This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft File: tsaaSiFb3h0yk03chd6vj9nJRHk.mft (raw, json) Hash identifier: 6qRpso4tQDwl9OYw/xfnJPe9GStUyKDw5ZqYvsVoNhY= Subject key identifier: AF:0E:D5:5A:3B:55:76:52:C6:0C:AC:1C:39:6A:F3:76:B7:72:63:A8 Authority key identifier: B6:C6:9A:4A:21:5B:DE:1D:32:93:4D:DC:85:DE:AF:8F:D9:C9:44:79 Certificate issuer: /CN=b6c69a4a215bde1d32934ddc85deaf8fd9c94479 Certificate serial: 019B59E3D19717369A2D1B878EE620C1D938 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft Manifest number: 0F43 Signing time: Fri 26 Dec 2025 09:01:01 +0000 Manifest this update: Fri 26 Dec 2025 09:01:01 +0000 Manifest next update: Sat 27 Dec 2025 09:01:01 +0000 Files and hashes: 1: tsaaSiFb3h0yk03chd6vj9nJRHk.crl (hash: gc/8tcB8B9Q+l1RkdtnLayue9o2xfj2uRaHofArCWC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.crl rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:d1:97:17:36:9a:2d:1b:87:8e:e6:20:c1:d9:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c69a4a215bde1d32934ddc85deaf8fd9c94479 Validity Not Before: Dec 26 09:01:01 2025 GMT Not After : Dec 27 09:01:01 2025 GMT Subject: CN=af0ed55a3b557652c60cac1c396af376b77263a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5b:75:61:13:01:1a:36:f9:ac:c3:04:7a:75: 05:81:7f:94:c6:0f:91:5c:dc:18:aa:1c:1c:5b:8c: 8d:37:f3:ab:0a:20:cc:07:6c:de:79:d7:58:76:3e: ed:3a:40:4e:b9:56:f9:54:0d:39:6e:1a:8e:9a:46: 5a:89:0a:32:58:22:2f:df:69:06:f1:d8:57:fd:50: 0d:f1:c6:19:b1:f6:1b:cd:4e:b7:6c:23:6f:13:ff: aa:95:9f:9e:56:b1:2e:be:0f:52:a2:7e:e4:ee:54: 71:aa:46:0b:cc:a5:10:55:b3:ef:ff:43:f5:5c:cc: f6:4f:55:84:10:80:60:d3:51:63:cb:89:bc:6a:c7: 1e:af:44:ac:05:82:c9:fb:b5:ea:69:54:57:ac:ca: 6f:d3:e5:d6:e5:0f:35:7a:5b:ad:08:8c:8d:58:4c: 73:67:b1:e1:b4:72:54:73:1b:1b:f7:59:02:fb:72: fe:7b:8f:4c:bc:65:bb:64:ee:73:bb:12:25:5f:0d: 35:5b:cf:9f:c5:3b:52:5f:be:50:6f:9d:99:b6:c4: 53:96:0b:3a:83:bb:f3:0a:29:92:5d:50:13:ba:0d: 52:51:b2:ae:71:16:6d:1f:87:a7:fb:06:19:35:05: 7f:1a:65:87:74:63:4f:4b:a4:b3:22:e2:9c:bd:de: 82:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0E:D5:5A:3B:55:76:52:C6:0C:AC:1C:39:6A:F3:76:B7:72:63:A8 X509v3 Authority Key Identifier: keyid:B6:C6:9A:4A:21:5B:DE:1D:32:93:4D:DC:85:DE:AF:8F:D9:C9:44:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a2:1e:97:5d:2d:b9:4b:b3:28:1c:f5:98:e6:b4:a0:6c:15: 07:4e:4a:bc:77:9b:47:0a:fa:e9:07:b2:07:5e:7f:ac:ef:ca: 6d:b6:a3:1c:cb:44:51:d4:1b:b3:85:f9:e7:63:92:c5:0b:91: 35:38:7c:1c:03:cb:de:fc:5c:14:d9:01:1a:01:69:bd:83:df: 53:86:9d:c6:e5:dc:1e:50:91:72:03:62:e4:eb:14:1d:f4:26: 40:6e:d8:c1:78:83:89:f7:26:2c:d8:4f:ee:80:5b:77:8f:fc: 0a:16:d9:87:4f:92:03:1d:bc:97:71:22:88:73:78:eb:5c:01: ee:1e:14:66:e1:07:49:f3:04:c4:47:74:af:b2:56:17:47:31: 18:5d:ff:2c:f4:70:c8:0a:bf:fb:bf:f3:63:6a:0e:c7:d9:b3: d2:b4:c2:01:90:28:55:26:36:af:88:1c:53:ce:93:87:5f:f8: 9d:48:67:1e:b5:70:29:e2:89:77:95:59:6c:60:c6:c7:98:f8: 78:b9:fb:fe:ca:90:1d:da:4d:be:78:53:e7:2d:7e:e9:fd:ee: 6e:e2:21:6e:03:97:bf:c3:cd:1c:93:61:47:88:a7:8d:4f:a1: 3e:31:01:09:6b:ea:c7:15:27:91:93:07:35:dc:02:44:d9:7c: 5b:c2:b1:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ49GXFzaaLRuHjuYgwdk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzY5YTRhMjE1YmRlMWQzMjkzNGRkYzg1ZGVhZjhmZDlj OTQ0NzkwHhcNMjUxMjI2MDkwMTAxWhcNMjUxMjI3MDkwMTAxWjAzMTEwLwYDVQQD EyhhZjBlZDU1YTNiNTU3NjUyYzYwY2FjMWMzOTZhZjM3NmI3NzI2M2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklt1YRMBGjb5rMMEenUFgX+Uxg+R XNwYqhwcW4yNN/OrCiDMB2zeeddYdj7tOkBOuVb5VA05bhqOmkZaiQoyWCIv32kG 8dhX/VAN8cYZsfYbzU63bCNvE/+qlZ+eVrEuvg9Son7k7lRxqkYLzKUQVbPv/0P1 XMz2T1WEEIBg01Fjy4m8ascer0SsBYLJ+7XqaVRXrMpv0+XW5Q81elutCIyNWExz Z7HhtHJUcxsb91kC+3L+e49MvGW7ZO5zuxIlXw01W8+fxTtSX75Qb52ZtsRTlgs6 g7vzCimSXVATug1SUbKucRZtH4en+wYZNQV/GmWHdGNPS6SzIuKcvd6C8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8O1Vo7VXZSxgysHDlq83a3cmOoMB8GA1UdIwQY MBaAFLbGmkohW94dMpNN3IXer4/ZyUR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNhYVNpRmIzaDB5azAzY2hkNnZqOW5KUkhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NzdhN2ItNWRjYy00M2E3LWE4OWMt ZTNiYzZiNDk5ZTdiLzEvdHNhYVNpRmIzaDB5azAzY2hkNnZqOW5KUkhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81NzdhN2ItNWRjYy00M2E3LWE4OWMtZTNiYzZiNDk5ZTdi LzEvdHNhYVNpRmIzaDB5azAzY2hkNnZqOW5KUkhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKIel10t uUuzKBz1mOa0oGwVB05KvHebRwr66QeyB15/rO/KbbajHMtEUdQbs4X552OSxQuR NTh8HAPL3vxcFNkBGgFpvYPfU4adxuXcHlCRcgNi5OsUHfQmQG7YwXiDifcmLNhP 7oBbd4/8ChbZh0+SAx28l3EiiHN461wB7h4UZuEHSfMExEd0r7JWF0cxGF3/LPRw yAq/+7/zY2oOx9mz0rTCAZAoVSY2r4gcU86Th1/4nUhnHrVwKeKJd5VZbGDGx5j4 eLn7/sqQHdpNvnhT5y1+6f3ubuIhbgOXv8PNHJNhR4injU+hPjEBCWvqxxUnkZMH NdwCRNl8W8Kxig== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:55 2025 by rpki-client