This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft File: tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft (raw, json) Hash identifier: omvrWpwj7U4/W75OnCsfRHT9iT/iMSwpkNoy9RLHj8M= Subject key identifier: 50:6E:52:3A:D4:41:A5:2E:1D:49:E8:76:55:17:02:38:9B:04:41:F0 Authority key identifier: B5:64:58:57:6B:A2:39:21:DD:79:2D:C0:05:2F:8F:82:86:7D:62:7B Certificate issuer: /CN=b56458576ba23921dd792dc0052f8f82867d627b Certificate serial: 019AF1D1DFE74DCB4D1B12154C548019B514 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft Manifest number: 1435 Signing time: Sat 06 Dec 2025 04:00:54 +0000 Manifest this update: Sat 06 Dec 2025 04:00:54 +0000 Manifest next update: Sun 07 Dec 2025 04:00:54 +0000 Files and hashes: 1: E7d_b0PflOY76P_uC3WM3xFdSrc.roa (hash: n1OXhuOXloaQfjIyVDut9dhlUxv9V7SaFL6+utmdzjI=) 2: tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl (hash: Jn4VjfMYwjSOs3sKUSP1SU9/Ssny87ZkhNZm+JYGvPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:df:e7:4d:cb:4d:1b:12:15:4c:54:80:19:b5:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56458576ba23921dd792dc0052f8f82867d627b Validity Not Before: Dec 6 04:00:54 2025 GMT Not After : Dec 7 04:00:54 2025 GMT Subject: CN=506e523ad441a52e1d49e876551702389b0441f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:37:59:57:f3:cf:90:2a:a0:f3:ba:e3:02:2c: bd:45:e0:99:95:e7:7b:bb:d1:85:91:3c:87:1a:38: 94:59:6d:f3:7f:8b:71:92:35:60:f7:15:9d:ca:47: 6b:d5:a5:9b:09:b9:49:3d:3e:16:b7:fb:a5:b3:51: 14:12:80:e7:d7:53:22:2a:da:c2:48:fa:19:09:4e: ce:2b:5a:e0:08:bb:3a:10:97:2a:0a:49:20:c1:1c: 25:df:16:ae:a5:55:7a:a1:c8:3d:15:e8:3a:73:ee: a2:40:23:ed:2c:b1:7c:8a:9a:02:89:eb:3a:9a:7d: a4:ec:f7:ba:1e:b1:af:4b:d7:5b:58:c8:b2:6e:87: fb:7f:50:ff:98:93:da:18:a8:06:79:a0:fc:b7:2e: 27:b3:30:dc:8f:41:38:fa:03:f3:05:19:7e:b3:a8: 7c:7a:b4:71:aa:49:92:98:9e:67:71:30:a7:fc:09: 32:fd:d1:59:21:50:78:df:cb:03:c4:54:89:c8:8c: 57:a4:60:b0:11:39:c8:42:d6:15:b9:40:8c:60:2e: 63:8b:0a:25:b7:98:ef:c6:5e:fa:68:40:70:98:5e: 50:43:d8:ca:f4:2a:0b:2d:8b:36:7c:49:32:98:94: d7:e0:ec:7b:13:9a:18:ab:21:4c:85:e0:84:7e:ce: 72:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6E:52:3A:D4:41:A5:2E:1D:49:E8:76:55:17:02:38:9B:04:41:F0 X509v3 Authority Key Identifier: keyid:B5:64:58:57:6B:A2:39:21:DD:79:2D:C0:05:2F:8F:82:86:7D:62:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:76:bc:57:21:a9:ea:d8:25:e1:da:37:63:d6:25:21:95:66: 22:55:32:61:fa:96:78:05:af:b5:a5:62:10:39:41:f4:9c:c7: 2b:9e:75:89:25:ae:7a:4c:e7:18:de:1f:0f:e5:d4:24:5f:15: d2:c7:54:87:74:db:22:95:71:45:95:6e:7f:b3:3c:7f:dd:81: 68:3e:22:25:68:e3:c5:0e:f6:9e:f4:e2:59:39:22:bf:91:94: 0d:0e:2d:5b:d0:21:6b:60:7e:45:0a:61:4d:65:ac:51:ca:d2: 8c:5d:e0:e9:8c:51:89:dd:36:b5:46:81:dd:c8:20:3c:2f:95: fd:92:f8:23:ff:69:c7:f5:78:b5:88:63:9e:38:ae:65:29:89: a3:e0:b7:be:b3:64:b9:5e:fc:84:6b:79:19:f4:e1:92:27:db: da:fb:3b:91:0b:88:b3:63:d3:ce:5b:4d:a7:d1:2b:ef:34:76: fc:e0:b7:2e:08:c5:41:e5:4d:24:48:b2:81:82:ee:eb:13:c1: ce:3a:e2:49:cc:81:b3:ca:95:7f:9c:20:ba:69:7d:34:4a:3f: ff:32:71:cf:3c:a6:1b:0a:a8:56:a0:bd:ef:22:f7:a0:7b:02: 11:58:d2:2b:e5:e6:84:a5:dc:42:a4:06:78:06:b1:53:a4:66: 38:d3:e8:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0d/nTctNGxIVTFSAGbUUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NjQ1ODU3NmJhMjM5MjFkZDc5MmRjMDA1MmY4ZjgyODY3 ZDYyN2IwHhcNMjUxMjA2MDQwMDU0WhcNMjUxMjA3MDQwMDU0WjAzMTEwLwYDVQQD Eyg1MDZlNTIzYWQ0NDFhNTJlMWQ0OWU4NzY1NTE3MDIzODliMDQ0MWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzdZV/PPkCqg87rjAiy9ReCZled7 u9GFkTyHGjiUWW3zf4txkjVg9xWdykdr1aWbCblJPT4Wt/uls1EUEoDn11MiKtrC SPoZCU7OK1rgCLs6EJcqCkkgwRwl3xaupVV6ocg9Feg6c+6iQCPtLLF8ipoCies6 mn2k7Pe6HrGvS9dbWMiybof7f1D/mJPaGKgGeaD8ty4nszDcj0E4+gPzBRl+s6h8 erRxqkmSmJ5ncTCn/Aky/dFZIVB438sDxFSJyIxXpGCwETnIQtYVuUCMYC5jiwol t5jvxl76aEBwmF5QQ9jK9CoLLYs2fEkymJTX4Ox7E5oYqyFMheCEfs5y5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBuUjrUQaUuHUnodlUXAjibBEHwMB8GA1UdIwQY MBaAFLVkWFdrojkh3XktwAUvj4KGfWJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFdSWVYydWlPU0hkZVMzQUJTLVBnb1o5WW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9kNDkzY2MtMzI1NC00ZDk1LWJkZWUt MWEyM2UxNWYzYjg0LzEvdFdSWVYydWlPU0hkZVMzQUJTLVBnb1o5WW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9kNDkzY2MtMzI1NC00ZDk1LWJkZWUtMWEyM2UxNWYzYjg0 LzEvdFdSWVYydWlPU0hkZVMzQUJTLVBnb1o5WW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHa8VyGp 6tgl4do3Y9YlIZVmIlUyYfqWeAWvtaViEDlB9JzHK551iSWuekznGN4fD+XUJF8V 0sdUh3TbIpVxRZVuf7M8f92BaD4iJWjjxQ72nvTiWTkiv5GUDQ4tW9Aha2B+RQph TWWsUcrSjF3g6YxRid02tUaB3cggPC+V/ZL4I/9px/V4tYhjnjiuZSmJo+C3vrNk uV78hGt5GfThkifb2vs7kQuIs2PTzltNp9Er7zR2/OC3LgjFQeVNJEiygYLu6xPB zjriScyBs8qVf5wguml9NEo//zJxzzymGwqoVqC97yL3oHsCEVjSK+XmhKXcQqQG eAaxU6RmONPo0g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:18 2025 by rpki-client