This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft File: TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft (raw, json) Hash identifier: /LuAR3DtUTuE9Nd9DE9qrciV8e5C+Vn1SyhjJWTImVU= Subject key identifier: 9A:70:3D:69:A6:B8:43:54:FB:56:97:6A:A6:1E:9A:53:AA:16:82:85 Authority key identifier: 4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6 Certificate issuer: /CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6 Certificate serial: 019AF1D23D2BD81EE00ED186D4290B993AD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft Manifest number: 0165 Signing time: Sat 06 Dec 2025 04:01:18 +0000 Manifest this update: Sat 06 Dec 2025 04:01:18 +0000 Manifest next update: Sun 07 Dec 2025 04:01:18 +0000 Files and hashes: 1: TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl (hash: vJ3KfQ9dG9pCFtIRg663+eC/ctX3UNS+YDLAcUYSvaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3d:2b:d8:1e:e0:0e:d1:86:d4:29:0b:99:3a:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6 Validity Not Before: Dec 6 04:01:18 2025 GMT Not After : Dec 7 04:01:18 2025 GMT Subject: CN=9a703d69a6b84354fb56976aa61e9a53aa168285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2b:79:53:c5:b7:ef:da:c9:bc:9b:2e:be:2c: 9f:74:d8:f3:82:c3:03:c6:1c:63:8c:07:2f:dc:c7: dc:b4:c4:bf:62:1f:b4:94:b4:a7:9e:83:32:bc:d8: 9c:41:20:12:11:e7:21:83:36:d0:25:9c:b2:55:76: 4d:fc:b1:4b:d8:91:05:f0:1b:ea:3b:93:bc:30:3a: ff:33:bc:64:e1:cc:19:e4:b5:5e:ad:55:b3:77:80: b5:5d:29:8b:a3:3f:ee:72:60:1c:4c:75:05:28:dc: b0:88:74:8c:15:17:15:6e:26:5c:50:98:48:f9:db: ba:d0:a4:99:69:8c:06:45:a4:7d:6b:34:56:6d:ee: 59:66:0f:78:ca:2c:29:dc:da:4f:4f:0b:ba:21:22: 03:7b:f1:4f:55:36:06:c5:c9:56:4e:52:f4:b6:b7: 9f:43:a9:af:43:36:b2:00:21:b4:02:c8:17:9b:dc: 8e:49:eb:62:2e:fb:c6:43:b4:a8:a6:07:4a:0f:67: 07:5c:d3:e4:4b:de:7b:1f:0b:02:5a:9c:84:3b:7c: 5b:e3:0b:07:4b:50:e3:8c:09:8f:20:af:a6:f5:1c: 85:a7:61:a2:c9:5b:fb:ab:0e:a3:e7:e2:84:77:37: 5e:c1:07:3d:da:35:91:3a:5f:eb:02:8c:37:56:61: 48:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:70:3D:69:A6:B8:43:54:FB:56:97:6A:A6:1E:9A:53:AA:16:82:85 X509v3 Authority Key Identifier: keyid:4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:83:c5:e4:da:33:a0:95:bc:af:cc:89:25:6a:3a:d9:e5:3a: 57:d1:19:6f:87:59:bf:7f:2b:7f:a2:83:ee:d9:0d:87:1c:02: 2d:b5:36:cb:7a:04:ea:10:36:55:5b:a7:8f:72:43:de:bd:cf: a4:36:7a:ea:ea:61:5d:06:9c:09:77:12:4f:d7:37:ea:84:06: b8:ec:f1:bf:fa:3f:25:47:bb:e5:b3:6f:8d:88:df:8c:7a:ec: ff:8a:94:b6:5c:eb:de:05:a4:35:43:e8:1a:79:7f:f8:61:f9: ba:88:e3:ca:8f:fa:94:9f:d8:83:a5:65:c7:de:d5:fc:ad:b9: 26:12:64:c5:4b:14:5a:d8:9d:a5:56:98:8d:1d:9d:b8:49:47: 7e:01:68:69:f4:ab:0c:a4:6b:10:b8:63:1f:57:8d:78:f5:91: a8:54:4e:ce:33:16:5b:67:64:89:5f:a3:a2:ba:07:52:ef:49: 57:2d:4b:be:71:8b:70:1b:eb:8a:b9:56:5f:50:5d:2e:3a:8d: ab:00:65:1c:a5:b4:00:8c:fa:25:94:eb:ec:9f:45:22:07:0f: 6f:b0:f4:22:48:02:f9:9a:03:ef:bb:b4:59:ec:ef:d6:64:ad: 8b:77:d8:4a:9b:33:b5:fe:0e:5a:ef:41:db:57:08:27:cb:18: e7:e2:b8:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0j0r2B7gDtGG1CkLmTrWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZGU3YjM4YmVhZjNjNjM4NzlmZjkzMDk3M2QxNjNmMWU4 OGU3ZTYwHhcNMjUxMjA2MDQwMTE4WhcNMjUxMjA3MDQwMTE4WjAzMTEwLwYDVQQD Eyg5YTcwM2Q2OWE2Yjg0MzU0ZmI1Njk3NmFhNjFlOWE1M2FhMTY4Mjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yt5U8W379rJvJsuviyfdNjzgsMD xhxjjAcv3MfctMS/Yh+0lLSnnoMyvNicQSASEechgzbQJZyyVXZN/LFL2JEF8Bvq O5O8MDr/M7xk4cwZ5LVerVWzd4C1XSmLoz/ucmAcTHUFKNywiHSMFRcVbiZcUJhI +du60KSZaYwGRaR9azRWbe5ZZg94yiwp3NpPTwu6ISIDe/FPVTYGxclWTlL0tref Q6mvQzayACG0AsgXm9yOSetiLvvGQ7SopgdKD2cHXNPkS957HwsCWpyEO3xb4wsH S1DjjAmPIK+m9RyFp2GiyVv7qw6j5+KEdzdewQc92jWROl/rAow3VmFIQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpwPWmmuENU+1aXaqYemlOqFoKFMB8GA1UdIwQY MBaAFEzeezi+rzxjh5/5MJc9Fj8eiOfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE41N09MNnZQR09Ibl9rd2x6MFdQeDZJNS1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMjYxOWMtNzZhMC00YTVkLWI1ZDgt Mzc1YzZiNjg5ZTJmLzEvVE41N09MNnZQR09Ibl9rd2x6MFdQeDZJNS1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8zMjYxOWMtNzZhMC00YTVkLWI1ZDgtMzc1YzZiNjg5ZTJm LzEvVE41N09MNnZQR09Ibl9rd2x6MFdQeDZJNS1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIPF5Noz oJW8r8yJJWo62eU6V9EZb4dZv38rf6KD7tkNhxwCLbU2y3oE6hA2VVunj3JD3r3P pDZ66uphXQacCXcST9c36oQGuOzxv/o/JUe75bNvjYjfjHrs/4qUtlzr3gWkNUPo Gnl/+GH5uojjyo/6lJ/Yg6Vlx97V/K25JhJkxUsUWtidpVaYjR2duElHfgFoafSr DKRrELhjH1eNePWRqFROzjMWW2dkiV+joroHUu9JVy1LvnGLcBvrirlWX1BdLjqN qwBlHKW0AIz6JZTr7J9FIgcPb7D0IkgC+ZoD77u0Wezv1mSti3fYSpsztf4OWu9B 21cIJ8sY5+K4Cw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:40 2025 by rpki-client