef:f3:d0:0d:fc:45:98:13:d0:4d:7d:49:63:3e:31: e7:ec:5b:59:1f:f8:cf:7e:d4:3b:1f:b0:d6:1e:84: a8:9d:5e:7d:93:54:18:cd:8c:7c:cf:5a:1f:33:e5: cc:31:77:c4:51:81:14:a7:02:88:eb:2c:ea:64:10: 94:ec:21:07:3f:1f:0a:30:76:3e:4f:ca:80:21:1e: 19:ad:b4:f1:f2:a7:87:3d:66:c3:06:22:dd:b1:9e: 4d:31:51:5f:1e:05:4f:c5:fc:f1:20:11:3c:0f:7c: a6:83:7a:76:5d:e7:35:14:fd:49:8e:b6:b2:2e:92: 35:42:da:85:3a:35:ce:33:26:df:2a:a7:36:fc:7b: 68:04:96:33:05:af:9f:aa:71:8e:b9:e1:de:14:db: 09:a5:45:37:a3:1b:2b:c2:ce:09:c1:a2:4b:a7:e9: cc:96:22:f4:9b:5b:82:91:23:00:41:88:36:2f:4c: b8:55:48:a9:37:1b:9d:06:b4:e4:7c:8f:d0:a4:95: e6:40:ab:b3:a7:bf:8a:8d:72:bd:5f:51:c4:4d:b9: b6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:39:55:90:FB:27:94:BB:1A:55:65:30:39:D8:71:B7:F1:89:FD:A9 X509v3 Authority Key Identifier: keyid:BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:2a:4d:87:aa:9a:14:b7:6a:f8:27:c1:95:fc:83:9f:02:ec: a2:31:7b:54:da:33:94:23:b4:33:a1:2a:dc:6b:a2:33:ee:90: af:3f:b9:9c:c4:f7:45:90:22:8b:ef:bf:d5:46:46:8a:e7:3e: dc:b7:6d:46:ee:5e:93:3a:1b:c6:16:e3:92:1f:e5:fc:92:e4: a5:bd:90:80:99:81:3a:70:eb:94:86:47:b1:3b:50:63:be:6b: d2:5e:75:b6:f1:22:cb:e6:53:15:2f:34:0a:e2:ac:c6:7b:65: b2:a2:6f:16:41:d1:cc:8d:e8:fc:73:de:6a:2d:19:a5:cc:2e: 2a:8c:ad:0a:ea:1d:ff:c8:e0:5e:69:03:50:af:82:fc:bc:c0: c3:f2:f9:cc:a5:13:9d:0c:b7:88:d3:19:fb:9f:b5:d5:89:6e: 4c:b3:34:49:ee:84:a1:d7:6a:4d:d3:bb:5e:a7:0e:75:6d:e7: e6:03:73:ad:14:b5:25:1b:82:12:8e:14:f3:cd:be:e6:b7:76: c2:95:8c:af:1e:1d:bd:89:7a:99:1a:82:9a:78:d4:86:fe:a5: 73:7a:9c:2b:e7:e8:ad:24:1b:ef:d6:46:0e:96:f4:2d:ae:ad: a2:24:8f:a8:44:a1:cc:99:2d:56:6b:bb:4f:26:79:47:d2:52: b3:fa:34:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WjrIl/RWbNLn5pAqF6RWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNTRkYmYwMGQ3NDU5MGM4OTEzZGVjOGIxY2YwODRkOGZj ZjY5M2MwHhcNMjUxMjIwMjAwMTIyWhcNMjUxMjIxMjAwMTIyWjAzMTEwLwYDVQQD Eyg0ODM5NTU5MGZiMjc5NGJiMWE1NTY1MzAzOWQ4NzFiN2YxODlmZGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFVb4C1WMJMMdmSn7ldaL91jHlNb HIXZH4SXEKYnVhljarfOfkeuT6ndcEDv89AN/EWYE9BNfUljPjHn7FtZH/jPftQ7 H7DWHoSonV59k1QYzYx8z1ofM+XMMXfEUYEUpwKI6yzqZBCU7CEHPx8KMHY+T8qA IR4ZrbTx8qeHPWbDBiLdsZ5NMVFfHgVPxfzxIBE8D3ymg3p2Xec1FP1JjrayLpI1 QtqFOjXOMybfKqc2/HtoBJYzBa+fqnGOueHeFNsJpUU3oxsrws4JwaJLp+nMliL0 m1uCkSMAQYg2L0y4VUipNxudBrTkfI/QpJXmQKuzp7+KjXK9X1HETbm2EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEg5VZD7J5S7GlVlMDnYcbfxif2pMB8GA1UdIwQY MBaAFL9U2/ANdFkMiRPeyLHPCE2Pz2k8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjFUYjhBMTBXUXlKRTk3SXNjOElUWV9QYVR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MjliMjgtM2EzOS00OWJmLThlZjIt YTQ3ZmI5YTk0ZmZkLzEvdjFUYjhBMTBXUXlKRTk3SXNjOElUWV9QYVR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81MjliMjgtM2EzOS00OWJmLThlZjItYTQ3ZmI5YTk0ZmZk LzEvdjFUYjhBMTBXUXlKRTk3SXNjOElUWV9QYVR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCpNh6qa FLdq+CfBlfyDnwLsojF7VNozlCO0M6Eq3GuiM+6Qrz+5nMT3RZAii++/1UZGiuc+ 3LdtRu5ekzobxhbjkh/l/JLkpb2QgJmBOnDrlIZHsTtQY75r0l51tvEiy+ZTFS80 CuKsxntlsqJvFkHRzI3o/HPeai0ZpcwuKoytCuod/8jgXmkDUK+C/LzAw/L5zKUT nQy3iNMZ+5+11YluTLM0Se6EoddqTdO7XqcOdW3n5gNzrRS1JRuCEo4U882+5rd2 wpWMrx4dvYl6mRqCmnjUhv6lc3qcK+forSQb79ZGDpb0La6toiSPqEShzJktVmu7 TyZ5R9JSs/o02w== -----END CERTIFICATE-----Generated at Sun Dec 21 00:53:19 2025 by rpki-client