This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft File: tTk77GZMj073jtxIvs1jnIKlOgU.mft (raw, json) Hash identifier: 0Uely4z7UQJbfupTgPANKb4njHEv++6e9kbOAEpV37U= Subject key identifier: CA:7D:1D:EB:CD:40:76:B5:78:93:77:57:8C:A0:8D:AF:35:F0:EA:0A Authority key identifier: B5:39:3B:EC:66:4C:8F:4E:F7:8E:DC:48:BE:CD:63:9C:82:A5:3A:05 Certificate issuer: /CN=b5393bec664c8f4ef78edc48becd639c82a53a05 Certificate serial: 019B597671472C074A65E713E6D693440BC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTk77GZMj073jtxIvs1jnIKlOgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft Manifest number: 153D Signing time: Fri 26 Dec 2025 07:01:32 +0000 Manifest this update: Fri 26 Dec 2025 07:01:32 +0000 Manifest next update: Sat 27 Dec 2025 07:01:32 +0000 Files and hashes: 1: tTk77GZMj073jtxIvs1jnIKlOgU.crl (hash: X7K1Q+9UMV1Va2evpGMTQUJ5/dVhz5/kDenxLGcmx1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.crl rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft rsync://rpki.ripe.net/repository/DEFAULT/tTk77GZMj073jtxIvs1jnIKlOgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:71:47:2c:07:4a:65:e7:13:e6:d6:93:44:0b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5393bec664c8f4ef78edc48becd639c82a53a05 Validity Not Before: Dec 26 07:01:32 2025 GMT Not After : Dec 27 07:01:32 2025 GMT Subject: CN=ca7d1debcd4076b5789377578ca08daf35f0ea0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:df:dd:9e:ee:82:34:71:48:cd:89:cf:42:84: 41:84:f7:98:85:c7:69:40:be:12:9a:4c:a4:17:e9: fb:72:36:ff:0b:82:05:e3:c3:66:36:06:94:63:82: 03:a2:1d:81:e4:5a:66:a9:65:90:a9:3b:6c:5f:88: ae:02:90:e1:e4:a9:9e:da:de:3b:ca:b1:4a:b5:99: f4:50:59:37:e2:dc:97:53:8a:be:2a:53:1e:fd:1d: 60:22:cd:13:62:b9:e9:86:03:2d:99:a2:eb:26:24: f7:29:72:06:28:62:0b:b0:cd:a9:10:a5:34:49:98: bb:21:b3:9a:b5:00:47:6a:12:fc:43:3c:72:75:5f: 9e:06:29:90:3f:9b:ad:a6:83:a8:51:34:1d:51:8e: ad:53:93:a9:3a:54:b1:74:5c:ce:a4:0f:6b:73:5a: 6a:c7:0a:83:41:8f:c8:d3:d5:1d:8f:01:43:05:60: ba:8a:82:29:b3:af:b7:bf:ab:70:0e:8d:76:80:09: 5b:17:93:ed:9c:dd:e6:46:4f:75:9a:5a:e7:87:65: 07:a8:95:22:9a:c4:2c:3f:41:4e:2b:15:f0:8c:f8: 24:74:07:2e:d3:83:c7:7a:9f:b5:1e:74:86:0f:ad: 4c:a6:b5:f3:4b:d0:d3:de:88:89:b5:de:ec:39:92: b0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7D:1D:EB:CD:40:76:B5:78:93:77:57:8C:A0:8D:AF:35:F0:EA:0A X509v3 Authority Key Identifier: keyid:B5:39:3B:EC:66:4C:8F:4E:F7:8E:DC:48:BE:CD:63:9C:82:A5:3A:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTk77GZMj073jtxIvs1jnIKlOgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:d6:a1:b3:ef:65:8f:3d:6b:da:d8:0e:82:06:a0:90:34:26: 1c:92:d3:e3:eb:01:c3:0d:f6:c7:c4:85:e0:18:80:00:b3:d8: 5f:c3:60:f0:ae:3d:ae:d2:e3:19:9c:aa:c5:95:60:71:83:80: 0b:de:dc:ef:74:75:60:28:d4:1f:59:2f:f5:b1:46:6c:ce:0b: b3:fb:82:4d:42:13:c0:b1:02:91:8c:04:ab:59:56:b8:e5:db: 82:e5:5d:32:06:46:44:3f:96:14:ec:92:77:89:0c:cf:e2:93: 99:6b:c9:51:ca:a1:32:dd:16:7d:8f:cc:70:c6:f2:69:eb:89: 98:bd:5b:c6:2a:7d:9b:48:1f:fe:05:87:da:c0:0d:0a:79:e4: 17:5c:4f:30:f6:6d:8e:5a:d4:0f:70:8b:f0:d0:1a:c1:0b:73: 0d:6a:70:cb:26:24:ec:79:b3:ae:c1:cc:5e:33:95:78:94:26: 6e:95:0d:44:cf:96:8a:a4:2c:7c:eb:02:50:97:d8:c3:8e:cc: e7:05:e7:84:f8:4b:f0:b9:f5:ed:27:d2:03:8c:58:a5:b4:de: c2:4c:3c:ea:d6:8e:d3:e9:d2:3e:a7:e1:58:b5:38:dd:ba:01: 52:4a:3e:d9:43:32:26:f6:84:3e:40:57:59:1a:b0:4a:8a:d0: 91:75:0e:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdnFHLAdKZecT5taTRAvJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MzkzYmVjNjY0YzhmNGVmNzhlZGM0OGJlY2Q2MzljODJh NTNhMDUwHhcNMjUxMjI2MDcwMTMyWhcNMjUxMjI3MDcwMTMyWjAzMTEwLwYDVQQD EyhjYTdkMWRlYmNkNDA3NmI1Nzg5Mzc3NTc4Y2EwOGRhZjM1ZjBlYTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd/dnu6CNHFIzYnPQoRBhPeYhcdp QL4SmkykF+n7cjb/C4IF48NmNgaUY4IDoh2B5FpmqWWQqTtsX4iuApDh5Kme2t47 yrFKtZn0UFk34tyXU4q+KlMe/R1gIs0TYrnphgMtmaLrJiT3KXIGKGILsM2pEKU0 SZi7IbOatQBHahL8QzxydV+eBimQP5utpoOoUTQdUY6tU5OpOlSxdFzOpA9rc1pq xwqDQY/I09UdjwFDBWC6ioIps6+3v6twDo12gAlbF5PtnN3mRk91mlrnh2UHqJUi msQsP0FOKxXwjPgkdAcu04PHep+1HnSGD61MprXzS9DT3oiJtd7sOZKwXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMp9HevNQHa1eJN3V4ygja818OoKMB8GA1UdIwQY MBaAFLU5O+xmTI9O947cSL7NY5yCpToFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFRrNzdHWk1qMDczanR4SXZzMWpuSUtsT2dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny85NGMzYzUtYzliMS00NmUwLWEwNWUt NDc2NGJkMDBkMzEwLzEvdFRrNzdHWk1qMDczanR4SXZzMWpuSUtsT2dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny85NGMzYzUtYzliMS00NmUwLWEwNWUtNDc2NGJkMDBkMzEw LzEvdFRrNzdHWk1qMDczanR4SXZzMWpuSUtsT2dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9ahs+9l jz1r2tgOggagkDQmHJLT4+sBww32x8SF4BiAALPYX8Ng8K49rtLjGZyqxZVgcYOA C97c73R1YCjUH1kv9bFGbM4Ls/uCTUITwLECkYwEq1lWuOXbguVdMgZGRD+WFOyS d4kMz+KTmWvJUcqhMt0WfY/McMbyaeuJmL1bxip9m0gf/gWH2sANCnnkF1xPMPZt jlrUD3CL8NAawQtzDWpwyyYk7HmzrsHMXjOVeJQmbpUNRM+WiqQsfOsCUJfYw47M 5wXnhPhL8Ln17SfSA4xYpbTewkw86taO0+nSPqfhWLU43boBUko+2UMyJvaEPkBX WRqwSorQkXUOfA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:27 2025 by rpki-client