This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft File: tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft (raw, json) Hash identifier: x/EEzaYWQJbboVjVDcSVqVYU54TYWu+INpVojl5ObXU= Subject key identifier: 02:D0:45:DC:08:3C:4B:95:57:A0:5E:6E:CC:8A:94:CB:D3:05:73:61 Authority key identifier: B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31 Certificate issuer: /CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31 Certificate serial: 019AF12CE15D5D866A9957A384229E36E588 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft Manifest number: 175B Signing time: Sat 06 Dec 2025 01:00:41 +0000 Manifest this update: Sat 06 Dec 2025 01:00:41 +0000 Manifest next update: Sun 07 Dec 2025 01:00:41 +0000 Files and hashes: 1: tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl (hash: i/CiFXNWaqwLwkCWMFTw4dTIJzH9eemr47CQR8NavYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e1:5d:5d:86:6a:99:57:a3:84:22:9e:36:e5:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31 Validity Not Before: Dec 6 01:00:41 2025 GMT Not After : Dec 7 01:00:41 2025 GMT Subject: CN=02d045dc083c4b9557a05e6ecc8a94cbd3057361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e3:99:a3:47:32:32:4a:d3:ba:ee:e2:c1:93: db:74:3c:82:8d:52:e0:3b:81:9e:1a:e0:a8:14:fd: 0d:af:f5:09:f5:25:e7:de:04:0d:e1:24:fc:17:06: 9d:8b:64:d2:6b:9a:c3:1c:73:b6:42:98:de:f2:14: 37:f6:bc:f7:e7:f8:b3:75:25:a3:c8:2b:a6:c0:56: ae:91:07:a3:03:32:2b:39:04:b2:30:cd:61:f9:c4: 64:52:b2:53:f4:b2:ca:e6:66:f4:9c:89:36:6b:a2: e8:06:d3:37:b1:e9:1f:5f:04:2e:d2:4d:b0:f3:f9: 32:44:17:99:c6:df:20:b8:95:a4:21:49:33:ba:89: 92:6f:c4:5e:5d:2a:7e:30:bb:e1:9f:5f:78:cc:a4: 08:4d:be:87:fe:57:d3:94:98:50:e1:b5:02:3d:43: 5b:1f:03:4d:f5:f0:61:94:d4:7c:9b:27:e0:3a:0f: 7b:2a:93:bb:32:22:cf:4c:f2:18:0c:7a:97:4f:3a: 1d:0b:28:86:48:7a:e2:ea:cf:41:d5:cc:b6:22:e9: ba:80:46:3d:ef:42:6d:5b:cf:dd:d5:87:82:00:ec: d0:99:74:4f:4d:08:d8:de:1f:02:9f:d5:a0:02:2b: 30:6a:80:53:24:6d:fd:08:85:08:28:68:e9:f7:e9: f4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D0:45:DC:08:3C:4B:95:57:A0:5E:6E:CC:8A:94:CB:D3:05:73:61 X509v3 Authority Key Identifier: keyid:B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:f7:03:9a:f2:f3:67:48:4d:b8:7c:c3:6e:19:4c:c5:c0:34: 9e:12:94:20:b4:92:6e:8b:20:17:34:38:34:47:e9:b1:17:3b: 6d:0a:cd:2a:82:d5:44:16:86:a3:af:41:3e:5b:b9:3e:9b:62: ae:0f:87:6f:7b:88:d5:33:41:50:41:23:5c:6c:ea:54:5a:3c: 14:c7:3a:11:14:7f:1e:77:b3:40:23:9f:ba:cb:1f:f8:0c:a3: 68:dc:3a:79:93:62:80:94:f7:11:5e:33:98:f0:fc:7a:a8:48: c2:13:b8:cf:92:5b:fe:8d:0e:6d:70:8a:1a:72:6d:57:40:e4: 83:d0:55:e0:81:35:cc:65:d9:9d:11:35:d1:a2:ad:a6:6c:2e: e4:b1:57:66:ed:2d:5a:7f:bf:e5:6f:80:a5:64:a0:98:94:82: ca:27:c2:a4:08:eb:34:ff:35:53:51:9a:1c:35:b8:d8:79:08: 6d:94:08:ae:c6:53:b6:1d:ed:af:e9:b9:67:6e:5f:31:6e:9f: 2a:14:cb:38:55:3e:35:5e:15:d7:fc:af:73:41:08:bd:b9:db: 9f:7a:9d:2b:f9:0e:71:a7:ef:7d:07:ef:d5:3e:c9:f7:a2:c0: 1b:0a:f7:08:1d:ac:2e:8d:4b:63:49:ae:50:cb:c1:df:70:ff: aa:67:ed:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOFdXYZqmVejhCKeNuWIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NmE4OTU3Y2NjMzBhYTRlYzJkNDc4ZTUzZjM4NzI2Yzk5 NTVhMzEwHhcNMjUxMjA2MDEwMDQxWhcNMjUxMjA3MDEwMDQxWjAzMTEwLwYDVQQD EygwMmQwNDVkYzA4M2M0Yjk1NTdhMDVlNmVjYzhhOTRjYmQzMDU3MzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+OZo0cyMkrTuu7iwZPbdDyCjVLg O4GeGuCoFP0Nr/UJ9SXn3gQN4ST8Fwadi2TSa5rDHHO2Qpje8hQ39rz35/izdSWj yCumwFaukQejAzIrOQSyMM1h+cRkUrJT9LLK5mb0nIk2a6LoBtM3sekfXwQu0k2w 8/kyRBeZxt8guJWkIUkzuomSb8ReXSp+MLvhn194zKQITb6H/lfTlJhQ4bUCPUNb HwNN9fBhlNR8myfgOg97KpO7MiLPTPIYDHqXTzodCyiGSHri6s9B1cy2Ium6gEY9 70JtW8/d1YeCAOzQmXRPTQjY3h8Cn9WgAiswaoBTJG39CIUIKGjp9+n0IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALQRdwIPEuVV6BebsyKlMvTBXNhMB8GA1UdIwQY MBaAFLVqiVfMwwqk7C1HjlPzhybJlVoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFdxSlY4ekRDcVRzTFVlT1VfT0hKc21WV2pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xNmUyYWEtZGRiZC00ZWUxLWFlNjAt MDhiYzY0MGFlZDY3LzEvdFdxSlY4ekRDcVRzTFVlT1VfT0hKc21WV2pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xNmUyYWEtZGRiZC00ZWUxLWFlNjAtMDhiYzY0MGFlZDY3 LzEvdFdxSlY4ekRDcVRzTFVlT1VfT0hKc21WV2pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPcDmvLz Z0hNuHzDbhlMxcA0nhKUILSSbosgFzQ4NEfpsRc7bQrNKoLVRBaGo69BPlu5Ppti rg+Hb3uI1TNBUEEjXGzqVFo8FMc6ERR/HnezQCOfussf+AyjaNw6eZNigJT3EV4z mPD8eqhIwhO4z5Jb/o0ObXCKGnJtV0Dkg9BV4IE1zGXZnRE10aKtpmwu5LFXZu0t Wn+/5W+ApWSgmJSCyifCpAjrNP81U1GaHDW42HkIbZQIrsZTth3tr+m5Z25fMW6f KhTLOFU+NV4V1/yvc0EIvbnbn3qdK/kOcafvfQfv1T7J96LAGwr3CB2sLo1LY0mu UMvB33D/qmftog== -----END CERTIFICATE-----Generated at Sat Dec 6 07:43:53 2025 by rpki-client