This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft File: TvYP_RC7937OmKeBY1mERCd9v6Q.mft (raw, json) Hash identifier: Giig6j6BnuJNkvijJBoLyW58JU5RzYy30YoV7+zt8JU= Subject key identifier: A0:04:66:11:BD:C8:08:14:4C:41:8E:1F:D0:71:D6:19:CF:3B:BD:FB Authority key identifier: 4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4 Certificate issuer: /CN=4ef60ffd10bbf77ece98a78163598444277dbfa4 Certificate serial: 019B59762D08EBF7E85C8B2CD7A84D6A55D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft Manifest number: 1793 Signing time: Fri 26 Dec 2025 07:01:15 +0000 Manifest this update: Fri 26 Dec 2025 07:01:15 +0000 Manifest next update: Sat 27 Dec 2025 07:01:15 +0000 Files and hashes: 1: TvYP_RC7937OmKeBY1mERCd9v6Q.crl (hash: wjTfZIqWsCoUmMTznqhDC3rllWevphM1yduHl4JbZGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:2d:08:eb:f7:e8:5c:8b:2c:d7:a8:4d:6a:55:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ef60ffd10bbf77ece98a78163598444277dbfa4 Validity Not Before: Dec 26 07:01:15 2025 GMT Not After : Dec 27 07:01:15 2025 GMT Subject: CN=a0046611bdc808144c418e1fd071d619cf3bbdfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e4:7b:1f:19:2f:f1:2b:da:6f:dd:52:6b:3d: 53:4b:fd:76:90:2e:dc:31:cb:9c:cf:78:c7:e3:03: d2:77:ab:1d:5e:b8:a5:88:5e:71:2e:4a:d3:97:31: e0:b8:8b:ce:91:31:f3:c0:e0:33:91:88:4b:96:3c: 41:68:82:f3:a3:85:62:33:84:ff:5a:4a:2a:66:0e: c3:d3:34:f5:98:55:f3:4e:24:20:3d:70:ea:d5:b2: 86:f3:1c:13:7b:52:c4:96:5f:92:aa:fe:ff:2d:59: 49:9a:e3:a1:0f:6a:92:8e:e7:f8:27:5c:34:de:cd: 64:f1:83:ca:a2:01:bf:fb:17:17:a7:1b:41:b3:30: ba:92:72:31:87:2c:69:12:6a:08:cc:c2:10:81:d8: 4f:9a:f9:27:35:73:da:2a:f5:97:c0:9d:ba:99:d1: 26:8f:ec:74:a1:c5:96:65:12:bf:cb:9f:0d:d6:88: a7:2d:82:17:22:d7:eb:90:be:8a:de:ad:76:63:8b: 9f:8a:0d:f4:2d:6f:1f:98:ba:b8:e6:4c:ab:a9:3b: 53:33:5a:79:67:a4:06:5f:73:e3:04:3b:0e:8d:68: 2c:89:df:09:fb:2d:f1:48:f9:4d:23:67:8e:81:8b: 70:b5:e4:f8:cb:e6:72:85:0c:6a:e1:cd:f9:cb:ba: 53:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:04:66:11:BD:C8:08:14:4C:41:8E:1F:D0:71:D6:19:CF:3B:BD:FB X509v3 Authority Key Identifier: keyid:4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:aa:fb:41:7f:6f:81:cb:be:46:7f:48:52:4a:a9:fa:16:6c: a6:2e:16:94:bd:2a:22:a2:24:20:f9:85:d7:88:90:f2:de:93: 59:ce:4c:ec:d4:df:83:f3:df:83:c3:d6:02:9b:9c:e5:f1:10: 56:29:d9:42:d0:9d:0c:32:d4:26:b2:30:8a:a1:70:01:18:df: 14:dc:83:fe:88:62:2d:fb:e2:ae:04:9b:09:de:94:99:c2:ac: da:69:ef:ab:0e:c8:d1:92:d3:46:bc:35:0c:e0:6a:53:6f:6d: 00:dc:1c:dc:2b:66:89:2e:33:32:c7:0d:16:d5:b3:04:7a:46: fa:3f:79:c2:cd:85:9c:12:98:1b:75:c8:71:7d:98:f4:87:cb: 38:be:c9:52:c4:a5:3a:85:df:48:c2:f2:f5:8b:d8:53:5a:c1: 94:a4:2f:78:76:5e:af:55:96:db:46:6f:02:8d:b7:d6:03:6e: c2:80:75:5c:79:a2:d0:ff:68:18:ce:b5:41:a1:cb:44:07:1f: ba:11:2a:a8:78:11:5e:31:a5:91:0f:07:20:c3:f1:e1:12:a7: fb:5b:bb:48:a1:7b:10:10:56:52:d7:94:43:56:c8:7a:ce:97: 70:e5:aa:70:dd:77:00:23:d2:4b:b5:28:85:dc:39:e8:bf:fe: 3f:db:b8:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdi0I6/foXIss16hNalXRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZjYwZmZkMTBiYmY3N2VjZTk4YTc4MTYzNTk4NDQ0Mjc3 ZGJmYTQwHhcNMjUxMjI2MDcwMTE1WhcNMjUxMjI3MDcwMTE1WjAzMTEwLwYDVQQD EyhhMDA0NjYxMWJkYzgwODE0NGM0MThlMWZkMDcxZDYxOWNmM2JiZGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOR7Hxkv8Svab91Saz1TS/12kC7c Mcucz3jH4wPSd6sdXriliF5xLkrTlzHguIvOkTHzwOAzkYhLljxBaILzo4ViM4T/ WkoqZg7D0zT1mFXzTiQgPXDq1bKG8xwTe1LEll+Sqv7/LVlJmuOhD2qSjuf4J1w0 3s1k8YPKogG/+xcXpxtBszC6knIxhyxpEmoIzMIQgdhPmvknNXPaKvWXwJ26mdEm j+x0ocWWZRK/y58N1oinLYIXItfrkL6K3q12Y4ufig30LW8fmLq45kyrqTtTM1p5 Z6QGX3PjBDsOjWgsid8J+y3xSPlNI2eOgYtwteT4y+ZyhQxq4c35y7pTsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAEZhG9yAgUTEGOH9Bx1hnPO737MB8GA1UdIwQY MBaAFE72D/0Qu/d+zpingWNZhEQnfb+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHZZUF9SQzc5MzdPbUtlQlkxbUVSQ2Q5djZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82MzllNWYtMDc5Ny00NDczLWFlZmYt NTJmNTc1M2ZjM2JlLzEvVHZZUF9SQzc5MzdPbUtlQlkxbUVSQ2Q5djZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82MzllNWYtMDc5Ny00NDczLWFlZmYtNTJmNTc1M2ZjM2Jl LzEvVHZZUF9SQzc5MzdPbUtlQlkxbUVSQ2Q5djZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVar7QX9v gcu+Rn9IUkqp+hZspi4WlL0qIqIkIPmF14iQ8t6TWc5M7NTfg/Pfg8PWApuc5fEQ VinZQtCdDDLUJrIwiqFwARjfFNyD/ohiLfvirgSbCd6UmcKs2mnvqw7I0ZLTRrw1 DOBqU29tANwc3CtmiS4zMscNFtWzBHpG+j95ws2FnBKYG3XIcX2Y9IfLOL7JUsSl OoXfSMLy9YvYU1rBlKQveHZer1WW20ZvAo231gNuwoB1XHmi0P9oGM61QaHLRAcf uhEqqHgRXjGlkQ8HIMPx4RKn+1u7SKF7EBBWUteUQ1bIes6XcOWqcN13ACPSS7Uo hdw56L/+P9u4GA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:53 2025 by rpki-client