This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft File: tBW-756h3Udywu6VJ2HWVdmGUCY.mft (raw, json) Hash identifier: UpZTb+woY6Xtu8WKhT+NzbjrYZ8gudFKtsbH3zYLUaw= Subject key identifier: 94:6E:46:84:17:01:DE:D4:EE:12:1C:26:91:CF:27:ED:3B:B3:87:A4 Authority key identifier: B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26 Certificate issuer: /CN=b415beef9ea1dd4772c2ee952761d655d9865026 Certificate serial: 019AF5E5A96F27DE56B660747DB42547B2F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 23:01:00 +0000 Manifest this update: Sat 06 Dec 2025 23:01:00 +0000 Manifest next update: Sun 07 Dec 2025 23:01:00 +0000 Files and hashes: 1: 0geUHc19NNaDsvmjgLb1gNOrEbQ.roa (hash: NWxuANUmBjc/z+ICKyxtOl6ZHIhQCmMbyKrbsYf09/k=) 2: tBW-756h3Udywu6VJ2HWVdmGUCY.crl (hash: Fyy/gT6xjpeqwXI7l62CVVZ/n7Tn+v9y9GPRMd/FyIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:a9:6f:27:de:56:b6:60:74:7d:b4:25:47:b2:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b415beef9ea1dd4772c2ee952761d655d9865026 Validity Not Before: Dec 6 23:01:00 2025 GMT Not After : Dec 7 23:01:00 2025 GMT Subject: CN=946e46841701ded4ee121c2691cf27ed3bb387a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:9c:fb:84:96:87:03:88:42:fc:3b:4f:aa: ef:4f:be:f3:3c:a5:9f:8d:f7:fd:12:ef:37:3c:0a: 17:dc:5b:dc:42:5b:0a:10:6b:90:ed:60:cf:d0:4e: a5:b3:fb:e5:4f:b3:96:a5:20:b0:0d:98:8f:dd:de: 2e:64:d4:59:36:e2:08:29:f9:31:9a:9f:cb:51:08: e1:77:cb:1b:44:aa:cb:56:2c:96:32:12:66:bd:5d: 3a:63:71:e6:c2:e7:d4:56:c4:f3:f7:05:3d:5f:c3: 4b:98:18:ec:3e:d8:b1:28:a4:b2:bf:62:92:1d:57: 22:d0:db:d9:12:38:71:d4:33:ea:7b:d0:a2:6a:03: 0d:a5:da:6a:8c:01:68:2d:2f:4b:03:fe:c2:f4:63: 17:98:1e:33:9e:15:4a:5f:e4:c8:d6:f6:e0:8e:fa: 6a:d3:cd:fc:8a:5f:a2:4d:6e:fe:16:d4:b3:74:d5: 99:fb:9a:7f:52:d3:bd:a5:73:78:02:e3:46:c8:84: 0f:50:0e:ac:2e:e5:f5:79:d1:f3:df:42:b5:e0:55: d4:07:54:ec:42:f9:45:84:f5:09:9b:4c:e6:fa:ef: 84:c2:e4:02:14:a6:a2:09:cb:28:7e:44:63:ce:7d: fd:9f:01:58:3b:45:ad:ea:65:f2:b6:38:b7:89:d4: fc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:6E:46:84:17:01:DE:D4:EE:12:1C:26:91:CF:27:ED:3B:B3:87:A4 X509v3 Authority Key Identifier: keyid:B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:03:84:ae:0f:e6:4a:aa:b9:53:87:83:67:88:e7:72:b7:b2: a5:92:ac:1a:6b:87:66:60:e1:de:52:d2:e9:fa:8b:ea:18:ee: a3:a0:0a:5d:34:24:1f:5d:1f:2a:09:a2:e6:d6:13:46:3f:33: 57:96:ea:cd:03:71:36:f9:59:88:06:89:e6:70:c6:c1:58:ae: ad:97:74:48:dd:89:25:ef:2e:95:fe:06:06:53:36:1b:75:40: 68:a1:22:93:88:a4:7e:08:ee:88:0d:17:2f:d3:9f:ee:4b:39: 3a:b1:e3:e1:41:d4:0e:22:9e:87:2e:10:04:af:8f:e7:5e:21: b2:d7:c0:33:da:db:ec:e7:ca:2d:ad:65:b8:27:4f:0b:02:e7: d0:c4:93:8d:40:19:20:d1:1e:48:82:5c:d5:b0:aa:80:4e:91: 10:98:ce:75:75:37:67:0b:c9:e2:f0:b9:2f:60:ca:98:d9:b0: 44:84:d6:48:68:74:33:ae:6d:c1:98:9b:8b:88:eb:c5:40:2e: f5:1c:0b:59:e9:da:97:aa:0a:a4:42:d2:48:84:62:57:fc:3d: 59:d0:d3:cb:79:f7:a3:97:d9:8d:95:d4:c9:eb:cd:6b:6f:0b: 52:5e:c7:9c:91:89:38:87:2c:23:34:e9:0e:cb:00:8d:17:4a: 81:8c:76:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15alvJ95WtmB0fbQlR7L0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MTViZWVmOWVhMWRkNDc3MmMyZWU5NTI3NjFkNjU1ZDk4 NjUwMjYwHhcNMjUxMjA2MjMwMTAwWhcNMjUxMjA3MjMwMTAwWjAzMTEwLwYDVQQD Eyg5NDZlNDY4NDE3MDFkZWQ0ZWUxMjFjMjY5MWNmMjdlZDNiYjM4N2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUSc+4SWhwOIQvw7T6rvT77zPKWf jff9Eu83PAoX3FvcQlsKEGuQ7WDP0E6ls/vlT7OWpSCwDZiP3d4uZNRZNuIIKfkx mp/LUQjhd8sbRKrLViyWMhJmvV06Y3HmwufUVsTz9wU9X8NLmBjsPtixKKSyv2KS HVci0NvZEjhx1DPqe9CiagMNpdpqjAFoLS9LA/7C9GMXmB4znhVKX+TI1vbgjvpq 0838il+iTW7+FtSzdNWZ+5p/UtO9pXN4AuNGyIQPUA6sLuX1edHz30K14FXUB1Ts QvlFhPUJm0zm+u+EwuQCFKaiCcsofkRjzn39nwFYO0Wt6mXytji3idT8+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRuRoQXAd7U7hIcJpHPJ+07s4ekMB8GA1UdIwQY MBaAFLQVvu+eod1HcsLulSdh1lXZhlAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEJXLTc1NmgzVWR5d3U2VkoySFdWZG1HVUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iZjEyODMtOGQxYi00YjFhLWI5ZDkt MGUxOTVlYzY1YjcyLzEvdEJXLTc1NmgzVWR5d3U2VkoySFdWZG1HVUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9iZjEyODMtOGQxYi00YjFhLWI5ZDktMGUxOTVlYzY1Yjcy LzEvdEJXLTc1NmgzVWR5d3U2VkoySFdWZG1HVUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQOErg/m Sqq5U4eDZ4jncreypZKsGmuHZmDh3lLS6fqL6hjuo6AKXTQkH10fKgmi5tYTRj8z V5bqzQNxNvlZiAaJ5nDGwViurZd0SN2JJe8ulf4GBlM2G3VAaKEik4ikfgjuiA0X L9Of7ks5OrHj4UHUDiKehy4QBK+P514hstfAM9rb7OfKLa1luCdPCwLn0MSTjUAZ INEeSIJc1bCqgE6REJjOdXU3ZwvJ4vC5L2DKmNmwRITWSGh0M65twZibi4jrxUAu 9RwLWenal6oKpELSSIRiV/w9WdDTy3n3o5fZjZXUyevNa28LUl7HnJGJOIcsIzTp DssAjRdKgYx2PQ== -----END CERTIFICATE-----Generated at Sun Dec 7 05:50:14 2025 by rpki-client