This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft File: TrwmqzTIMZdDMt05mo5W6aqbe4U.mft (raw, json) Hash identifier: 3Lm5bJ+eUfqIRr3zxEw2aqmuwlRrBdbf4GI261R/M0A= Subject key identifier: 42:93:F1:FD:24:41:38:C4:D5:2B:9C:E1:68:FC:DA:D3:C8:BD:71:FA Authority key identifier: 4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85 Certificate issuer: /CN=4ebc26ab34c831974332dd399a8e56e9aa9b7b85 Certificate serial: 019AF0BEF806E816B0EFF1A047CBEA82E58D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft Manifest number: 9E Signing time: Fri 05 Dec 2025 23:00:38 +0000 Manifest this update: Fri 05 Dec 2025 23:00:38 +0000 Manifest next update: Sat 06 Dec 2025 23:00:38 +0000 Files and hashes: 1: TrwmqzTIMZdDMt05mo5W6aqbe4U.crl (hash: 8/ZsXMrDqfLGSCcqG9FzWWtfiv1b5YtXwH4/MqGE1eo=) 2: zYL449gEhOrSRUOWk45-5w_QwxY.asa (hash: 2I3JzyYDlWOa37LiRrfqotSTSjqIyf07yQPMZe4sNg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:f8:06:e8:16:b0:ef:f1:a0:47:cb:ea:82:e5:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ebc26ab34c831974332dd399a8e56e9aa9b7b85 Validity Not Before: Dec 5 23:00:38 2025 GMT Not After : Dec 6 23:00:38 2025 GMT Subject: CN=4293f1fd244138c4d52b9ce168fcdad3c8bd71fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e6:96:7a:bf:0d:f8:90:fc:9c:71:b1:dd:26: 5c:06:9f:22:4e:60:ed:60:8b:b2:f7:df:dc:e6:3f: ff:20:2d:b0:94:2d:32:68:6f:cc:d5:34:97:bd:9c: 79:7e:7a:cf:49:c9:c9:34:51:f7:0a:86:aa:c9:af: b5:e1:7b:33:46:52:ee:b9:ae:00:8b:a3:ea:cf:05: 8d:c4:46:17:0d:58:a9:2d:f4:20:3b:bd:89:e1:b0: f2:ff:7b:9b:b9:b7:3c:60:ca:fd:c5:db:1f:29:f1: f8:b9:25:2c:84:8b:70:f6:21:8f:8f:5d:f1:37:75: b8:0c:1e:04:aa:dc:65:d3:22:1e:e0:60:28:97:7a: e3:86:d0:29:32:e5:eb:42:b0:96:d1:f6:d0:06:81: 91:ee:54:34:3d:aa:73:52:8b:fc:a8:25:3e:82:00: 1e:cd:3e:ca:57:97:13:82:4a:33:77:81:3c:f5:b9: 3a:53:43:30:06:35:b0:0a:93:9f:3a:ea:71:6c:86: 92:10:dd:02:c5:be:ad:55:21:aa:9b:24:1f:8d:91: a2:ee:e6:5d:59:b2:d9:f1:46:01:af:73:f9:b6:7f: 85:94:26:5a:8b:25:5e:8f:15:7c:39:78:49:05:9e: 22:51:28:5e:aa:90:31:48:2a:f8:00:d7:71:16:9e: 95:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:93:F1:FD:24:41:38:C4:D5:2B:9C:E1:68:FC:DA:D3:C8:BD:71:FA X509v3 Authority Key Identifier: keyid:4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:28:d3:4a:31:2a:22:6c:4d:b4:bf:56:d1:7e:25:be:aa:1f: 44:b8:1f:5a:32:9f:b8:c2:1f:a1:95:b5:00:97:c3:d2:61:89: e7:90:6a:b8:73:45:39:dd:67:22:81:50:49:ce:36:05:0d:40: 70:74:73:c5:d6:e5:89:49:8e:51:dd:62:91:9f:f7:3c:cd:33: 5f:8e:7c:46:72:d5:e7:ac:f2:2b:20:ba:25:9d:cd:9e:30:10: ae:e7:0a:ea:b9:18:c0:2b:9a:a8:49:0b:9e:7d:5e:80:ef:7d: 9d:ad:c6:d0:9f:eb:38:21:95:82:6b:f2:9f:46:0b:19:72:78: 0f:a8:62:a3:ac:ee:3b:91:c9:99:98:db:6c:78:35:e1:e3:c2: f8:cc:fb:f2:eb:4f:90:47:83:b3:7a:43:ca:b1:0e:22:ff:98: 4e:9a:97:96:ee:b8:55:92:ce:98:ca:66:ee:2c:bb:15:a7:f0: 76:28:18:fc:12:74:c7:1e:03:f8:5f:39:f8:15:26:14:d7:13: b3:87:b5:74:22:19:ff:64:89:aa:59:68:ab:5e:92:50:01:c9: fc:89:1d:f0:d1:9a:2b:8f:5a:b6:63:e8:69:a1:2b:b5:18:0c: 58:c4:6d:97:88:f5:03:cf:2a:48:f9:07:23:29:f8:f0:bd:d8: 46:e0:e7:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvvgG6Baw7/GgR8vqguWNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYmMyNmFiMzRjODMxOTc0MzMyZGQzOTlhOGU1NmU5YWE5 YjdiODUwHhcNMjUxMjA1MjMwMDM4WhcNMjUxMjA2MjMwMDM4WjAzMTEwLwYDVQQD Eyg0MjkzZjFmZDI0NDEzOGM0ZDUyYjljZTE2OGZjZGFkM2M4YmQ3MWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+aWer8N+JD8nHGx3SZcBp8iTmDt YIuy99/c5j//IC2wlC0yaG/M1TSXvZx5fnrPScnJNFH3Coaqya+14XszRlLuua4A i6PqzwWNxEYXDVipLfQgO72J4bDy/3ububc8YMr9xdsfKfH4uSUshItw9iGPj13x N3W4DB4Eqtxl0yIe4GAol3rjhtApMuXrQrCW0fbQBoGR7lQ0PapzUov8qCU+ggAe zT7KV5cTgkozd4E89bk6U0MwBjWwCpOfOupxbIaSEN0Cxb6tVSGqmyQfjZGi7uZd WbLZ8UYBr3P5tn+FlCZaiyVejxV8OXhJBZ4iUSheqpAxSCr4ANdxFp6VfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKT8f0kQTjE1Suc4Wj82tPIvXH6MB8GA1UdIwQY MBaAFE68Jqs0yDGXQzLdOZqOVumqm3uFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHJ3bXF6VElNWmRETXQwNW1vNVc2YXFiZTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85MmM0OTctNmYyMy00Y2E5LTk5NzQt YmViNzkwZGE1YjRmLzEvVHJ3bXF6VElNWmRETXQwNW1vNVc2YXFiZTRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85MmM0OTctNmYyMy00Y2E5LTk5NzQtYmViNzkwZGE1YjRm LzEvVHJ3bXF6VElNWmRETXQwNW1vNVc2YXFiZTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCjTSjEq ImxNtL9W0X4lvqofRLgfWjKfuMIfoZW1AJfD0mGJ55BquHNFOd1nIoFQSc42BQ1A cHRzxdbliUmOUd1ikZ/3PM0zX458RnLV56zyKyC6JZ3NnjAQrucK6rkYwCuaqEkL nn1egO99na3G0J/rOCGVgmvyn0YLGXJ4D6hio6zuO5HJmZjbbHg14ePC+Mz78utP kEeDs3pDyrEOIv+YTpqXlu64VZLOmMpm7iy7FafwdigY/BJ0xx4D+F85+BUmFNcT s4e1dCIZ/2SJqlloq16SUAHJ/Ikd8NGaK49atmPoaaErtRgMWMRtl4j1A88qSPkH Iyn48L3YRuDnRw== -----END CERTIFICATE-----Generated at Sat Dec 6 05:00:45 2025 by rpki-client