This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft File: v1Tb8A10WQyJE97Isc8ITY_PaTw.mft (raw, json) Hash identifier: iCLG+3MEp0QySQHSBGFijsQVtHOsvAxOT6C+Yn9Y+NY= Subject key identifier: 84:31:D3:12:BB:97:6A:17:8B:99:B0:51:0C:37:A4:38:4A:FE:39:03 Authority key identifier: BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C Certificate issuer: /CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c Certificate serial: 019AF208FF384FE2662D5F5C2C1F031687F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft Manifest number: 059A Signing time: Sat 06 Dec 2025 05:01:07 +0000 Manifest this update: Sat 06 Dec 2025 05:01:07 +0000 Manifest next update: Sun 07 Dec 2025 05:01:07 +0000 Files and hashes: 1: v1Tb8A10WQyJE97Isc8ITY_PaTw.crl (hash: NDkYYb1s6aFFOw4WwbQTnMAug+H+kI9cQfl/pAvBGfY=) 2: wvpX23IN2w8d2-KXP6RepnCHP3g.roa (hash: hX6rM9w+qzbC1N6GJKikByFvvKJf6X+cuAHLvYTMLZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ff:38:4f:e2:66:2d:5f:5c:2c:1f:03:16:87:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c Validity Not Before: Dec 6 05:01:07 2025 GMT Not After : Dec 7 05:01:07 2025 GMT Subject: CN=8431d312bb976a178b99b0510c37a4384afe3903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9e:26:83:42:4b:21:50:9c:20:03:38:ea:7a: 16:0b:ec:b2:c9:97:c9:f6:06:ac:d5:3f:56:8a:6e: 25:81:6f:9b:f9:a6:60:25:77:96:e7:31:e1:0c:f4: f1:5e:5d:cc:f1:cc:3d:3c:8e:5f:4a:b9:b0:fa:c7: ce:f4:e2:1b:7a:62:d0:01:12:26:1f:4d:46:99:64: 2f:03:da:af:24:8d:ad:3b:e5:b6:52:a3:7e:40:05: a3:f7:1e:4b:76:86:8a:af:11:31:27:ef:60:e4:ea: a8:20:37:bf:c9:00:b0:38:28:08:d0:ac:b1:cb:37: 17:e3:f4:45:82:95:85:46:57:0f:2d:0c:9d:37:25: 75:09:26:c3:4f:75:cb:d2:3a:06:35:12:cc:50:d9: 91:fb:df:cc:e1:1d:59:dd:9b:41:db:a2:0d:ef:ba: 64:f1:f5:f9:aa:11:6a:5a:83:22:10:bc:89:2d:4b: 71:f9:8f:49:4b:f0:92:d1:bf:d0:38:a7:e3:4c:75: 0b:a9:97:87:b5:fe:43:16:68:65:f4:60:fe:3a:32: 98:25:7b:b2:7a:6f:81:3e:fd:19:c7:3a:39:60:9f: cb:84:68:95:1c:99:a8:74:7a:6a:fb:57:67:9c:4c: a5:71:0f:f0:ec:87:9f:ad:1b:75:61:4d:26:58:7d: 50:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:31:D3:12:BB:97:6A:17:8B:99:B0:51:0C:37:A4:38:4A:FE:39:03 X509v3 Authority Key Identifier: keyid:BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:02:2b:f0:9e:0e:41:f2:da:10:ce:50:3d:ae:6c:e6:e9:bc: 89:04:7e:7b:b7:5e:a9:b6:f8:79:be:e5:ab:f8:95:28:46:a6: 5b:23:4f:61:97:ca:1d:1c:68:ec:51:b2:0b:5a:56:89:7e:24: f3:65:50:cd:b2:27:fa:fc:cd:0b:f4:b5:d0:16:14:0f:24:3c: 36:22:5a:17:b9:a6:61:ad:6b:9a:1d:90:64:73:d7:64:bf:97: 22:33:6e:a5:85:fb:3e:65:d4:d0:9f:29:c7:5d:ae:5a:0c:0c: d6:44:69:03:6a:ab:e1:33:75:51:b8:60:02:6a:d5:77:fd:10: 66:9b:60:6b:26:5b:72:80:fd:93:42:a4:03:c5:92:65:7c:39: 83:6d:0e:79:44:0f:62:35:d9:9c:74:28:b2:9d:32:f6:a8:20: 2a:1e:01:fa:70:20:ce:61:f1:19:8b:93:c6:e7:97:70:39:6a: 3f:d7:8a:36:3d:fa:e4:6f:a8:c4:4a:5a:ab:e1:84:cb:98:50: ac:b8:5a:17:c4:ba:30:7f:73:ef:58:d9:2f:29:6a:a3:b6:70: 52:c9:b7:d4:ab:2b:99:07:bf:41:b9:f8:07:4e:c1:58:17:32: 8b:2a:f0:b3:01:c4:68:a9:6b:16:ad:1e:16:ec:d1:96:c2:02: 98:24:2c:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCP84T+JmLV9cLB8DFof0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNTRkYmYwMGQ3NDU5MGM4OTEzZGVjOGIxY2YwODRkOGZj ZjY5M2MwHhcNMjUxMjA2MDUwMTA3WhcNMjUxMjA3MDUwMTA3WjAzMTEwLwYDVQQD Eyg4NDMxZDMxMmJiOTc2YTE3OGI5OWIwNTEwYzM3YTQzODRhZmUzOTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup4mg0JLIVCcIAM46noWC+yyyZfJ 9gas1T9Wim4lgW+b+aZgJXeW5zHhDPTxXl3M8cw9PI5fSrmw+sfO9OIbemLQARIm H01GmWQvA9qvJI2tO+W2UqN+QAWj9x5LdoaKrxExJ+9g5OqoIDe/yQCwOCgI0Kyx yzcX4/RFgpWFRlcPLQydNyV1CSbDT3XL0joGNRLMUNmR+9/M4R1Z3ZtB26IN77pk 8fX5qhFqWoMiELyJLUtx+Y9JS/CS0b/QOKfjTHULqZeHtf5DFmhl9GD+OjKYJXuy em+BPv0Zxzo5YJ/LhGiVHJmodHpq+1dnnEylcQ/w7IefrRt1YU0mWH1QrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQx0xK7l2oXi5mwUQw3pDhK/jkDMB8GA1UdIwQY MBaAFL9U2/ANdFkMiRPeyLHPCE2Pz2k8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjFUYjhBMTBXUXlKRTk3SXNjOElUWV9QYVR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MjliMjgtM2EzOS00OWJmLThlZjIt YTQ3ZmI5YTk0ZmZkLzEvdjFUYjhBMTBXUXlKRTk3SXNjOElUWV9QYVR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81MjliMjgtM2EzOS00OWJmLThlZjItYTQ3ZmI5YTk0ZmZk LzEvdjFUYjhBMTBXUXlKRTk3SXNjOElUWV9QYVR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQIr8J4O QfLaEM5QPa5s5um8iQR+e7deqbb4eb7lq/iVKEamWyNPYZfKHRxo7FGyC1pWiX4k 82VQzbIn+vzNC/S10BYUDyQ8NiJaF7mmYa1rmh2QZHPXZL+XIjNupYX7PmXU0J8p x12uWgwM1kRpA2qr4TN1UbhgAmrVd/0QZptgayZbcoD9k0KkA8WSZXw5g20OeUQP YjXZnHQosp0y9qggKh4B+nAgzmHxGYuTxueXcDlqP9eKNj365G+oxEpaq+GEy5hQ rLhaF8S6MH9z71jZLylqo7ZwUsm31KsrmQe/Qbn4B07BWBcyiyrwswHEaKlrFq0e FuzRlsICmCQsTg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:37 2025 by rpki-client