This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft File: TF_Sw94QWTTPD_SdJtnciFjOXdE.mft (raw, json) Hash identifier: xZvob6cETRq7XmDyNbOWISgWhZjXVtEGagUZAQMJzdg= Subject key identifier: F4:D7:FB:66:A2:4F:4A:4D:A4:63:33:79:3E:EB:B4:B8:23:E2:31:E1 Authority key identifier: 4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1 Certificate issuer: /CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1 Certificate serial: 019AF12D615E6AC92EE3D9D4435340FCF49E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft Manifest number: 111E Signing time: Sat 06 Dec 2025 01:01:14 +0000 Manifest this update: Sat 06 Dec 2025 01:01:14 +0000 Manifest next update: Sun 07 Dec 2025 01:01:14 +0000 Files and hashes: 1: TF_Sw94QWTTPD_SdJtnciFjOXdE.crl (hash: CoNjW+0eVXMrMnlt04Acd72SV/ZgkfeJF+LxASa8huc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:61:5e:6a:c9:2e:e3:d9:d4:43:53:40:fc:f4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1 Validity Not Before: Dec 6 01:01:14 2025 GMT Not After : Dec 7 01:01:14 2025 GMT Subject: CN=f4d7fb66a24f4a4da46333793eebb4b823e231e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9f:70:9f:6e:d2:2d:06:d6:14:f6:88:d6:18: e2:04:c9:d1:b4:21:4b:73:1e:82:18:bb:95:32:b1: f4:2d:b1:91:13:c1:5e:c3:30:ff:e8:8f:bf:1d:47: 2f:98:70:03:2e:d8:0a:26:2e:cf:5f:aa:e3:4a:27: e8:c3:4f:f9:60:0b:53:a9:4f:ad:23:1e:cf:5b:b3: f3:75:4a:79:5a:22:24:e8:46:3d:4d:63:6a:9a:1f: 8f:aa:e8:22:18:60:9a:ab:01:e9:19:2e:16:f1:c7: a8:80:fb:86:a1:e9:5f:56:00:be:12:00:ea:98:0d: fc:26:2a:0c:57:26:31:dd:2a:13:94:79:92:bd:5e: 4d:6e:ce:c6:6d:d5:e7:b1:a2:af:ff:48:08:d2:80: 5a:73:ee:13:15:ba:35:9c:55:2e:b0:54:e1:50:79: 35:20:1e:00:6b:4a:c7:c7:a5:05:6b:a9:8f:ba:f3: 51:b0:be:ab:e8:e4:10:d1:bc:e3:82:03:27:15:e4: 89:fc:67:25:07:6a:0d:8d:91:c2:e1:59:b1:2d:27: 59:fd:0e:47:6b:c3:2c:0d:a5:9d:60:b4:4f:8c:c3: 14:79:34:97:31:a7:5f:36:4a:3c:68:ce:ad:dd:23: 2f:d3:83:6a:04:12:d4:3e:11:f4:6c:75:64:ec:46: 53:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D7:FB:66:A2:4F:4A:4D:A4:63:33:79:3E:EB:B4:B8:23:E2:31:E1 X509v3 Authority Key Identifier: keyid:4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c4:cc:a2:b1:a5:8d:6f:e8:e6:40:b2:99:ba:5b:93:bc:1b: 82:8a:ea:40:09:cf:fa:d5:4c:79:60:a1:72:9f:6d:19:81:dc: 2c:81:27:1d:3b:d0:df:d8:26:57:16:4a:00:0e:01:40:41:13: d8:0d:46:0b:3e:59:93:11:57:16:eb:84:5e:eb:7b:71:dd:e0: 66:a2:7a:7d:33:23:8f:14:09:61:a0:f4:ff:5f:79:80:60:8b: e0:46:64:e7:41:ad:21:43:e8:5d:17:50:85:67:7e:7b:ba:c9: bb:de:47:08:43:0a:94:db:4d:1e:9c:90:2f:1f:70:42:79:43: 67:aa:57:20:47:45:d8:58:64:d6:b2:7b:bd:cc:ad:c6:7f:f4: 2f:77:71:0b:1f:4c:9b:35:b7:05:82:27:af:0d:30:e5:34:6a: 24:fd:04:40:ff:3c:3b:f0:53:e6:84:c8:77:6f:da:c8:4e:6a: d2:40:12:7f:9a:a0:14:2d:5b:ab:61:b6:b8:e9:0d:90:7f:40: e9:e1:53:10:b7:4e:5c:bf:c2:7d:b6:39:70:0e:6c:11:85:97: 2b:5d:46:6b:eb:81:4b:3f:fb:2a:7d:23:5f:cf:85:3b:3c:00: a5:77:47:a3:b0:d6:3c:fb:8f:0a:71:9d:58:10:5f:e5:2f:a4: 50:2a:5f:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWFeasku49nUQ1NA/PSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNWZkMmMzZGUxMDU5MzRjZjBmZjQ5ZDI2ZDlkYzg4NThj ZTVkZDEwHhcNMjUxMjA2MDEwMTE0WhcNMjUxMjA3MDEwMTE0WjAzMTEwLwYDVQQD EyhmNGQ3ZmI2NmEyNGY0YTRkYTQ2MzMzNzkzZWViYjRiODIzZTIzMWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3J9wn27SLQbWFPaI1hjiBMnRtCFL cx6CGLuVMrH0LbGRE8FewzD/6I+/HUcvmHADLtgKJi7PX6rjSifow0/5YAtTqU+t Ix7PW7PzdUp5WiIk6EY9TWNqmh+PqugiGGCaqwHpGS4W8ceogPuGoelfVgC+EgDq mA38JioMVyYx3SoTlHmSvV5Nbs7GbdXnsaKv/0gI0oBac+4TFbo1nFUusFThUHk1 IB4Aa0rHx6UFa6mPuvNRsL6r6OQQ0bzjggMnFeSJ/GclB2oNjZHC4VmxLSdZ/Q5H a8MsDaWdYLRPjMMUeTSXMadfNko8aM6t3SMv04NqBBLUPhH0bHVk7EZTGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTX+2aiT0pNpGMzeT7rtLgj4jHhMB8GA1UdIwQY MBaAFExf0sPeEFk0zw/0nSbZ3IhYzl3RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEZfU3c5NFFXVFRQRF9TZEp0bmNpRmpPWGRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81NGY2MDItYzcxMi00ZDcyLWE0NmEt MjA4NTY1YmIyZDYzLzEvVEZfU3c5NFFXVFRQRF9TZEp0bmNpRmpPWGRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81NGY2MDItYzcxMi00ZDcyLWE0NmEtMjA4NTY1YmIyZDYz LzEvVEZfU3c5NFFXVFRQRF9TZEp0bmNpRmpPWGRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMTMorGl jW/o5kCymbpbk7wbgorqQAnP+tVMeWChcp9tGYHcLIEnHTvQ39gmVxZKAA4BQEET 2A1GCz5ZkxFXFuuEXut7cd3gZqJ6fTMjjxQJYaD0/195gGCL4EZk50GtIUPoXRdQ hWd+e7rJu95HCEMKlNtNHpyQLx9wQnlDZ6pXIEdF2Fhk1rJ7vcytxn/0L3dxCx9M mzW3BYInrw0w5TRqJP0EQP88O/BT5oTId2/ayE5q0kASf5qgFC1bq2G2uOkNkH9A 6eFTELdOXL/CfbY5cA5sEYWXK11Ga+uBSz/7Kn0jX8+FOzwApXdHo7DWPPuPCnGd WBBf5S+kUCpfjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:01 2025 by rpki-client