This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json) Hash identifier: 9xZZnlMVxQvbd6NNm6jFvTpGnHAfichljL2rvTaBhwE= Subject key identifier: 1E:F3:DE:58:BB:EB:B0:EB:E3:D3:E5:37:7F:EE:E8:15:2D:12:A2:3C Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0 Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0 Certificate serial: 019AF209AD63CD51CF68CFD57B201C7EE8D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft Manifest number: 07F3 Signing time: Sat 06 Dec 2025 05:01:51 +0000 Manifest this update: Sat 06 Dec 2025 05:01:51 +0000 Manifest next update: Sun 07 Dec 2025 05:01:51 +0000 Files and hashes: 1: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: wOtPiejTLqlPFkdUN2abMseu/HFXwfCN1ZU33kYMeIg=) 2: fIoweheWq1JqzVdLBCrrD-x4kK4.roa (hash: yoQba86aaUs4p2P/E/UoxSeIL5NEm/wDobQOVMT4e5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:ad:63:cd:51:cf:68:cf:d5:7b:20:1c:7e:e8:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0 Validity Not Before: Dec 6 05:01:51 2025 GMT Not After : Dec 7 05:01:51 2025 GMT Subject: CN=1ef3de58bbebb0ebe3d3e5377feee8152d12a23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:24:c6:bc:f7:f2:0d:c2:73:b5:2a:34:ce:86: 69:a4:76:39:f9:2c:c6:2a:10:45:fe:96:7d:a3:f3: 23:83:d3:69:02:60:22:52:8e:4b:b3:96:25:d4:3c: d9:c6:75:e1:9d:90:4f:a6:77:b3:f7:f2:6a:02:80: 67:bc:8a:e8:df:91:51:13:1e:e4:a9:64:ea:60:20: c9:82:28:76:4b:88:a6:61:50:eb:6f:37:92:6d:bf: 79:85:00:39:23:4b:40:9f:24:f5:7d:ef:c3:49:86: 10:12:0b:4d:0c:3b:99:2d:48:0f:c6:6b:16:69:c4: ab:d0:25:b0:8e:c5:5a:b8:aa:8d:c2:ab:30:6a:fb: f1:4c:e4:ce:9c:86:f7:11:b3:08:d3:87:37:a9:70: f3:c6:d9:49:10:58:7c:f9:9a:b0:fe:6c:c4:e4:a7: 62:ed:84:6b:f4:8c:59:86:66:78:e1:15:f4:04:a7: 4e:24:05:e3:5a:f3:6d:e8:31:db:6d:24:53:9b:90: f8:55:96:01:50:43:1f:86:56:fd:2e:d9:ae:b9:a8: 38:1b:f6:79:0b:10:00:fd:88:d4:c0:db:9e:01:f4: 26:95:f3:ed:28:67:34:da:d5:19:cd:42:ca:1e:0a: 69:b8:8c:3c:1d:89:df:ca:e7:97:c5:d9:d0:9b:a7: 87:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F3:DE:58:BB:EB:B0:EB:E3:D3:E5:37:7F:EE:E8:15:2D:12:A2:3C X509v3 Authority Key Identifier: keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:f4:e3:47:4c:9d:13:27:a0:89:d0:1a:77:ab:56:4f:91:bd: 9c:fc:bb:bd:98:76:7a:31:d6:b7:57:e6:01:4b:af:7e:d4:db: 23:ef:57:6c:cd:85:e3:ce:fb:72:3e:4a:37:56:1e:8f:fc:9e: e3:a1:2f:6e:19:ee:4a:36:bb:48:54:93:99:ad:cf:e8:69:1b: a3:c8:d3:cd:91:3f:0e:e7:10:f2:c6:ff:e5:6d:3f:3d:a0:3a: f1:73:84:09:e8:81:22:74:49:7a:6d:bb:24:84:92:d0:fc:8c: 9f:e0:e8:de:92:e5:e9:6e:59:7c:bf:d2:ee:c7:9c:de:e6:eb: 9a:5e:be:d0:db:7a:70:5b:40:09:bd:98:a9:11:f4:44:e2:c1: e4:42:d7:f1:56:5c:d6:77:3b:e7:40:11:7f:b0:7f:1b:10:1f: db:12:9b:45:0b:1a:49:ef:2b:8a:86:35:d5:e9:ab:f4:9b:3d: cb:b9:90:c5:68:fc:bb:4c:df:cb:1a:72:78:a5:dd:30:ee:3a: 6d:85:86:b2:d5:44:37:ba:a8:77:42:fc:63:37:13:72:e5:1c: dd:23:d7:27:78:05:08:5c:ac:dd:a1:14:04:8d:cf:51:cc:2e: 9e:99:2b:2f:be:95:43:53:fa:42:6e:2b:b8:2f:63:22:ce:90: 0f:c3:5a:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCa1jzVHPaM/VeyAcfujUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTQ0N2Y3YjNhNzc2ZjcyNGQ4YmM4MTQwYmUzMTc2NjYy YzI0ZDAwHhcNMjUxMjA2MDUwMTUxWhcNMjUxMjA3MDUwMTUxWjAzMTEwLwYDVQQD EygxZWYzZGU1OGJiZWJiMGViZTNkM2U1Mzc3ZmVlZTgxNTJkMTJhMjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CTGvPfyDcJztSo0zoZppHY5+SzG KhBF/pZ9o/Mjg9NpAmAiUo5Ls5Yl1DzZxnXhnZBPpnez9/JqAoBnvIro35FREx7k qWTqYCDJgih2S4imYVDrbzeSbb95hQA5I0tAnyT1fe/DSYYQEgtNDDuZLUgPxmsW acSr0CWwjsVauKqNwqswavvxTOTOnIb3EbMI04c3qXDzxtlJEFh8+Zqw/mzE5Kdi 7YRr9IxZhmZ44RX0BKdOJAXjWvNt6DHbbSRTm5D4VZYBUEMfhlb9Ltmuuag4G/Z5 CxAA/YjUwNueAfQmlfPtKGc02tUZzULKHgppuIw8HYnfyueXxdnQm6eHCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7z3li767Dr49PlN3/u6BUtEqI8MB8GA1UdIwQY MBaAFEykR/ezp3b3JNi8gUC+MXZmLCTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZjNlMGItMjZjMy00Y2Y5LTgwNTYt MjlhZjMzYmM2Yjk4LzEvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZjNlMGItMjZjMy00Y2Y5LTgwNTYtMjlhZjMzYmM2Yjk4 LzEvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfTjR0yd EyegidAad6tWT5G9nPy7vZh2ejHWt1fmAUuvftTbI+9XbM2F4877cj5KN1Yej/ye 46EvbhnuSja7SFSTma3P6Gkbo8jTzZE/DucQ8sb/5W0/PaA68XOECeiBInRJem27 JISS0PyMn+Do3pLl6W5ZfL/S7sec3ubrml6+0Nt6cFtACb2YqRH0ROLB5ELX8VZc 1nc750ARf7B/GxAf2xKbRQsaSe8rioY11emr9Js9y7mQxWj8u0zfyxpyeKXdMO46 bYWGstVEN7qod0L8YzcTcuUc3SPXJ3gFCFys3aEUBI3PUcwunpkrL76VQ1P6Qm4r uC9jIs6QD8NaiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:17 2025 by rpki-client