This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft File: tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft (raw, json) Hash identifier: 4oVgyp2EosKKAdpswlHGYdG48gwgEI8uZDNqqdOgYTg= Subject key identifier: E3:59:FE:FD:DD:AF:AA:27:67:C3:A9:51:50:AE:67:7E:A3:F0:C2:23 Authority key identifier: B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64 Certificate issuer: /CN=b473167913af73e4f6374170c4f945f8b0dd7d64 Certificate serial: 019B22876D8182190866FE14859B411FD813 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft Manifest number: 0DDF Signing time: Mon 15 Dec 2025 15:00:59 +0000 Manifest this update: Mon 15 Dec 2025 15:00:59 +0000 Manifest next update: Tue 16 Dec 2025 15:00:59 +0000 Files and hashes: 1: J0ZgfR5U6lkaUqXFqkaevK5zE7Y.roa (hash: /1drMWi8WHeYZMzayKCKRAt2zHYV3mIjXjepj/lhD8k=) 2: tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl (hash: BI+lODoQzc9079ghtEc4ac/bARbNengKAxpwkfYzPRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:6d:81:82:19:08:66:fe:14:85:9b:41:1f:d8:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b473167913af73e4f6374170c4f945f8b0dd7d64 Validity Not Before: Dec 15 15:00:59 2025 GMT Not After : Dec 16 15:00:59 2025 GMT Subject: CN=e359fefdddafaa2767c3a95150ae677ea3f0c223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:89:b7:1d:6b:95:4f:f1:77:41:bb:58:8f:d2: 14:a5:33:48:bd:b0:3c:f1:06:9a:46:52:f9:48:e2: 4e:90:dd:e8:dc:c3:3a:51:a6:d2:02:cf:48:6e:bd: fa:77:32:07:30:43:6e:fd:29:c4:18:8a:87:e5:af: 47:f6:c8:b5:dc:cd:42:9f:99:56:92:bd:13:5b:e5: 85:75:3c:96:e3:87:9c:4b:49:44:55:6a:b4:48:16: dc:94:14:cd:99:2b:1f:5b:e5:40:1f:96:10:aa:11: 7c:f5:24:17:9a:1b:0d:bc:6e:ce:81:58:95:e7:5f: 4b:b1:4b:3c:fa:30:dc:19:ae:0a:f0:97:a1:83:a0: bd:ed:b6:0f:91:b8:ff:ab:88:05:d7:2f:a6:09:dc: ed:44:35:01:c2:14:b1:92:12:a0:78:96:1b:1c:f1: a0:41:27:a2:11:76:ab:06:f5:55:11:9a:53:42:cf: 68:b0:55:3f:2c:1d:19:f5:91:be:6e:f6:4b:23:82: dd:d1:cb:f2:a7:2d:dc:5c:cc:3d:2a:a6:13:20:a5: 96:da:6d:ba:a1:ab:1f:9f:d4:7b:1d:27:d4:89:ae: b6:7a:3d:01:38:43:2c:41:2a:41:a8:32:7f:1b:f5: 38:a2:5b:e9:24:12:a0:ce:76:a8:d9:ac:0c:9b:6c: d7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:59:FE:FD:DD:AF:AA:27:67:C3:A9:51:50:AE:67:7E:A3:F0:C2:23 X509v3 Authority Key Identifier: keyid:B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:7b:a1:03:54:b3:e5:98:9f:38:6f:56:bf:0d:14:8d:d0:d1: 05:b2:c8:1a:fa:bd:91:5a:8d:b5:6d:d7:dd:07:21:23:ab:1c: 08:d0:bb:d9:e8:8c:ab:d8:73:d0:9a:2b:02:df:81:50:df:c8: b4:6a:93:70:a3:90:9a:8e:13:2b:a6:77:42:46:95:2b:aa:76: ee:50:97:52:a9:71:c4:bc:a6:86:73:9c:c0:82:01:12:bb:0f: a4:05:ac:8c:1d:f2:ab:a2:54:d1:64:46:c2:a4:ca:8d:a0:ee: f3:d3:26:dd:bc:d0:c6:86:4f:45:09:cb:5d:16:21:a3:0d:c4: 15:72:5c:ad:8a:7d:c1:22:07:18:0c:0f:83:c6:19:82:6d:e1: 19:60:92:1a:b1:5c:7d:9b:f0:82:81:e1:f5:54:8e:c3:a6:83: 05:28:44:71:a7:44:84:8c:26:0e:ff:92:fa:4a:36:a0:e9:78: 97:b3:20:ae:cf:a9:2c:60:bf:5c:f4:bd:e0:a9:5f:9d:81:7e: cf:9d:7f:f1:49:d2:01:52:46:04:62:dd:46:a4:12:9a:6e:3e: 31:3c:b7:37:60:d2:73:54:1c:0a:2a:03:23:da:a8:ef:4a:91: 19:d3:8b:9a:bd:a8:17:c6:97:36:a1:6f:06:08:8d:df:2a:a3: 33:42:8b:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih22BghkIZv4UhZtBH9gTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NzMxNjc5MTNhZjczZTRmNjM3NDE3MGM0Zjk0NWY4YjBk ZDdkNjQwHhcNMjUxMjE1MTUwMDU5WhcNMjUxMjE2MTUwMDU5WjAzMTEwLwYDVQQD EyhlMzU5ZmVmZGRkYWZhYTI3NjdjM2E5NTE1MGFlNjc3ZWEzZjBjMjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ym3HWuVT/F3QbtYj9IUpTNIvbA8 8QaaRlL5SOJOkN3o3MM6UabSAs9Ibr36dzIHMENu/SnEGIqH5a9H9si13M1Cn5lW kr0TW+WFdTyW44ecS0lEVWq0SBbclBTNmSsfW+VAH5YQqhF89SQXmhsNvG7OgViV 519LsUs8+jDcGa4K8Jehg6C97bYPkbj/q4gF1y+mCdztRDUBwhSxkhKgeJYbHPGg QSeiEXarBvVVEZpTQs9osFU/LB0Z9ZG+bvZLI4Ld0cvypy3cXMw9KqYTIKWW2m26 oasfn9R7HSfUia62ej0BOEMsQSpBqDJ/G/U4olvpJBKgznao2awMm2zX1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONZ/v3dr6onZ8OpUVCuZ36j8MIjMB8GA1UdIwQY MBaAFLRzFnkTr3Pk9jdBcMT5Rfiw3X1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEhNV2VST3ZjLVQyTjBGd3hQbEYtTERkZldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lNTZkNDEtNWJiOC00YTkxLWE0ZjAt Zjg2ZGNhYWQ4YzQ5LzEvdEhNV2VST3ZjLVQyTjBGd3hQbEYtTERkZldRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9lNTZkNDEtNWJiOC00YTkxLWE0ZjAtZjg2ZGNhYWQ4YzQ5 LzEvdEhNV2VST3ZjLVQyTjBGd3hQbEYtTERkZldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd3uhA1Sz 5ZifOG9Wvw0UjdDRBbLIGvq9kVqNtW3X3QchI6scCNC72eiMq9hz0JorAt+BUN/I tGqTcKOQmo4TK6Z3QkaVK6p27lCXUqlxxLymhnOcwIIBErsPpAWsjB3yq6JU0WRG wqTKjaDu89Mm3bzQxoZPRQnLXRYhow3EFXJcrYp9wSIHGAwPg8YZgm3hGWCSGrFc fZvwgoHh9VSOw6aDBShEcadEhIwmDv+S+ko2oOl4l7Mgrs+pLGC/XPS94KlfnYF+ z51/8UnSAVJGBGLdRqQSmm4+MTy3N2DSc1QcCioDI9qo70qRGdOLmr2oF8aXNqFv BgiN3yqjM0KL7w== -----END CERTIFICATE-----Generated at Mon Dec 15 20:13:40 2025 by rpki-client