This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft File: tW-ivPsboZnQpll_uIlUwKbFEtU.mft (raw, json) Hash identifier: BhLa2F0v6o0hW23O71rHVUDK7C8XEw4QJtOu42AGSGU= Subject key identifier: BB:B8:6C:55:61:5F:C9:2A:6B:C7:66:6E:5E:29:35:F4:69:2C:E3:89 Authority key identifier: B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5 Certificate issuer: /CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5 Certificate serial: 019AF12E9E7E1271694A3D4289F59E684581 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft Manifest number: 0C53 Signing time: Sat 06 Dec 2025 01:02:35 +0000 Manifest this update: Sat 06 Dec 2025 01:02:35 +0000 Manifest next update: Sun 07 Dec 2025 01:02:35 +0000 Files and hashes: 1: iJgFNTZ7IhnRGcD9bd_FqPtqDEU.roa (hash: IcZI5thj3Qr91vjQiVj5vIexM3iUd5S8V76AbgBrsvg=) 2: tW-ivPsboZnQpll_uIlUwKbFEtU.crl (hash: 1Jlux6OAC36egdvYVmAT8EfMYCIs/XvlFw14KwzeKM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:9e:7e:12:71:69:4a:3d:42:89:f5:9e:68:45:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5 Validity Not Before: Dec 6 01:02:35 2025 GMT Not After : Dec 7 01:02:35 2025 GMT Subject: CN=bbb86c55615fc92a6bc7666e5e2935f4692ce389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:46:dd:71:41:e8:32:65:41:67:3c:8e:09:34: 47:f2:3f:d9:00:cd:c8:c0:fb:b7:0b:dc:62:1f:24: 0e:53:23:26:86:55:52:d1:e1:e5:2a:6d:0f:83:2d: e7:1d:f7:95:5e:75:ff:c6:14:52:a2:f7:7e:be:a0: d6:01:c2:c7:34:7f:80:f6:7e:37:6e:47:71:37:2c: 3c:9f:77:fb:e5:2e:ff:4d:a0:fb:f7:c3:42:58:48: a8:5a:98:25:2c:cd:eb:c9:7d:18:84:80:38:c7:1f: 64:20:77:3b:db:6d:3c:b2:1d:03:eb:ae:75:e5:61: f7:dc:de:52:5a:a3:fd:04:38:1c:1b:7f:63:ef:c6: 82:00:38:6e:e8:4d:ad:c5:e1:99:f1:2c:af:73:69: ad:0f:2f:bf:ca:50:a2:a7:96:a7:65:b9:34:13:7e: db:9c:52:9f:ab:f5:a8:25:07:24:e6:32:5a:10:b5: 0f:3f:a9:d5:92:97:48:24:75:09:6f:5e:6b:0a:71: ef:40:af:aa:8d:3f:4b:2a:09:0d:e7:22:05:c2:22: f5:f8:2a:49:b8:f9:aa:6a:5d:f3:f2:25:1a:a0:e7: 08:db:0c:2d:17:ee:b5:71:cd:aa:28:a2:eb:e5:4b: bc:dc:99:f4:52:30:9c:62:57:37:c7:fc:2a:6d:71: ba:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B8:6C:55:61:5F:C9:2A:6B:C7:66:6E:5E:29:35:F4:69:2C:E3:89 X509v3 Authority Key Identifier: keyid:B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:af:a3:e6:fa:21:c5:6b:c9:4b:10:7b:1a:5d:d6:8f:2c:5b: fe:78:77:5d:49:6d:31:76:90:65:cf:ef:c4:21:7c:9c:b4:a1: 0c:d4:2e:d1:50:68:65:da:a3:53:3d:8a:0c:4b:7f:92:8c:aa: 02:a9:1f:9d:ee:be:cb:f1:e9:52:e6:54:aa:b6:22:25:43:09: 8c:b4:3e:5a:7a:5a:5d:fe:b1:13:59:78:22:8b:f5:7a:ab:d2: ad:a8:62:2a:7c:b0:13:84:5d:65:dc:be:02:fa:6b:35:dd:ea: 4f:b7:57:7f:66:a9:a7:68:b5:42:e8:95:3b:22:2d:1d:89:f9: 2a:ff:5e:ae:b9:d2:df:8b:72:ed:d6:45:83:bc:13:31:c1:6f: 80:bd:88:82:52:27:91:52:a0:12:c3:45:d9:4e:71:75:58:34: 9b:7a:83:d6:9a:01:d1:31:60:60:5d:57:56:21:f3:2c:9d:c4: 77:f2:f4:61:63:b9:0a:5a:4b:24:e8:22:22:74:10:ff:2d:df: ca:47:f9:a0:3d:f7:34:23:38:12:46:26:d3:7f:de:9e:a1:a2: 07:a6:3a:07:1a:79:05:04:d7:87:96:e6:e1:6a:ac:83:83:af: aa:7d:02:be:37:00:b1:7b:34:40:e3:44:1f:ed:03:91:8a:72: b8:fc:e9:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLp5+EnFpSj1CifWeaEWBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NmZhMmJjZmIxYmExOTlkMGE2NTk3ZmI4ODk1NGMwYTZj NTEyZDUwHhcNMjUxMjA2MDEwMjM1WhcNMjUxMjA3MDEwMjM1WjAzMTEwLwYDVQQD EyhiYmI4NmM1NTYxNWZjOTJhNmJjNzY2NmU1ZTI5MzVmNDY5MmNlMzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkbdcUHoMmVBZzyOCTRH8j/ZAM3I wPu3C9xiHyQOUyMmhlVS0eHlKm0Pgy3nHfeVXnX/xhRSovd+vqDWAcLHNH+A9n43 bkdxNyw8n3f75S7/TaD798NCWEioWpglLM3ryX0YhIA4xx9kIHc72208sh0D6651 5WH33N5SWqP9BDgcG39j78aCADhu6E2txeGZ8Syvc2mtDy+/ylCip5anZbk0E37b nFKfq/WoJQck5jJaELUPP6nVkpdIJHUJb15rCnHvQK+qjT9LKgkN5yIFwiL1+CpJ uPmqal3z8iUaoOcI2wwtF+61cc2qKKLr5Uu83Jn0UjCcYlc3x/wqbXG6bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLu4bFVhX8kqa8dmbl4pNfRpLOOJMB8GA1UdIwQY MBaAFLVvorz7G6GZ0KZZf7iJVMCmxRLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFctaXZQc2JvWm5RcGxsX3VJbFV3S2JGRXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MTQ2ZDgtMzFiMC00MDIyLWFmN2Ut ZmE1YjIxOTlhNzM5LzEvdFctaXZQc2JvWm5RcGxsX3VJbFV3S2JGRXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MTQ2ZDgtMzFiMC00MDIyLWFmN2UtZmE1YjIxOTlhNzM5 LzEvdFctaXZQc2JvWm5RcGxsX3VJbFV3S2JGRXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACK+j5voh xWvJSxB7Gl3Wjyxb/nh3XUltMXaQZc/vxCF8nLShDNQu0VBoZdqjUz2KDEt/koyq Aqkfne6+y/HpUuZUqrYiJUMJjLQ+WnpaXf6xE1l4Iov1eqvSrahiKnywE4RdZdy+ AvprNd3qT7dXf2app2i1QuiVOyItHYn5Kv9errnS34ty7dZFg7wTMcFvgL2IglIn kVKgEsNF2U5xdVg0m3qD1poB0TFgYF1XViHzLJ3Ed/L0YWO5ClpLJOgiInQQ/y3f ykf5oD33NCM4EkYm03/enqGiB6Y6Bxp5BQTXh5bm4Wqsg4Ovqn0CvjcAsXs0QONE H+0DkYpyuPzpjA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:23 2025 by rpki-client