This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft File: tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft (raw, json) Hash identifier: iXURyc+YnmtJhk+cIGusCiRpldr3J0VnNPujzlt9bPE= Subject key identifier: F3:CF:D7:63:35:C0:B3:16:F2:7C:F5:D0:BC:D8:3B:DA:ED:56:E9:1F Authority key identifier: B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5 Certificate issuer: /CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5 Certificate serial: 019AF31B9868FA0C41A3A45145B6C5EF418F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft Manifest number: 08EF Signing time: Sat 06 Dec 2025 10:01:03 +0000 Manifest this update: Sat 06 Dec 2025 10:01:03 +0000 Manifest next update: Sun 07 Dec 2025 10:01:03 +0000 Files and hashes: 1: tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl (hash: psT5PTt2uJWAOIjLw5wH8LRoah8xUnUY9fllT8kTyM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:98:68:fa:0c:41:a3:a4:51:45:b6:c5:ef:41:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5 Validity Not Before: Dec 6 10:01:03 2025 GMT Not After : Dec 7 10:01:03 2025 GMT Subject: CN=f3cfd76335c0b316f27cf5d0bcd83bdaed56e91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:18:1e:d1:fe:6f:1f:46:66:73:28:10:8d:3d: 14:7c:99:3e:b9:84:af:08:ae:34:a2:b7:7b:dc:7b: 58:3a:60:1b:61:14:ba:05:36:c6:fa:44:19:d1:41: de:a9:97:d8:68:93:5d:09:f8:a0:33:45:03:87:51: 01:4e:61:1b:17:d7:1a:68:f7:78:bc:3e:02:ba:15: 10:46:de:fa:99:2f:48:73:8d:5c:f1:6f:07:c2:c9: 97:20:ab:7b:fa:b1:f1:92:dd:fa:c9:c5:2f:5f:2b: c9:29:57:a3:43:5b:2e:21:af:8e:40:c4:fb:22:4d: a5:5e:a6:8a:f7:68:b3:2f:be:06:e9:a5:f5:ff:15: fb:bb:19:a5:b2:23:5e:cb:67:9a:98:81:26:3d:a5: 4a:14:63:b7:20:7e:fc:ba:90:08:82:aa:41:30:54: b4:03:01:74:f6:73:9e:f6:33:1c:1c:b6:8c:15:70: 6c:69:64:c3:74:e4:e6:0e:95:67:b2:99:de:ae:8d: c6:0a:65:fb:73:0f:7b:d6:b3:00:71:66:9f:b2:49: 6e:cf:10:fb:72:b2:32:67:c6:c5:ab:dd:69:bc:c1: 29:52:f2:dd:b6:34:55:6c:90:ed:33:d4:a3:9c:7c: 9a:61:79:54:34:82:ee:c3:fc:8a:08:3c:cb:50:52: d1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CF:D7:63:35:C0:B3:16:F2:7C:F5:D0:BC:D8:3B:DA:ED:56:E9:1F X509v3 Authority Key Identifier: keyid:B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:8f:0e:71:d5:ef:c8:54:37:b7:31:e1:a9:90:fd:b9:c9:b4: fc:65:7d:38:ae:91:01:bb:fc:2e:66:8c:80:66:71:bc:52:e0: 28:2f:06:cf:f1:f5:d2:c8:b0:30:0e:52:4f:5e:8d:c9:c5:9c: 19:35:7b:32:1d:be:77:6d:7e:42:21:6e:f1:c4:c1:4a:99:ce: 1c:9b:d8:fe:1c:b1:e6:a0:c6:d4:d2:6e:06:e0:8d:fd:31:55: 21:55:67:78:ad:86:63:42:d6:4c:e3:26:f2:3f:fb:33:53:b1: a3:fa:0f:27:81:81:6e:22:df:c2:5e:ae:9a:3c:3a:38:3d:95: dd:75:7a:b9:43:a1:ec:ec:cf:70:ac:7d:99:a1:f2:7d:af:65: a4:35:e3:4f:cd:db:1f:be:af:4e:b6:0e:7c:0f:c8:2c:dc:a4: 9d:80:13:20:23:0c:b3:dd:c9:10:1d:6a:a9:c9:5f:20:30:7f: eb:e9:85:29:55:19:34:ce:cf:32:19:f2:d8:c7:93:76:32:68: 27:c3:0c:97:f8:42:89:b5:75:7e:24:e7:36:34:ef:ef:6b:00: 3a:67:73:5b:91:3c:97:87:9d:98:67:1f:8f:96:f2:84:77:24: d7:12:2c:af:fa:ec:8f:22:13:de:aa:1b:cb:b5:c0:6d:81:1c: 04:07:da:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5ho+gxBo6RRRbbF70GPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YThmMmNhMjNlMTAyZDRkMzU3MTEzNjJkMjRhYmQ0N2Iw OWU5ZTUwHhcNMjUxMjA2MTAwMTAzWhcNMjUxMjA3MTAwMTAzWjAzMTEwLwYDVQQD EyhmM2NmZDc2MzM1YzBiMzE2ZjI3Y2Y1ZDBiY2Q4M2JkYWVkNTZlOTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshge0f5vH0ZmcygQjT0UfJk+uYSv CK40ord73HtYOmAbYRS6BTbG+kQZ0UHeqZfYaJNdCfigM0UDh1EBTmEbF9caaPd4 vD4CuhUQRt76mS9Ic41c8W8HwsmXIKt7+rHxkt36ycUvXyvJKVejQ1suIa+OQMT7 Ik2lXqaK92izL74G6aX1/xX7uxmlsiNey2eamIEmPaVKFGO3IH78upAIgqpBMFS0 AwF09nOe9jMcHLaMFXBsaWTDdOTmDpVnspnero3GCmX7cw971rMAcWafskluzxD7 crIyZ8bFq91pvMEpUvLdtjRVbJDtM9SjnHyaYXlUNILuw/yKCDzLUFLRFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPP12M1wLMW8nz10LzYO9rtVukfMB8GA1UdIwQY MBaAFLWo8soj4QLU01cRNi0kq9R7CenlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGFqeXlpUGhBdFRUVnhFMkxTU3IxSHNKNmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mNmY3NTItYzA0Yi00ZWE4LTg1N2Qt OGE4NzQ0ZTQ1NDE3LzEvdGFqeXlpUGhBdFRUVnhFMkxTU3IxSHNKNmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mNmY3NTItYzA0Yi00ZWE4LTg1N2QtOGE4NzQ0ZTQ1NDE3 LzEvdGFqeXlpUGhBdFRUVnhFMkxTU3IxSHNKNmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgY8OcdXv yFQ3tzHhqZD9ucm0/GV9OK6RAbv8LmaMgGZxvFLgKC8Gz/H10siwMA5ST16NycWc GTV7Mh2+d21+QiFu8cTBSpnOHJvY/hyx5qDG1NJuBuCN/TFVIVVneK2GY0LWTOMm 8j/7M1Oxo/oPJ4GBbiLfwl6umjw6OD2V3XV6uUOh7OzPcKx9maHyfa9lpDXjT83b H76vTrYOfA/ILNyknYATICMMs93JEB1qqclfIDB/6+mFKVUZNM7PMhny2MeTdjJo J8MMl/hCibV1fiTnNjTv72sAOmdzW5E8l4edmGcfj5byhHck1xIsr/rsjyIT3qob y7XAbYEcBAfaKg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:47 2025 by rpki-client