This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft File: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft (raw, json) Hash identifier: EOGuyGsR1AWQYvHSGYgOtcsWENaFXZCbnwqOvanObd0= Subject key identifier: 7D:83:A7:C3:CC:B8:63:BD:B3:F5:C5:C1:CF:30:FA:15:E1:80:82:DD Authority key identifier: 4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21 Certificate issuer: /CN=4c101ff51b67eefe0d67800e76d3606df4c94721 Certificate serial: 019B4693F37AA47C2C654469FE1554F17C2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft Manifest number: 06FE Signing time: Mon 22 Dec 2025 15:00:59 +0000 Manifest this update: Mon 22 Dec 2025 15:00:59 +0000 Manifest next update: Tue 23 Dec 2025 15:00:59 +0000 Files and hashes: 1: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl (hash: tO2Kd6GfkRvhRiGLxdIgjHs2rSrc6EbewIbsmZ8T8QQ=) 2: cri3ULh6Rj8r6ZDUmdSIkYBmP1o.roa (hash: Lisc7jMorS/4tIMBDxqrdkl7lwX530FUMpT0ozDszqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:93:f3:7a:a4:7c:2c:65:44:69:fe:15:54:f1:7c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c101ff51b67eefe0d67800e76d3606df4c94721 Validity Not Before: Dec 22 15:00:59 2025 GMT Not After : Dec 23 15:00:59 2025 GMT Subject: CN=7d83a7c3ccb863bdb3f5c5c1cf30fa15e18082dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:61:83:96:86:9f:4e:77:52:aa:55:c2:06: 9c:54:4e:07:41:bd:12:d6:a6:a4:74:50:81:3d:7a: 1f:fb:ee:22:63:ab:10:8b:5b:f7:55:4e:8f:07:ea: e6:e5:5c:49:e8:02:6c:81:35:e8:b6:40:bf:4e:c7: a0:dc:f8:e3:0c:d4:60:0f:77:29:08:7d:1e:cd:65: c6:8d:7b:94:83:8b:82:3e:3c:49:e4:e4:d4:c4:d9: ab:01:5e:6e:b9:20:d1:6c:57:f0:4c:eb:9f:b9:cf: ba:00:d4:62:d6:00:cf:fd:6f:b7:a3:53:eb:0e:59: 36:72:34:33:6f:fa:b7:90:93:62:a4:ef:3e:58:30: b2:06:2f:9a:8c:76:2f:a2:ca:74:90:c1:03:60:7a: 6d:06:6e:0b:48:8c:39:f6:aa:c7:a6:82:eb:14:96: a5:80:cd:ab:71:01:b3:77:65:f1:5c:1a:48:ed:96: 30:f0:b0:9d:e3:88:9a:30:2f:24:2d:8f:5b:33:e8: cd:75:85:5d:a9:01:46:77:b0:40:55:b6:da:95:e0: 64:3e:19:6b:f2:a7:ce:7f:65:98:01:df:10:e1:1c: 28:ab:46:53:b1:02:21:ef:cb:13:ff:b6:b9:3a:3a: 68:05:83:6d:8b:5e:17:cd:75:17:25:5d:ce:cc:dc: 62:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:83:A7:C3:CC:B8:63:BD:B3:F5:C5:C1:CF:30:FA:15:E1:80:82:DD X509v3 Authority Key Identifier: keyid:4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:2d:35:98:e8:d5:0e:7c:44:18:ac:2c:ca:fb:ac:20:48:9d: e1:26:17:12:3f:c0:27:f3:0e:37:67:26:67:a5:67:f5:3f:d5: 35:a4:a5:d8:57:43:05:31:0a:24:ea:76:70:28:dc:26:07:ec: 48:e7:e9:31:0f:c5:0b:c7:8b:cb:04:9e:06:e2:08:1f:0e:b5: fd:0a:3e:b9:a1:d7:02:16:f5:35:3d:87:84:24:01:2b:6d:7a: ed:e0:4c:68:41:29:78:92:15:f7:8e:dc:59:41:20:6a:d4:95: c1:65:c6:8a:aa:22:92:20:b2:fe:30:f4:96:d4:6a:c4:77:e0: 61:10:d3:56:e4:9e:26:89:27:f5:29:b2:98:9a:5a:b7:50:b6: 74:a0:9f:04:70:e3:e1:55:b4:15:0f:9c:b3:42:09:d7:06:7c: f1:b4:03:4e:b5:99:91:dc:34:23:89:b2:5d:6f:bc:61:d7:8c: 21:ef:c0:e7:13:92:ee:78:5c:c6:cd:f6:b6:bd:65:6e:c0:da: 5e:6d:f9:35:c5:0d:59:a2:75:e8:b1:e0:77:f8:61:45:37:c0: a3:91:f8:46:c7:80:85:c4:ca:e8:6a:d2:be:7f:8d:c6:15:4f: 19:8c:36:cc:ce:80:42:8d:e8:8d:d3:a9:6e:1f:07:89:f0:18: db:55:d2:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGk/N6pHwsZURp/hVU8XwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMTAxZmY1MWI2N2VlZmUwZDY3ODAwZTc2ZDM2MDZkZjRj OTQ3MjEwHhcNMjUxMjIyMTUwMDU5WhcNMjUxMjIzMTUwMDU5WjAzMTEwLwYDVQQD Eyg3ZDgzYTdjM2NjYjg2M2JkYjNmNWM1YzFjZjMwZmExNWUxODA4MmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1Vhg5aGn053UqpVwgacVE4HQb0S 1qakdFCBPXof++4iY6sQi1v3VU6PB+rm5VxJ6AJsgTXotkC/Tseg3PjjDNRgD3cp CH0ezWXGjXuUg4uCPjxJ5OTUxNmrAV5uuSDRbFfwTOufuc+6ANRi1gDP/W+3o1Pr Dlk2cjQzb/q3kJNipO8+WDCyBi+ajHYvosp0kMEDYHptBm4LSIw59qrHpoLrFJal gM2rcQGzd2XxXBpI7ZYw8LCd44iaMC8kLY9bM+jNdYVdqQFGd7BAVbbaleBkPhlr 8qfOf2WYAd8Q4Rwoq0ZTsQIh78sT/7a5OjpoBYNti14XzXUXJV3OzNxiewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2Dp8PMuGO9s/XFwc8w+hXhgILdMB8GA1UdIwQY MBaAFEwQH/UbZ+7+DWeADnbTYG30yUchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEJBZjlSdG43djROWjRBT2R0TmdiZlRKUnlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81OWRjYmQtNzhiZi00OGVkLTk1NGQt Y2NhYTZlYjNjNTEzLzEvVEJBZjlSdG43djROWjRBT2R0TmdiZlRKUnlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC81OWRjYmQtNzhiZi00OGVkLTk1NGQtY2NhYTZlYjNjNTEz LzEvVEJBZjlSdG43djROWjRBT2R0TmdiZlRKUnlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdy01mOjV DnxEGKwsyvusIEid4SYXEj/AJ/MON2cmZ6Vn9T/VNaSl2FdDBTEKJOp2cCjcJgfs SOfpMQ/FC8eLywSeBuIIHw61/Qo+uaHXAhb1NT2HhCQBK2167eBMaEEpeJIV947c WUEgatSVwWXGiqoikiCy/jD0ltRqxHfgYRDTVuSeJokn9SmymJpat1C2dKCfBHDj 4VW0FQ+cs0IJ1wZ88bQDTrWZkdw0I4myXW+8YdeMIe/A5xOS7nhcxs32tr1lbsDa Xm35NcUNWaJ16LHgd/hhRTfAo5H4RseAhcTK6GrSvn+NxhVPGYw2zM6AQo3ojdOp bh8HifAY21XSBg== -----END CERTIFICATE-----Generated at Mon Dec 22 22:32:29 2025 by rpki-client