This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft File: TM6YuMJCaF3bYPTiEJwr01GmQn8.mft (raw, json) Hash identifier: F0rRQEU940jjUE4laqhtS6Y3GI2E8yTBbKD/mRJ9rN0= Subject key identifier: EE:F3:6F:53:4B:CE:AC:8F:80:EE:F1:67:17:A7:DA:07:5A:8F:EC:F1 Authority key identifier: 4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F Certificate issuer: /CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f Certificate serial: 019B3A5864C13EC890BFFD9E7C62AB4F7CE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 06:00:30 +0000 Manifest this update: Sat 20 Dec 2025 06:00:30 +0000 Manifest next update: Sun 21 Dec 2025 06:00:30 +0000 Files and hashes: 1: TM6YuMJCaF3bYPTiEJwr01GmQn8.crl (hash: QiYFkuwdV8NEhcU6/PfBN483sMUPapyV8a/SuEr76Y4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.crl rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:64:c1:3e:c8:90:bf:fd:9e:7c:62:ab:4f:7c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f Validity Not Before: Dec 20 06:00:30 2025 GMT Not After : Dec 21 06:00:30 2025 GMT Subject: CN=eef36f534bceac8f80eef16717a7da075a8fecf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fd:74:e0:f7:1a:df:74:6e:a3:46:30:58:2b: 9f:ba:06:fd:3e:b6:6e:e6:4c:c3:85:bc:3f:87:3d: 6d:6b:ad:5e:38:08:bb:58:d3:bc:08:07:b1:ac:e3: 1e:80:27:4f:c9:f7:7f:a1:7d:30:79:e9:d9:77:ac: 71:da:5a:2e:ff:f3:5b:41:1c:15:6c:a6:31:7e:a7: 77:00:ff:bd:0a:55:71:d9:dd:d5:67:34:99:87:a7: 2e:61:0b:c5:0c:d6:a4:46:33:45:cb:4e:40:46:c5: b4:7f:db:93:45:ff:72:22:c4:d3:ee:f9:7c:11:66: 0c:8a:60:e6:30:27:5c:10:0e:e9:5d:44:ca:ce:56: 03:68:b6:c3:09:c2:fc:a8:5b:8a:59:a9:f1:0e:8d: 47:9d:b2:9e:44:52:89:6d:db:b2:1d:4d:2b:d5:68: 22:1c:db:d1:7b:9d:ce:32:51:10:58:56:01:46:c7: 73:8a:ae:39:74:32:ae:d2:cc:5b:68:a2:4a:00:9c: 81:c8:ea:d5:59:30:85:09:8c:94:3e:8c:39:20:4b: 16:75:e9:f2:d6:5c:22:f3:54:f0:e9:87:1a:77:da: 08:35:fc:0b:12:5a:f2:2a:a9:69:d0:a2:4c:28:3f: e0:1d:db:fb:9a:29:36:5c:8f:90:a6:f1:9a:cc:c4: a3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F3:6F:53:4B:CE:AC:8F:80:EE:F1:67:17:A7:DA:07:5A:8F:EC:F1 X509v3 Authority Key Identifier: keyid:4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:39:58:5f:75:95:d4:7d:cc:59:56:91:5b:7d:e9:44:84:2a: 99:a9:0d:c4:1c:bd:35:d4:31:d9:94:c3:ab:3c:45:46:44:bc: 37:78:7c:af:5a:45:72:89:c1:c4:c0:98:ed:83:3a:2c:1f:ca: 45:95:41:8e:d5:30:d2:d6:ae:6d:0b:0f:a4:34:2f:49:8e:ab: a8:78:00:de:de:13:f1:2f:56:58:81:70:9b:5e:1c:fd:0f:51: 4c:ca:ac:78:88:aa:51:f3:38:50:60:fa:4b:21:cd:01:d4:d7: 5e:d2:42:f5:81:83:c0:dd:19:92:3e:b1:f9:a0:a2:a4:ed:eb: f7:16:ed:56:81:28:53:31:6e:fb:9f:52:79:70:26:9f:11:70: b6:6d:2d:e0:b1:1e:4a:c5:03:0e:9e:6e:6b:2d:be:2c:ff:6a: 8f:63:5a:ed:75:25:f0:33:a9:22:0e:15:50:c8:4f:68:1f:45: e6:7e:af:25:02:01:f0:f3:df:a0:a6:84:e1:d1:9b:8e:15:5e: 02:4b:94:00:13:00:05:1a:16:e4:5c:5e:ac:55:78:1a:ce:c5: e8:c7:bd:fe:e7:d7:38:87:d3:0d:eb:9d:c3:5b:e1:ed:4c:ea: 03:75:84:aa:bc:f0:8e:7a:91:08:2f:6c:5b:9e:ee:09:77:94: ab:ea:f3:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WGTBPsiQv/2efGKrT3zmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjY2U5OGI4YzI0MjY4NWRkYjYwZjRlMjEwOWMyYmQzNTFh NjQyN2YwHhcNMjUxMjIwMDYwMDMwWhcNMjUxMjIxMDYwMDMwWjAzMTEwLwYDVQQD EyhlZWYzNmY1MzRiY2VhYzhmODBlZWYxNjcxN2E3ZGEwNzVhOGZlY2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP104Pca33Ruo0YwWCufugb9PrZu 5kzDhbw/hz1ta61eOAi7WNO8CAexrOMegCdPyfd/oX0weenZd6xx2lou//NbQRwV bKYxfqd3AP+9ClVx2d3VZzSZh6cuYQvFDNakRjNFy05ARsW0f9uTRf9yIsTT7vl8 EWYMimDmMCdcEA7pXUTKzlYDaLbDCcL8qFuKWanxDo1HnbKeRFKJbduyHU0r1Wgi HNvRe53OMlEQWFYBRsdziq45dDKu0sxbaKJKAJyByOrVWTCFCYyUPow5IEsWdeny 1lwi81Tw6Ycad9oINfwLElryKqlp0KJMKD/gHdv7mik2XI+QpvGazMSjZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7zb1NLzqyPgO7xZxen2gdaj+zxMB8GA1UdIwQY MBaAFEzOmLjCQmhd22D04hCcK9NRpkJ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE02WXVNSkNhRjNiWVBUaUVKd3IwMUdtUW44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lNzlkMzgtYThlYS00N2MyLTk1ZGMt ZDE5NGE3YjA1ZGRhLzEvVE02WXVNSkNhRjNiWVBUaUVKd3IwMUdtUW44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9lNzlkMzgtYThlYS00N2MyLTk1ZGMtZDE5NGE3YjA1ZGRh LzEvVE02WXVNSkNhRjNiWVBUaUVKd3IwMUdtUW44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzlYX3WV 1H3MWVaRW33pRIQqmakNxBy9NdQx2ZTDqzxFRkS8N3h8r1pFconBxMCY7YM6LB/K RZVBjtUw0taubQsPpDQvSY6rqHgA3t4T8S9WWIFwm14c/Q9RTMqseIiqUfM4UGD6 SyHNAdTXXtJC9YGDwN0Zkj6x+aCipO3r9xbtVoEoUzFu+59SeXAmnxFwtm0t4LEe SsUDDp5uay2+LP9qj2Na7XUl8DOpIg4VUMhPaB9F5n6vJQIB8PPfoKaE4dGbjhVe AkuUABMABRoW5FxerFV4Gs7F6Me9/ufXOIfTDeudw1vh7UzqA3WEqrzwjnqRCC9s W57uCXeUq+rzuQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:21:04 2025 by rpki-client