This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft File: TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft (raw, json) Hash identifier: tve34SfzCqDB8yooxeaYI09rj5xtjS9+XafgbBh3yeQ= Subject key identifier: AF:9B:1B:0E:8A:BA:0C:18:22:39:29:14:46:F3:7C:48:91:7A:8E:8B Authority key identifier: 4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44 Certificate issuer: /CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244 Certificate serial: 019B3AC6C0B4BCC43E7619AA9BE5EB600C89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft Manifest number: 1784 Signing time: Sat 20 Dec 2025 08:01:02 +0000 Manifest this update: Sat 20 Dec 2025 08:01:02 +0000 Manifest next update: Sun 21 Dec 2025 08:01:02 +0000 Files and hashes: 1: TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl (hash: wzz2HVgRwAA4HSH+8MawoLsv/8Z5fivRFIptG8NmzRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:c0:b4:bc:c4:3e:76:19:aa:9b:e5:eb:60:0c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244 Validity Not Before: Dec 20 08:01:02 2025 GMT Not After : Dec 21 08:01:02 2025 GMT Subject: CN=af9b1b0e8aba0c182239291446f37c48917a8e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ba:c0:cc:ab:c5:0a:15:d0:db:d5:01:e9:c0: 53:73:f7:58:7c:f9:d1:72:1b:07:ac:12:85:73:dd: a9:63:f0:b9:07:ef:47:46:31:31:a9:ff:5e:12:60: 12:4b:3d:c3:33:fd:1b:f5:73:e2:b8:56:6c:e8:64: a6:7f:44:04:50:54:29:fe:9f:6d:af:01:d2:c0:8c: fc:88:f9:27:27:f1:78:66:a2:34:6e:24:45:47:d7: aa:7a:11:87:95:0d:c7:dc:e0:07:41:09:43:19:26: 18:cc:fe:23:cf:8e:cc:00:d1:56:ff:31:83:d1:22: f2:dc:bc:1e:0a:d8:af:18:d5:ac:c7:bb:a2:b7:33: 79:e0:af:3e:e7:ec:9f:23:fd:ab:97:ab:d7:cd:f9: 9a:0d:e0:79:5c:19:93:db:75:9a:58:5e:2d:45:14: fb:5c:37:c9:ec:79:f8:15:9e:f4:f9:40:17:d7:f8: ce:e9:ae:8c:88:a8:98:6d:29:67:5d:08:7e:eb:ef: 3d:a6:5a:b6:35:a1:54:c9:cf:8f:56:2a:bb:1f:a9: 19:f7:13:68:51:c9:25:b3:6c:60:7d:84:4d:e5:5e: 69:32:59:93:b7:87:eb:4e:59:39:fb:fd:f3:62:2f: 5a:fa:22:b3:86:ce:df:27:2b:93:f1:25:b6:3a:47: 30:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9B:1B:0E:8A:BA:0C:18:22:39:29:14:46:F3:7C:48:91:7A:8E:8B X509v3 Authority Key Identifier: keyid:4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:b6:23:75:0a:41:62:c3:23:27:c2:18:d0:07:45:53:f3:0c: 54:b7:70:ef:c4:9b:18:ee:58:aa:d7:86:33:b6:76:16:16:28: 44:38:7c:76:d7:9e:24:a8:f2:b5:fe:99:fc:a5:58:e8:18:89: 6e:4d:46:a5:91:63:99:5d:60:f1:2e:12:dd:56:bf:0a:28:a0: e1:a0:7e:b3:83:86:3d:ca:4f:de:d4:53:1b:79:3a:28:b4:8e: f6:07:eb:2c:15:4b:0b:5a:ef:4c:c0:f1:94:dc:fd:a1:ce:25: f5:f0:4c:8d:41:bd:23:9f:7b:e8:c2:78:8b:10:88:bb:e7:cf: 66:22:b1:b4:17:19:ab:53:53:a4:10:ac:d0:40:7c:4d:e2:1a: 26:02:54:3e:cd:70:75:9b:9c:1c:f6:8f:b8:af:52:7d:e4:c9: d8:4b:64:51:2c:4c:f2:bc:cf:23:19:ba:cc:ac:88:df:3c:c3: 6b:14:96:90:10:82:be:9b:61:75:0a:e3:98:4e:92:36:cd:8d: 8b:86:7f:eb:78:1b:62:a7:5b:fd:b7:0d:24:89:de:47:0d:ae: 31:95:b3:52:99:21:8f:09:f2:e7:90:08:b2:51:22:27:3f:4d: f5:28:81:2f:be:1d:31:bc:70:51:c4:ff:78:76:d4:74:a9:24: 85:7d:eb:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xsC0vMQ+dhmqm+XrYAyJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNGNmY2U2MGM5YjBmMmQ0N2IzNjI4NjRkOGZlYmIyMjVi YjUyNDQwHhcNMjUxMjIwMDgwMTAyWhcNMjUxMjIxMDgwMTAyWjAzMTEwLwYDVQQD EyhhZjliMWIwZThhYmEwYzE4MjIzOTI5MTQ0NmYzN2M0ODkxN2E4ZThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7rAzKvFChXQ29UB6cBTc/dYfPnR chsHrBKFc92pY/C5B+9HRjExqf9eEmASSz3DM/0b9XPiuFZs6GSmf0QEUFQp/p9t rwHSwIz8iPknJ/F4ZqI0biRFR9eqehGHlQ3H3OAHQQlDGSYYzP4jz47MANFW/zGD 0SLy3LweCtivGNWsx7uitzN54K8+5+yfI/2rl6vXzfmaDeB5XBmT23WaWF4tRRT7 XDfJ7Hn4FZ70+UAX1/jO6a6MiKiYbSlnXQh+6+89plq2NaFUyc+PViq7H6kZ9xNo Uckls2xgfYRN5V5pMlmTt4frTlk5+/3zYi9a+iKzhs7fJyuT8SW2OkcwyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+bGw6KugwYIjkpFEbzfEiReo6LMB8GA1UdIwQY MBaAFExM/OYMmw8tR7Nihk2P67Ilu1JEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEV6ODVneWJEeTFIczJLR1RZX3JzaVc3VWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iZjhiMGUtYmVkYS00YTU2LWJhZjAt ODJhZDExNjI2ZWVkLzEvVEV6ODVneWJEeTFIczJLR1RZX3JzaVc3VWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iZjhiMGUtYmVkYS00YTU2LWJhZjAtODJhZDExNjI2ZWVk LzEvVEV6ODVneWJEeTFIczJLR1RZX3JzaVc3VWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7YjdQpB YsMjJ8IY0AdFU/MMVLdw78SbGO5YqteGM7Z2FhYoRDh8dteeJKjytf6Z/KVY6BiJ bk1GpZFjmV1g8S4S3Va/Ciig4aB+s4OGPcpP3tRTG3k6KLSO9gfrLBVLC1rvTMDx lNz9oc4l9fBMjUG9I5976MJ4ixCIu+fPZiKxtBcZq1NTpBCs0EB8TeIaJgJUPs1w dZucHPaPuK9SfeTJ2EtkUSxM8rzPIxm6zKyI3zzDaxSWkBCCvpthdQrjmE6SNs2N i4Z/63gbYqdb/bcNJIneRw2uMZWzUpkhjwny55AIslEiJz9N9SiBL74dMbxwUcT/ eHbUdKkkhX3r7w== -----END CERTIFICATE-----Generated at Sat Dec 20 18:15:43 2025 by rpki-client