This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft File: t-0w6W6la5gOa3k9GobGLdXAvB8.mft (raw, json) Hash identifier: aGpzUdPuGjFo2Uivp1Xhd6EeT62o2vat4+Jb70wGFnA= Subject key identifier: C0:8B:9B:F2:4A:DC:3F:E8:05:72:FF:9C:AA:D3:20:0E:53:D8:F4:3D Authority key identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F Certificate issuer: /CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f Certificate serial: 019AF3891EDF5F26BD04001B289E69ECDE53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft Manifest number: 0795 Signing time: Sat 06 Dec 2025 12:00:41 +0000 Manifest this update: Sat 06 Dec 2025 12:00:41 +0000 Manifest next update: Sun 07 Dec 2025 12:00:41 +0000 Files and hashes: 1: 8HKSdNrm9QMyoSA380bXaBqQQ0o.roa (hash: n0TkThrqHtx1QI4h5bmhzme4/EVU3X+pkCgBWj6DraA=) 2: t-0w6W6la5gOa3k9GobGLdXAvB8.crl (hash: OBIDLl51ureidFNw4JjP3U273usnwVTK2kqIRRtnY80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:1e:df:5f:26:bd:04:00:1b:28:9e:69:ec:de:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f Validity Not Before: Dec 6 12:00:41 2025 GMT Not After : Dec 7 12:00:41 2025 GMT Subject: CN=c08b9bf24adc3fe80572ff9caad3200e53d8f43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:06:76:df:a0:76:e1:b3:4f:65:bc:83:83: 5e:80:76:0c:44:26:77:97:d2:b1:51:da:11:06:e9: dc:df:52:ff:4c:21:40:dc:4b:e0:cd:8e:41:e2:f9: 9d:78:a1:94:cb:a0:58:27:1b:46:49:dc:1d:2c:05: 99:bd:09:07:c3:47:e5:b5:66:fd:da:cd:54:8e:03: 91:62:02:17:50:c0:c0:0d:8d:fd:ce:f8:72:60:2e: a0:34:fe:65:ad:1e:77:e6:13:7c:d5:38:f2:f9:fb: 92:be:d1:9d:b0:f8:07:0e:75:07:c2:90:0a:38:80: 69:52:7e:c8:af:06:e9:b3:ac:e5:c2:0e:4d:01:e3: 98:4f:2e:e7:55:41:8a:3b:4c:3c:ff:c6:78:f4:fe: 54:57:58:9f:b3:ce:af:d7:21:f0:4e:f8:4a:ed:5f: c9:50:b2:b9:43:2c:45:dc:71:e8:92:c3:61:77:12: a6:80:57:91:db:c2:cd:7d:7f:08:3c:e9:0a:db:4e: 43:d7:c4:66:7b:14:45:77:75:79:37:ae:dc:ab:60: 21:b2:1f:1b:73:03:18:f4:3b:34:88:8f:e1:02:81: 5e:33:05:26:d4:e0:5b:22:68:63:27:3e:7d:a3:d4: d7:5c:a8:73:95:24:b0:26:c0:18:33:f4:80:e7:3f: dc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8B:9B:F2:4A:DC:3F:E8:05:72:FF:9C:AA:D3:20:0E:53:D8:F4:3D X509v3 Authority Key Identifier: keyid:B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1a:93:24:e7:4e:d2:cf:c7:7e:eb:60:9f:c3:03:49:a5:73: 7a:a5:52:e2:76:88:54:46:7e:ad:81:e6:77:cb:cf:08:7c:ad: e8:db:66:ae:a2:89:40:e7:a5:d6:4b:9a:4d:2b:4c:b1:01:a8: 95:25:4b:d8:af:77:69:51:95:8f:8e:ef:40:93:9d:9f:cd:78: a9:aa:59:d3:e5:17:25:57:5b:a6:d5:53:9f:ec:db:1f:03:7a: 7a:76:91:0f:f3:3b:29:1f:4e:2c:51:53:d2:bf:9c:f6:74:64: 8c:9c:db:91:0c:00:08:5d:b4:8b:4d:ec:c7:f2:7f:40:23:69: 1a:eb:85:c9:3b:06:c0:7e:3c:5a:c5:ff:55:12:8f:b5:f5:ac: 96:bd:12:10:db:bb:57:e4:90:cb:13:7c:ae:a0:e5:47:2e:a5: 58:cd:98:72:c7:e0:19:b2:e9:6d:16:9a:ff:99:0c:31:00:a2: 48:22:3c:12:d3:fe:fc:ec:bb:f3:be:9e:e1:f7:20:95:46:26: 3a:f9:7b:3f:f9:5c:06:1d:91:d2:f0:32:7f:e1:34:e6:43:2f: 49:21:a7:fe:b9:f6:11:3e:39:1d:29:64:6e:ff:53:7b:60:ea: 76:79:eb:07:62:d3:e0:58:db:56:d3:30:99:8a:c4:8e:c3:6e: 21:28:92:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziR7fXya9BAAbKJ5p7N5TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ZWQzMGU5NmVhNTZiOTgwZTZiNzkzZDFhODZjNjJkZDVj MGJjMWYwHhcNMjUxMjA2MTIwMDQxWhcNMjUxMjA3MTIwMDQxWjAzMTEwLwYDVQQD EyhjMDhiOWJmMjRhZGMzZmU4MDU3MmZmOWNhYWQzMjAwZTUzZDhmNDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuncGdt+gduGzT2W8g4NegHYMRCZ3 l9KxUdoRBunc31L/TCFA3EvgzY5B4vmdeKGUy6BYJxtGSdwdLAWZvQkHw0fltWb9 2s1UjgORYgIXUMDADY39zvhyYC6gNP5lrR535hN81Tjy+fuSvtGdsPgHDnUHwpAK OIBpUn7Irwbps6zlwg5NAeOYTy7nVUGKO0w8/8Z49P5UV1ifs86v1yHwTvhK7V/J ULK5QyxF3HHoksNhdxKmgFeR28LNfX8IPOkK205D18RmexRFd3V5N67cq2Ahsh8b cwMY9Ds0iI/hAoFeMwUm1OBbImhjJz59o9TXXKhzlSSwJsAYM/SA5z/crwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCLm/JK3D/oBXL/nKrTIA5T2PQ9MB8GA1UdIwQY MBaAFLftMOlupWuYDmt5PRqGxi3VwLwfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdC0wdzZXNmxhNWdPYTNrOUdvYkdMZFhBdkI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mYTc5ZGQtMGZjYS00NjYxLTg4NjQt OTU1NTM3Y2I2OWYyLzEvdC0wdzZXNmxhNWdPYTNrOUdvYkdMZFhBdkI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9mYTc5ZGQtMGZjYS00NjYxLTg4NjQtOTU1NTM3Y2I2OWYy LzEvdC0wdzZXNmxhNWdPYTNrOUdvYkdMZFhBdkI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxqTJOdO 0s/Hfutgn8MDSaVzeqVS4naIVEZ+rYHmd8vPCHyt6NtmrqKJQOel1kuaTStMsQGo lSVL2K93aVGVj47vQJOdn814qapZ0+UXJVdbptVTn+zbHwN6enaRD/M7KR9OLFFT 0r+c9nRkjJzbkQwACF20i03sx/J/QCNpGuuFyTsGwH48WsX/VRKPtfWslr0SENu7 V+SQyxN8rqDlRy6lWM2YcsfgGbLpbRaa/5kMMQCiSCI8EtP+/Oy7876e4fcglUYm Ovl7P/lcBh2R0vAyf+E05kMvSSGn/rn2ET45HSlkbv9Te2DqdnnrB2LT4FjbVtMw mYrEjsNuISiSjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:33 2025 by rpki-client