This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft File: tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft (raw, json) Hash identifier: 8vvUVo1qqeE2wVdLDiAtxsMvmB0PEmgM85QZxL+zc64= Subject key identifier: 68:F0:C6:23:41:11:45:B9:93:9C:46:4D:95:30:F8:86:D1:52:ED:C0 Authority key identifier: B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97 Certificate issuer: /CN=b414b09beeab905ff41e6813256054b182294297 Certificate serial: 019AF31C742AAB2860202E5BBD0CE3370413 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft Manifest number: 0CC3 Signing time: Sat 06 Dec 2025 10:01:59 +0000 Manifest this update: Sat 06 Dec 2025 10:01:59 +0000 Manifest next update: Sun 07 Dec 2025 10:01:59 +0000 Files and hashes: 1: 9ie56jozGctsQMPeP2PnRQlQSUc.roa (hash: 5kDUdIA6jw7l4e4ssTIC7py/rMtiw/D++uBoc2CI0Qo=) 2: mT-8_dVnmXbsJKgoN35LXNaAywM.roa (hash: o5cN5KMUIwn/VQVHMV9OAvcCU4Z7KPV9dR9Yvh1kUlg=) 3: tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl (hash: Fi3LQBP6o83o7EGjF0hFlmtdBcmT/taTr2gIdF4O+1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:74:2a:ab:28:60:20:2e:5b:bd:0c:e3:37:04:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b414b09beeab905ff41e6813256054b182294297 Validity Not Before: Dec 6 10:01:59 2025 GMT Not After : Dec 7 10:01:59 2025 GMT Subject: CN=68f0c623411145b9939c464d9530f886d152edc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6f:df:f6:f2:31:26:1b:e4:bb:82:90:a2:c9: 5c:28:81:88:10:51:cd:90:54:37:16:14:5a:9d:76: ed:a6:b9:ea:c4:1e:13:0c:04:19:96:3c:51:a4:99: 4f:6b:61:8c:7b:81:e6:20:18:1a:bb:2e:d6:b2:16: 8d:ae:91:01:f4:c3:39:6e:43:1d:61:1c:2d:13:75: fc:75:f5:13:de:70:98:51:fb:e0:15:be:da:20:3d: 46:23:de:7f:d1:81:75:a7:4e:39:12:20:d5:c9:9d: 6d:29:6c:fa:8e:51:87:3a:ff:d6:48:03:91:0f:e4: ff:00:aa:2d:9f:33:fe:74:b4:b7:43:a9:99:52:a4: 5e:5d:93:28:06:08:31:de:98:30:fe:de:0f:f6:7f: 8c:81:47:64:2b:d3:8a:27:5e:4f:bd:10:84:82:b6: f6:8c:e5:f0:50:77:11:34:24:78:92:10:a2:a0:49: ab:43:60:c1:cb:da:bc:d1:0a:db:a9:c8:e3:7e:63: ad:a9:37:70:2b:26:4b:e4:96:1a:cb:4a:66:99:e7: 17:f3:a1:55:38:4a:0e:fb:1e:7f:1d:10:15:9e:09: dc:b9:4e:c1:8d:d0:b5:d1:96:c8:ab:3d:b0:af:c1: 67:26:2e:fd:ce:9e:fc:1b:25:0f:2a:a6:fd:93:61: b1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F0:C6:23:41:11:45:B9:93:9C:46:4D:95:30:F8:86:D1:52:ED:C0 X509v3 Authority Key Identifier: keyid:B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:0e:98:b4:78:62:a2:ae:d1:41:d7:3b:60:33:69:95:27:a2: 4c:7a:1e:cb:22:6a:32:0f:0e:e9:ad:f1:80:8f:e3:9f:5f:9e: f2:0b:b9:72:42:0f:18:c8:12:81:4a:e5:f4:db:4d:b0:3e:b9: 6c:58:25:4d:69:cc:eb:d3:eb:f0:6c:40:bf:0e:96:1b:05:d5: 5c:98:f8:ff:61:87:74:99:ff:ad:d0:00:86:b0:20:78:28:59: f7:30:e2:95:37:2c:44:cc:83:fd:af:64:92:e9:53:63:7b:d7: 06:71:26:31:45:fa:2c:71:f5:9c:36:c1:02:37:6e:05:89:fc: 06:af:47:e6:9a:49:e8:28:71:51:82:56:43:05:4c:9a:96:c3: 80:f3:b8:04:6b:82:06:79:f1:53:fc:e0:04:39:c9:df:e8:a7: af:ce:5b:4d:b5:f0:da:f3:0a:74:10:ce:ec:e5:9f:86:f9:3f: 20:8d:99:a0:ac:39:e9:41:2f:fc:5a:d6:3b:2e:ac:97:84:76: 0d:0d:51:38:e4:4e:f1:20:99:9f:18:4c:1d:4f:7e:7b:0b:55: 85:3e:21:c7:5b:5b:02:61:90:74:7a:b9:58:d2:10:8e:f7:3a: b5:0b:44:51:0e:a0:7b:7a:16:23:df:df:56:19:de:40:57:9c: 94:de:5e:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHHQqqyhgIC5bvQzjNwQTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MTRiMDliZWVhYjkwNWZmNDFlNjgxMzI1NjA1NGIxODIy OTQyOTcwHhcNMjUxMjA2MTAwMTU5WhcNMjUxMjA3MTAwMTU5WjAzMTEwLwYDVQQD Eyg2OGYwYzYyMzQxMTE0NWI5OTM5YzQ2NGQ5NTMwZjg4NmQxNTJlZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG/f9vIxJhvku4KQoslcKIGIEFHN kFQ3FhRanXbtprnqxB4TDAQZljxRpJlPa2GMe4HmIBgauy7WshaNrpEB9MM5bkMd YRwtE3X8dfUT3nCYUfvgFb7aID1GI95/0YF1p045EiDVyZ1tKWz6jlGHOv/WSAOR D+T/AKotnzP+dLS3Q6mZUqReXZMoBggx3pgw/t4P9n+MgUdkK9OKJ15PvRCEgrb2 jOXwUHcRNCR4khCioEmrQ2DBy9q80QrbqcjjfmOtqTdwKyZL5JYay0pmmecX86FV OEoO+x5/HRAVngncuU7BjdC10ZbIqz2wr8FnJi79zp78GyUPKqb9k2GxkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjwxiNBEUW5k5xGTZUw+IbRUu3AMB8GA1UdIwQY MBaAFLQUsJvuq5Bf9B5oEyVgVLGCKUKXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEJTd20tNnJrRl8wSG1nVEpXQlVzWUlwUXBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84MDBlYjYtODY4Yi00YTMwLWI0MDIt NGJjZTQyNDcyM2Q5LzEvdEJTd20tNnJrRl8wSG1nVEpXQlVzWUlwUXBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84MDBlYjYtODY4Yi00YTMwLWI0MDItNGJjZTQyNDcyM2Q5 LzEvdEJTd20tNnJrRl8wSG1nVEpXQlVzWUlwUXBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQ6YtHhi oq7RQdc7YDNplSeiTHoeyyJqMg8O6a3xgI/jn1+e8gu5ckIPGMgSgUrl9NtNsD65 bFglTWnM69Pr8GxAvw6WGwXVXJj4/2GHdJn/rdAAhrAgeChZ9zDilTcsRMyD/a9k kulTY3vXBnEmMUX6LHH1nDbBAjduBYn8Bq9H5ppJ6ChxUYJWQwVMmpbDgPO4BGuC BnnxU/zgBDnJ3+inr85bTbXw2vMKdBDO7OWfhvk/II2ZoKw56UEv/FrWOy6sl4R2 DQ1ROORO8SCZnxhMHU9+ewtVhT4hx1tbAmGQdHq5WNIQjvc6tQtEUQ6ge3oWI9/f VhneQFeclN5eJA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:33:03 2025 by rpki-client