This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json) Hash identifier: ofHCl5dwhbDJPQK4RH/fWyrqn7cEdPcWPc54yQezZhg= Subject key identifier: 67:D2:57:80:C6:7E:79:CD:E1:A2:9F:84:A8:3E:5B:88:00:5D:ED:EB Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7 Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7 Certificate serial: 019AF31B6964CDE41EEEDEA7C324470F511F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft Manifest number: 0A00 Signing time: Sat 06 Dec 2025 10:00:50 +0000 Manifest this update: Sat 06 Dec 2025 10:00:50 +0000 Manifest next update: Sun 07 Dec 2025 10:00:50 +0000 Files and hashes: 1: Tj8ieaPk-ZVdznj4QGZQsDa6PTU.roa (hash: rpKu+SpVkA4o9g3c9SIuQedHFHqzu4mcB4TaNuy/SKw=) 2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: iQjLuEu+Bzd/rfsB4JVyqeOSZvHnJFICfKsHEZAQXT4=) 3: uWZIzr5sI_obeqk4P_AP6Hrzzsc.roa (hash: Ao6L2xVS/ORm+dRe6MtZy2PpenoZKqpKXENIdtVG26s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:69:64:cd:e4:1e:ee:de:a7:c3:24:47:0f:51:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7 Validity Not Before: Dec 6 10:00:50 2025 GMT Not After : Dec 7 10:00:50 2025 GMT Subject: CN=67d25780c67e79cde1a29f84a83e5b88005dedeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2c:b8:dc:e3:64:4c:b9:d6:32:72:35:af:f8: a7:41:c2:b7:61:1f:51:3b:b0:56:17:a7:1b:d7:61: 06:81:c9:38:14:4b:7c:1b:19:6b:9b:dc:78:2b:68: 1d:c3:e7:ed:2c:57:f6:87:9d:6a:e3:aa:4a:5f:93: fa:73:3f:b1:86:99:5d:0b:55:b6:f4:ad:b1:91:a1: 53:81:4a:d7:69:9a:16:9a:87:2b:68:53:e0:20:0d: fd:70:80:5a:d3:8b:ed:af:11:a3:c5:d1:2a:30:f2: 56:01:47:a4:78:4b:53:8c:39:df:f5:a1:50:b6:1e: 82:b7:3d:a8:23:b7:17:d6:16:8d:2f:ce:34:c9:d6: 2c:f1:01:51:3a:d2:f6:80:86:df:55:16:d4:2d:4c: 83:d5:5b:a2:9b:3f:e9:0a:a2:7f:6b:8c:8c:a4:73: 5a:19:0f:17:a3:b0:6f:66:39:59:31:e8:1c:70:f7: 60:7a:4a:57:0d:ad:bf:95:fa:72:8a:aa:df:33:42: 81:39:fa:cd:44:4b:de:fe:3b:c7:99:41:bf:8e:2b: a8:f3:81:1e:6f:a2:dc:c9:d6:ba:00:71:1a:43:20: 84:63:36:e2:3e:4c:06:48:f3:1b:40:c0:e2:4a:35: ab:6e:04:79:52:e8:d0:68:bd:d9:41:8c:36:11:9c: f9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D2:57:80:C6:7E:79:CD:E1:A2:9F:84:A8:3E:5B:88:00:5D:ED:EB X509v3 Authority Key Identifier: keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:19:31:54:f5:77:76:8f:14:2d:23:21:9a:0c:f8:85:be:9a: a8:93:a0:07:2c:71:44:d1:1a:24:93:56:4c:9f:9a:c6:96:a5: 67:9a:ec:1b:36:64:0f:bf:dc:aa:ee:1d:42:7f:48:03:63:ce: 51:e1:c8:a9:40:36:77:ae:27:66:05:24:80:02:1e:c1:a8:c4: c6:3b:5e:19:26:68:7a:c7:50:62:ea:17:bb:02:d8:62:15:ba: 6b:de:6d:a2:a9:65:06:48:0a:25:ed:9b:f9:ba:1b:72:6d:89: 27:a2:36:4e:05:22:a3:59:b7:a7:1b:91:ad:c9:2d:78:88:6c: 7c:cd:e0:ac:a7:28:08:09:e2:61:4c:02:90:33:5a:3f:65:72: 4d:94:43:15:88:02:d1:8f:95:c6:d4:65:42:ce:02:88:b3:ca: d2:30:c9:70:40:02:52:2b:b7:b0:04:c4:a8:64:ad:8d:4a:8c: c6:37:f2:d5:76:78:c1:53:b4:81:09:cb:b0:f7:69:51:52:25: 64:94:bb:be:73:6f:19:bd:ef:96:07:e0:e0:b7:28:2d:f0:46: cd:66:9f:61:f7:67:48:14:82:1a:aa:86:99:64:89:d2:fa:cb: b5:f5:02:28:82:41:5a:74:e0:2a:fb:2c:0b:fb:30:d1:3b:89: 8a:c6:4f:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2lkzeQe7t6nwyRHD1EfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NmE4YzkxYWQzMTc0NWZmNzI3ZGEwNDgyZWRlMWIyZmFi NDYyZTcwHhcNMjUxMjA2MTAwMDUwWhcNMjUxMjA3MTAwMDUwWjAzMTEwLwYDVQQD Eyg2N2QyNTc4MGM2N2U3OWNkZTFhMjlmODRhODNlNWI4ODAwNWRlZGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCy43ONkTLnWMnI1r/inQcK3YR9R O7BWF6cb12EGgck4FEt8Gxlrm9x4K2gdw+ftLFf2h51q46pKX5P6cz+xhpldC1W2 9K2xkaFTgUrXaZoWmocraFPgIA39cIBa04vtrxGjxdEqMPJWAUekeEtTjDnf9aFQ th6Ctz2oI7cX1haNL840ydYs8QFROtL2gIbfVRbULUyD1Vuimz/pCqJ/a4yMpHNa GQ8Xo7BvZjlZMegccPdgekpXDa2/lfpyiqrfM0KBOfrNREve/jvHmUG/jiuo84Ee b6Lcyda6AHEaQyCEYzbiPkwGSPMbQMDiSjWrbgR5UujQaL3ZQYw2EZz5dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfSV4DGfnnN4aKfhKg+W4gAXe3rMB8GA1UdIwQY MBaAFLVqjJGtMXRf9yfaBILt4bL6tGLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEt OTg2NDg5MDE2ODhmLzEvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEtOTg2NDg5MDE2ODhm LzEvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxkxVPV3 do8ULSMhmgz4hb6aqJOgByxxRNEaJJNWTJ+axpalZ5rsGzZkD7/cqu4dQn9IA2PO UeHIqUA2d64nZgUkgAIewajExjteGSZoesdQYuoXuwLYYhW6a95toqllBkgKJe2b +bobcm2JJ6I2TgUio1m3pxuRrckteIhsfM3grKcoCAniYUwCkDNaP2VyTZRDFYgC 0Y+VxtRlQs4CiLPK0jDJcEACUiu3sATEqGStjUqMxjfy1XZ4wVO0gQnLsPdpUVIl ZJS7vnNvGb3vlgfg4LcoLfBGzWafYfdnSBSCGqqGmWSJ0vrLtfUCKIJBWnTgKvss C/sw0TuJisZPYw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:37:16 2025 by rpki-client