This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft File: TnCtvlP18oWwVz3yRuJdUWUdeEk.mft (raw, json) Hash identifier: ws54na3mrDo0IZm83CHLjDHnALO+q/Ql74nwFCW0ve8= Subject key identifier: E3:3D:F6:BA:37:C7:B8:62:C0:BE:13:9E:A0:F5:80:8D:93:17:54:65 Authority key identifier: 4E:70:AD:BE:53:F5:F2:85:B0:57:3D:F2:46:E2:5D:51:65:1D:78:49 Certificate issuer: /CN=4e70adbe53f5f285b0573df246e25d51651d7849 Certificate serial: 019AF31DA223F14D83BA77974CCCB3D1F096 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft Manifest number: 0216 Signing time: Sat 06 Dec 2025 10:03:16 +0000 Manifest this update: Sat 06 Dec 2025 10:03:16 +0000 Manifest next update: Sun 07 Dec 2025 10:03:16 +0000 Files and hashes: 1: TnCtvlP18oWwVz3yRuJdUWUdeEk.crl (hash: c64h6FpVdF+oP/cVciAAwfRDHedGBJajcPKLGZ9sVSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:a2:23:f1:4d:83:ba:77:97:4c:cc:b3:d1:f0:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e70adbe53f5f285b0573df246e25d51651d7849 Validity Not Before: Dec 6 10:03:16 2025 GMT Not After : Dec 7 10:03:16 2025 GMT Subject: CN=e33df6ba37c7b862c0be139ea0f5808d93175465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f4:00:c6:99:95:71:c8:56:8f:e0:43:29:68: 0e:6f:10:2c:88:66:6b:87:96:f7:c6:d3:43:4e:fb: 05:b4:67:6c:9f:69:3f:4d:db:e4:92:f9:dd:99:52: fd:e9:2a:41:30:95:8f:42:ea:5c:34:93:ff:cf:21: 20:b6:68:ba:d8:40:db:82:0b:9b:f2:72:a6:a2:f2: ba:29:e2:d7:fa:44:2c:0a:9d:c4:a1:8b:43:e9:9e: 4a:b0:0d:c0:0a:2e:29:da:b5:6e:56:76:f7:3a:7f: 97:d0:4f:c9:df:4a:c3:81:2d:4a:64:27:1c:7b:57: cc:08:64:54:b2:c5:39:7c:49:7a:b9:09:ab:b0:d7: 56:8e:04:99:41:58:b4:5f:a4:d9:8e:de:44:55:85: cc:1a:bb:7f:13:71:15:bd:98:fe:be:bf:29:9f:cb: 07:14:04:82:af:84:8d:b2:cd:39:98:36:94:70:55: 88:b1:ec:13:96:c8:bb:af:d4:6d:da:86:1e:72:77: 20:5e:4a:94:ee:ce:85:97:d5:98:e8:47:43:70:32: 68:45:74:79:30:81:cd:3e:66:2b:33:b2:f6:27:e4: cb:d8:9f:d3:5c:2b:84:3e:7b:61:37:05:2f:92:45: 6c:eb:65:00:fe:ad:a4:bf:bb:36:92:e2:2b:57:e9: 71:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3D:F6:BA:37:C7:B8:62:C0:BE:13:9E:A0:F5:80:8D:93:17:54:65 X509v3 Authority Key Identifier: keyid:4E:70:AD:BE:53:F5:F2:85:B0:57:3D:F2:46:E2:5D:51:65:1D:78:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:fd:a5:26:6c:a4:55:2a:6b:89:f2:6c:a5:ac:57:15:d1:a7: 4b:12:57:bd:d9:6b:2a:36:ca:5a:38:84:ba:2c:d0:5d:35:60: f4:a1:71:c0:b5:a9:b1:9b:e1:78:1d:a1:70:d6:8f:f7:9c:9e: 9b:96:99:23:c9:57:8a:96:b0:b3:54:bc:92:43:1f:74:fb:05: 11:08:bb:5b:4e:70:96:4b:21:26:c6:75:a7:49:89:ba:9e:38: 6a:5b:4e:0d:22:e7:d8:51:7b:25:36:6f:0b:a8:42:8d:c5:dd: a9:d3:0e:17:ec:86:66:02:b2:af:8b:31:6e:50:d7:80:49:bd: 5f:51:ac:14:bc:ef:c8:b3:f8:84:f7:ec:30:df:15:78:00:be: 09:a7:6e:19:eb:b8:f6:4d:ef:e9:05:3c:8a:88:d4:2d:54:61: 4b:57:95:b0:37:71:44:89:da:f5:5a:56:ac:1b:ef:f9:18:1b: 60:b7:df:7f:c0:f0:d0:dc:ac:56:11:dc:9e:b0:6b:40:6e:b1: e2:81:bb:f9:38:23:c8:0d:e9:9d:2d:15:a5:ae:91:04:64:39: 31:32:f9:81:8a:26:84:a3:62:11:cf:19:38:0e:4a:ea:b7:e3: ca:2b:cf:07:6d:7a:c6:e4:26:0e:ec:fa:44:c6:55:45:31:87: 6f:e4:c9:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHaIj8U2DuneXTMyz0fCWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNzBhZGJlNTNmNWYyODViMDU3M2RmMjQ2ZTI1ZDUxNjUx ZDc4NDkwHhcNMjUxMjA2MTAwMzE2WhcNMjUxMjA3MTAwMzE2WjAzMTEwLwYDVQQD EyhlMzNkZjZiYTM3YzdiODYyYzBiZTEzOWVhMGY1ODA4ZDkzMTc1NDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/QAxpmVcchWj+BDKWgObxAsiGZr h5b3xtNDTvsFtGdsn2k/TdvkkvndmVL96SpBMJWPQupcNJP/zyEgtmi62EDbggub 8nKmovK6KeLX+kQsCp3EoYtD6Z5KsA3ACi4p2rVuVnb3On+X0E/J30rDgS1KZCcc e1fMCGRUssU5fEl6uQmrsNdWjgSZQVi0X6TZjt5EVYXMGrt/E3EVvZj+vr8pn8sH FASCr4SNss05mDaUcFWIsewTlsi7r9Rt2oYecncgXkqU7s6Fl9WY6EdDcDJoRXR5 MIHNPmYrM7L2J+TL2J/TXCuEPnthNwUvkkVs62UA/q2kv7s2kuIrV+lxLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOM99ro3x7hiwL4TnqD1gI2TF1RlMB8GA1UdIwQY MBaAFE5wrb5T9fKFsFc98kbiXVFlHXhJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG5DdHZsUDE4b1d3VnozeVJ1SmRVV1VkZUVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83NGY0M2UtYmJmZS00OTYwLThmMzMt YzFlNmMxYjMxOTFkLzEvVG5DdHZsUDE4b1d3VnozeVJ1SmRVV1VkZUVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83NGY0M2UtYmJmZS00OTYwLThmMzMtYzFlNmMxYjMxOTFk LzEvVG5DdHZsUDE4b1d3VnozeVJ1SmRVV1VkZUVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv/2lJmyk VSprifJspaxXFdGnSxJXvdlrKjbKWjiEuizQXTVg9KFxwLWpsZvheB2hcNaP95ye m5aZI8lXipaws1S8kkMfdPsFEQi7W05wlkshJsZ1p0mJup44altODSLn2FF7JTZv C6hCjcXdqdMOF+yGZgKyr4sxblDXgEm9X1GsFLzvyLP4hPfsMN8VeAC+CaduGeu4 9k3v6QU8iojULVRhS1eVsDdxRIna9VpWrBvv+RgbYLfff8Dw0NysVhHcnrBrQG6x 4oG7+TgjyA3pnS0Vpa6RBGQ5MTL5gYomhKNiEc8ZOA5K6rfjyivPB216xuQmDuz6 RMZVRTGHb+TJRw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:21:40 2025 by rpki-client