This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft File: tWGrEAAXphJTFvzGEzhKr73mAYk.mft (raw, json) Hash identifier: xVUnSOKJguq81IZLV8QkP+FrU7FJff5dl18FhMaTPuY= Subject key identifier: 1E:C6:89:E0:89:4E:07:E2:4B:EC:31:AC:FB:0D:3A:88:0C:D5:65:94 Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89 Certificate issuer: /CN=b561ab100017a6125316fcc613384aafbde60189 Certificate serial: 019AF276713FA7B2520AFBC37176910731DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft Manifest number: 07DD Signing time: Sat 06 Dec 2025 07:00:39 +0000 Manifest this update: Sat 06 Dec 2025 07:00:39 +0000 Manifest next update: Sun 07 Dec 2025 07:00:39 +0000 Files and hashes: 1: 54hiEVCu42nmTIhQ3bS5shMqgPg.roa (hash: Rk0IIWWSef2+X2JeCku/njRK3YOnsndfGq7YFCHBZaw=) 2: tWGrEAAXphJTFvzGEzhKr73mAYk.crl (hash: DO9pJRK044/25aTWwb1B7ZCZvMTgaxk44Hwl/7B4PV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:71:3f:a7:b2:52:0a:fb:c3:71:76:91:07:31:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b561ab100017a6125316fcc613384aafbde60189 Validity Not Before: Dec 6 07:00:39 2025 GMT Not After : Dec 7 07:00:39 2025 GMT Subject: CN=1ec689e0894e07e24bec31acfb0d3a880cd56594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4b:2a:bb:ce:c6:78:14:fd:03:9d:71:6a:3d: 4a:e6:22:ec:6f:a6:0c:49:d9:bb:e0:f3:15:8e:5e: 92:62:e3:59:fd:95:e2:f2:e2:1f:29:89:23:0f:e3: f0:f0:de:b2:a3:3d:c2:8c:b3:86:2c:d1:ec:af:ba: a6:16:5e:2d:86:f2:e5:e3:5d:b1:90:d0:4e:62:19: a6:36:dd:d0:88:75:a1:70:0a:0a:29:75:76:fa:b1: 95:b4:50:33:a6:55:a6:2c:4a:56:c1:3e:5b:33:1d: 12:a1:ab:1f:4e:01:5c:97:ce:0e:71:96:5d:f8:e3: c5:af:8c:80:c1:9c:33:db:f0:2a:a3:04:cd:f0:63: 39:1f:e4:6c:6a:3a:8a:5a:2e:27:00:b8:7e:ff:9b: 7e:9c:05:06:d6:1f:c6:99:5b:0e:ea:d9:b4:3a:be: 55:e6:4b:1c:03:97:a0:65:21:1c:91:4a:72:14:06: df:59:95:24:17:7b:ae:50:e5:7f:51:08:8b:6c:b1: 16:a7:75:e2:d3:60:34:19:b4:c4:28:8c:db:30:5a: 24:fa:fc:3d:cc:d9:05:b7:00:84:6b:e7:db:42:1c: fa:3f:8d:4a:80:84:8d:93:2f:d1:1d:a4:b1:07:7a: 07:8f:c3:1a:2b:25:05:1e:78:05:24:bc:87:5f:51: f4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C6:89:E0:89:4E:07:E2:4B:EC:31:AC:FB:0D:3A:88:0C:D5:65:94 X509v3 Authority Key Identifier: keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:22:6b:ab:52:58:11:d1:92:11:ff:f5:76:5d:37:f5:70:f2: 94:ae:2d:fc:f4:9b:02:e7:4b:c8:67:dd:41:24:25:8e:96:f6: 68:f7:06:e2:5c:0d:e1:23:63:8d:3f:e0:2a:42:84:2d:d3:57: be:6a:8d:a1:77:23:e1:46:d6:a5:d2:9a:80:5e:51:65:f4:b8: 50:52:b9:da:71:b6:31:ab:03:3c:ec:f6:94:d9:a0:0d:f2:ce: e6:62:fa:1c:fc:57:d8:74:61:52:eb:e9:c6:f1:1e:31:11:1a: a0:16:f5:33:1c:76:c7:e5:78:79:e9:fb:8b:0f:18:db:71:42: 62:32:af:4a:7a:2f:84:55:81:85:aa:84:44:3e:77:32:63:40: 0b:a9:b7:45:0d:3d:e5:33:8f:63:e0:c2:89:b1:e4:6f:97:36: a7:6e:9c:d3:3c:c8:7a:5f:74:5c:8f:c6:6e:d1:77:bb:a3:0e: 24:59:3a:da:b0:a4:67:a6:cc:79:89:5d:d9:1e:69:0c:ed:af: 96:60:57:7e:0f:5d:9d:99:77:a9:c1:a8:b5:40:32:0d:5d:3b: 8c:02:43:d9:51:71:db:2a:2e:28:a5:59:61:d7:3d:5c:be:06: 4e:36:c1:1e:ad:e3:bb:77:01:86:e0:9b:6d:13:96:cf:df:69: a9:a6:f3:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnE/p7JSCvvDcXaRBzHaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NjFhYjEwMDAxN2E2MTI1MzE2ZmNjNjEzMzg0YWFmYmRl NjAxODkwHhcNMjUxMjA2MDcwMDM5WhcNMjUxMjA3MDcwMDM5WjAzMTEwLwYDVQQD EygxZWM2ODllMDg5NGUwN2UyNGJlYzMxYWNmYjBkM2E4ODBjZDU2NTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsksqu87GeBT9A51xaj1K5iLsb6YM Sdm74PMVjl6SYuNZ/ZXi8uIfKYkjD+Pw8N6yoz3CjLOGLNHsr7qmFl4thvLl412x kNBOYhmmNt3QiHWhcAoKKXV2+rGVtFAzplWmLEpWwT5bMx0SoasfTgFcl84OcZZd +OPFr4yAwZwz2/AqowTN8GM5H+RsajqKWi4nALh+/5t+nAUG1h/GmVsO6tm0Or5V 5kscA5egZSEckUpyFAbfWZUkF3uuUOV/UQiLbLEWp3Xi02A0GbTEKIzbMFok+vw9 zNkFtwCEa+fbQhz6P41KgISNky/RHaSxB3oHj8MaKyUFHngFJLyHX1H0kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7GieCJTgfiS+wxrPsNOogM1WWUMB8GA1UdIwQY MBaAFLVhqxAAF6YSUxb8xhM4Sq+95gGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFdHckVBQVhwaEpURnZ6R0V6aEtyNzNtQVlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84MGVlOGYtODY3YS00YjI1LWFlNWQt OTJiOWRhYTAwMzc5LzEvdFdHckVBQVhwaEpURnZ6R0V6aEtyNzNtQVlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS84MGVlOGYtODY3YS00YjI1LWFlNWQtOTJiOWRhYTAwMzc5 LzEvdFdHckVBQVhwaEpURnZ6R0V6aEtyNzNtQVlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayJrq1JY EdGSEf/1dl039XDylK4t/PSbAudLyGfdQSQljpb2aPcG4lwN4SNjjT/gKkKELdNX vmqNoXcj4UbWpdKagF5RZfS4UFK52nG2MasDPOz2lNmgDfLO5mL6HPxX2HRhUuvp xvEeMREaoBb1Mxx2x+V4een7iw8Y23FCYjKvSnovhFWBhaqERD53MmNAC6m3RQ09 5TOPY+DCibHkb5c2p26c0zzIel90XI/GbtF3u6MOJFk62rCkZ6bMeYld2R5pDO2v lmBXfg9dnZl3qcGotUAyDV07jAJD2VFx2youKKVZYdc9XL4GTjbBHq3ju3cBhuCb bROWz99pqabzew== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:50 2025 by rpki-client