This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft File: TjS6bj4mlMezjkZRr-4GGwsh3q4.mft (raw, json) Hash identifier: w1VTVUmhBxE4j6RsZJ2LernLeCEs36YOqXGi6r1eMIo= Subject key identifier: 1C:D3:8F:34:A8:6D:98:7C:EF:65:97:C8:F2:1C:9F:EA:C1:0B:21:EE Authority key identifier: 4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE Certificate issuer: /CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae Certificate serial: 019AF12D586A75234621B5B95529EA12ED71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft Manifest number: 0282 Signing time: Sat 06 Dec 2025 01:01:12 +0000 Manifest this update: Sat 06 Dec 2025 01:01:12 +0000 Manifest next update: Sun 07 Dec 2025 01:01:12 +0000 Files and hashes: 1: TjS6bj4mlMezjkZRr-4GGwsh3q4.crl (hash: gBsG8Sh1f751X95zBkz4GgXoaGym1kvS12e/4/M1emY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:58:6a:75:23:46:21:b5:b9:55:29:ea:12:ed:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae Validity Not Before: Dec 6 01:01:12 2025 GMT Not After : Dec 7 01:01:12 2025 GMT Subject: CN=1cd38f34a86d987cef6597c8f21c9feac10b21ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a8:0e:10:a6:37:c7:ed:78:a2:3f:63:9e:7e: da:98:f9:fd:6e:90:b0:88:84:33:5f:0a:a3:6c:67: 9c:c9:87:9d:d1:99:fa:3f:90:2f:20:b6:27:48:7e: be:c3:4b:80:fc:35:b2:e4:c3:b1:f9:4a:28:21:5e: 50:ac:7c:96:ec:44:52:67:47:8d:c8:6f:46:ad:26: 08:76:33:b4:31:e1:a9:73:e9:21:01:65:b1:ff:30: 86:b8:fd:3c:e9:24:4f:4e:6e:2a:d1:84:3a:64:6a: ba:fd:64:c9:a8:22:68:21:78:98:0e:07:46:1e:5a: ae:62:6e:3b:3a:50:5b:67:8b:c7:7d:a8:a0:37:25: aa:bc:48:89:40:6f:90:63:9d:d2:25:8b:d2:fb:24: 0e:a4:c3:fd:70:86:53:62:06:0d:e6:b3:e5:87:53: 8f:7a:45:29:41:67:82:19:c2:5b:77:46:70:c1:1b: b8:51:1f:b0:15:0d:99:4e:60:ee:e5:3a:64:a3:ed: 89:02:18:35:b2:db:1b:a7:73:a2:99:f7:db:36:82: 62:99:85:d5:c0:49:c7:7c:a4:90:20:c5:f7:17:8b: 8c:02:91:2b:b2:d1:b4:cd:18:f5:f2:13:02:c8:bb: c2:e0:53:15:bf:68:46:3f:43:31:38:f1:7b:7f:82: 86:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D3:8F:34:A8:6D:98:7C:EF:65:97:C8:F2:1C:9F:EA:C1:0B:21:EE X509v3 Authority Key Identifier: keyid:4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:b3:54:02:6a:a0:07:1e:cb:a9:7a:f1:cc:97:c0:c2:80:b5: a7:cb:ab:f3:eb:77:49:0e:f4:eb:03:e3:18:5b:16:3e:5c:63: 62:58:0e:e7:38:38:ad:b6:e5:27:38:ba:cf:ec:b2:a0:d9:d5: fc:d4:d9:4b:7f:ae:e3:71:ef:bf:1b:66:fa:12:28:49:18:52: 25:23:8b:b4:52:05:7d:76:4d:00:09:1a:91:e8:f2:fd:7b:77: ad:d7:cc:61:9c:e9:25:b0:80:4a:bd:bb:70:de:62:7c:85:ca: 2b:39:8f:0b:03:96:d8:62:64:5a:bc:aa:7e:41:16:99:11:7f: 9f:bd:e0:52:31:0a:63:ad:7e:17:fa:34:77:7a:c6:4c:a9:b9: f7:88:fc:11:e4:d8:ff:72:46:b8:1d:e0:d9:0f:9d:7d:05:25: 89:52:2d:a6:08:84:bf:84:f3:c3:55:1e:e3:68:ff:79:c3:c6: 41:45:84:97:ab:dc:93:f4:38:09:f9:59:25:0f:62:b0:54:30: 3c:8d:62:41:3a:03:52:b4:82:d9:1e:f4:ed:8a:17:89:fb:1d: e9:7c:ed:3c:de:83:cc:12:9c:05:1c:e0:f5:e0:41:e1:38:04: 81:13:01:0f:6d:48:34:7b:56:3b:77:d8:81:10:18:f2:b6:00: 6f:08:a2:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVhqdSNGIbW5VSnqEu1xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMzRiYTZlM2UyNjk0YzdiMzhlNDY1MWFmZWUwNjFiMGIy MWRlYWUwHhcNMjUxMjA2MDEwMTEyWhcNMjUxMjA3MDEwMTEyWjAzMTEwLwYDVQQD EygxY2QzOGYzNGE4NmQ5ODdjZWY2NTk3YzhmMjFjOWZlYWMxMGIyMWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6gOEKY3x+14oj9jnn7amPn9bpCw iIQzXwqjbGecyYed0Zn6P5AvILYnSH6+w0uA/DWy5MOx+UooIV5QrHyW7ERSZ0eN yG9GrSYIdjO0MeGpc+khAWWx/zCGuP086SRPTm4q0YQ6ZGq6/WTJqCJoIXiYDgdG HlquYm47OlBbZ4vHfaigNyWqvEiJQG+QY53SJYvS+yQOpMP9cIZTYgYN5rPlh1OP ekUpQWeCGcJbd0ZwwRu4UR+wFQ2ZTmDu5Tpko+2JAhg1stsbp3OimffbNoJimYXV wEnHfKSQIMX3F4uMApErstG0zRj18hMCyLvC4FMVv2hGP0MxOPF7f4KGXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzTjzSobZh872WXyPIcn+rBCyHuMB8GA1UdIwQY MBaAFE40um4+JpTHs45GUa/uBhsLId6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGpTNmJqNG1sTWV6amtaUnItNEdHd3NoM3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wMmI3ZDYtMjY5Yi00YmIyLWI0NTUt MzkxNzY4NTczNDk2LzEvVGpTNmJqNG1sTWV6amtaUnItNEdHd3NoM3E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8wMmI3ZDYtMjY5Yi00YmIyLWI0NTUtMzkxNzY4NTczNDk2 LzEvVGpTNmJqNG1sTWV6amtaUnItNEdHd3NoM3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLNUAmqg Bx7LqXrxzJfAwoC1p8ur8+t3SQ706wPjGFsWPlxjYlgO5zg4rbblJzi6z+yyoNnV /NTZS3+u43Hvvxtm+hIoSRhSJSOLtFIFfXZNAAkakejy/Xt3rdfMYZzpJbCASr27 cN5ifIXKKzmPCwOW2GJkWryqfkEWmRF/n73gUjEKY61+F/o0d3rGTKm594j8EeTY /3JGuB3g2Q+dfQUliVItpgiEv4Tzw1Ue42j/ecPGQUWEl6vck/Q4CflZJQ9isFQw PI1iQToDUrSC2R707YoXifsd6XztPN6DzBKcBRzg9eBB4TgEgRMBD21INHtWO3fY gRAY8rYAbwii/g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:32 2025 by rpki-client