This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft File: TjS6bj4mlMezjkZRr-4GGwsh3q4.mft (raw, json) Hash identifier: Wg2ZtFNCdX5dw5ytEyt/GEHp5i0U8olb7QMuCbwgBPU= Subject key identifier: 4F:78:DA:7B:64:15:A2:EA:83:73:AA:12:63:CF:40:2B:60:E9:4C:9A Authority key identifier: 4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE Certificate issuer: /CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae Certificate serial: 019B3C7E59487949CAF067417510E4D32A95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft Manifest number: 02A9 Signing time: Sat 20 Dec 2025 16:01:11 +0000 Manifest this update: Sat 20 Dec 2025 16:01:11 +0000 Manifest next update: Sun 21 Dec 2025 16:01:11 +0000 Files and hashes: 1: TjS6bj4mlMezjkZRr-4GGwsh3q4.crl (hash: E7pcOLtA/H8d+LQcHqaHM7TolAhfLFoOPN9Ty8csYoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:59:48:79:49:ca:f0:67:41:75:10:e4:d3:2a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae Validity Not Before: Dec 20 16:01:11 2025 GMT Not After : Dec 21 16:01:11 2025 GMT Subject: CN=4f78da7b6415a2ea8373aa1263cf402b60e94c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:56:ee:96:43:4e:ce:43:ac:f2:58:88:fc:3b: ad:b1:57:43:ce:21:a5:3c:15:5d:8e:90:dc:96:bb: 0d:47:ee:3e:5f:6a:9a:88:3d:86:e8:3f:81:48:23: b0:12:a4:51:49:03:48:d8:75:a2:40:4c:8c:ef:80: 98:2b:37:56:a5:a3:e3:40:02:dd:ee:9d:c9:99:6b: 4f:c3:a3:71:21:6b:f1:4f:a0:71:9d:a9:ed:0b:a1: eb:36:6a:26:fd:ee:05:b7:59:94:61:89:2e:0d:91: a1:08:f5:87:98:f5:4d:15:ff:33:72:ef:83:99:6f: 42:7c:86:29:90:ad:eb:55:39:6a:42:0a:74:38:b2: c8:41:6e:53:46:d8:bb:86:2f:25:d5:26:b4:9a:56: 7f:42:8f:e7:e0:b4:25:a7:df:3c:f4:9d:20:9b:33: f4:72:b5:b6:ac:88:8e:e0:ff:37:b9:1f:85:73:70: 67:a3:e2:61:80:ac:85:b1:02:ac:84:96:15:5c:92: 27:08:50:f8:b9:62:59:6f:49:2c:11:29:c7:c0:ff: ac:85:68:59:b2:58:ba:7f:4d:af:f8:ae:a3:7f:4f: b3:69:d8:08:a0:65:5b:53:bc:30:26:d6:c9:df:b4: 7a:55:83:3b:4d:b8:48:25:2d:6c:9d:43:b8:25:a0: 8c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:78:DA:7B:64:15:A2:EA:83:73:AA:12:63:CF:40:2B:60:E9:4C:9A X509v3 Authority Key Identifier: keyid:4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:60:d2:a8:e8:c8:0e:1b:5a:8e:03:38:b6:4c:47:a1:03:33: a2:a3:5f:c2:54:bc:d5:0e:24:74:50:d5:f3:87:8d:b8:bd:b2: 0d:ad:2e:b1:41:dc:7e:e0:ae:93:03:49:e1:5d:f6:c4:16:dd: 9a:83:c0:fd:7c:79:63:28:c6:6f:22:c9:c3:a5:40:5b:58:f0: e6:cc:e7:9b:d4:a1:cc:39:61:b8:30:c5:3a:cd:5d:32:30:86: ee:d2:5c:9e:64:3b:25:80:2a:c9:b7:1b:a4:b0:04:0f:df:26: 7a:f8:8b:a9:90:f6:82:b8:da:72:43:a8:63:25:f2:0b:a7:6e: 5e:6b:5c:dc:96:12:45:8e:9f:a3:f2:e2:dd:10:d2:1f:96:2f: 09:72:49:04:46:16:3d:17:69:b4:f0:cc:f2:e4:3d:22:7f:bb: a1:45:40:e9:f3:2f:99:9d:cb:c4:f3:48:c3:41:cc:cd:b2:7b: 83:8f:38:0e:ae:16:97:ab:65:41:26:db:1f:06:f9:00:0c:e1: 1b:37:4c:a2:e6:42:f2:35:0b:9e:ee:0a:d7:0c:59:53:40:f9: c6:fe:37:ad:6a:1b:12:8f:79:fe:dc:d7:85:c2:b9:52:e7:3b: 2c:74:96:8a:a1:f8:2f:b1:99:3a:2a:36:3f:41:9a:01:77:3e: 7d:0d:10:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fllIeUnK8GdBdRDk0yqVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMzRiYTZlM2UyNjk0YzdiMzhlNDY1MWFmZWUwNjFiMGIy MWRlYWUwHhcNMjUxMjIwMTYwMTExWhcNMjUxMjIxMTYwMTExWjAzMTEwLwYDVQQD Eyg0Zjc4ZGE3YjY0MTVhMmVhODM3M2FhMTI2M2NmNDAyYjYwZTk0YzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVbulkNOzkOs8liI/DutsVdDziGl PBVdjpDclrsNR+4+X2qaiD2G6D+BSCOwEqRRSQNI2HWiQEyM74CYKzdWpaPjQALd 7p3JmWtPw6NxIWvxT6BxnantC6HrNmom/e4Ft1mUYYkuDZGhCPWHmPVNFf8zcu+D mW9CfIYpkK3rVTlqQgp0OLLIQW5TRti7hi8l1Sa0mlZ/Qo/n4LQlp9889J0gmzP0 crW2rIiO4P83uR+Fc3Bno+JhgKyFsQKshJYVXJInCFD4uWJZb0ksESnHwP+shWhZ sli6f02v+K6jf0+zadgIoGVbU7wwJtbJ37R6VYM7TbhIJS1snUO4JaCMoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE942ntkFaLqg3OqEmPPQCtg6UyaMB8GA1UdIwQY MBaAFE40um4+JpTHs45GUa/uBhsLId6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGpTNmJqNG1sTWV6amtaUnItNEdHd3NoM3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wMmI3ZDYtMjY5Yi00YmIyLWI0NTUt MzkxNzY4NTczNDk2LzEvVGpTNmJqNG1sTWV6amtaUnItNEdHd3NoM3E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8wMmI3ZDYtMjY5Yi00YmIyLWI0NTUtMzkxNzY4NTczNDk2 LzEvVGpTNmJqNG1sTWV6amtaUnItNEdHd3NoM3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGDSqOjI DhtajgM4tkxHoQMzoqNfwlS81Q4kdFDV84eNuL2yDa0usUHcfuCukwNJ4V32xBbd moPA/Xx5YyjGbyLJw6VAW1jw5sznm9ShzDlhuDDFOs1dMjCG7tJcnmQ7JYAqybcb pLAED98meviLqZD2grjackOoYyXyC6duXmtc3JYSRY6fo/Li3RDSH5YvCXJJBEYW PRdptPDM8uQ9In+7oUVA6fMvmZ3LxPNIw0HMzbJ7g484Dq4Wl6tlQSbbHwb5AAzh GzdMouZC8jULnu4K1wxZU0D5xv43rWobEo95/tzXhcK5Uuc7LHSWiqH4L7GZOio2 P0GaAXc+fQ0QVA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:27:54 2025 by rpki-client