This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft File: tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft (raw, json) Hash identifier: LeteTv+b/aWI9SLvH38NfAM4fmWKieEJYfcS4FhFBtE= Subject key identifier: 9E:BD:CE:3D:8D:18:9C:09:39:18:9E:3D:D0:76:B1:49:E5:FB:95:16 Authority key identifier: B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64 Certificate issuer: /CN=b473167913af73e4f6374170c4f945f8b0dd7d64 Certificate serial: 019AF23FA64B4606E00722B502EA7460A3BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft Manifest number: 0DC6 Signing time: Sat 06 Dec 2025 06:00:48 +0000 Manifest this update: Sat 06 Dec 2025 06:00:48 +0000 Manifest next update: Sun 07 Dec 2025 06:00:48 +0000 Files and hashes: 1: J0ZgfR5U6lkaUqXFqkaevK5zE7Y.roa (hash: /1drMWi8WHeYZMzayKCKRAt2zHYV3mIjXjepj/lhD8k=) 2: tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl (hash: BGxVgDitsiy2D7nQsdEnveN2BRqmajpUolcGaXm8DZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a6:4b:46:06:e0:07:22:b5:02:ea:74:60:a3:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b473167913af73e4f6374170c4f945f8b0dd7d64 Validity Not Before: Dec 6 06:00:48 2025 GMT Not After : Dec 7 06:00:48 2025 GMT Subject: CN=9ebdce3d8d189c0939189e3dd076b149e5fb9516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:92:af:19:a5:49:c1:f2:03:2f:8e:f7:74:fb: 33:ac:33:d9:cf:68:11:f3:43:53:b9:ec:14:70:0b: aa:14:db:dd:02:70:c3:0c:c6:9b:a0:a0:64:85:fc: 03:c0:57:19:0a:8f:f0:4c:6b:e5:3f:14:db:6e:b2: da:f2:d8:e4:da:73:10:5a:fe:23:32:1c:de:23:a1: b0:c9:66:64:c9:a7:fa:16:0c:aa:07:cc:86:e6:48: 9a:bd:c7:66:01:8e:ee:6b:e9:e1:9e:2f:59:7b:2c: f1:1d:93:9e:5d:c6:56:52:5d:4d:b5:e1:a6:8e:a4: 02:81:ea:69:31:ba:0f:2b:53:8c:89:df:14:ef:1d: 19:cb:cc:7a:23:31:6f:3a:8f:7e:6b:a0:dd:b6:08: 86:f3:96:23:6c:56:5b:6a:9a:de:98:2e:fb:0e:93: 83:c1:ca:97:23:b9:ea:e1:af:50:c3:5b:09:3c:2b: ab:0c:56:55:97:25:8c:7d:30:f1:c5:0b:02:a6:66: b2:d4:51:6f:38:6f:0f:97:e6:1b:87:50:fb:83:45: d6:1b:9a:f2:2c:06:5d:51:db:87:57:45:3f:27:3a: c0:a9:60:35:4a:69:60:e9:56:83:bb:f9:01:65:b0: 95:b7:a1:76:10:8e:43:d7:72:0a:68:30:a1:d2:73: eb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BD:CE:3D:8D:18:9C:09:39:18:9E:3D:D0:76:B1:49:E5:FB:95:16 X509v3 Authority Key Identifier: keyid:B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:a1:36:b6:0f:5e:6e:57:84:ec:dd:94:a6:bf:a6:4d:a5:67: 09:32:99:cd:4e:96:67:b4:49:a8:d2:53:c8:8a:c4:73:96:74: e2:7d:13:78:b2:6c:b7:49:62:06:b6:47:f3:5a:7d:04:74:a8: ef:ae:1d:01:8d:4c:f8:75:59:1a:41:7a:d9:7b:5f:2a:8f:28: 98:87:30:2a:45:57:c4:0a:0c:1f:3f:31:08:ee:ff:01:18:63: 69:67:d2:aa:b3:6a:2c:f9:c0:dd:72:4f:bf:49:d8:d3:f2:38: c2:65:10:33:72:66:0b:46:6a:a2:ec:fe:1d:5f:bb:3a:c8:1e: 0a:2b:6f:11:44:26:78:a0:a9:b5:49:f6:07:43:05:35:51:34: 20:39:72:ae:9f:65:dc:c3:db:9b:5b:95:ef:fa:23:96:4e:19: 38:eb:98:74:5a:b5:12:9c:09:66:4a:f8:b4:e5:c7:48:8b:f1: ce:96:86:54:2f:78:ba:ed:f2:30:1e:4a:57:10:4c:4d:43:ed: 28:53:a5:9a:4e:68:ab:ed:fc:ec:a5:8e:5e:4d:09:94:a6:d0: d5:c3:9f:7d:ed:dc:9d:eb:e2:71:64:80:29:e8:cc:6f:32:69: 0d:37:b5:21:e8:60:ef:e8:a4:90:24:98:c2:24:ed:55:0a:c7: 72:41:7e:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6ZLRgbgByK1Aup0YKO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NzMxNjc5MTNhZjczZTRmNjM3NDE3MGM0Zjk0NWY4YjBk ZDdkNjQwHhcNMjUxMjA2MDYwMDQ4WhcNMjUxMjA3MDYwMDQ4WjAzMTEwLwYDVQQD Eyg5ZWJkY2UzZDhkMTg5YzA5MzkxODllM2RkMDc2YjE0OWU1ZmI5NTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5KvGaVJwfIDL473dPszrDPZz2gR 80NTuewUcAuqFNvdAnDDDMaboKBkhfwDwFcZCo/wTGvlPxTbbrLa8tjk2nMQWv4j MhzeI6GwyWZkyaf6FgyqB8yG5kiavcdmAY7ua+nhni9ZeyzxHZOeXcZWUl1NteGm jqQCgeppMboPK1OMid8U7x0Zy8x6IzFvOo9+a6DdtgiG85YjbFZbapremC77DpOD wcqXI7nq4a9Qw1sJPCurDFZVlyWMfTDxxQsCpmay1FFvOG8Pl+Ybh1D7g0XWG5ry LAZdUduHV0U/JzrAqWA1Smlg6VaDu/kBZbCVt6F2EI5D13IKaDCh0nPrywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ69zj2NGJwJORiePdB2sUnl+5UWMB8GA1UdIwQY MBaAFLRzFnkTr3Pk9jdBcMT5Rfiw3X1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEhNV2VST3ZjLVQyTjBGd3hQbEYtTERkZldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lNTZkNDEtNWJiOC00YTkxLWE0ZjAt Zjg2ZGNhYWQ4YzQ5LzEvdEhNV2VST3ZjLVQyTjBGd3hQbEYtTERkZldRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9lNTZkNDEtNWJiOC00YTkxLWE0ZjAtZjg2ZGNhYWQ4YzQ5 LzEvdEhNV2VST3ZjLVQyTjBGd3hQbEYtTERkZldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKE2tg9e bleE7N2Upr+mTaVnCTKZzU6WZ7RJqNJTyIrEc5Z04n0TeLJst0liBrZH81p9BHSo 764dAY1M+HVZGkF62XtfKo8omIcwKkVXxAoMHz8xCO7/ARhjaWfSqrNqLPnA3XJP v0nY0/I4wmUQM3JmC0Zqouz+HV+7OsgeCitvEUQmeKCptUn2B0MFNVE0IDlyrp9l 3MPbm1uV7/ojlk4ZOOuYdFq1EpwJZkr4tOXHSIvxzpaGVC94uu3yMB5KVxBMTUPt KFOlmk5oq+387KWOXk0JlKbQ1cOffe3cnevicWSAKejMbzJpDTe1Iehg7+ikkCSY wiTtVQrHckF+tg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:56 2025 by rpki-client