This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft File: v1Tb8A10WQyJE97Isc8ITY_PaTw.mft (raw, json) Hash identifier: I9bJ1kWaK7zqAi9gI7uLaDeDc0loXDNfckzTyDn94MI= Subject key identifier: BD:DE:21:59:F0:9C:7C:42:6B:DB:50:D1:23:97:CB:8E:3B:A5:FE:31 Authority key identifier: BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C Certificate issuer: /CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c Certificate serial: 019B2BF880C74B08A8158848FB4C6F072328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft Manifest number: 05B8 Signing time: Wed 17 Dec 2025 11:01:04 +0000 Manifest this update: Wed 17 Dec 2025 11:01:04 +0000 Manifest next update: Thu 18 Dec 2025 11:01:04 +0000 Files and hashes: 1: v1Tb8A10WQyJE97Isc8ITY_PaTw.crl (hash: 19lPO7KdmQPD7yQwBnZjPouvDtoAGSkQGq5cEMjltMs=) 2: wvpX23IN2w8d2-KXP6RepnCHP3g.roa (hash: hX6rM9w+qzbC1N6GJKikByFvvKJf6X+cuAHLvYTMLZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:80:c7:4b:08:a8:15:88:48:fb:4c:6f:07:23:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c Validity Not Before: Dec 17 11:01:04 2025 GMT Not After : Dec 18 11:01:04 2025 GMT Subject: CN=bdde2159f09c7c426bdb50d12397cb8e3ba5fe31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e7:8b:f8:f2:9d:5e:a4:17:07:79:d3:92:28: f0:d5:67:52:40:2e:99:45:79:fc:85:79:c0:6d:58: f7:38:13:b0:bf:97:a3:ed:63:81:77:31:e3:db:e5: c9:03:c6:79:3d:91:14:86:f0:86:89:3b:5e:06:cb: 3c:41:d6:33:d1:8f:83:c0:8a:29:9f:cf:74:2e:b6: 53:5a:63:58:4f:67:66:e7:9a:33:6e:d0:d9:0b:5e: a2:c6:79:c3:a1:c9:b8:5a:90:d2:21:c8:1e:07:98: bf:f2:5f:29:bd:44:41:a8:bd:c4:64:f2:37:a0:c6: a1:67:b4:8e:68:25:00:7d:36:c7:b0:cb:61:a4:03: f9:2b:2c:d7:61:fc:5e:f3:04:ab:21:5b:84:9f:b2: 3b:fd:84:c6:c9:4a:66:eb:79:1d:95:87:fd:76:ff: 70:a6:bd:30:e2:e1:ae:0a:49:f8:20:7d:a4:0d:50: cd:1f:e1:df:fe:86:99:54:cc:48:8d:39:ae:4a:d9: e1:51:c8:59:5c:e8:1a:06:c3:ec:69:1d:33:59:fb: 83:9a:44:c6:7f:e6:7c:3b:76:88:8d:10:70:4e:7a: 28:c7:44:19:c0:ec:dc:a3:80:a6:cc:ad:76:15:80: a3:ea:e6:be:cb:0e:68:70:d0:58:0d:b2:68:70:9f: ef:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DE:21:59:F0:9C:7C:42:6B:DB:50:D1:23:97:CB:8E:3B:A5:FE:31 X509v3 Authority Key Identifier: keyid:BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:6b:07:2a:88:20:25:7e:33:d6:3b:53:d1:79:1b:4c:af:3f: 51:5e:96:e5:9c:7e:1b:db:7e:1c:1c:6d:e2:16:70:07:bc:70: 81:6c:2e:8a:3f:94:f4:e0:4d:81:da:99:da:2f:24:3c:1c:23: 7c:66:a1:de:a6:a2:20:e7:05:8e:5c:6d:40:60:e9:b4:cb:5d: e6:06:3f:42:0d:1b:d4:7b:2e:71:0a:37:cc:56:ff:d1:f0:4f: 19:8b:a5:6f:dc:02:02:75:6a:ea:16:07:3a:97:2e:ed:a3:b0: 2c:09:16:e1:62:dc:72:58:4f:5c:57:86:c4:ea:5b:97:bf:e9: 81:61:dc:b9:e0:c9:db:8a:f9:da:00:94:aa:49:26:d3:15:db: c8:e3:da:61:98:b3:d5:33:6e:ac:c5:27:60:da:a7:d2:ec:b7: 9c:78:a9:1a:7d:9d:fd:8d:96:c9:ac:c5:98:15:0a:8b:61:bc: 65:6b:6e:58:2f:76:8b:92:71:b8:54:f4:cb:ad:ba:83:ab:c0: b9:32:6c:2b:da:34:55:36:e1:1c:44:08:8c:1c:ec:35:f9:05: d5:2e:b6:95:22:d2:e4:cc:89:a1:a0:f1:69:e6:25:f3:2e:d7: 79:92:38:fa:40:e5:eb:06:09:59:28:90:b6:b7:c2:d7:ad:8c: cc:d7:4d:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+IDHSwioFYhI+0xvByMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNTRkYmYwMGQ3NDU5MGM4OTEzZGVjOGIxY2YwODRkOGZj ZjY5M2MwHhcNMjUxMjE3MTEwMTA0WhcNMjUxMjE4MTEwMTA0WjAzMTEwLwYDVQQD EyhiZGRlMjE1OWYwOWM3YzQyNmJkYjUwZDEyMzk3Y2I4ZTNiYTVmZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtueL+PKdXqQXB3nTkijw1WdSQC6Z RXn8hXnAbVj3OBOwv5ej7WOBdzHj2+XJA8Z5PZEUhvCGiTteBss8QdYz0Y+DwIop n890LrZTWmNYT2dm55ozbtDZC16ixnnDocm4WpDSIcgeB5i/8l8pvURBqL3EZPI3 oMahZ7SOaCUAfTbHsMthpAP5KyzXYfxe8wSrIVuEn7I7/YTGyUpm63kdlYf9dv9w pr0w4uGuCkn4IH2kDVDNH+Hf/oaZVMxIjTmuStnhUchZXOgaBsPsaR0zWfuDmkTG f+Z8O3aIjRBwTnoox0QZwOzco4CmzK12FYCj6ua+yw5ocNBYDbJocJ/vqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3eIVnwnHxCa9tQ0SOXy447pf4xMB8GA1UdIwQY MBaAFL9U2/ANdFkMiRPeyLHPCE2Pz2k8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjFUYjhBMTBXUXlKRTk3SXNjOElUWV9QYVR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MjliMjgtM2EzOS00OWJmLThlZjIt YTQ3ZmI5YTk0ZmZkLzEvdjFUYjhBMTBXUXlKRTk3SXNjOElUWV9QYVR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81MjliMjgtM2EzOS00OWJmLThlZjItYTQ3ZmI5YTk0ZmZk LzEvdjFUYjhBMTBXUXlKRTk3SXNjOElUWV9QYVR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmsHKogg JX4z1jtT0XkbTK8/UV6W5Zx+G9t+HBxt4hZwB7xwgWwuij+U9OBNgdqZ2i8kPBwj fGah3qaiIOcFjlxtQGDptMtd5gY/Qg0b1HsucQo3zFb/0fBPGYulb9wCAnVq6hYH Opcu7aOwLAkW4WLcclhPXFeGxOpbl7/pgWHcueDJ24r52gCUqkkm0xXbyOPaYZiz 1TNurMUnYNqn0uy3nHipGn2d/Y2WyazFmBUKi2G8ZWtuWC92i5JxuFT0y626g6vA uTJsK9o0VTbhHEQIjBzsNfkF1S62lSLS5MyJoaDxaeYl8y7XeZI4+kDl6wYJWSiQ trfC162MzNdNfg== -----END CERTIFICATE-----Generated at Wed Dec 17 17:55:27 2025 by rpki-client