This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft File: tPtrTEeRZokREVxp4mlk89XsovQ.mft (raw, json) Hash identifier: RjmpYqpSThiH44s957GHgC8u1neYOAbvnnJ76C5M+yE= Subject key identifier: AF:20:E1:CD:9B:98:CA:57:B6:DF:E7:57:54:9B:22:AE:D6:AB:48:5E Authority key identifier: B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4 Certificate issuer: /CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4 Certificate serial: 019B345696C1B2DB54CB94C0F278B08CA7ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft Manifest number: 04DE Signing time: Fri 19 Dec 2025 02:00:48 +0000 Manifest this update: Fri 19 Dec 2025 02:00:48 +0000 Manifest next update: Sat 20 Dec 2025 02:00:48 +0000 Files and hashes: 1: tPtrTEeRZokREVxp4mlk89XsovQ.crl (hash: i4hH8pT9zUzEhbZHoGFPXpVHBHS7L6WWsVMA8NQFpEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:96:c1:b2:db:54:cb:94:c0:f2:78:b0:8c:a7:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4 Validity Not Before: Dec 19 02:00:48 2025 GMT Not After : Dec 20 02:00:48 2025 GMT Subject: CN=af20e1cd9b98ca57b6dfe757549b22aed6ab485e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:df:d6:4e:0b:46:4e:cd:a1:cb:59:74:e3:28: cf:5b:7b:a6:b6:5a:6b:aa:94:53:46:02:ad:8a:64: 20:70:ca:d4:ac:9c:42:bf:a9:4d:eb:39:73:4e:80: ce:0e:73:38:f2:9a:68:cc:6d:36:a3:b7:67:06:fd: a6:bf:fe:2c:2c:dd:b9:6f:1c:30:00:85:b3:d3:a8: f0:4a:02:4c:99:e5:d7:c5:01:60:0e:4e:3d:57:07: c5:64:5b:b1:9d:e4:e5:45:8a:1c:02:29:a9:7c:f0: 81:52:7c:9b:14:4a:22:c9:84:a8:e2:ea:f3:04:0c: bd:1a:3f:95:7b:b9:95:fb:bd:bd:9d:c7:24:be:3f: 84:1a:1f:a7:79:86:44:12:bf:cb:76:2c:23:0e:72: e1:8c:84:08:a2:6e:e1:5b:09:69:14:ec:d6:81:57: da:7f:1c:05:07:5b:6c:da:d8:33:e8:34:43:de:09: 2d:c5:c7:ce:86:bd:f3:bc:53:1e:fd:0a:7b:13:df: 35:d8:07:b1:30:44:a8:54:f7:5f:19:da:67:d0:f8: f2:9b:03:a5:07:5e:6a:c1:c4:24:48:3f:3e:d6:14: d9:58:8f:99:ba:64:74:02:f4:05:54:33:56:92:1c: 65:1f:61:79:36:54:d5:42:68:1c:9b:e3:ee:77:07: 08:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:20:E1:CD:9B:98:CA:57:B6:DF:E7:57:54:9B:22:AE:D6:AB:48:5E X509v3 Authority Key Identifier: keyid:B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:25:b7:b0:a0:2b:f0:ca:ec:6a:f9:0c:4f:14:40:55:90:67: 88:07:69:e6:d1:b9:a9:48:89:5b:5f:8f:7c:28:3e:0b:7d:a4: 37:4c:24:67:26:78:fc:28:15:1f:2f:af:3c:f8:c5:43:e0:17: e4:06:1b:75:98:b6:97:ea:ca:86:04:c7:c7:4d:cc:76:23:00: 71:c3:47:dd:b5:07:13:3a:28:d7:88:b2:7e:62:54:3e:95:19: 19:02:03:b2:5b:7d:25:30:5c:3d:a9:0c:4b:3c:cf:e0:fb:15: c2:aa:f3:48:83:f9:d2:fa:86:05:8c:ff:f8:d0:7d:a9:a5:95: 82:36:05:90:09:e4:f6:9b:7c:a4:4b:6c:eb:49:08:4e:74:e9: 0d:9f:cd:02:47:06:bc:a5:ce:25:a9:37:b4:8c:32:18:74:54: 10:91:5b:e8:21:bc:2d:50:30:f9:78:4e:15:ba:c6:d7:78:4b: eb:2b:da:c1:7a:8a:9d:76:87:ab:93:de:68:aa:3c:e3:f5:4d: 68:5b:49:fa:04:a8:92:30:b2:9a:1f:70:d3:35:73:77:56:4c: 4b:4e:2f:c0:d0:96:c6:4f:92:14:2a:b9:4b:63:77:8c:0a:89: 20:84:60:e0:ac:e2:d3:0f:85:6e:d3:04:e4:b3:a9:20:da:a8: f4:b5:9e:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VpbBsttUy5TA8niwjKftMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZmI2YjRjNDc5MTY2ODkxMTExNWM2OWUyNjk2NGYzZDVl Y2EyZjQwHhcNMjUxMjE5MDIwMDQ4WhcNMjUxMjIwMDIwMDQ4WjAzMTEwLwYDVQQD EyhhZjIwZTFjZDliOThjYTU3YjZkZmU3NTc1NDliMjJhZWQ2YWI0ODVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN/WTgtGTs2hy1l04yjPW3umtlpr qpRTRgKtimQgcMrUrJxCv6lN6zlzToDODnM48ppozG02o7dnBv2mv/4sLN25bxww AIWz06jwSgJMmeXXxQFgDk49VwfFZFuxneTlRYocAimpfPCBUnybFEoiyYSo4urz BAy9Gj+Ve7mV+729ncckvj+EGh+neYZEEr/LdiwjDnLhjIQIom7hWwlpFOzWgVfa fxwFB1ts2tgz6DRD3gktxcfOhr3zvFMe/Qp7E9812AexMESoVPdfGdpn0PjymwOl B15qwcQkSD8+1hTZWI+ZumR0AvQFVDNWkhxlH2F5NlTVQmgcm+PudwcI0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8g4c2bmMpXtt/nV1SbIq7Wq0heMB8GA1UdIwQY MBaAFLT7a0xHkWaJERFcaeJpZPPV7KL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFB0clRFZVJab2tSRVZ4cDRtbGs4OVhzb3ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC85MDE2MDctYjFlZS00OWYwLWJkZTIt N2NiYTM1Y2I2YjgxLzEvdFB0clRFZVJab2tSRVZ4cDRtbGs4OVhzb3ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC85MDE2MDctYjFlZS00OWYwLWJkZTItN2NiYTM1Y2I2Yjgx LzEvdFB0clRFZVJab2tSRVZ4cDRtbGs4OVhzb3ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4SW3sKAr 8MrsavkMTxRAVZBniAdp5tG5qUiJW1+PfCg+C32kN0wkZyZ4/CgVHy+vPPjFQ+AX 5AYbdZi2l+rKhgTHx03MdiMAccNH3bUHEzoo14iyfmJUPpUZGQIDslt9JTBcPakM SzzP4PsVwqrzSIP50vqGBYz/+NB9qaWVgjYFkAnk9pt8pEts60kITnTpDZ/NAkcG vKXOJak3tIwyGHRUEJFb6CG8LVAw+XhOFbrG13hL6yvawXqKnXaHq5PeaKo84/VN aFtJ+gSokjCymh9w0zVzd1ZMS04vwNCWxk+SFCq5S2N3jAqJIIRg4Kzi0w+FbtME 5LOpINqo9LWexQ== -----END CERTIFICATE-----Generated at Fri Dec 19 04:54:06 2025 by rpki-client