This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft File: Tm_7mQbuvrofWxpVju1jcvZTzoY.mft (raw, json) Hash identifier: cOmd69qiswOh9mVmVbz+zFfQhvBo/+LQxtnCUQIITFg= Subject key identifier: CB:9B:63:91:84:5E:21:6F:65:AB:74:4E:34:DA:2A:E5:F7:CB:D4:F2 Authority key identifier: 4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86 Certificate issuer: /CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86 Certificate serial: 019AF19B9F43522F98946BF21016C4C623B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 03:01:39 +0000 Manifest this update: Sat 06 Dec 2025 03:01:39 +0000 Manifest next update: Sun 07 Dec 2025 03:01:39 +0000 Files and hashes: 1: Tm_7mQbuvrofWxpVju1jcvZTzoY.crl (hash: vSkiBAMGQRt9kBU3SXcpw5CIjLg5Rs2oQNJGV9dcex8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:9f:43:52:2f:98:94:6b:f2:10:16:c4:c6:23:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86 Validity Not Before: Dec 6 03:01:39 2025 GMT Not After : Dec 7 03:01:39 2025 GMT Subject: CN=cb9b6391845e216f65ab744e34da2ae5f7cbd4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:fe:a4:66:0f:96:6a:eb:dc:1b:6a:bb:d6: 70:f6:c3:e3:e3:e5:1f:92:8d:d1:d9:52:b6:ee:e0: 90:fe:05:67:f3:df:85:cf:8a:fb:b1:76:3d:20:53: 2b:97:7d:65:a8:0c:bd:8a:64:0e:34:2a:7e:f5:1b: c4:4a:28:cf:af:cb:78:04:81:66:93:cd:81:42:d0: c4:d1:62:46:5d:79:b1:00:42:65:a4:ee:94:bf:64: ec:ad:18:37:3c:cf:aa:53:dd:98:f6:e5:c0:7f:56: 83:13:f9:d9:5c:1a:16:6e:69:65:a6:da:07:aa:29: f8:b9:c5:0d:4c:9d:55:e5:42:77:7b:4e:11:ac:ff: b4:cf:78:50:d9:e4:d0:df:29:83:13:2d:a0:97:89: 3e:a0:dd:81:95:2f:ff:ba:6d:6d:42:71:39:ec:6f: 41:13:16:05:92:e3:ab:96:2d:7c:7f:3b:a7:cc:8b: 9c:5e:c8:f9:04:4d:3c:81:84:c4:48:c1:a2:a0:cd: cd:d1:56:92:48:e2:8b:19:f4:ef:b5:b0:27:be:ff: 8f:12:33:10:9e:09:05:de:9f:2d:4a:81:87:99:65: 87:ef:a3:16:27:68:af:86:a0:97:f8:1e:3c:1a:ba: d9:0d:0a:11:7e:31:fe:3a:c4:7f:00:bc:42:2f:04: 1a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9B:63:91:84:5E:21:6F:65:AB:74:4E:34:DA:2A:E5:F7:CB:D4:F2 X509v3 Authority Key Identifier: keyid:4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:1c:c2:ed:6d:62:7c:f8:66:ee:9a:75:18:53:72:15:e0:f7: 85:c0:91:d4:ee:c9:51:5f:01:5e:00:66:88:7a:64:c0:cc:25: e7:09:32:14:73:fc:34:71:3c:43:09:99:a4:3e:a1:6c:80:8b: d1:fc:2f:a5:83:8b:28:77:03:48:cd:e8:b2:cd:0f:aa:62:7b: bd:5e:64:2b:7c:5d:ca:31:ff:ff:fb:ff:e2:bf:96:07:3d:fa: 5c:bb:2d:2e:ef:da:25:22:ce:08:4b:43:3b:a4:51:99:9c:5f: f8:9f:fe:d6:a4:3a:d1:f1:46:21:ea:fa:0c:e7:d6:f0:10:5f: 60:0c:6f:db:3b:52:92:54:99:9b:8b:64:db:a6:3b:54:e0:b4: bf:de:a6:09:d2:4a:09:c0:cb:39:d8:a8:f3:88:9d:c7:02:4c: 07:82:20:84:f4:34:1c:9d:4b:33:4b:25:6c:33:a2:fb:9f:05: c7:8e:cd:fe:6c:e8:54:b4:71:40:6b:fc:ad:00:99:70:f4:60: e2:9f:53:e4:5a:27:98:44:a3:2c:86:bf:07:0f:cf:00:13:fb: 69:00:a3:78:cd:7f:f9:65:43:8d:7c:bd:c2:6e:14:b1:ed:41: 0a:a6:8e:ba:e4:40:80:a3:e0:3a:1b:65:ae:03:68:fd:50:08: 3d:f4:9d:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm59DUi+YlGvyEBbExiO2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNmZmYjk5MDZlZWJlYmExZjViMWE1NThlZWQ2MzcyZjY1 M2NlODYwHhcNMjUxMjA2MDMwMTM5WhcNMjUxMjA3MDMwMTM5WjAzMTEwLwYDVQQD EyhjYjliNjM5MTg0NWUyMTZmNjVhYjc0NGUzNGRhMmFlNWY3Y2JkNGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuz+pGYPlmrr3Btqu9Zw9sPj4+Uf ko3R2VK27uCQ/gVn89+Fz4r7sXY9IFMrl31lqAy9imQONCp+9RvESijPr8t4BIFm k82BQtDE0WJGXXmxAEJlpO6Uv2TsrRg3PM+qU92Y9uXAf1aDE/nZXBoWbmllptoH qin4ucUNTJ1V5UJ3e04RrP+0z3hQ2eTQ3ymDEy2gl4k+oN2BlS//um1tQnE57G9B ExYFkuOrli18fzunzIucXsj5BE08gYTESMGioM3N0VaSSOKLGfTvtbAnvv+PEjMQ ngkF3p8tSoGHmWWH76MWJ2ivhqCX+B48GrrZDQoRfjH+OsR/ALxCLwQaXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMubY5GEXiFvZat0TjTaKuX3y9TyMB8GA1UdIwQY MBaAFE5v+5kG7r66H1saVY7tY3L2U86GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xOTgwYmQtMDc1My00MTYxLWI2ZjUt OWM3MmUxNTdhYmIzLzEvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8xOTgwYmQtMDc1My00MTYxLWI2ZjUtOWM3MmUxNTdhYmIz LzEvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYhzC7W1i fPhm7pp1GFNyFeD3hcCR1O7JUV8BXgBmiHpkwMwl5wkyFHP8NHE8QwmZpD6hbICL 0fwvpYOLKHcDSM3oss0PqmJ7vV5kK3xdyjH///v/4r+WBz36XLstLu/aJSLOCEtD O6RRmZxf+J/+1qQ60fFGIer6DOfW8BBfYAxv2ztSklSZm4tk26Y7VOC0v96mCdJK CcDLOdio84idxwJMB4IghPQ0HJ1LM0slbDOi+58Fx47N/mzoVLRxQGv8rQCZcPRg 4p9T5FonmESjLIa/Bw/PABP7aQCjeM1/+WVDjXy9wm4Use1BCqaOuuRAgKPgOhtl rgNo/VAIPfSdcg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:46 2025 by rpki-client