This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft File: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft (raw, json) Hash identifier: XIAtXPPbdrGSr/9k/gtlpmRzSr+LPZ95x39WTxmLhXI= Subject key identifier: A5:06:81:36:8A:7C:25:D8:78:2D:17:1E:12:0C:74:B9:A2:2D:A4:68 Authority key identifier: B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3 Certificate issuer: /CN=b57c0fafa650dd94a3b5581739f63d88efa414f3 Certificate serial: 019AF1D1E3466A699E2AAD1A6A8D8B745F20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft Manifest number: 0E7F Signing time: Sat 06 Dec 2025 04:00:55 +0000 Manifest this update: Sat 06 Dec 2025 04:00:55 +0000 Manifest next update: Sun 07 Dec 2025 04:00:55 +0000 Files and hashes: 1: WKXMRCbOe7azjRi4M3txfig4AbQ.roa (hash: misoRXqMC74XUm7CVVuJWe90Pkw4I/1hXuzduVdNB/4=) 2: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl (hash: E+nkUmDD8G8JxCoaNAg0603dxaQ4QHeYmzCyg5QuMfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e3:46:6a:69:9e:2a:ad:1a:6a:8d:8b:74:5f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b57c0fafa650dd94a3b5581739f63d88efa414f3 Validity Not Before: Dec 6 04:00:55 2025 GMT Not After : Dec 7 04:00:55 2025 GMT Subject: CN=a50681368a7c25d8782d171e120c74b9a22da468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:72:a5:74:87:4f:4b:e9:a6:47:39:81:f6:63: 82:92:79:00:b4:0b:55:a1:c3:29:38:f6:82:ea:29: aa:39:82:5a:b5:2c:b4:83:4a:b8:2c:da:88:6d:9f: 76:2c:33:69:7f:99:65:01:32:5e:45:f4:d2:bb:f5: e3:18:a4:6d:dd:6f:7c:c9:b6:da:af:09:b3:6c:f4: 4b:3f:a0:14:bb:78:be:85:bf:b3:f6:80:27:84:ae: 4c:e3:1d:41:f3:63:7e:2e:6d:cd:90:e6:5b:40:eb: ae:50:be:b3:8c:4d:94:e8:20:b1:3f:08:e6:7c:a9: 58:c5:04:2a:b2:7a:c6:c7:b5:6d:d9:4e:56:87:cf: 67:bf:6a:ad:3e:de:0d:34:ae:9c:4f:74:c8:b8:57: 77:a4:d1:4d:8b:78:f4:9c:90:05:b3:42:ff:92:da: eb:0f:d6:8d:6e:2a:d7:b0:d4:69:d3:77:aa:9f:2e: cc:83:50:87:dc:8f:c6:5d:84:7d:bc:b1:aa:c6:d9: 2a:ef:88:56:bf:aa:98:75:13:08:7b:7e:32:7d:f8: 4d:6d:4f:33:14:30:0f:23:5a:96:ea:f7:4c:80:26: 59:5a:ed:fc:3f:99:d0:aa:99:28:8c:4f:4e:b7:74: e6:3c:81:bd:9c:64:7a:ec:8f:ad:59:3a:2f:f7:e1: 75:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:06:81:36:8A:7C:25:D8:78:2D:17:1E:12:0C:74:B9:A2:2D:A4:68 X509v3 Authority Key Identifier: keyid:B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:b0:c8:39:82:b9:cf:f6:f4:da:3c:fa:40:36:a3:1a:ae:a6: 83:c4:66:7b:b1:d6:9f:b0:ec:77:25:5e:3b:33:5e:76:51:a6: 08:df:f2:97:8d:0c:c6:61:1c:d5:0d:8e:5c:ff:84:7c:47:ff: 2b:23:81:81:46:9f:dd:b8:c6:ce:b2:8a:87:a0:60:6d:dd:dd: 7a:0e:31:11:68:3e:1c:c7:a3:56:e1:ad:de:a9:93:10:7d:cf: 2b:f7:ba:b7:8f:be:b1:20:39:31:01:52:b8:9d:31:e1:ef:33: 74:ba:c8:9b:f4:eb:08:e4:a6:b5:11:8e:c5:9d:3d:f5:0f:73: 2a:e5:3e:78:47:90:10:61:a7:1f:8d:f9:f7:e1:f4:30:fc:84: f0:34:6c:99:d6:27:20:4e:6b:3b:14:4b:d8:e3:1c:9b:55:a1: d7:7f:c1:36:06:8a:7d:f7:16:a6:d3:fe:fc:ed:55:7d:20:ad: 25:d1:7f:03:64:44:91:c0:35:c0:e2:b9:9f:0f:1b:ad:cc:d3: eb:ef:44:4b:7f:70:ed:a1:2c:0d:df:f0:1e:51:48:2d:ce:b0: b6:ce:57:4f:bc:ac:0f:ca:e9:ef:64:37:8b:9c:4c:ca:06:36: ab:be:36:42:21:34:eb:00:f6:a9:05:1a:6a:21:82:c0:58:3c: c2:1d:12:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eNGammeKq0aao2LdF8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1N2MwZmFmYTY1MGRkOTRhM2I1NTgxNzM5ZjYzZDg4ZWZh NDE0ZjMwHhcNMjUxMjA2MDQwMDU1WhcNMjUxMjA3MDQwMDU1WjAzMTEwLwYDVQQD EyhhNTA2ODEzNjhhN2MyNWQ4NzgyZDE3MWUxMjBjNzRiOWEyMmRhNDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHKldIdPS+mmRzmB9mOCknkAtAtV ocMpOPaC6imqOYJatSy0g0q4LNqIbZ92LDNpf5llATJeRfTSu/XjGKRt3W98ybba rwmzbPRLP6AUu3i+hb+z9oAnhK5M4x1B82N+Lm3NkOZbQOuuUL6zjE2U6CCxPwjm fKlYxQQqsnrGx7Vt2U5Wh89nv2qtPt4NNK6cT3TIuFd3pNFNi3j0nJAFs0L/ktrr D9aNbirXsNRp03eqny7Mg1CH3I/GXYR9vLGqxtkq74hWv6qYdRMIe34yffhNbU8z FDAPI1qW6vdMgCZZWu38P5nQqpkojE9Ot3TmPIG9nGR67I+tWTov9+F12QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUGgTaKfCXYeC0XHhIMdLmiLaRoMB8GA1UdIwQY MBaAFLV8D6+mUN2Uo7VYFzn2PYjvpBTzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFh3UHI2WlEzWlNqdFZnWE9mWTlpTy1rRlBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS84YzAyZmYtYTljNS00Nzg4LWFlOGIt MThiOWE4NTEwNTM5LzEvdFh3UHI2WlEzWlNqdFZnWE9mWTlpTy1rRlBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS84YzAyZmYtYTljNS00Nzg4LWFlOGItMThiOWE4NTEwNTM5 LzEvdFh3UHI2WlEzWlNqdFZnWE9mWTlpTy1rRlBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu7DIOYK5 z/b02jz6QDajGq6mg8Rme7HWn7DsdyVeOzNedlGmCN/yl40MxmEc1Q2OXP+EfEf/ KyOBgUaf3bjGzrKKh6Bgbd3deg4xEWg+HMejVuGt3qmTEH3PK/e6t4++sSA5MQFS uJ0x4e8zdLrIm/TrCOSmtRGOxZ099Q9zKuU+eEeQEGGnH4359+H0MPyE8DRsmdYn IE5rOxRL2OMcm1Wh13/BNgaKffcWptP+/O1VfSCtJdF/A2REkcA1wOK5nw8brczT 6+9ES39w7aEsDd/wHlFILc6wts5XT7ysD8rp72Q3i5xMygY2q742QiE06wD2qQUa aiGCwFg8wh0SXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:03:53 2025 by rpki-client