This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft File: TVP4paBndE6P43yXwcxLiH7axyA.mft (raw, json) Hash identifier: g/yGuxW3MCiKbBU6o4YbzvcfNG8O1b66XHZapYwTtBM= Subject key identifier: 03:9D:30:06:98:95:16:39:7B:73:28:11:41:1D:C4:0D:72:38:71:8D Authority key identifier: 4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20 Certificate issuer: /CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720 Certificate serial: 019B3343DC2E9E965DEB7609C4A24B421541 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft Manifest number: 16C3 Signing time: Thu 18 Dec 2025 21:00:43 +0000 Manifest this update: Thu 18 Dec 2025 21:00:43 +0000 Manifest next update: Fri 19 Dec 2025 21:00:43 +0000 Files and hashes: 1: TVP4paBndE6P43yXwcxLiH7axyA.crl (hash: el2G00EsPvYQ74qfZXiniDZOSyTcuQ8bazDzzAtYeuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:dc:2e:9e:96:5d:eb:76:09:c4:a2:4b:42:15:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720 Validity Not Before: Dec 18 21:00:43 2025 GMT Not After : Dec 19 21:00:43 2025 GMT Subject: CN=039d3006989516397b732811411dc40d7238718d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:37:7a:77:29:63:ce:76:0d:53:02:fe:c8:65: d6:28:16:87:21:c1:6e:b3:92:db:ff:63:26:93:20: 41:3a:82:6d:31:72:2e:a6:3d:d0:fd:35:fc:09:2c: 33:9e:f7:66:f0:f0:2f:c7:d4:00:32:80:4a:83:80: 31:5a:75:4a:f2:c3:cf:a4:f3:3c:4e:b2:10:f1:f8: f3:9d:d1:f3:21:e3:af:27:06:23:0a:bd:e3:e0:12: 02:fd:55:9b:d5:4d:b1:9c:76:f6:54:df:89:dc:34: 6e:3d:7a:6c:cb:8c:38:60:f4:37:46:a8:03:57:51: ab:4a:53:52:c3:4d:5c:6f:a5:b3:4c:4f:d2:1a:31: 57:a1:3a:90:6f:8d:ba:f9:98:40:81:95:ff:f6:30: c9:b7:d9:50:21:0e:aa:7c:ca:48:3b:48:57:19:54: 15:cb:0a:8e:84:5d:03:d3:fd:62:48:e8:3f:04:3e: 5b:9e:7c:70:3b:3e:1a:61:56:6f:03:ab:3e:bf:0d: ff:23:ae:8c:74:31:a8:0f:86:30:03:93:f0:84:d4: fb:84:50:91:1e:fc:eb:4b:31:0e:12:a2:29:e3:2c: c4:97:8e:b6:8a:e1:38:3c:54:91:d4:c0:49:f4:38: e9:48:69:a3:bd:4d:d6:fe:0a:88:01:8e:55:60:de: 74:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9D:30:06:98:95:16:39:7B:73:28:11:41:1D:C4:0D:72:38:71:8D X509v3 Authority Key Identifier: keyid:4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:1e:b8:0d:f2:e6:32:0d:8f:97:e1:bf:70:5d:20:fc:87:ef: 7c:6a:d1:33:00:c8:e5:1b:b6:7d:16:ac:a3:a6:6d:ed:2e:68: d4:10:4a:c0:c3:d9:d6:9d:39:e6:31:8c:b9:d2:fc:51:98:fc: b2:ee:c7:5c:27:30:d9:27:c1:e5:fc:03:af:7a:93:fb:36:b8: 93:2b:a9:2c:b2:4a:d2:90:5c:ef:a4:de:f4:1f:61:1d:3a:92: aa:1f:2a:6e:a8:0a:f2:4d:e5:04:6c:8f:ce:ea:40:f2:33:ed: f4:37:f1:7d:87:88:5c:f1:da:aa:c2:7d:6b:dd:17:03:5d:e6: 83:86:dd:c1:03:af:d0:0b:73:56:c1:a3:2a:a8:17:ad:af:cb: 20:07:3b:79:90:64:a2:c0:a5:39:c8:1c:d3:9d:fb:7a:9e:27: 4b:55:19:59:ea:7d:00:0f:9f:4c:ea:16:11:17:ba:74:31:9c: f9:21:55:d8:bf:ea:70:c7:0c:ef:25:b7:9d:7d:82:a4:f9:ac: dd:a1:d8:c5:ae:63:01:9c:1c:81:0b:4d:a2:88:13:77:3b:db: d7:fe:92:d5:c2:96:70:59:8e:3b:59:c5:9e:40:0a:66:d4:1b: d2:fb:8f:8e:95:e4:4b:49:59:3f:20:72:80:a7:61:0c:e5:09: 78:b7:1e:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ9wunpZd63YJxKJLQhVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNTNmOGE1YTA2Nzc0NGU4ZmUzN2M5N2MxY2M0Yjg4N2Vk YWM3MjAwHhcNMjUxMjE4MjEwMDQzWhcNMjUxMjE5MjEwMDQzWjAzMTEwLwYDVQQD EygwMzlkMzAwNjk4OTUxNjM5N2I3MzI4MTE0MTFkYzQwZDcyMzg3MThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jd6dyljznYNUwL+yGXWKBaHIcFu s5Lb/2MmkyBBOoJtMXIupj3Q/TX8CSwznvdm8PAvx9QAMoBKg4AxWnVK8sPPpPM8 TrIQ8fjzndHzIeOvJwYjCr3j4BIC/VWb1U2xnHb2VN+J3DRuPXpsy4w4YPQ3RqgD V1GrSlNSw01cb6WzTE/SGjFXoTqQb426+ZhAgZX/9jDJt9lQIQ6qfMpIO0hXGVQV ywqOhF0D0/1iSOg/BD5bnnxwOz4aYVZvA6s+vw3/I66MdDGoD4YwA5PwhNT7hFCR HvzrSzEOEqIp4yzEl462iuE4PFSR1MBJ9DjpSGmjvU3W/gqIAY5VYN50zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOdMAaYlRY5e3MoEUEdxA1yOHGNMB8GA1UdIwQY MBaAFE1T+KWgZ3ROj+N8l8HMS4h+2scgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFZQNHBhQm5kRTZQNDN5WHdjeExpSDdheHlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83MTA0ZDQtNzQxNC00OWQyLTliODQt OGIxYTA5M2M4YzVjLzEvVFZQNHBhQm5kRTZQNDN5WHdjeExpSDdheHlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS83MTA0ZDQtNzQxNC00OWQyLTliODQtOGIxYTA5M2M4YzVj LzEvVFZQNHBhQm5kRTZQNDN5WHdjeExpSDdheHlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeh64DfLm Mg2Pl+G/cF0g/IfvfGrRMwDI5Ru2fRaso6Zt7S5o1BBKwMPZ1p055jGMudL8UZj8 su7HXCcw2SfB5fwDr3qT+za4kyupLLJK0pBc76Te9B9hHTqSqh8qbqgK8k3lBGyP zupA8jPt9DfxfYeIXPHaqsJ9a90XA13mg4bdwQOv0AtzVsGjKqgXra/LIAc7eZBk osClOcgc0537ep4nS1UZWep9AA+fTOoWERe6dDGc+SFV2L/qcMcM7yW3nX2CpPms 3aHYxa5jAZwcgQtNoogTdzvb1/6S1cKWcFmOO1nFnkAKZtQb0vuPjpXkS0lZPyBy gKdhDOUJeLcexQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:23:36 2025 by rpki-client