This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft File: TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft (raw, json) Hash identifier: Q/v9HKZ3dDcb8NQnHj/Gv8WrnJ536zz/PZKEXEfsWZs= Subject key identifier: F0:DA:4F:55:97:49:1F:06:E5:CD:47:D6:2B:EF:B8:08:C0:82:D2:59 Authority key identifier: 4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1 Certificate issuer: /CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1 Certificate serial: 019B1013A623B576A3F0F1BFC32326FCB5CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft Manifest number: 0454 Signing time: Fri 12 Dec 2025 01:01:21 +0000 Manifest this update: Fri 12 Dec 2025 01:01:21 +0000 Manifest next update: Sat 13 Dec 2025 01:01:21 +0000 Files and hashes: 1: TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl (hash: nDQ4yGD9ctAeosCshig3Q7BcHbsKYeQELSrGG7k5yqw=) 2: _l-XctLDCPzRb-pMlqXmGyqDvHM.roa (hash: myqB80koPH8JwlE9qSMpb7bOcTN1/cJ21+MIuMT+GyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:a6:23:b5:76:a3:f0:f1:bf:c3:23:26:fc:b5:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1 Validity Not Before: Dec 12 01:01:21 2025 GMT Not After : Dec 13 01:01:21 2025 GMT Subject: CN=f0da4f5597491f06e5cd47d62befb808c082d259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:42:98:44:9c:6a:f1:1b:99:81:6c:64:17:f2: 0f:07:87:60:24:a4:03:51:46:bf:5f:37:cc:94:c0: de:6b:5f:4d:cb:73:e7:b9:d6:34:e0:75:bb:cc:e9: f1:4d:9f:d1:b7:86:07:dd:cc:c1:76:5b:88:b6:08: ae:fb:f4:cd:dc:ec:ef:b8:46:62:d5:f4:60:3f:b8: c8:5c:a6:04:71:91:9d:dc:2e:28:d8:f2:32:d5:f9: e7:01:56:cd:65:65:e5:e1:01:4f:7c:fe:11:90:12: 76:92:52:f6:ab:9f:39:39:e1:68:39:d5:9a:ce:44: e9:81:5e:91:ce:6e:2e:70:af:19:98:63:53:41:41: e9:98:c5:a1:f9:73:4e:04:c0:3c:ac:2e:6c:f1:d1: 39:5e:d7:eb:f0:6d:df:15:86:7c:77:f6:c2:6f:b4: 53:75:a6:bf:0c:86:22:7d:08:f8:e8:ba:28:c6:1d: f5:cb:2f:ef:72:4d:d4:ab:9e:34:36:94:f7:56:61: a6:72:e2:47:cf:dd:65:3d:7e:74:eb:e0:95:e1:5a: bb:a0:04:e6:4b:32:02:20:ca:6e:29:25:c2:df:04: 7e:b8:6c:f1:48:dd:3f:23:07:38:e3:af:f3:b2:ea: 0a:c2:7c:fc:e1:43:37:53:9c:39:aa:bb:e7:db:bb: 3c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DA:4F:55:97:49:1F:06:E5:CD:47:D6:2B:EF:B8:08:C0:82:D2:59 X509v3 Authority Key Identifier: keyid:4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:3b:7c:27:58:3a:c8:f7:73:20:43:bb:be:ed:69:9f:61:50: 0e:e6:8d:ed:68:06:4f:56:03:98:78:f3:40:a1:68:ca:fa:1e: 0e:32:b4:cd:59:86:58:2e:91:62:26:c5:68:b9:3d:57:52:79: 67:da:02:ab:92:35:82:67:90:00:2f:3c:a1:f4:9a:be:8b:08: eb:2e:ee:37:33:0b:08:c5:4f:3d:5d:be:31:f1:4c:0c:0b:5b: 1c:35:05:ee:4a:94:0a:98:59:6c:d0:85:67:0e:e3:f3:31:e9: 5c:7d:b4:93:e4:8d:bb:ac:4f:31:36:27:0b:f0:57:0c:d7:cf: 37:bc:4b:9b:50:fb:bc:5c:14:be:cd:62:cb:5e:7a:9e:93:52: 81:04:44:8a:70:71:8d:25:a0:17:8b:fa:7b:04:d3:10:a7:90: a6:c6:6f:fa:00:e1:51:05:fb:d9:e4:85:17:e3:68:f5:f6:8d: 91:ca:bf:b2:d9:dc:96:49:2a:12:6f:78:59:72:a4:89:e0:2f: cb:b8:4b:9a:72:da:38:e6:c7:3f:ac:e1:fd:ed:3f:a0:a4:13: 1f:c6:96:25:9a:86:3b:a5:70:30:5e:c0:df:f3:82:7b:79:6c: 12:dc:af:a0:29:7b:9e:52:39:7f:04:25:7c:71:fa:c4:00:62: f8:ea:7e:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE6YjtXaj8PG/wyMm/LXMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMjRjMzA4YjAyNDFjM2JjYzE0Y2Y2Nzc3NTkxZDI3MjM3 ZmZhZjEwHhcNMjUxMjEyMDEwMTIxWhcNMjUxMjEzMDEwMTIxWjAzMTEwLwYDVQQD EyhmMGRhNGY1NTk3NDkxZjA2ZTVjZDQ3ZDYyYmVmYjgwOGMwODJkMjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0KYRJxq8RuZgWxkF/IPB4dgJKQD UUa/XzfMlMDea19Ny3PnudY04HW7zOnxTZ/Rt4YH3czBdluItgiu+/TN3OzvuEZi 1fRgP7jIXKYEcZGd3C4o2PIy1fnnAVbNZWXl4QFPfP4RkBJ2klL2q585OeFoOdWa zkTpgV6Rzm4ucK8ZmGNTQUHpmMWh+XNOBMA8rC5s8dE5Xtfr8G3fFYZ8d/bCb7RT daa/DIYifQj46Looxh31yy/vck3Uq540NpT3VmGmcuJHz91lPX506+CV4Vq7oATm SzICIMpuKSXC3wR+uGzxSN0/Iwc446/zsuoKwnz84UM3U5w5qrvn27s8HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDaT1WXSR8G5c1H1ivvuAjAgtJZMB8GA1UdIwQY MBaAFEwkwwiwJBw7zBTPZ3dZHScjf/rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVENURENMQWtIRHZNRk05bmQxa2RKeU5fLXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85MmQ3MTktMGJjMi00YTFlLThiOTQt NjYxYmIwZTllNmVjLzEvVENURENMQWtIRHZNRk05bmQxa2RKeU5fLXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85MmQ3MTktMGJjMi00YTFlLThiOTQtNjYxYmIwZTllNmVj LzEvVENURENMQWtIRHZNRk05bmQxa2RKeU5fLXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjt8J1g6 yPdzIEO7vu1pn2FQDuaN7WgGT1YDmHjzQKFoyvoeDjK0zVmGWC6RYibFaLk9V1J5 Z9oCq5I1gmeQAC88ofSavosI6y7uNzMLCMVPPV2+MfFMDAtbHDUF7kqUCphZbNCF Zw7j8zHpXH20k+SNu6xPMTYnC/BXDNfPN7xLm1D7vFwUvs1iy156npNSgQREinBx jSWgF4v6ewTTEKeQpsZv+gDhUQX72eSFF+No9faNkcq/stnclkkqEm94WXKkieAv y7hLmnLaOObHP6zh/e0/oKQTH8aWJZqGO6VwMF7A3/OCe3lsEtyvoCl7nlI5fwQl fHH6xABi+Op+MA== -----END CERTIFICATE-----Generated at Fri Dec 12 04:11:33 2025 by rpki-client