This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft File: TeztaXzW72A8kPgBiBg7zjAgQOE.mft (raw, json) Hash identifier: nOkEkGiQXl4+7LjnNK6Pli1IAOOJdNKbz5NmXhPUwJ8= Subject key identifier: 00:D7:97:80:15:7D:47:36:65:9E:1F:1F:4E:93:F1:7E:3A:43:F1:E2 Authority key identifier: 4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1 Certificate issuer: /CN=4deced697cd6ef603c90f80188183bce302040e1 Certificate serial: 019B337B874BCB35DAE50C2D4BE62D6EEB58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft Manifest number: 0721 Signing time: Thu 18 Dec 2025 22:01:31 +0000 Manifest this update: Thu 18 Dec 2025 22:01:31 +0000 Manifest next update: Fri 19 Dec 2025 22:01:31 +0000 Files and hashes: 1: TeztaXzW72A8kPgBiBg7zjAgQOE.crl (hash: kHyiD/uAauAYayLoGlG46c4cGVk9Hrmq6hUF4L5BL5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:87:4b:cb:35:da:e5:0c:2d:4b:e6:2d:6e:eb:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4deced697cd6ef603c90f80188183bce302040e1 Validity Not Before: Dec 18 22:01:31 2025 GMT Not After : Dec 19 22:01:31 2025 GMT Subject: CN=00d79780157d4736659e1f1f4e93f17e3a43f1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:44:1f:1c:5a:32:d2:da:f6:cc:d9:b5:2b:b7: eb:36:68:00:cb:12:a0:3d:af:f6:fd:e9:b4:d6:c3: d6:85:5d:0e:08:ae:70:ed:5f:f3:41:13:e9:3b:59: e1:b5:0e:48:ea:03:f8:f7:27:48:62:51:36:bc:83: 54:e7:19:c0:42:28:6c:92:35:9f:eb:8a:29:b6:c0: 71:0e:be:7f:39:a7:86:aa:6b:d8:f5:d7:f9:bb:46: 75:88:f8:f7:1c:7f:d6:1f:8c:96:8c:03:41:78:de: ea:c6:9e:f3:88:18:12:ed:04:54:2e:99:d4:95:35: 53:30:b7:0a:d9:94:6c:57:e7:99:9e:72:04:9e:00: a3:1e:8d:73:cf:70:fe:87:0f:f6:e3:05:0c:d1:41: 76:3a:fd:6f:64:08:16:ef:09:37:36:f8:e0:50:ba: c3:ce:8b:91:ce:83:3a:bf:40:4a:81:4e:25:b0:4c: df:d6:b7:e8:08:e1:44:ec:39:08:06:42:e5:95:b0: 6b:0b:fb:f7:b5:f0:f9:4c:bf:3d:4e:00:d1:ce:00: 38:20:97:83:18:39:ae:f9:11:cf:e3:f3:1b:f7:2d: a6:82:25:5d:63:17:13:00:1b:0d:d3:95:78:93:1b: 25:8f:d2:a4:b7:45:0f:39:94:5b:f4:75:17:6e:25: 2f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D7:97:80:15:7D:47:36:65:9E:1F:1F:4E:93:F1:7E:3A:43:F1:E2 X509v3 Authority Key Identifier: keyid:4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:2c:33:b3:6f:69:d0:68:7f:e7:af:34:0c:78:ea:dc:72:64: b3:1c:bc:75:6a:ee:1b:67:9d:bf:ba:55:0c:5e:18:ab:e2:12: b1:2d:a4:a0:28:98:1e:e6:93:82:db:59:14:79:c3:9b:51:20: 13:90:34:76:3a:91:a3:d5:27:28:f5:e0:a7:92:67:e0:35:13: 3f:96:dd:ba:43:31:99:0a:e6:01:a9:cb:cb:a3:6a:05:0c:84: 11:f6:a6:cd:77:7f:f9:73:16:7e:a1:92:58:c9:70:ae:b9:ab: be:2e:46:0b:95:0a:cf:6e:a5:f6:f5:01:b1:54:ac:26:b7:a5: 92:4d:75:21:90:4c:3d:b1:fb:07:a7:5c:26:3b:96:79:bd:f4: a8:fa:e0:f4:ea:8a:e6:81:9b:a2:bc:8b:98:1f:26:86:08:6c: f2:be:a2:9e:3c:7d:1e:24:d8:53:8d:0d:f3:d8:c4:47:66:79: 8a:f9:2f:bf:c9:a6:de:da:61:75:c3:44:a5:1c:7d:e0:19:dc: ae:b6:a5:94:80:73:9d:65:f8:4a:9f:b9:7d:58:6f:f9:2e:a6: cc:56:18:53:d5:dd:34:92:69:e5:30:20:cb:0c:0f:34:00:e0: 87:f8:a9:60:2e:fd:da:a1:39:6c:bb:6c:31:42:cb:f1:6f:43: 09:b6:78:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze4dLyzXa5QwtS+YtbutYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZWNlZDY5N2NkNmVmNjAzYzkwZjgwMTg4MTgzYmNlMzAy MDQwZTEwHhcNMjUxMjE4MjIwMTMxWhcNMjUxMjE5MjIwMTMxWjAzMTEwLwYDVQQD EygwMGQ3OTc4MDE1N2Q0NzM2NjU5ZTFmMWY0ZTkzZjE3ZTNhNDNmMWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkQfHFoy0tr2zNm1K7frNmgAyxKg Pa/2/em01sPWhV0OCK5w7V/zQRPpO1nhtQ5I6gP49ydIYlE2vINU5xnAQihskjWf 64optsBxDr5/OaeGqmvY9df5u0Z1iPj3HH/WH4yWjANBeN7qxp7ziBgS7QRULpnU lTVTMLcK2ZRsV+eZnnIEngCjHo1zz3D+hw/24wUM0UF2Ov1vZAgW7wk3NvjgULrD zouRzoM6v0BKgU4lsEzf1rfoCOFE7DkIBkLllbBrC/v3tfD5TL89TgDRzgA4IJeD GDmu+RHP4/Mb9y2mgiVdYxcTABsN05V4kxslj9Kkt0UPOZRb9HUXbiUvVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADXl4AVfUc2ZZ4fH06T8X46Q/HiMB8GA1UdIwQY MBaAFE3s7Wl81u9gPJD4AYgYO84wIEDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGV6dGFYelc3MkE4a1BnQmlCZzd6akFnUU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi83N2NlMzgtNDAyYy00Y2I5LTg1ODIt MjIxNDQ5MTE4MzA5LzEvVGV6dGFYelc3MkE4a1BnQmlCZzd6akFnUU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi83N2NlMzgtNDAyYy00Y2I5LTg1ODItMjIxNDQ5MTE4MzA5 LzEvVGV6dGFYelc3MkE4a1BnQmlCZzd6akFnUU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQiwzs29p 0Gh/5680DHjq3HJksxy8dWruG2edv7pVDF4Yq+ISsS2koCiYHuaTgttZFHnDm1Eg E5A0djqRo9UnKPXgp5Jn4DUTP5bdukMxmQrmAanLy6NqBQyEEfamzXd/+XMWfqGS WMlwrrmrvi5GC5UKz26l9vUBsVSsJrelkk11IZBMPbH7B6dcJjuWeb30qPrg9OqK 5oGboryLmB8mhghs8r6injx9HiTYU40N89jER2Z5ivkvv8mm3tphdcNEpRx94Bnc rrallIBznWX4Sp+5fVhv+S6mzFYYU9XdNJJp5TAgywwPNADgh/ipYC792qE5bLts MULL8W9DCbZ4rw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:14:11 2025 by rpki-client