This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft File: TWFl5PGBPks_XEhyBjHHzAsjdNI.mft (raw, json) Hash identifier: QotK4VVl6u3pRooyUd+tPfE3uHtsqvz3LQLAcjKyn5k= Subject key identifier: 15:B5:1D:C4:B2:F5:42:4D:A9:07:3C:F3:67:76:C6:80:BD:80:21:99 Authority key identifier: 4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2 Certificate issuer: /CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2 Certificate serial: 019AF19B6898F8873AF2C1230AA31D68E02A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft Manifest number: 0D5C Signing time: Sat 06 Dec 2025 03:01:24 +0000 Manifest this update: Sat 06 Dec 2025 03:01:24 +0000 Manifest next update: Sun 07 Dec 2025 03:01:24 +0000 Files and hashes: 1: NvJ8oLDEBqhT1H-zCdKolqnypws.roa (hash: aLhfn5rS031yK9YSuCvXO/dQvbflGZGOUFgblOZMFc4=) 2: TWFl5PGBPks_XEhyBjHHzAsjdNI.crl (hash: bL5ScuLn3v4R3TT5dA2jNwlB64sJ7bY0lkjsJkyVjLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.crl rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:68:98:f8:87:3a:f2:c1:23:0a:a3:1d:68:e0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2 Validity Not Before: Dec 6 03:01:24 2025 GMT Not After : Dec 7 03:01:24 2025 GMT Subject: CN=15b51dc4b2f5424da9073cf36776c680bd802199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8f:b9:81:df:2b:bd:52:52:16:d4:d1:a8:34: 65:97:c3:3a:c5:db:d9:32:e3:f9:50:dc:2e:af:fb: 7a:e5:67:47:c3:0e:a7:89:e1:41:8c:e5:d5:39:11: 6c:5a:f7:86:a2:b4:23:b5:c7:a1:7d:12:d9:cf:57: 33:f8:d5:9e:33:cc:59:63:9e:04:f9:e4:09:3d:0d: 64:0a:c7:09:08:19:64:cf:50:57:b5:d1:af:f3:31: 11:1c:da:8e:29:19:e7:d3:6a:07:61:95:f8:04:80: 2f:66:65:82:08:4f:11:95:68:93:eb:04:19:86:3b: dd:ca:b1:0e:6f:ec:c8:fd:d4:16:fa:ff:a5:b5:f7: a0:a4:0f:7f:05:3a:78:3e:75:c4:f4:ed:14:f7:56: 9f:a1:db:2d:9d:59:b8:4a:36:64:f8:42:f5:84:63: 5c:c8:f9:85:5d:44:53:b8:78:65:d1:e0:8e:e2:ce: e8:06:2a:6e:af:32:de:e2:ad:61:d8:ae:b3:e3:8c: 09:96:7f:e6:71:7f:79:34:f5:cd:a7:3f:b2:18:4e: 1e:57:7e:d9:a3:6d:c8:07:f8:02:7e:ae:98:00:57: 08:54:58:c3:b3:22:32:da:bb:93:1e:00:7c:26:ed: 41:6e:81:f0:01:04:f3:2a:47:a8:80:f4:42:68:2b: 3b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B5:1D:C4:B2:F5:42:4D:A9:07:3C:F3:67:76:C6:80:BD:80:21:99 X509v3 Authority Key Identifier: keyid:4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:40:b7:5e:83:83:6f:8c:f1:0d:0f:da:19:6a:f4:a2:72:0c: 68:0d:63:13:eb:0d:6c:cb:c7:e5:3c:6c:d8:a9:f7:77:29:6b: 50:1a:23:9d:f6:1e:a2:ab:50:e5:ca:69:91:07:15:be:b9:39: ff:1a:4b:c5:45:6a:e3:e5:64:b9:ee:78:93:c9:2f:36:f0:1b: 8c:f4:38:58:8c:7d:a4:31:7a:44:5d:5c:4a:6a:85:cc:e0:3d: 58:57:9c:33:1a:5c:d8:c7:e1:18:11:e6:00:a2:d7:e4:1f:3a: 58:7e:52:de:55:ab:52:ba:fa:d4:cf:cf:b2:6c:71:88:79:b8: fc:28:6c:e3:f5:0f:6b:77:71:5b:db:fc:95:80:a4:2e:ac:14: c5:19:27:0f:11:3a:d6:43:48:d8:c4:9d:96:08:43:9e:7c:de: fe:76:37:12:4e:21:e4:61:68:d0:c7:2a:ea:6b:0f:05:d5:55: 28:28:ec:1e:a5:06:a6:4b:fc:3d:56:34:c4:34:5c:dd:b0:fe: 58:27:91:51:d0:6a:92:c3:a8:6b:32:a0:8f:f9:a9:56:2b:5e: 62:e9:dc:55:4c:f1:f6:f9:41:ba:af:5f:10:c8:f0:fe:62:69: 37:34:4b:91:62:c1:ab:b5:af:70:ae:3f:73:b4:cb:d6:b9:ed: ac:7f:f6:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2iY+Ic68sEjCqMdaOAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNjE2NWU0ZjE4MTNlNGIzZjVjNDg3MjA2MzFjN2NjMGIy Mzc0ZDIwHhcNMjUxMjA2MDMwMTI0WhcNMjUxMjA3MDMwMTI0WjAzMTEwLwYDVQQD EygxNWI1MWRjNGIyZjU0MjRkYTkwNzNjZjM2Nzc2YzY4MGJkODAyMTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI+5gd8rvVJSFtTRqDRll8M6xdvZ MuP5UNwur/t65WdHww6nieFBjOXVORFsWveGorQjtcehfRLZz1cz+NWeM8xZY54E +eQJPQ1kCscJCBlkz1BXtdGv8zERHNqOKRnn02oHYZX4BIAvZmWCCE8RlWiT6wQZ hjvdyrEOb+zI/dQW+v+ltfegpA9/BTp4PnXE9O0U91afodstnVm4SjZk+EL1hGNc yPmFXURTuHhl0eCO4s7oBipurzLe4q1h2K6z44wJln/mcX95NPXNpz+yGE4eV37Z o23IB/gCfq6YAFcIVFjDsyIy2ruTHgB8Ju1BboHwAQTzKkeogPRCaCs7VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBW1HcSy9UJNqQc882d2xoC9gCGZMB8GA1UdIwQY MBaAFE1hZeTxgT5LP1xIcgYxx8wLI3TSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFdGbDVQR0JQa3NfWEVoeUJqSEh6QXNqZE5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8zYWU1NDEtNTdmNC00NDY2LTkxZDUt MDJhM2JlNDc3M2EzLzEvVFdGbDVQR0JQa3NfWEVoeUJqSEh6QXNqZE5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8zYWU1NDEtNTdmNC00NDY2LTkxZDUtMDJhM2JlNDc3M2Ez LzEvVFdGbDVQR0JQa3NfWEVoeUJqSEh6QXNqZE5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUC3XoOD b4zxDQ/aGWr0onIMaA1jE+sNbMvH5Txs2Kn3dylrUBojnfYeoqtQ5cppkQcVvrk5 /xpLxUVq4+Vkue54k8kvNvAbjPQ4WIx9pDF6RF1cSmqFzOA9WFecMxpc2MfhGBHm AKLX5B86WH5S3lWrUrr61M/PsmxxiHm4/Chs4/UPa3dxW9v8lYCkLqwUxRknDxE6 1kNI2MSdlghDnnze/nY3Ek4h5GFo0Mcq6msPBdVVKCjsHqUGpkv8PVY0xDRc3bD+ WCeRUdBqksOoazKgj/mpViteYuncVUzx9vlBuq9fEMjw/mJpNzRLkWLBq7WvcK4/ c7TL1rntrH/2zw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:17:39 2025 by rpki-client