This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft File: tWKscBwU00uy5EdexRFSpAydPTw.mft (raw, json) Hash identifier: QUL967k9F3aeVE+83lOxDlQXG7wZogJ+CQoJZyBKWGw= Subject key identifier: 09:F1:5A:1B:87:EA:9E:EB:4C:F5:39:4C:3A:D2:61:94:40:E3:37:8C Authority key identifier: B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C Certificate issuer: /CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c Certificate serial: 019AF20994BA6232C921733E820C1C05FAAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft Manifest number: 0848 Signing time: Sat 06 Dec 2025 05:01:45 +0000 Manifest this update: Sat 06 Dec 2025 05:01:45 +0000 Manifest next update: Sun 07 Dec 2025 05:01:45 +0000 Files and hashes: 1: J4oSsE5CcGCiSDFTMI_mpkGNGGI.roa (hash: 8nhOBC3zyNvV6fERAZhV/f/NVIfJdmZ3Tk+7d8j6/i8=) 2: tWKscBwU00uy5EdexRFSpAydPTw.crl (hash: 0KiQgBYc6DTuXBTTUzs8rzP0kJ2OcBSJB+lS8YNhvBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:94:ba:62:32:c9:21:73:3e:82:0c:1c:05:fa:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c Validity Not Before: Dec 6 05:01:45 2025 GMT Not After : Dec 7 05:01:45 2025 GMT Subject: CN=09f15a1b87ea9eeb4cf5394c3ad2619440e3378c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:68:cd:99:0f:76:f6:cf:18:37:32:a0:d1:ea: 66:70:71:52:a6:fa:ac:d8:d2:d6:2b:ac:a5:e5:5a: 27:f2:d2:69:0e:c0:6d:52:5b:b0:5c:70:c2:e4:fa: be:2f:ea:b7:92:7c:90:a8:a9:3a:73:2e:b1:ab:7e: 13:81:73:84:18:de:0c:71:c4:56:91:d4:79:c8:7a: 45:ba:61:29:2b:69:79:94:78:14:f5:97:db:39:66: 6d:80:fb:bd:2d:bf:16:b4:7e:3f:3d:b8:2e:18:92: cb:e7:72:a8:40:d9:0d:b7:48:7b:9a:4f:64:a3:75: d2:c4:37:f5:59:21:ad:92:c6:e4:55:89:be:54:8c: 69:8b:29:46:4e:ec:f1:5f:a9:41:8c:f1:a6:24:9a: cd:7c:79:e3:3c:1e:eb:3e:2c:95:39:ad:ab:e5:d1: 13:c9:f2:ad:10:4e:66:a1:a9:88:08:6d:66:9d:f3: f5:e9:ac:3d:7a:84:f4:1e:4f:92:d8:e6:3a:ab:98: fa:93:c2:c4:6d:64:9e:3b:9b:ca:26:52:b6:f5:98: b2:fa:ae:cf:7e:35:5f:45:03:31:f0:01:78:f6:cd: d1:66:91:b3:3c:c4:6c:71:ad:e9:c5:93:98:68:97: eb:5f:d1:26:92:9a:0f:36:94:04:79:cf:75:03:55: ae:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F1:5A:1B:87:EA:9E:EB:4C:F5:39:4C:3A:D2:61:94:40:E3:37:8C X509v3 Authority Key Identifier: keyid:B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b0:b9:80:56:99:be:9f:57:99:60:2d:92:87:50:05:f0:70: ac:e7:24:15:64:90:01:bb:fc:5d:d6:4c:60:9c:62:9c:b6:51: ee:b3:ef:d9:8d:fd:19:a4:3b:e8:8b:ad:69:b3:18:53:7f:f7: f5:5b:aa:3f:2d:06:60:c7:26:b7:58:b7:22:6f:a6:d8:75:df: 1e:9c:24:2f:f7:a1:ca:0a:2f:19:5d:fa:d9:e0:a7:b4:0b:b6: ad:91:52:34:8a:b1:cc:1f:57:ed:bb:b9:16:e8:88:8e:27:b7: 2d:48:9e:21:63:1c:2e:2d:93:4e:be:eb:2b:83:8a:ef:32:b0: cd:37:b9:37:97:86:90:1f:d8:72:b0:d5:00:3f:a4:30:67:10: 34:24:6d:f2:47:64:38:09:b2:76:66:7f:36:29:ea:f7:f4:de: d0:ac:b1:b9:49:16:4b:5f:96:79:74:8b:2b:2d:23:eb:e5:68: be:33:85:af:ea:3e:e7:a5:76:f1:4a:cb:a6:9d:af:f2:50:ae: d7:77:c5:3c:0d:ee:56:d6:86:ef:e5:a1:e9:e8:5f:d3:0d:5f: 63:fa:c1:7e:b1:41:4c:7a:c2:f8:cd:10:e3:ff:9f:7f:f2:a2: 2c:e6:0d:ff:23:ce:e1:ff:4d:ae:4e:f3:8f:2a:37:60:78:8e: a1:5a:95:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZS6YjLJIXM+ggwcBfqrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NjJhYzcwMWMxNGQzNGJiMmU0NDc1ZWM1MTE1MmE0MGM5 ZDNkM2MwHhcNMjUxMjA2MDUwMTQ1WhcNMjUxMjA3MDUwMTQ1WjAzMTEwLwYDVQQD EygwOWYxNWExYjg3ZWE5ZWViNGNmNTM5NGMzYWQyNjE5NDQwZTMzNzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2jNmQ929s8YNzKg0epmcHFSpvqs 2NLWK6yl5Von8tJpDsBtUluwXHDC5Pq+L+q3knyQqKk6cy6xq34TgXOEGN4MccRW kdR5yHpFumEpK2l5lHgU9ZfbOWZtgPu9Lb8WtH4/PbguGJLL53KoQNkNt0h7mk9k o3XSxDf1WSGtksbkVYm+VIxpiylGTuzxX6lBjPGmJJrNfHnjPB7rPiyVOa2r5dET yfKtEE5moamICG1mnfP16aw9eoT0Hk+S2OY6q5j6k8LEbWSeO5vKJlK29Ziy+q7P fjVfRQMx8AF49s3RZpGzPMRsca3pxZOYaJfrX9EmkpoPNpQEec91A1WuLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnxWhuH6p7rTPU5TDrSYZRA4zeMMB8GA1UdIwQY MBaAFLVirHAcFNNLsuRHXsURUqQMnT08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFdLc2NCd1UwMHV5NUVkZXhSRlNwQXlkUFR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84ZjAxYjMtMjU3Yi00OGQ1LTgyZTIt MDk3MzI0ZGQ5ZWM4LzEvdFdLc2NCd1UwMHV5NUVkZXhSRlNwQXlkUFR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84ZjAxYjMtMjU3Yi00OGQ1LTgyZTItMDk3MzI0ZGQ5ZWM4 LzEvdFdLc2NCd1UwMHV5NUVkZXhSRlNwQXlkUFR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbC5gFaZ vp9XmWAtkodQBfBwrOckFWSQAbv8XdZMYJxinLZR7rPv2Y39GaQ76IutabMYU3/3 9VuqPy0GYMcmt1i3Im+m2HXfHpwkL/ehygovGV362eCntAu2rZFSNIqxzB9X7bu5 FuiIjie3LUieIWMcLi2TTr7rK4OK7zKwzTe5N5eGkB/YcrDVAD+kMGcQNCRt8kdk OAmydmZ/Ninq9/Te0KyxuUkWS1+WeXSLKy0j6+VovjOFr+o+56V28UrLpp2v8lCu 13fFPA3uVtaG7+Wh6ehf0w1fY/rBfrFBTHrC+M0Q4/+ff/KiLOYN/yPO4f9Nrk7z jyo3YHiOoVqVWw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:22 2025 by rpki-client