This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft File: THHp8j7qymjHIcvkKAYQC3XhV3A.mft (raw, json) Hash identifier: Eyy9fS1Qwo1nD+HPf7Pv+AX+HAMrFbinWKA3mEZvooY= Subject key identifier: 45:29:69:07:95:83:7E:C5:2C:23:FE:DA:AD:B2:F8:D6:3B:1D:40:05 Authority key identifier: 4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70 Certificate issuer: /CN=4c71e9f23eeaca68c721cbe42806100b75e15770 Certificate serial: 019AF276E4D8B3E12A8C7AF71D86BAB14286 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft Manifest number: 061F Signing time: Sat 06 Dec 2025 07:01:09 +0000 Manifest this update: Sat 06 Dec 2025 07:01:09 +0000 Manifest next update: Sun 07 Dec 2025 07:01:09 +0000 Files and hashes: 1: THHp8j7qymjHIcvkKAYQC3XhV3A.crl (hash: stB4tiDMtYnd+Hef2Vo8D43Q4cloqMPmc2mpbvFcnPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.crl rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e4:d8:b3:e1:2a:8c:7a:f7:1d:86:ba:b1:42:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c71e9f23eeaca68c721cbe42806100b75e15770 Validity Not Before: Dec 6 07:01:09 2025 GMT Not After : Dec 7 07:01:09 2025 GMT Subject: CN=4529690795837ec52c23fedaadb2f8d63b1d4005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0c:d2:f9:ed:e4:57:0d:07:20:5e:4b:00:be: 08:4e:fe:48:10:79:07:ee:b7:19:9c:da:26:ec:1a: 99:8d:72:f6:03:71:9e:87:7b:08:54:b7:d0:12:97: fd:65:fc:29:71:5e:09:7d:23:ef:a4:3d:1d:c8:47: ff:bf:77:43:8a:a8:7c:30:c3:0f:5f:af:83:3e:56: 75:dd:a9:13:3a:e0:e9:bb:eb:46:a7:b8:77:19:cb: 84:03:55:68:24:39:d3:44:22:b9:b8:c8:99:3f:c0: 3b:6d:46:e2:7a:aa:fc:1f:ec:c0:3f:85:de:f9:2b: 34:84:6f:90:64:0d:c9:f8:e5:8d:93:89:f6:63:22: d5:5b:07:a6:da:1a:ba:3e:61:80:1d:93:54:fa:4b: 3e:b2:e0:f8:74:ac:b1:1a:95:88:2e:48:f4:36:9e: e1:66:e9:54:18:a0:a9:28:0d:0e:71:a9:2d:1c:0d: e5:f7:2e:bc:98:92:e8:14:a7:e3:5c:85:39:77:d1: 52:4d:b3:db:a7:bb:7f:96:5d:5c:21:f9:10:ba:7c: e7:10:a8:ea:95:83:e0:c6:73:aa:fc:2d:ce:8c:65: 10:41:27:41:fc:09:74:d2:5a:15:43:a0:c4:26:cf: fa:3f:b3:f0:fc:0c:01:0f:09:b6:cb:60:04:9e:53: ba:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:29:69:07:95:83:7E:C5:2C:23:FE:DA:AD:B2:F8:D6:3B:1D:40:05 X509v3 Authority Key Identifier: keyid:4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:34:90:ee:f1:3f:a0:98:c6:37:fd:74:fe:72:2c:7d:1b:fb: 4a:64:3e:72:4d:53:73:dd:91:4d:0d:5c:42:69:68:58:35:36: 86:f0:b3:74:b7:4b:70:7d:09:50:81:80:82:d8:09:ea:c9:03: 72:a7:ed:0b:fd:e5:2b:17:cb:11:61:c2:35:83:bb:91:20:8b: 93:86:61:2d:b8:50:36:6c:6f:0e:67:ee:45:50:f3:da:ca:1d: d9:1b:56:1e:3f:91:e0:77:a8:7c:c1:16:63:49:ec:d4:75:0f: c4:3b:0a:0d:94:6d:54:29:55:36:bc:8f:a4:9f:41:02:e7:55: 06:bc:bf:e7:62:0a:d7:fb:e0:0c:07:03:26:1b:cd:86:0e:55: 65:af:ab:da:ee:99:50:bd:a1:f0:e1:97:ac:ad:ff:16:eb:06: b3:0c:50:93:13:5b:39:d0:10:92:df:a7:48:52:88:8a:88:e8: 9a:98:e5:28:a0:46:17:ac:1f:e0:32:74:fe:68:38:50:60:2b: 47:30:4a:3b:19:ab:09:fd:c6:61:ab:d8:ac:32:f2:c1:2f:84: a4:e5:28:9c:08:5e:d3:88:fb:06:5b:42:10:b5:8c:41:9d:7a: b0:9c:3f:b5:22:b1:7c:f4:1c:f3:db:fe:b4:74:dd:9b:2c:2b: 67:1e:b0:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryduTYs+EqjHr3HYa6sUKGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzFlOWYyM2VlYWNhNjhjNzIxY2JlNDI4MDYxMDBiNzVl MTU3NzAwHhcNMjUxMjA2MDcwMTA5WhcNMjUxMjA3MDcwMTA5WjAzMTEwLwYDVQQD Eyg0NTI5NjkwNzk1ODM3ZWM1MmMyM2ZlZGFhZGIyZjhkNjNiMWQ0MDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wzS+e3kVw0HIF5LAL4ITv5IEHkH 7rcZnNom7BqZjXL2A3Geh3sIVLfQEpf9ZfwpcV4JfSPvpD0dyEf/v3dDiqh8MMMP X6+DPlZ13akTOuDpu+tGp7h3GcuEA1VoJDnTRCK5uMiZP8A7bUbieqr8H+zAP4Xe +Ss0hG+QZA3J+OWNk4n2YyLVWwem2hq6PmGAHZNU+ks+suD4dKyxGpWILkj0Np7h ZulUGKCpKA0OcaktHA3l9y68mJLoFKfjXIU5d9FSTbPbp7t/ll1cIfkQunznEKjq lYPgxnOq/C3OjGUQQSdB/Al00loVQ6DEJs/6P7Pw/AwBDwm2y2AEnlO6mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUpaQeVg37FLCP+2q2y+NY7HUAFMB8GA1UdIwQY MBaAFExx6fI+6spoxyHL5CgGEAt14VdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhIcDhqN3F5bWpISWN2a0tBWVFDM1hoVjNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85NGY2NjItNTA2Yi00ZWM5LWE3YWEt YzliN2ViMmNlYTU3LzEvVEhIcDhqN3F5bWpISWN2a0tBWVFDM1hoVjNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi85NGY2NjItNTA2Yi00ZWM5LWE3YWEtYzliN2ViMmNlYTU3 LzEvVEhIcDhqN3F5bWpISWN2a0tBWVFDM1hoVjNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezSQ7vE/ oJjGN/10/nIsfRv7SmQ+ck1Tc92RTQ1cQmloWDU2hvCzdLdLcH0JUIGAgtgJ6skD cqftC/3lKxfLEWHCNYO7kSCLk4ZhLbhQNmxvDmfuRVDz2sod2RtWHj+R4HeofMEW Y0ns1HUPxDsKDZRtVClVNryPpJ9BAudVBry/52IK1/vgDAcDJhvNhg5VZa+r2u6Z UL2h8OGXrK3/FusGswxQkxNbOdAQkt+nSFKIiojompjlKKBGF6wf4DJ0/mg4UGAr RzBKOxmrCf3GYavYrDLywS+EpOUonAhe04j7BltCELWMQZ16sJw/tSKxfPQc89v+ tHTdmywrZx6wRw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:52 2025 by rpki-client