This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft File: tRm7YH6Ot267nMsgIsxkbDzOC2A.mft (raw, json) Hash identifier: gaCkdP3pbNWKvM2EH2ttQ6OeYm3M9u4/4ktTZPcrKbU= Subject key identifier: 65:BB:99:E4:50:05:03:66:A7:6E:E7:0D:89:2F:C3:C6:5F:D8:22:50 Authority key identifier: B5:19:BB:60:7E:8E:B7:6E:BB:9C:CB:20:22:CC:64:6C:3C:CE:0B:60 Certificate issuer: /CN=b519bb607e8eb76ebb9ccb2022cc646c3cce0b60 Certificate serial: 019B34C44C3F67C83530D129F90814CBB0C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft Manifest number: 1780 Signing time: Fri 19 Dec 2025 04:00:38 +0000 Manifest this update: Fri 19 Dec 2025 04:00:38 +0000 Manifest next update: Sat 20 Dec 2025 04:00:38 +0000 Files and hashes: 1: tRm7YH6Ot267nMsgIsxkbDzOC2A.crl (hash: LruDC28qqu9R4AdTuH2EMyC8ufK7nDlzNZ4itrBzZgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:4c:3f:67:c8:35:30:d1:29:f9:08:14:cb:b0:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b519bb607e8eb76ebb9ccb2022cc646c3cce0b60 Validity Not Before: Dec 19 04:00:38 2025 GMT Not After : Dec 20 04:00:38 2025 GMT Subject: CN=65bb99e450050366a76ee70d892fc3c65fd82250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:44:68:93:ed:bd:8f:7c:e7:a9:67:89:66:d6: d8:82:cd:3c:39:9d:54:6c:ba:78:8e:69:bb:64:70: 07:0c:50:5a:88:6e:70:2c:6b:78:9b:63:df:8f:84: 82:ef:7e:ac:46:e8:7a:4c:4f:40:83:1c:52:af:3d: d9:39:9d:cc:c5:dd:7b:74:b5:8a:9c:5d:63:cf:0d: 1f:5e:4b:2a:99:3e:c5:9e:75:8a:1e:80:32:2d:ee: 42:6f:dc:9e:26:02:96:08:d0:68:54:bf:a4:0f:81: cf:23:dc:1b:4f:d0:0e:9f:13:d4:24:76:d3:f8:19: c6:62:ac:58:9b:41:9a:5b:ef:65:fd:95:42:01:48: 3b:77:04:c6:f9:2c:8e:7a:b1:78:3d:97:53:82:78: 8b:fd:32:cd:87:0c:30:ac:36:d5:70:2b:bc:45:d0: 2b:04:0a:18:1e:d6:9a:a6:de:30:42:fe:44:71:01: 4c:05:49:6f:bc:d9:67:7f:ea:4d:5e:6e:68:99:18: 0d:17:7b:98:1c:ef:ec:13:b5:79:cf:40:1a:9d:5a: 67:21:e2:b3:80:d0:c5:5a:04:54:61:e7:fb:8f:22: 86:1f:91:68:3c:b1:ae:13:84:02:4a:47:5f:e5:1a: 39:e9:4d:dd:b1:f1:c3:44:43:28:ca:97:ae:bf:b7: 35:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BB:99:E4:50:05:03:66:A7:6E:E7:0D:89:2F:C3:C6:5F:D8:22:50 X509v3 Authority Key Identifier: keyid:B5:19:BB:60:7E:8E:B7:6E:BB:9C:CB:20:22:CC:64:6C:3C:CE:0B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ff:8e:41:6c:cd:2b:7b:54:80:3f:a7:1e:88:35:0c:b1:aa: b5:ba:0d:87:f1:7b:e7:21:e0:54:3a:d8:e7:23:b8:05:2b:2a: 7c:d2:64:b5:f8:92:76:c1:76:d2:58:8a:04:d6:af:92:ee:7f: ee:e8:bd:23:71:84:89:26:46:b9:fe:ad:d4:76:be:82:25:68: e8:7f:2c:3b:2e:e0:be:74:c6:22:d3:d0:3e:61:62:bb:4b:af: 96:66:ce:50:b8:4b:57:9b:c6:d3:ce:94:57:04:7d:7a:68:71: 81:e1:38:74:80:f2:1d:9f:53:17:52:98:fa:98:5b:37:2d:dd: 46:18:54:57:9e:12:40:1e:6b:1a:4f:87:19:04:2e:2c:71:5d: 05:8e:18:8c:8a:52:a8:d2:df:6d:8f:a9:b0:60:e5:a7:13:e4: 1e:70:61:57:41:b0:7e:f1:81:6f:23:c8:31:0e:27:4f:ae:55: 42:56:de:4c:cc:c8:d8:f9:fe:cb:80:40:f4:51:d2:2b:07:9c: f5:b0:09:b2:ca:d2:e2:bd:c2:09:dc:38:6f:ef:41:f0:ef:7a: 05:29:a2:00:57:1f:f8:ce:8b:fa:4b:51:b8:f0:ff:b3:38:89: 61:51:a0:be:c1:67:ec:fe:40:e9:8c:12:b4:d3:01:fa:aa:23: fd:7c:41:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xEw/Z8g1MNEp+QgUy7DJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MTliYjYwN2U4ZWI3NmViYjljY2IyMDIyY2M2NDZjM2Nj ZTBiNjAwHhcNMjUxMjE5MDQwMDM4WhcNMjUxMjIwMDQwMDM4WjAzMTEwLwYDVQQD Eyg2NWJiOTllNDUwMDUwMzY2YTc2ZWU3MGQ4OTJmYzNjNjVmZDgyMjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0Rok+29j3znqWeJZtbYgs08OZ1U bLp4jmm7ZHAHDFBaiG5wLGt4m2Pfj4SC736sRuh6TE9AgxxSrz3ZOZ3Mxd17dLWK nF1jzw0fXksqmT7FnnWKHoAyLe5Cb9yeJgKWCNBoVL+kD4HPI9wbT9AOnxPUJHbT +BnGYqxYm0GaW+9l/ZVCAUg7dwTG+SyOerF4PZdTgniL/TLNhwwwrDbVcCu8RdAr BAoYHtaapt4wQv5EcQFMBUlvvNlnf+pNXm5omRgNF3uYHO/sE7V5z0AanVpnIeKz gNDFWgRUYef7jyKGH5FoPLGuE4QCSkdf5Ro56U3dsfHDREMoypeuv7c18wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGW7meRQBQNmp27nDYkvw8Zf2CJQMB8GA1UdIwQY MBaAFLUZu2B+jrduu5zLICLMZGw8zgtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFJtN1lINk90MjY3bk1zZ0lzeGtiRHpPQzJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZTUwNDktODU2ZC00YzA3LTg1NTYt ZTE4MTg0ZTgwMjU4LzEvdFJtN1lINk90MjY3bk1zZ0lzeGtiRHpPQzJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ZTUwNDktODU2ZC00YzA3LTg1NTYtZTE4MTg0ZTgwMjU4 LzEvdFJtN1lINk90MjY3bk1zZ0lzeGtiRHpPQzJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIf+OQWzN K3tUgD+nHog1DLGqtboNh/F75yHgVDrY5yO4BSsqfNJktfiSdsF20liKBNavku5/ 7ui9I3GEiSZGuf6t1Ha+giVo6H8sOy7gvnTGItPQPmFiu0uvlmbOULhLV5vG086U VwR9emhxgeE4dIDyHZ9TF1KY+phbNy3dRhhUV54SQB5rGk+HGQQuLHFdBY4YjIpS qNLfbY+psGDlpxPkHnBhV0GwfvGBbyPIMQ4nT65VQlbeTMzI2Pn+y4BA9FHSKwec 9bAJssrS4r3CCdw4b+9B8O96BSmiAFcf+M6L+ktRuPD/sziJYVGgvsFn7P5A6YwS tNMB+qoj/XxBpA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:05:32 2025 by rpki-client