This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft File: tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft (raw, json) Hash identifier: 1EBoJPNI213Uefov0jmxk+fGiuM9r0j8a/zlhelhQC0= Subject key identifier: A6:62:EE:7E:11:36:45:27:E5:46:63:D1:FD:15:F0:86:B2:D1:AB:7F Authority key identifier: B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94 Certificate issuer: /CN=b56b5b54decf43e964f4be6d304e480a386cb794 Certificate serial: 019B23D1989E272863ACAEE2D89CFC591B43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft Manifest number: 0B Signing time: Mon 15 Dec 2025 21:01:37 +0000 Manifest this update: Mon 15 Dec 2025 21:01:37 +0000 Manifest next update: Tue 16 Dec 2025 21:01:37 +0000 Files and hashes: 1: tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl (hash: 5Ksbv0qXT6G+Ifuc9ZRxKKGLGzKx3GGpV6ikpLGV9f8=) 2: wc35MgYGPiVoITK8dBRVt7Icluk.asa (hash: A16HGxaZ77Lcix1Lc05fm2biWcgZ/EQMJRjj60DKa2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d1:98:9e:27:28:63:ac:ae:e2:d8:9c:fc:59:1b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56b5b54decf43e964f4be6d304e480a386cb794 Validity Not Before: Dec 15 21:01:37 2025 GMT Not After : Dec 16 21:01:37 2025 GMT Subject: CN=a662ee7e11364527e54663d1fd15f086b2d1ab7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:89:a4:fb:a6:d5:27:4f:de:84:ce:cd:6b:94: e3:c4:4a:0d:4d:95:e9:61:35:ea:e5:52:f6:a5:29: bb:b3:c3:2c:82:ad:0f:f0:84:b2:aa:05:83:65:36: bd:4d:9f:59:cf:aa:8c:2d:7e:d1:65:b0:26:dd:37: 45:28:50:ae:38:d1:19:48:c1:61:f7:84:c2:0c:5d: bd:9b:24:94:3d:49:f6:b7:c6:79:db:af:38:a3:9b: 53:9f:4c:d9:6e:9f:c2:ec:3d:70:66:d3:9c:d5:4a: 0a:f4:75:a3:ea:d7:9e:2e:81:88:5b:3d:fd:e0:6f: e6:15:f3:88:b8:67:6a:08:f7:23:37:6b:bb:a7:fb: 09:50:3c:a5:59:87:49:9b:55:de:4a:3a:b3:15:75: 3d:81:56:9c:17:a1:2e:ce:e5:0d:04:04:39:5d:bb: 8d:8e:58:ce:33:0e:d2:b8:5f:3c:1f:d1:72:e3:71: 18:87:90:df:07:f8:f2:78:f0:26:57:c4:38:80:3e: ad:a7:22:ec:6f:22:90:6d:52:b4:3d:a6:29:0b:d0: 5a:85:0a:cd:bf:4e:36:77:30:5b:24:08:39:ff:ea: c4:1f:3b:7a:7a:9c:87:8a:6d:21:1e:c0:98:f0:b7: 10:54:a0:6d:3c:db:32:12:40:d8:32:28:43:d6:e0: 38:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:62:EE:7E:11:36:45:27:E5:46:63:D1:FD:15:F0:86:B2:D1:AB:7F X509v3 Authority Key Identifier: keyid:B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:a9:41:2e:c8:d0:e9:4f:d0:7b:c8:81:9c:b5:8f:96:90:ee: 7c:6b:70:43:9e:21:c7:cc:30:94:17:1b:7f:4b:01:bd:29:58: 42:e6:38:7d:d8:a1:c7:87:77:e4:ec:ee:ea:fe:8f:45:91:ac: 9c:24:53:5d:14:ab:b1:6b:1a:96:f2:2b:27:22:17:b1:e4:2d: 90:b0:44:9d:bb:02:4c:e7:ae:ac:f7:ad:14:92:9c:b2:98:de: cc:af:ec:e6:83:5f:87:04:6a:b0:79:7f:0e:fb:bb:9c:78:9b: cf:6b:91:e9:0f:64:d6:dc:a1:78:0c:a0:c4:5e:4e:38:e1:f9: f6:49:c5:9a:4e:68:3b:bb:9b:fc:31:3c:d3:67:68:d6:75:6f: 56:9e:f4:65:7a:e0:eb:b9:77:42:f0:57:be:bf:d5:42:f8:f4: 95:e4:49:ac:91:79:14:96:06:8f:7f:96:53:6e:6f:59:4a:33: d5:ec:18:08:24:3e:bf:51:91:46:79:8f:a4:9d:1c:9d:97:d3: 98:f2:7f:49:86:33:dc:66:6c:d2:3d:0e:97:c2:f7:f4:41:0e: 3f:d8:db:84:69:a4:bd:e0:7f:97:89:ee:8e:91:36:93:79:1d: ef:04:b0:a8:f5:4d:e0:ab:e5:79:28:30:a5:89:b9:97:91:c7: 37:28:5b:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0ZieJyhjrK7i2Jz8WRtDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NmI1YjU0ZGVjZjQzZTk2NGY0YmU2ZDMwNGU0ODBhMzg2 Y2I3OTQwHhcNMjUxMjE1MjEwMTM3WhcNMjUxMjE2MjEwMTM3WjAzMTEwLwYDVQQD EyhhNjYyZWU3ZTExMzY0NTI3ZTU0NjYzZDFmZDE1ZjA4NmIyZDFhYjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqImk+6bVJ0/ehM7Na5TjxEoNTZXp YTXq5VL2pSm7s8Msgq0P8ISyqgWDZTa9TZ9Zz6qMLX7RZbAm3TdFKFCuONEZSMFh 94TCDF29mySUPUn2t8Z52684o5tTn0zZbp/C7D1wZtOc1UoK9HWj6teeLoGIWz39 4G/mFfOIuGdqCPcjN2u7p/sJUDylWYdJm1XeSjqzFXU9gVacF6EuzuUNBAQ5XbuN jljOMw7SuF88H9Fy43EYh5DfB/jyePAmV8Q4gD6tpyLsbyKQbVK0PaYpC9BahQrN v042dzBbJAg5/+rEHzt6epyHim0hHsCY8LcQVKBtPNsyEkDYMihD1uA46QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZi7n4RNkUn5UZj0f0V8Iay0at/MB8GA1UdIwQY MBaAFLVrW1Tez0PpZPS+bTBOSAo4bLeUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFd0YlZON1BRLWxrOUw1dE1FNUlDamhzdDVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84NzRlOGEtM2ExNi00ZjViLThmMTkt MzdhZDBlZWJlMTliLzEvdFd0YlZON1BRLWxrOUw1dE1FNUlDamhzdDVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC84NzRlOGEtM2ExNi00ZjViLThmMTktMzdhZDBlZWJlMTli LzEvdFd0YlZON1BRLWxrOUw1dE1FNUlDamhzdDVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsalBLsjQ 6U/Qe8iBnLWPlpDufGtwQ54hx8wwlBcbf0sBvSlYQuY4fdihx4d35Ozu6v6PRZGs nCRTXRSrsWsalvIrJyIXseQtkLBEnbsCTOeurPetFJKcspjezK/s5oNfhwRqsHl/ Dvu7nHibz2uR6Q9k1tyheAygxF5OOOH59knFmk5oO7ub/DE802do1nVvVp70ZXrg 67l3QvBXvr/VQvj0leRJrJF5FJYGj3+WU25vWUoz1ewYCCQ+v1GRRnmPpJ0cnZfT mPJ/SYYz3GZs0j0Ol8L39EEOP9jbhGmkveB/l4nujpE2k3kd7wSwqPVN4KvleSgw pYm5l5HHNyhbZQ== -----END CERTIFICATE-----Generated at Tue Dec 16 04:33:14 2025 by rpki-client