This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft File: TsRiBLT4hZI6pKl4btWsr7HACd4.mft (raw, json) Hash identifier: Pc3Y1auhl9Lpgu92iLK19JJr5gjnI8tc6qIUCbAhpzY= Subject key identifier: 19:B1:D8:1F:33:05:EB:AE:05:9B:E1:DD:8F:74:4A:79:93:2B:59:EB Authority key identifier: 4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE Certificate issuer: /CN=4ec46204b4f885923aa4a9786ed5acafb1c009de Certificate serial: 019B3231266D5B1B8A2F22A9CB91D53ABB77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft Manifest number: 0C52 Signing time: Thu 18 Dec 2025 16:00:40 +0000 Manifest this update: Thu 18 Dec 2025 16:00:40 +0000 Manifest next update: Fri 19 Dec 2025 16:00:40 +0000 Files and hashes: 1: TsRiBLT4hZI6pKl4btWsr7HACd4.crl (hash: gbr3LAG827Q6ANb9Ayj/1FuZ+ruP4BZaNLe6CugryGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:26:6d:5b:1b:8a:2f:22:a9:cb:91:d5:3a:bb:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ec46204b4f885923aa4a9786ed5acafb1c009de Validity Not Before: Dec 18 16:00:40 2025 GMT Not After : Dec 19 16:00:40 2025 GMT Subject: CN=19b1d81f3305ebae059be1dd8f744a79932b59eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:50:15:1d:1d:fa:ed:63:4e:c3:40:2a:6b:e9: 33:4b:7f:18:e0:88:32:3c:60:c0:ab:49:4f:24:00: 20:95:bd:1e:a0:7e:a2:30:f0:37:54:4e:9b:13:5e: 19:2f:3b:fb:1c:a3:c4:88:9d:28:11:f4:e5:f0:c9: ed:04:cf:2e:55:94:de:7e:6d:6e:2e:9c:3d:3f:79: 41:f7:61:bb:ab:16:ac:80:3d:23:24:3f:4a:68:92: 20:8e:a2:1c:ac:cb:6a:4b:10:de:82:10:0e:fd:f9: 7d:92:76:7a:96:28:76:7a:eb:af:c8:af:29:d9:c0: 79:f5:f7:86:1e:7e:8a:e2:81:ab:f6:64:65:40:ba: a2:9c:cb:94:67:a4:27:ef:cd:1d:14:79:9a:68:90: bc:53:ae:75:bc:16:65:85:2a:84:cb:ce:25:eb:4e: 89:2b:f4:39:92:09:f5:18:f6:f5:c5:4d:03:3b:fc: 65:54:35:64:42:c3:ea:aa:d8:56:cd:c0:5c:ef:18: 8c:cd:7d:7a:59:87:ca:14:c0:cd:71:7a:06:b2:7d: ef:b7:da:0d:e5:24:b8:d6:51:49:b8:eb:12:89:03: 36:98:74:ea:c2:5f:eb:b4:3f:ff:fa:d6:6e:da:ca: c9:19:ce:e7:3a:65:56:1b:d3:25:da:19:48:7f:aa: 91:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B1:D8:1F:33:05:EB:AE:05:9B:E1:DD:8F:74:4A:79:93:2B:59:EB X509v3 Authority Key Identifier: keyid:4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:94:00:7c:dd:93:d4:fd:35:63:d5:e0:30:1b:98:9b:5c:a0: d0:35:d6:78:dd:54:53:6b:07:d4:36:d4:63:ce:f7:09:17:1d: 12:ff:47:72:af:89:db:b3:ef:56:3a:17:41:ca:c5:10:24:6e: 87:a2:d2:9d:db:e3:11:3f:88:bf:2d:f6:a8:97:bf:2f:08:20: dd:f5:d6:dc:a0:4f:f1:ef:35:b4:53:49:60:ae:97:9b:b6:a9: dd:7d:0a:89:b9:50:69:18:23:1d:e7:40:e5:92:ce:98:03:62: db:62:57:bf:80:16:7f:cc:ca:c9:d4:f7:19:4a:52:a4:ab:9b: 70:7f:6c:a2:67:ae:a1:24:0a:6e:d9:37:4e:7a:12:67:2d:37: 8f:8c:a4:ba:52:12:8e:b3:e1:b1:7a:bd:34:c2:79:36:e6:94: 37:23:d5:27:c1:0f:74:08:a0:da:b4:e9:0a:d2:99:0a:1d:77: 77:26:6b:14:2d:81:0b:61:d2:6e:54:47:b4:f5:01:a9:ea:51: 01:b5:bc:38:0e:6f:61:dd:f2:a1:da:8d:aa:82:76:80:6a:5e: bc:6b:0b:e1:96:75:94:44:1e:52:cc:ed:32:ad:66:d9:0a:71: 52:87:42:01:1e:13:0f:1d:11:9b:e1:b4:a5:c6:1f:5f:8e:80: c8:6c:68:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMSZtWxuKLyKpy5HVOrt3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYzQ2MjA0YjRmODg1OTIzYWE0YTk3ODZlZDVhY2FmYjFj MDA5ZGUwHhcNMjUxMjE4MTYwMDQwWhcNMjUxMjE5MTYwMDQwWjAzMTEwLwYDVQQD EygxOWIxZDgxZjMzMDVlYmFlMDU5YmUxZGQ4Zjc0NGE3OTkzMmI1OWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lAVHR367WNOw0Aqa+kzS38Y4Igy PGDAq0lPJAAglb0eoH6iMPA3VE6bE14ZLzv7HKPEiJ0oEfTl8MntBM8uVZTefm1u Lpw9P3lB92G7qxasgD0jJD9KaJIgjqIcrMtqSxDeghAO/fl9knZ6lih2euuvyK8p 2cB59feGHn6K4oGr9mRlQLqinMuUZ6Qn780dFHmaaJC8U651vBZlhSqEy84l606J K/Q5kgn1GPb1xU0DO/xlVDVkQsPqqthWzcBc7xiMzX16WYfKFMDNcXoGsn3vt9oN 5SS41lFJuOsSiQM2mHTqwl/rtD//+tZu2srJGc7nOmVWG9Ml2hlIf6qRoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmx2B8zBeuuBZvh3Y90SnmTK1nrMB8GA1UdIwQY MBaAFE7EYgS0+IWSOqSpeG7VrK+xwAneMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHNSaUJMVDRoWkk2cEtsNGJ0V3NyN0hBQ2Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lOTRjZTEtMGQ3Yi00MzFiLTkxNDMt ZmMzZjVlYzE0YTViLzEvVHNSaUJMVDRoWkk2cEtsNGJ0V3NyN0hBQ2Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9lOTRjZTEtMGQ3Yi00MzFiLTkxNDMtZmMzZjVlYzE0YTVi LzEvVHNSaUJMVDRoWkk2cEtsNGJ0V3NyN0hBQ2Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpQAfN2T 1P01Y9XgMBuYm1yg0DXWeN1UU2sH1DbUY873CRcdEv9Hcq+J27PvVjoXQcrFECRu h6LSndvjET+Ivy32qJe/Lwgg3fXW3KBP8e81tFNJYK6Xm7ap3X0KiblQaRgjHedA 5ZLOmANi22JXv4AWf8zKydT3GUpSpKubcH9someuoSQKbtk3TnoSZy03j4ykulIS jrPhsXq9NMJ5NuaUNyPVJ8EPdAig2rTpCtKZCh13dyZrFC2BC2HSblRHtPUBqepR AbW8OA5vYd3yodqNqoJ2gGpevGsL4ZZ1lEQeUsztMq1m2QpxUodCAR4TDx0Rm+G0 pcYfX46AyGxofg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:27:53 2025 by rpki-client