This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft File: t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft (raw, json) Hash identifier: NLou3Cm9oWi4b1v8hvKeCyrQ/fMaWUixumJ7jAMgKGY= Subject key identifier: 6B:2B:76:C1:6B:58:1B:7E:11:1D:F6:DD:D7:0E:89:0B:9D:A6:0A:94 Authority key identifier: B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94 Certificate issuer: /CN=b795aaf033004c92d7a26c236c14d32552d78d94 Certificate serial: 019AF7D44DD40B0A235191A36CB4A90FF7F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft Manifest number: 1130 Signing time: Sun 07 Dec 2025 08:01:17 +0000 Manifest this update: Sun 07 Dec 2025 08:01:17 +0000 Manifest next update: Mon 08 Dec 2025 08:01:17 +0000 Files and hashes: 1: oAZxYtQ4Og3cgsl-3lYamhsa7e4.roa (hash: 3ae/XOyTNvdp+V+oKgkV4BxFv5zwWxKjx15ZyehKjvA=) 2: t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl (hash: 4N5b6mBshKpYbfE5xV0pFz/ytTjytivZtLqH6SqfJdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:d4:4d:d4:0b:0a:23:51:91:a3:6c:b4:a9:0f:f7:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b795aaf033004c92d7a26c236c14d32552d78d94 Validity Not Before: Dec 7 08:01:17 2025 GMT Not After : Dec 8 08:01:17 2025 GMT Subject: CN=6b2b76c16b581b7e111df6ddd70e890b9da60a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f3:9f:ec:3b:f3:34:2f:91:c7:72:f5:cd:f3: a0:a7:9e:b2:8e:fc:ea:9a:e1:e7:61:5b:26:ad:5f: 29:35:84:5e:f3:ab:6c:d8:ff:5a:e3:ea:27:f2:20: 48:c8:2e:ee:41:20:cd:f2:79:6f:c0:5a:78:40:42: 68:e7:45:87:4a:dc:93:36:dd:1f:99:d6:f3:4d:8e: 8e:df:ff:53:7b:c1:96:fe:e9:a3:14:f6:dc:bd:a8: 60:99:f0:d2:eb:0a:b7:f8:84:e7:10:19:fe:e4:44: b5:8c:85:49:26:67:0f:b5:0c:a7:fa:38:7f:40:a4: 60:19:2d:f1:b3:f7:6c:d4:6d:a4:45:6d:a3:f8:78: df:85:30:1a:d6:f6:93:52:22:b5:23:ef:3d:50:9c: d3:f8:67:5d:a2:67:e5:3a:92:40:24:a6:1f:de:3f: 13:82:1a:b8:8a:f4:8d:63:1d:94:01:2f:7e:00:2d: 28:ae:80:cb:12:40:66:84:4c:c7:35:ff:85:37:78: 6f:56:58:fa:f8:cf:0e:fd:36:c5:70:a7:d3:f5:12: fd:57:32:34:e5:e1:10:88:f4:46:56:54:56:c8:7d: e5:c2:5b:1c:a1:d1:eb:5d:73:88:0d:82:5f:89:e4: 06:a4:1c:6d:6a:b8:7b:d8:8c:ef:b4:2c:69:ee:f9: 09:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2B:76:C1:6B:58:1B:7E:11:1D:F6:DD:D7:0E:89:0B:9D:A6:0A:94 X509v3 Authority Key Identifier: keyid:B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:2c:32:6e:05:1d:7d:02:7b:96:4b:ed:7e:4e:ea:f8:f6:30: 56:ce:28:34:d2:bb:8f:55:8b:64:14:d8:9c:92:29:8e:c9:ff: 03:9c:3a:a4:22:3c:9e:a2:ab:4c:6d:08:b6:32:e0:7f:69:9c: a4:e9:35:7d:8e:e6:91:a6:1b:b4:dc:8f:39:12:0d:ea:99:9e: 43:a9:bc:7c:9d:0c:e4:8e:fa:af:98:14:b9:dd:a9:97:cd:79: 8b:da:a8:89:b6:0b:0c:12:40:d4:e6:3f:62:7a:14:bb:64:5e: 28:6e:04:94:b9:95:f1:e2:e5:32:fe:66:20:5a:ad:36:4f:e5: cf:8e:f0:e6:ea:3b:7d:7d:17:09:56:4f:29:5d:f9:39:95:d6: 61:38:f1:01:8d:29:f8:fc:dc:eb:81:21:73:c6:a8:1e:6d:12: c1:14:ff:a5:93:2f:29:b5:59:62:a2:93:60:6a:0f:df:26:ed: 1b:90:2c:5c:1c:66:f6:14:27:62:7b:73:80:3f:0d:87:c3:63: 81:71:a9:f1:aa:d6:34:3b:60:44:9d:eb:15:d6:66:62:7b:0e: 36:13:01:b3:47:e5:d3:a0:6f:86:39:41:20:0b:53:b6:0a:37: 21:e0:70:23:72:91:00:7f:9b:f0:fe:76:c8:6b:6d:af:1a:fc: 89:db:16:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr31E3UCwojUZGjbLSpD/f3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OTVhYWYwMzMwMDRjOTJkN2EyNmMyMzZjMTRkMzI1NTJk NzhkOTQwHhcNMjUxMjA3MDgwMTE3WhcNMjUxMjA4MDgwMTE3WjAzMTEwLwYDVQQD Eyg2YjJiNzZjMTZiNTgxYjdlMTExZGY2ZGRkNzBlODkwYjlkYTYwYTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fOf7DvzNC+Rx3L1zfOgp56yjvzq muHnYVsmrV8pNYRe86ts2P9a4+on8iBIyC7uQSDN8nlvwFp4QEJo50WHStyTNt0f mdbzTY6O3/9Te8GW/umjFPbcvahgmfDS6wq3+ITnEBn+5ES1jIVJJmcPtQyn+jh/ QKRgGS3xs/ds1G2kRW2j+HjfhTAa1vaTUiK1I+89UJzT+GddomflOpJAJKYf3j8T ghq4ivSNYx2UAS9+AC0oroDLEkBmhEzHNf+FN3hvVlj6+M8O/TbFcKfT9RL9VzI0 5eEQiPRGVlRWyH3lwlscodHrXXOIDYJfieQGpBxtarh72IzvtCxp7vkJEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsrdsFrWBt+ER323dcOiQudpgqUMB8GA1UdIwQY MBaAFLeVqvAzAEyS16JsI2wU0yVS142UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDVXcThETUFUSkxYb213amJCVFRKVkxYalpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jNzUyYjItMThmOS00MTkxLTg4Zjgt YzA2NWYyNDJmMDIwLzEvdDVXcThETUFUSkxYb213amJCVFRKVkxYalpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9jNzUyYjItMThmOS00MTkxLTg4ZjgtYzA2NWYyNDJmMDIw LzEvdDVXcThETUFUSkxYb213amJCVFRKVkxYalpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSwybgUd fQJ7lkvtfk7q+PYwVs4oNNK7j1WLZBTYnJIpjsn/A5w6pCI8nqKrTG0ItjLgf2mc pOk1fY7mkaYbtNyPORIN6pmeQ6m8fJ0M5I76r5gUud2pl815i9qoibYLDBJA1OY/ YnoUu2ReKG4ElLmV8eLlMv5mIFqtNk/lz47w5uo7fX0XCVZPKV35OZXWYTjxAY0p +Pzc64Ehc8aoHm0SwRT/pZMvKbVZYqKTYGoP3ybtG5AsXBxm9hQnYntzgD8Nh8Nj gXGp8arWNDtgRJ3rFdZmYnsONhMBs0fl06BvhjlBIAtTtgo3IeBwI3KRAH+b8P52 yGttrxr8idsWlQ== -----END CERTIFICATE-----Generated at Sun Dec 7 17:02:18 2025 by rpki-client