This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft File: _tvrNJcjK29ayaJodTchEBWihxA.mft (raw, json) Hash identifier: PukvUQrZUxIPAfYR3mH892Mw1p3v33vzkXgoNtPr9dc= Subject key identifier: 0E:89:7A:53:D2:2E:5D:4A:C2:AE:11:3D:40:5C:0B:FB:A8:C1:C4:CB Authority key identifier: FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10 Certificate issuer: /CN=fedbeb3497232b6f5ac9a2687537211015a28710 Certificate serial: 019B34C6176EAEF5362F20288ACE71FA575D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 04:02:35 +0000 Manifest this update: Fri 19 Dec 2025 04:02:35 +0000 Manifest next update: Sat 20 Dec 2025 04:02:35 +0000 Files and hashes: 1: _tvrNJcjK29ayaJodTchEBWihxA.crl (hash: 1rUJl9vdgeA4zl1odpYGZosSOijBYNUJqW3iyQl+jNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:17:6e:ae:f5:36:2f:20:28:8a:ce:71:fa:57:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fedbeb3497232b6f5ac9a2687537211015a28710 Validity Not Before: Dec 19 04:02:35 2025 GMT Not After : Dec 20 04:02:35 2025 GMT Subject: CN=0e897a53d22e5d4ac2ae113d405c0bfba8c1c4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:09:6b:dd:18:8e:be:53:c1:06:9b:e7:00:ea: d7:5c:8c:90:dc:3e:c5:05:31:da:c7:9e:ba:d0:a5: 87:2f:d3:1e:04:b0:55:e1:d2:0e:3d:6a:6a:7a:f8: 1a:f5:c9:cc:da:02:91:99:be:9f:0c:ad:d1:54:2e: a8:87:9f:e8:d6:68:78:bd:fa:89:67:a6:32:1e:e9: 0e:85:8d:3e:67:31:18:df:1a:96:37:49:0e:8c:db: 8e:49:02:34:f9:7d:f9:82:52:2a:14:2e:68:1f:88: 68:b3:aa:ae:ab:53:9c:79:29:c2:46:e2:ff:98:72: 2a:a4:58:d7:5d:47:d0:0e:23:cc:3f:2f:64:37:fb: c5:50:00:5f:4e:ea:29:c9:ed:59:20:af:d1:a1:d1: 68:91:eb:94:42:7c:6c:19:96:86:33:ee:18:e7:63: 92:ee:22:17:c4:9a:5f:f0:0c:bc:2c:10:5f:5f:86: 16:ea:b2:21:c1:dc:64:24:f0:78:47:3b:87:36:8f: 00:43:d7:d9:60:ec:45:16:59:fd:c1:08:5e:a4:58: 88:1f:70:9a:76:b0:92:39:d2:ca:eb:a3:25:7d:a5: 3f:3d:32:c0:4d:ab:c2:99:ed:dc:97:f3:a0:36:1f: 85:ac:84:73:b0:80:b3:ce:41:e0:a6:16:d2:1c:0e: d5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:89:7A:53:D2:2E:5D:4A:C2:AE:11:3D:40:5C:0B:FB:A8:C1:C4:CB X509v3 Authority Key Identifier: keyid:FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:26:69:d7:50:dc:61:20:c2:91:1c:24:cf:da:ce:38:84:0b: 83:9f:b7:54:6d:03:61:06:cd:21:fa:5a:e7:65:d8:ab:2f:52: 12:ff:d7:ad:93:38:d1:4c:2f:c0:8d:f7:fd:f5:17:2c:fa:36: b1:ef:f9:4d:06:d4:c9:f4:99:d8:63:e3:c8:3f:a6:a9:65:a1: 17:b0:b5:4e:2a:b3:d6:50:9b:46:67:37:cc:1e:14:4d:3e:dd: fa:a1:00:2c:af:e5:b9:03:d0:1e:b7:14:86:62:ed:01:04:a9: c3:e2:2f:37:0d:b6:2b:12:2e:a8:88:5f:75:85:ef:c0:e3:0e: b6:2a:12:47:a7:82:29:87:07:eb:46:20:08:55:e6:df:b5:45: 71:f7:49:c5:63:0e:3d:4c:cf:87:d5:e7:53:4d:ff:51:f5:8c: a6:86:d0:13:ca:ac:83:11:71:7c:ba:ba:0d:e0:e5:48:31:c3: 4b:4f:f5:52:49:40:74:78:0a:8c:b6:76:dd:cd:78:f4:0b:10: c7:5c:21:88:d3:72:ce:9c:a2:99:09:96:14:72:fb:f0:9f:d9: 3c:20:91:5d:32:14:4d:da:2c:5f:e2:a8:53:9d:b6:9b:be:50: f8:a2:c6:0c:c0:62:ec:5e:95:84:e1:04:75:ad:ec:bb:86:90: b5:b1:80:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xhdurvU2LyAois5x+lddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZGJlYjM0OTcyMzJiNmY1YWM5YTI2ODc1MzcyMTEwMTVh Mjg3MTAwHhcNMjUxMjE5MDQwMjM1WhcNMjUxMjIwMDQwMjM1WjAzMTEwLwYDVQQD EygwZTg5N2E1M2QyMmU1ZDRhYzJhZTExM2Q0MDVjMGJmYmE4YzFjNGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6glr3RiOvlPBBpvnAOrXXIyQ3D7F BTHax5660KWHL9MeBLBV4dIOPWpqevga9cnM2gKRmb6fDK3RVC6oh5/o1mh4vfqJ Z6YyHukOhY0+ZzEY3xqWN0kOjNuOSQI0+X35glIqFC5oH4hos6quq1OceSnCRuL/ mHIqpFjXXUfQDiPMPy9kN/vFUABfTuopye1ZIK/RodFokeuUQnxsGZaGM+4Y52OS 7iIXxJpf8Ay8LBBfX4YW6rIhwdxkJPB4RzuHNo8AQ9fZYOxFFln9wQhepFiIH3Ca drCSOdLK66MlfaU/PTLATavCme3cl/OgNh+FrIRzsICzzkHgphbSHA7VDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6JelPSLl1Kwq4RPUBcC/uowcTLMB8GA1UdIwQY MBaAFP7b6zSXIytvWsmiaHU3IRAVoocQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3R2ck5KY2pLMjlheWFKb2RUY2hFQldpaHhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lMjQ1MWMtZTMxYy00YzMwLTg2ZjIt MGU1MTZmOWM0ZDQ1LzEvX3R2ck5KY2pLMjlheWFKb2RUY2hFQldpaHhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lMjQ1MWMtZTMxYy00YzMwLTg2ZjItMGU1MTZmOWM0ZDQ1 LzEvX3R2ck5KY2pLMjlheWFKb2RUY2hFQldpaHhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSZp11Dc YSDCkRwkz9rOOIQLg5+3VG0DYQbNIfpa52XYqy9SEv/XrZM40UwvwI33/fUXLPo2 se/5TQbUyfSZ2GPjyD+mqWWhF7C1Tiqz1lCbRmc3zB4UTT7d+qEALK/luQPQHrcU hmLtAQSpw+IvNw22KxIuqIhfdYXvwOMOtioSR6eCKYcH60YgCFXm37VFcfdJxWMO PUzPh9XnU03/UfWMpobQE8qsgxFxfLq6DeDlSDHDS0/1UklAdHgKjLZ23c149AsQ x1whiNNyzpyimQmWFHL78J/ZPCCRXTIUTdosX+KoU522m75Q+KLGDMBi7F6VhOEE da3su4aQtbGA5Q== -----END CERTIFICATE-----Generated at Fri Dec 19 07:52:08 2025 by rpki-client