This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.mft File: TYJcWjaxil5MorUyJtWgW1kN3J4.mft (raw, json) Hash identifier: bXFJKMX/kUcryRFz6nJWNa+T7uzk8sUwlVwslaQy42w= Subject key identifier: DE:8D:DF:08:56:5C:52:17:9B:91:F3:46:86:A9:07:6B:9F:79:FF:43 Authority key identifier: 4D:82:5C:5A:36:B1:8A:5E:4C:A2:B5:32:26:D5:A0:5B:59:0D:DC:9E Certificate issuer: /CN=4d825c5a36b18a5e4ca2b53226d5a05b590ddc9e Certificate serial: 019B593EDBB964CFBACA4BB3FA6C6C00FCAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYJcWjaxil5MorUyJtWgW1kN3J4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.mft Manifest number: 9B Signing time: Fri 26 Dec 2025 06:00:50 +0000 Manifest this update: Fri 26 Dec 2025 06:00:50 +0000 Manifest next update: Sat 27 Dec 2025 06:00:50 +0000 Files and hashes: 1: TYJcWjaxil5MorUyJtWgW1kN3J4.crl (hash: mcevppiNMmxUr48mRNoG/am/HF/xXjU9bbdl0ywixyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.mft rsync://rpki.ripe.net/repository/DEFAULT/TYJcWjaxil5MorUyJtWgW1kN3J4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:db:b9:64:cf:ba:ca:4b:b3:fa:6c:6c:00:fc:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d825c5a36b18a5e4ca2b53226d5a05b590ddc9e Validity Not Before: Dec 26 06:00:50 2025 GMT Not After : Dec 27 06:00:50 2025 GMT Subject: CN=de8ddf08565c52179b91f34686a9076b9f79ff43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e0:63:7e:5f:e5:91:61:7d:01:c0:82:ee:0f: 87:f1:ce:0e:54:3d:9f:42:3b:2a:cc:16:fc:42:4d: 9d:5d:ee:7d:fd:61:7b:01:06:72:cc:8a:92:a0:a1: 3b:f5:5f:95:ff:db:c9:8b:9f:4b:27:24:36:0f:76: 60:a3:34:25:96:4b:05:b7:ce:f9:9d:2f:83:2c:d5: 30:bd:6e:8b:f9:80:a0:3a:77:e2:da:fd:56:81:23: e8:1d:6c:09:6c:37:d2:81:81:ba:08:37:1a:11:d7: 5b:1b:6d:c3:8c:a3:23:89:6a:22:37:e7:7d:4b:90: d7:d0:c9:af:a2:af:c7:80:6a:d0:3d:64:d6:0a:c4: d1:19:a1:cb:17:c4:1a:85:ce:68:ff:87:20:e0:33: 3a:a9:4e:23:aa:9f:51:d6:18:e6:2a:b4:b7:73:fb: c1:10:e6:25:55:48:43:b4:d7:9b:a3:77:e7:e5:34: 3a:56:3b:f7:e4:e6:73:07:23:c0:99:28:21:9a:fa: 27:60:81:0c:71:e4:f1:f3:1d:5e:81:6a:be:d2:27: cf:1d:b2:be:7f:f1:f4:fb:c4:50:db:62:0f:d3:c1: e6:4d:66:93:34:28:56:d5:b3:3f:d4:e4:ba:72:85: 7b:c0:c2:4b:ad:c8:5c:61:d5:52:36:85:be:0f:e8: 76:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8D:DF:08:56:5C:52:17:9B:91:F3:46:86:A9:07:6B:9F:79:FF:43 X509v3 Authority Key Identifier: keyid:4D:82:5C:5A:36:B1:8A:5E:4C:A2:B5:32:26:D5:A0:5B:59:0D:DC:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYJcWjaxil5MorUyJtWgW1kN3J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ac:8c:dc:b1:db:a7:6f:b3:1f:38:28:19:47:bb:f0:11:08: f2:51:b6:87:27:69:1c:65:a8:bd:0b:82:83:58:31:2e:6a:6a: d8:40:eb:94:2b:82:be:84:cd:ca:7e:20:f3:86:4e:a1:39:91: 66:9f:0d:37:55:5d:a7:37:e3:fc:33:7a:51:9a:07:a6:61:51: c8:2a:2e:ba:72:bb:c3:54:7a:b8:f6:4a:8c:2b:c0:b6:50:6a: fa:a1:af:dd:dd:69:15:6e:14:10:49:1c:91:ed:b4:d3:af:8b: 0c:7b:e3:d2:71:57:f4:e3:5d:f2:70:82:c3:cc:af:26:ae:f3: bd:da:7a:f7:88:f8:ba:ee:3a:95:30:4c:84:4d:59:40:73:a7: 15:0f:d8:5b:df:6a:70:0e:de:9a:c1:28:34:28:0e:48:3a:1c: f1:b5:4c:c9:98:d4:da:0a:76:f8:cf:32:c1:e5:64:0f:a5:a2: fc:16:f8:e5:dd:7b:e0:44:d4:09:e7:a7:d6:57:d2:cc:40:93: fc:b2:8c:52:99:38:a7:50:82:42:78:74:eb:06:d3:bd:2b:58: 12:b6:af:f0:ce:03:5f:cb:3d:29:36:d2:ff:b9:6f:70:5f:db: fa:c4:6b:b0:1b:b5:2a:aa:77:e8:17:eb:41:d9:bf:b3:9c:8b: 9a:d0:c8:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPtu5ZM+6ykuz+mxsAPyrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkODI1YzVhMzZiMThhNWU0Y2EyYjUzMjI2ZDVhMDViNTkw ZGRjOWUwHhcNMjUxMjI2MDYwMDUwWhcNMjUxMjI3MDYwMDUwWjAzMTEwLwYDVQQD EyhkZThkZGYwODU2NWM1MjE3OWI5MWYzNDY4NmE5MDc2YjlmNzlmZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+Bjfl/lkWF9AcCC7g+H8c4OVD2f QjsqzBb8Qk2dXe59/WF7AQZyzIqSoKE79V+V/9vJi59LJyQ2D3ZgozQllksFt875 nS+DLNUwvW6L+YCgOnfi2v1WgSPoHWwJbDfSgYG6CDcaEddbG23DjKMjiWoiN+d9 S5DX0Mmvoq/HgGrQPWTWCsTRGaHLF8Qahc5o/4cg4DM6qU4jqp9R1hjmKrS3c/vB EOYlVUhDtNebo3fn5TQ6Vjv35OZzByPAmSghmvonYIEMceTx8x1egWq+0ifPHbK+ f/H0+8RQ22IP08HmTWaTNChW1bM/1OS6coV7wMJLrchcYdVSNoW+D+h2QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6N3whWXFIXm5HzRoapB2ufef9DMB8GA1UdIwQY MBaAFE2CXFo2sYpeTKK1MibVoFtZDdyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFlKY1dqYXhpbDVNb3JVeUp0V2dXMWtOM0o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9hNGVkOGUtOWRlOC00ZTExLWIxM2Ut ZWZlY2E0MzE3M2E4LzEvVFlKY1dqYXhpbDVNb3JVeUp0V2dXMWtOM0o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9hNGVkOGUtOWRlOC00ZTExLWIxM2UtZWZlY2E0MzE3M2E4 LzEvVFlKY1dqYXhpbDVNb3JVeUp0V2dXMWtOM0o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqyM3LHb p2+zHzgoGUe78BEI8lG2hydpHGWovQuCg1gxLmpq2EDrlCuCvoTNyn4g84ZOoTmR Zp8NN1Vdpzfj/DN6UZoHpmFRyCouunK7w1R6uPZKjCvAtlBq+qGv3d1pFW4UEEkc ke2006+LDHvj0nFX9ONd8nCCw8yvJq7zvdp694j4uu46lTBMhE1ZQHOnFQ/YW99q cA7emsEoNCgOSDoc8bVMyZjU2gp2+M8yweVkD6Wi/Bb45d174ETUCeen1lfSzECT /LKMUpk4p1CCQnh06wbTvStYErav8M4DX8s9KTbS/7lvcF/b+sRrsBu1Kqp36Bfr Qdm/s5yLmtDIww== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:50 2025 by rpki-client