This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft File: TT2CE15FkxVfpq1vt_7LAfE4GLI.mft (raw, json) Hash identifier: 6WCm7V19Tdp+pIFQW1B+gY/evIssEXQg3wpzusyhHAk= Subject key identifier: 7E:EF:86:64:47:47:3B:92:B9:3A:E9:8B:C9:2D:50:01:92:17:5A:05 Authority key identifier: 4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2 Certificate issuer: /CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2 Certificate serial: 019B59AC8B81C6FECA36F353EEEFA2744551 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft Manifest number: 0C08 Signing time: Fri 26 Dec 2025 08:00:38 +0000 Manifest this update: Fri 26 Dec 2025 08:00:38 +0000 Manifest next update: Sat 27 Dec 2025 08:00:38 +0000 Files and hashes: 1: TT2CE15FkxVfpq1vt_7LAfE4GLI.crl (hash: c1q0z7h1dZzoZ0dLWWmWwryHXkFI2g7VEmnJmfQbe7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:8b:81:c6:fe:ca:36:f3:53:ee:ef:a2:74:45:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2 Validity Not Before: Dec 26 08:00:38 2025 GMT Not After : Dec 27 08:00:38 2025 GMT Subject: CN=7eef866447473b92b93ae98bc92d500192175a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:74:58:9d:4f:da:01:42:79:bb:5b:13:32:03: 2d:95:c8:f1:d0:be:07:92:fb:d6:a7:75:d8:5b:79: a8:af:f8:02:79:30:75:4e:fc:c9:71:1e:6e:11:4a: 45:1b:09:f0:55:94:da:44:b2:68:d0:00:9a:d0:b8: 7e:59:b8:ea:55:63:f4:2c:a3:e9:ed:3b:d0:23:2a: 72:22:11:ef:88:69:f4:2b:11:1c:7e:e8:49:a4:91: d6:2f:dd:1e:00:d2:17:e1:4e:b4:05:ca:6f:c4:a9: fe:2a:57:6e:a8:34:40:6d:d3:2f:a7:e1:9f:9a:6b: 21:07:49:b1:47:7c:a4:d7:67:1e:92:a4:bc:ed:86: 4a:fd:46:ea:c3:e1:ec:1d:17:94:72:6c:35:d3:eb: eb:ee:f6:7a:21:c2:03:2b:0d:98:da:6c:bf:c6:57: 05:de:98:26:6e:50:62:f0:24:40:dd:14:ac:74:7a: 3f:27:70:16:d4:6a:3c:00:5b:71:de:22:d3:dc:43: 27:18:7e:28:ce:28:12:c3:29:e3:7d:de:7f:a5:1a: 28:45:14:b2:8e:d1:4a:68:bf:7e:89:1a:02:a1:08: a6:27:c4:f8:9f:f1:c3:92:bc:83:9f:fb:d8:97:d7: 38:d6:ee:37:07:dc:91:76:83:3e:6b:df:7d:2d:fc: bb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EF:86:64:47:47:3B:92:B9:3A:E9:8B:C9:2D:50:01:92:17:5A:05 X509v3 Authority Key Identifier: keyid:4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:e8:26:50:b1:42:4e:43:69:80:be:c4:17:7b:54:c1:bf:dd: aa:cc:5a:b9:56:6f:33:9a:f2:8e:43:2b:97:55:05:67:6a:2c: 5f:ef:18:1b:bd:6a:61:e4:e2:f8:f4:ff:0e:fc:6a:99:fd:80: 12:f2:63:85:11:fd:6a:7c:5e:7a:dd:d9:8c:1e:c4:cc:b3:02: 66:90:69:9c:b6:95:ae:0d:52:be:7a:93:10:07:eb:7a:8f:54: aa:36:f7:87:94:88:41:0b:45:06:9e:cd:73:92:4d:7e:21:55: 99:7e:3e:2d:1f:4b:a4:cc:5b:01:fe:71:2a:de:78:d4:90:e7: 7d:ea:7b:63:b8:9d:60:15:03:53:3b:3a:42:34:21:1c:2f:fc: a1:55:a5:7d:70:87:0a:97:54:74:68:eb:d2:03:32:68:5b:58: ec:45:05:7f:19:4f:9e:21:20:0e:61:5b:45:be:c9:ce:9d:ec: 2b:de:1b:66:e9:56:1e:0a:c1:b3:11:e2:f0:36:58:bb:20:93: 37:dc:78:83:ed:bd:b9:39:8f:db:bf:73:0f:d5:f1:90:82:d0: 13:9a:9d:74:a3:92:d8:51:3d:b8:e5:a9:c2:3b:ff:1a:5f:b6: ee:7f:7b:73:f8:d9:d2:c6:f0:6b:6a:5b:1e:e5:03:90:8c:a3: 77:d8:fb:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrIuBxv7KNvNT7u+idEVRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkM2Q4MjEzNWU0NTkzMTU1ZmE2YWQ2ZmI3ZmVjYjAxZjEz ODE4YjIwHhcNMjUxMjI2MDgwMDM4WhcNMjUxMjI3MDgwMDM4WjAzMTEwLwYDVQQD Eyg3ZWVmODY2NDQ3NDczYjkyYjkzYWU5OGJjOTJkNTAwMTkyMTc1YTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXRYnU/aAUJ5u1sTMgMtlcjx0L4H kvvWp3XYW3mor/gCeTB1TvzJcR5uEUpFGwnwVZTaRLJo0ACa0Lh+WbjqVWP0LKPp 7TvQIypyIhHviGn0KxEcfuhJpJHWL90eANIX4U60BcpvxKn+KlduqDRAbdMvp+Gf mmshB0mxR3yk12cekqS87YZK/Ubqw+HsHReUcmw10+vr7vZ6IcIDKw2Y2my/xlcF 3pgmblBi8CRA3RSsdHo/J3AW1Go8AFtx3iLT3EMnGH4ozigSwynjfd5/pRooRRSy jtFKaL9+iRoCoQimJ8T4n/HDkryDn/vYl9c41u43B9yRdoM+a999Lfy7EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7vhmRHRzuSuTrpi8ktUAGSF1oFMB8GA1UdIwQY MBaAFE09ghNeRZMVX6atb7f+ywHxOBiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFQyQ0UxNUZreFZmcHExdnRfN0xBZkU0R0xJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81OGJiOTMtZjZhMi00ODk4LWJmZDgt MDVkODc1NmYwOTJlLzEvVFQyQ0UxNUZreFZmcHExdnRfN0xBZkU0R0xJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81OGJiOTMtZjZhMi00ODk4LWJmZDgtMDVkODc1NmYwOTJl LzEvVFQyQ0UxNUZreFZmcHExdnRfN0xBZkU0R0xJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUugmULFC TkNpgL7EF3tUwb/dqsxauVZvM5ryjkMrl1UFZ2osX+8YG71qYeTi+PT/Dvxqmf2A EvJjhRH9anxeet3ZjB7EzLMCZpBpnLaVrg1SvnqTEAfreo9Uqjb3h5SIQQtFBp7N c5JNfiFVmX4+LR9LpMxbAf5xKt541JDnfep7Y7idYBUDUzs6QjQhHC/8oVWlfXCH CpdUdGjr0gMyaFtY7EUFfxlPniEgDmFbRb7Jzp3sK94bZulWHgrBsxHi8DZYuyCT N9x4g+29uTmP279zD9XxkILQE5qddKOS2FE9uOWpwjv/Gl+27n97c/jZ0sbwa2pb HuUDkIyjd9j7JA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:50 2025 by rpki-client