This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft File: tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft (raw, json) Hash identifier: /esrfnRnjrg/q94O7bXewfZEHJRgQjPxqAPxgbfxJlk= Subject key identifier: 86:EA:F6:97:D5:D0:D5:62:71:3A:89:3E:3C:14:7E:41:F3:3A:84:34 Authority key identifier: B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64 Certificate issuer: /CN=b473167913af73e4f6374170c4f945f8b0dd7d64 Certificate serial: 019B454A53CC78CD6AFF56107071FC980BED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft Manifest number: 0DF1 Signing time: Mon 22 Dec 2025 09:00:57 +0000 Manifest this update: Mon 22 Dec 2025 09:00:57 +0000 Manifest next update: Tue 23 Dec 2025 09:00:57 +0000 Files and hashes: 1: J0ZgfR5U6lkaUqXFqkaevK5zE7Y.roa (hash: /1drMWi8WHeYZMzayKCKRAt2zHYV3mIjXjepj/lhD8k=) 2: tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl (hash: /csuPJoc0vdS3Q0nFg6c7mt7kOU1254NjE4KFhFgY5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:53:cc:78:cd:6a:ff:56:10:70:71:fc:98:0b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b473167913af73e4f6374170c4f945f8b0dd7d64 Validity Not Before: Dec 22 09:00:57 2025 GMT Not After : Dec 23 09:00:57 2025 GMT Subject: CN=86eaf697d5d0d562713a893e3c147e41f33a8434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:71:a1:f3:a7:39:cc:0d:cd:a7:61:ed:19: 33:8a:5c:59:c3:b7:9f:11:e3:6b:ff:af:9f:88:d3: 56:93:3a:2e:3c:21:d7:46:2b:79:9a:65:89:a1:8c: ce:ff:ca:42:79:41:00:02:96:a5:56:bb:2f:b3:9c: b1:38:8a:b8:08:6c:16:f6:b7:fa:30:44:66:c4:b9: 23:86:89:fa:27:0c:11:2d:bb:ee:d5:07:30:84:fe: 2f:94:6f:19:9f:d5:9f:cc:02:48:a0:88:f7:a7:8f: 68:7a:1d:29:cf:20:90:ce:cb:e0:31:f1:71:a0:11: 83:6d:a5:99:a7:ba:5d:e4:1c:f8:f6:50:42:39:00: 3d:e8:72:ac:c4:e6:35:b5:39:66:d5:1b:59:55:bb: b4:1c:de:81:57:ce:df:7c:ce:79:db:79:7c:f4:a4: e0:d9:dd:42:7c:79:c2:0d:d3:37:2e:8b:0a:9f:d9: 80:6b:11:4b:ff:43:11:bc:5d:5e:bc:f8:19:d9:a9: 29:04:6d:20:4e:66:3a:e5:a9:e8:e7:72:c4:81:85: ce:51:9c:ad:74:ce:b6:bd:59:6d:0f:60:a6:93:90: 88:45:c5:c5:05:5a:85:c9:8c:1a:63:49:2c:37:12: 1c:81:69:36:d7:61:3f:96:4f:a5:b4:0d:95:a7:7b: b7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EA:F6:97:D5:D0:D5:62:71:3A:89:3E:3C:14:7E:41:F3:3A:84:34 X509v3 Authority Key Identifier: keyid:B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:4a:d0:1a:02:7a:e3:d2:ea:88:33:9c:74:91:70:fe:5c:fb: 44:7c:e8:74:e2:06:86:a3:e7:e1:c2:4b:ec:dc:e0:8f:e9:88: be:04:0e:6d:3d:14:bb:4d:17:f7:a3:51:f3:23:fb:9b:8e:5c: 51:e9:df:a9:11:44:17:dc:8c:16:ec:7e:9c:7c:92:a8:67:fa: 1e:d2:fd:86:59:20:06:b4:0a:dc:43:53:5b:42:b3:a6:55:35: 7e:0d:86:a7:e5:32:e7:10:97:21:77:5b:3c:b1:1a:b6:f3:2f: 71:c5:d0:54:57:5b:56:f7:d8:83:22:b3:11:74:7c:6a:d5:0f: e4:28:d8:da:c4:61:85:c2:f1:51:dd:67:d4:c0:ae:96:68:1f: 30:03:03:4d:9a:48:aa:1d:1f:6d:a3:55:51:5a:f6:64:9b:12: 57:a0:2d:bd:12:be:25:7c:22:c2:bd:19:45:e2:e7:ad:dd:ec: 55:a3:c5:e2:c6:4c:a1:e4:a6:5c:96:8b:24:89:7b:d1:c6:e5: d6:c4:25:86:a2:de:e4:fa:74:80:13:8f:c5:f5:24:67:59:5f: ff:77:06:d8:a5:d8:2e:10:0d:39:6d:84:cf:c6:a9:a2:7d:d1: f3:2a:39:cd:93:20:06:43:ef:f4:6b:04:c5:1c:c8:bf:e0:52: 92:99:6e:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSlPMeM1q/1YQcHH8mAvtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NzMxNjc5MTNhZjczZTRmNjM3NDE3MGM0Zjk0NWY4YjBk ZDdkNjQwHhcNMjUxMjIyMDkwMDU3WhcNMjUxMjIzMDkwMDU3WjAzMTEwLwYDVQQD Eyg4NmVhZjY5N2Q1ZDBkNTYyNzEzYTg5M2UzYzE0N2U0MWYzM2E4NDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyhxofOnOcwNzadh7RkzilxZw7ef EeNr/6+fiNNWkzouPCHXRit5mmWJoYzO/8pCeUEAApalVrsvs5yxOIq4CGwW9rf6 MERmxLkjhon6JwwRLbvu1QcwhP4vlG8Zn9WfzAJIoIj3p49oeh0pzyCQzsvgMfFx oBGDbaWZp7pd5Bz49lBCOQA96HKsxOY1tTlm1RtZVbu0HN6BV87ffM5523l89KTg 2d1CfHnCDdM3LosKn9mAaxFL/0MRvF1evPgZ2akpBG0gTmY65ano53LEgYXOUZyt dM62vVltD2Cmk5CIRcXFBVqFyYwaY0ksNxIcgWk212E/lk+ltA2Vp3u3wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbq9pfV0NVicTqJPjwUfkHzOoQ0MB8GA1UdIwQY MBaAFLRzFnkTr3Pk9jdBcMT5Rfiw3X1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEhNV2VST3ZjLVQyTjBGd3hQbEYtTERkZldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lNTZkNDEtNWJiOC00YTkxLWE0ZjAt Zjg2ZGNhYWQ4YzQ5LzEvdEhNV2VST3ZjLVQyTjBGd3hQbEYtTERkZldRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9lNTZkNDEtNWJiOC00YTkxLWE0ZjAtZjg2ZGNhYWQ4YzQ5 LzEvdEhNV2VST3ZjLVQyTjBGd3hQbEYtTERkZldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0rQGgJ6 49LqiDOcdJFw/lz7RHzodOIGhqPn4cJL7Nzgj+mIvgQObT0Uu00X96NR8yP7m45c UenfqRFEF9yMFux+nHySqGf6HtL9hlkgBrQK3ENTW0KzplU1fg2Gp+Uy5xCXIXdb PLEatvMvccXQVFdbVvfYgyKzEXR8atUP5CjY2sRhhcLxUd1n1MCulmgfMAMDTZpI qh0fbaNVUVr2ZJsSV6AtvRK+JXwiwr0ZReLnrd3sVaPF4sZMoeSmXJaLJIl70cbl 1sQlhqLe5Pp0gBOPxfUkZ1lf/3cG2KXYLhANOW2Ez8apon3R8yo5zZMgBkPv9GsE xRzIv+BSkpluqA== -----END CERTIFICATE-----Generated at Mon Dec 22 18:44:25 2025 by rpki-client