This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json) Hash identifier: 3FAvQrtWRaREwsfTFQh3if97VNJUbxMD9NhlHB7PvTc= Subject key identifier: A8:BD:C6:CF:EC:1D:48:D5:DE:49:D8:0C:AF:EE:21:A6:EC:F3:E6:99 Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd Certificate serial: 019AF0BF679015DA53095886AFE4F86AADBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft Manifest number: 175F Signing time: Fri 05 Dec 2025 23:01:06 +0000 Manifest this update: Fri 05 Dec 2025 23:01:06 +0000 Manifest next update: Sat 06 Dec 2025 23:01:06 +0000 Files and hashes: 1: bCO5bqFLQTtaSqSwTRLhrpm3wCA.roa (hash: xHiR4ALGk4+cM6JODCM19LWc7pantvAdvK3viET0qj4=) 2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: HyqDKhYihyC5b048NQJTcZuUc6Jvug1PwaJCAlxB9G4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:67:90:15:da:53:09:58:86:af:e4:f8:6a:ad:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd Validity Not Before: Dec 5 23:01:06 2025 GMT Not After : Dec 6 23:01:06 2025 GMT Subject: CN=a8bdc6cfec1d48d5de49d80cafee21a6ecf3e699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9b:31:31:a5:c7:94:b0:7f:19:25:58:64:f1: ed:29:06:00:7c:55:85:b3:36:96:a6:51:81:84:97: 41:90:17:fb:c7:43:0c:25:bf:f6:97:a8:5d:cc:ec: 90:47:61:91:07:39:36:3a:77:83:73:72:16:1e:6e: b9:d1:24:0f:0a:14:41:d4:55:d2:49:ef:c3:28:8e: ad:b6:dc:a3:a5:0c:80:d6:ff:97:43:b0:54:be:3a: d6:bb:48:2d:09:e8:52:6f:dc:0a:dc:6e:59:84:f6: 61:9d:d6:ec:00:67:2e:00:be:83:4c:b2:fe:3a:ba: 0c:6d:63:3b:47:5f:3a:7c:12:6f:79:94:0a:66:10: 00:5d:bc:92:bd:f1:bd:cc:eb:10:7c:a5:2f:83:a7: 6f:27:10:f3:ed:0d:fc:92:84:ab:f1:a3:b7:ca:c2: 49:98:a7:37:ed:f3:fe:ae:0d:02:d3:5b:76:f7:03: 29:de:14:01:4a:0a:5b:34:58:4b:fe:ca:a0:09:83: 86:26:4d:be:49:2f:ad:a9:99:f0:7a:e7:9c:7b:de: 72:e0:56:ae:24:60:ea:a9:33:7a:74:dc:cc:41:c9: 9f:c1:45:22:5d:2a:18:52:b9:f6:b0:8d:c5:b7:89: e1:91:41:6a:3d:58:93:0a:c5:c0:94:9f:a6:41:75: cd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BD:C6:CF:EC:1D:48:D5:DE:49:D8:0C:AF:EE:21:A6:EC:F3:E6:99 X509v3 Authority Key Identifier: keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f6:7c:7f:6f:ad:a0:d4:a9:9e:b0:ca:6f:77:93:68:ab:e1: c4:d7:9c:3a:fa:bc:8c:d1:f3:a2:71:f8:a0:ab:90:be:13:22: 37:77:08:f5:5b:32:4e:97:58:96:27:21:08:da:99:80:75:cc: fa:10:5e:41:8b:2b:a4:20:77:42:2a:d2:6d:2f:3f:f5:9a:24: a9:82:5d:29:47:fa:ac:7b:26:07:bb:84:9c:69:d7:74:a1:1c: 3f:c6:d4:f4:bf:5c:c3:73:20:78:5c:9b:7e:de:a5:89:0b:27: 1c:de:3e:3a:7c:16:be:d2:9d:a8:b9:6a:07:74:84:a5:1c:57: d7:88:61:6a:5e:36:57:cb:c3:4a:39:a3:7f:7f:1c:51:ed:34: ee:77:80:97:63:08:be:c2:ce:96:38:29:e9:b6:9d:5a:01:2b: 45:18:40:60:d3:80:14:07:d5:f6:22:39:f3:93:1b:9b:57:5f: 1a:16:d0:9b:b2:13:f5:1e:47:38:c5:a0:15:86:9d:ea:47:b0: 6d:84:a5:4c:35:cf:28:77:85:a5:f0:22:f7:32:62:11:d5:1f: f6:6c:fc:73:09:fd:89:7e:ab:82:b6:42:30:3e:4c:2e:3b:90: 50:48:d1:78:2e:5f:f9:97:c5:13:a4:e4:df:c4:54:36:b7:0e: 21:a4:eb:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2eQFdpTCViGr+T4aq29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0Y2Q5NmIyN2U4ODQzNTA0YmI1YmQ1NWMzMjllYzAyZGI5 ZjBmZmQwHhcNMjUxMjA1MjMwMTA2WhcNMjUxMjA2MjMwMTA2WjAzMTEwLwYDVQQD EyhhOGJkYzZjZmVjMWQ0OGQ1ZGU0OWQ4MGNhZmVlMjFhNmVjZjNlNjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5sxMaXHlLB/GSVYZPHtKQYAfFWF szaWplGBhJdBkBf7x0MMJb/2l6hdzOyQR2GRBzk2OneDc3IWHm650SQPChRB1FXS Se/DKI6tttyjpQyA1v+XQ7BUvjrWu0gtCehSb9wK3G5ZhPZhndbsAGcuAL6DTLL+ OroMbWM7R186fBJveZQKZhAAXbySvfG9zOsQfKUvg6dvJxDz7Q38koSr8aO3ysJJ mKc37fP+rg0C01t29wMp3hQBSgpbNFhL/sqgCYOGJk2+SS+tqZnweuece95y4Fau JGDqqTN6dNzMQcmfwUUiXSoYUrn2sI3Ft4nhkUFqPViTCsXAlJ+mQXXN0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKi9xs/sHUjV3knYDK/uIabs8+aZMB8GA1UdIwQY MBaAFLTNlrJ+iENQS7W9VcMp7ALbnw/9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE0yV3NuNklRMUJMdGIxVnd5bnNBdHVmRF8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xOWRkYWQtYzQ1OC00NDFlLTk4NGUt NTczZjE3ZDJhZWYzLzEvdE0yV3NuNklRMUJMdGIxVnd5bnNBdHVmRF8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8xOWRkYWQtYzQ1OC00NDFlLTk4NGUtNTczZjE3ZDJhZWYz LzEvdE0yV3NuNklRMUJMdGIxVnd5bnNBdHVmRF8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPZ8f2+t oNSpnrDKb3eTaKvhxNecOvq8jNHzonH4oKuQvhMiN3cI9VsyTpdYlichCNqZgHXM +hBeQYsrpCB3QirSbS8/9ZokqYJdKUf6rHsmB7uEnGnXdKEcP8bU9L9cw3MgeFyb ft6liQsnHN4+OnwWvtKdqLlqB3SEpRxX14hhal42V8vDSjmjf38cUe007neAl2MI vsLOljgp6badWgErRRhAYNOAFAfV9iI585Mbm1dfGhbQm7IT9R5HOMWgFYad6kew bYSlTDXPKHeFpfAi9zJiEdUf9mz8cwn9iX6rgrZCMD5MLjuQUEjReC5f+ZfFE6Tk 38RUNrcOIaTr4A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:54 2025 by rpki-client