This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft File: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft (raw, json) Hash identifier: nN62THG0etv4G0Aju5EMiGbUIRud3oFxKgkO7BoGDDY= Subject key identifier: 88:72:84:27:99:66:FA:14:A1:69:EF:8B:F3:72:DC:3C:83:EF:B1:8C Authority key identifier: B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43 Certificate issuer: /CN=b4bc3f0232303f5b037745ec53a66c738256bf43 Certificate serial: 019AF12D22D795F3E1478251C6114EC487FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft Manifest number: 10DD Signing time: Sat 06 Dec 2025 01:00:58 +0000 Manifest this update: Sat 06 Dec 2025 01:00:58 +0000 Manifest next update: Sun 07 Dec 2025 01:00:58 +0000 Files and hashes: 1: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl (hash: foqhAjw3hq6gi1zXVePNuMalsDb+OFSGUxO8jml+AnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:22:d7:95:f3:e1:47:82:51:c6:11:4e:c4:87:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4bc3f0232303f5b037745ec53a66c738256bf43 Validity Not Before: Dec 6 01:00:58 2025 GMT Not After : Dec 7 01:00:58 2025 GMT Subject: CN=887284279966fa14a169ef8bf372dc3c83efb18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:98:4d:6e:fa:6d:fe:bc:d1:60:16:fa:c4:fd: f5:a0:21:1e:06:d7:62:a1:90:6f:de:3e:6b:d0:db: 7d:f9:43:ae:82:55:c4:50:6c:10:8c:71:ab:ff:a2: c5:a0:16:b2:1c:39:c2:eb:b3:a1:53:64:21:e9:32: aa:de:19:04:c4:70:47:8b:95:37:0d:4a:9f:86:de: 46:e1:2d:80:7c:b4:31:a0:a9:e9:ba:0e:81:96:25: 28:b3:d0:17:e1:50:76:84:75:ce:d7:e3:00:72:a4: 8e:a0:ee:1a:94:13:8a:f9:29:9c:fc:b3:20:ee:c8: 9e:2f:6c:15:1e:6d:59:09:c8:51:01:5e:af:b3:27: 95:e3:70:b3:cd:04:b7:2a:85:6c:f7:d2:c8:d6:d5: 02:9d:25:24:91:e8:f8:71:40:a4:b6:94:98:b9:06: 47:7a:a3:60:cf:d2:c4:92:78:c5:40:91:6f:31:da: 24:4f:40:f9:f9:be:25:07:e8:f9:5f:b6:d5:76:89: 6d:35:01:0d:82:44:f7:f0:88:83:bf:5e:e8:45:84: 76:87:f4:e7:9c:e7:4a:2e:c8:aa:28:a4:25:d5:4d: cc:f0:0e:ff:0d:62:3d:60:45:c0:81:5d:a6:b2:e1: 42:b2:24:2e:93:df:90:92:27:a8:5a:9b:62:df:78: 67:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:72:84:27:99:66:FA:14:A1:69:EF:8B:F3:72:DC:3C:83:EF:B1:8C X509v3 Authority Key Identifier: keyid:B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ed:41:f0:0d:d9:6f:c4:2a:03:2e:8e:34:d5:01:e2:9f:61: 52:63:93:a6:1e:f8:a5:b4:78:ba:27:82:46:ee:38:d8:7a:59: 23:48:82:87:7b:bd:47:01:77:b1:b6:71:d9:54:b4:3c:4a:cd: c2:f7:35:3f:c8:31:90:61:34:c3:b4:88:a7:dc:28:d7:a2:d8: 86:fe:02:9c:29:30:29:8e:6d:4b:a6:ff:b9:87:43:19:3e:38: bd:e8:f0:8a:a8:e6:87:c9:3c:65:23:97:72:d4:7a:c0:7c:d5: 26:ab:a1:ce:c0:5d:5f:aa:0b:5f:0e:6c:b3:20:bd:bc:4d:e4: fd:9f:9a:e9:7e:8d:90:d4:de:eb:a2:4e:1f:cb:6c:fc:eb:eb: 95:9c:82:ab:67:dc:2e:2f:98:e5:66:bd:4f:d3:d7:af:b6:46: a2:dd:df:11:9a:5d:a8:77:2c:d5:17:56:55:09:f1:82:fe:39: 0d:43:e8:1b:c7:ce:f8:c0:91:33:74:9b:8c:5d:04:2d:cc:22: 3b:b1:f1:20:39:0c:47:8f:e1:1f:26:b2:03:0c:66:1f:b0:27: f6:69:62:ae:f5:ad:55:b3:07:b8:31:6a:18:43:22:92:06:dd: 95:d4:08:0c:80:20:24:87:3d:3e:9d:3c:b4:a2:2a:ea:45:7f: 0d:b8:8a:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSLXlfPhR4JRxhFOxIf9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YmMzZjAyMzIzMDNmNWIwMzc3NDVlYzUzYTY2YzczODI1 NmJmNDMwHhcNMjUxMjA2MDEwMDU4WhcNMjUxMjA3MDEwMDU4WjAzMTEwLwYDVQQD Eyg4ODcyODQyNzk5NjZmYTE0YTE2OWVmOGJmMzcyZGMzYzgzZWZiMThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgphNbvpt/rzRYBb6xP31oCEeBtdi oZBv3j5r0Nt9+UOuglXEUGwQjHGr/6LFoBayHDnC67OhU2Qh6TKq3hkExHBHi5U3 DUqfht5G4S2AfLQxoKnpug6BliUos9AX4VB2hHXO1+MAcqSOoO4alBOK+Smc/LMg 7sieL2wVHm1ZCchRAV6vsyeV43CzzQS3KoVs99LI1tUCnSUkkej4cUCktpSYuQZH eqNgz9LEknjFQJFvMdokT0D5+b4lB+j5X7bVdoltNQENgkT38IiDv17oRYR2h/Tn nOdKLsiqKKQl1U3M8A7/DWI9YEXAgV2msuFCsiQuk9+QkieoWpti33hnawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhyhCeZZvoUoWnvi/Ny3DyD77GMMB8GA1UdIwQY MBaAFLS8PwIyMD9bA3dF7FOmbHOCVr9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEx3X0FqSXdQMXNEZDBYc1U2WnNjNEpXdjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jNTIxZTUtZjU0My00MDI3LTlkYzgt OGY5ZTIzYzYwNjA2LzEvdEx3X0FqSXdQMXNEZDBYc1U2WnNjNEpXdjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9jNTIxZTUtZjU0My00MDI3LTlkYzgtOGY5ZTIzYzYwNjA2 LzEvdEx3X0FqSXdQMXNEZDBYc1U2WnNjNEpXdjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXu1B8A3Z b8QqAy6ONNUB4p9hUmOTph74pbR4uieCRu442HpZI0iCh3u9RwF3sbZx2VS0PErN wvc1P8gxkGE0w7SIp9wo16LYhv4CnCkwKY5tS6b/uYdDGT44vejwiqjmh8k8ZSOX ctR6wHzVJquhzsBdX6oLXw5ssyC9vE3k/Z+a6X6NkNTe66JOH8ts/OvrlZyCq2fc Li+Y5Wa9T9PXr7ZGot3fEZpdqHcs1RdWVQnxgv45DUPoG8fO+MCRM3SbjF0ELcwi O7HxIDkMR4/hHyayAwxmH7An9mlirvWtVbMHuDFqGEMikgbdldQIDIAgJIc9Pp08 tKIq6kV/DbiKtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:18 2025 by rpki-client