This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft File: tT8fJDLiJL3km_qxn2dTYpq1cH8.mft (raw, json) Hash identifier: Wz5XYQK69LbAsctMgLL4/lgHZ2fVyrj1ISzrD4pjmIU= Subject key identifier: E6:05:24:D9:34:AE:28:B0:77:C4:3D:17:3D:04:3F:08:24:1C:89:94 Authority key identifier: B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F Certificate issuer: /CN=b53f1f2432e224bde49bfab19f6753629ab5707f Certificate serial: 019AF12E4F7C00D38E6B71CBD98AC5765568 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft Manifest number: 0DBE Signing time: Sat 06 Dec 2025 01:02:15 +0000 Manifest this update: Sat 06 Dec 2025 01:02:15 +0000 Manifest next update: Sun 07 Dec 2025 01:02:15 +0000 Files and hashes: 1: tT8fJDLiJL3km_qxn2dTYpq1cH8.crl (hash: ujl0RjUX9CYrvlI8lPY1Oj1LOQqqp0DV2wf8YNKv2CE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:4f:7c:00:d3:8e:6b:71:cb:d9:8a:c5:76:55:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b53f1f2432e224bde49bfab19f6753629ab5707f Validity Not Before: Dec 6 01:02:15 2025 GMT Not After : Dec 7 01:02:15 2025 GMT Subject: CN=e60524d934ae28b077c43d173d043f08241c8994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:42:d2:e1:a4:12:dc:6b:77:87:7d:ad:01: 8b:26:c0:87:29:aa:c4:71:c4:f6:f2:c9:41:be:ef: 90:b8:a8:e4:71:92:76:cd:17:e9:ac:db:62:52:73: 09:33:0d:1b:83:8c:18:f5:36:9b:16:d9:5d:32:14: 38:b3:c6:34:9a:67:b2:e1:47:4a:14:19:90:4b:4c: a1:95:2a:b6:f8:0f:eb:46:b0:ff:44:a5:96:37:b9: ee:06:63:9a:20:1d:a0:cb:fb:5d:8d:22:b7:02:c3: 6c:2e:28:e8:90:a4:4a:36:65:18:7b:42:69:14:c3: c5:22:fe:59:45:d0:c2:92:88:7e:e4:5e:99:92:1c: 03:5c:ee:f6:7d:87:35:f7:47:ce:6f:d2:03:9e:6a: ab:f7:e3:fa:56:e8:e0:4d:91:62:a3:84:0d:47:c7: 3b:3b:c9:55:90:d1:46:a5:64:62:d2:43:cf:ac:65: 4d:7b:d2:20:e4:80:93:48:6d:c4:7e:12:20:68:84: fb:76:62:31:98:38:6e:53:51:f3:08:b5:9d:d5:15: f6:af:b6:62:e5:75:19:a9:fc:f9:c8:84:91:83:50: e4:4e:c6:96:27:88:b3:c1:84:05:59:15:e9:2f:63: 0e:c0:39:12:93:f4:5a:a2:44:87:c1:db:31:c1:4b: e0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:05:24:D9:34:AE:28:B0:77:C4:3D:17:3D:04:3F:08:24:1C:89:94 X509v3 Authority Key Identifier: keyid:B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:d0:58:40:ef:3b:69:bc:84:36:a9:40:38:85:53:2e:94:ec: c4:ff:33:2b:12:ec:9f:29:0b:1f:0b:8f:62:0e:b6:6a:90:66: 07:e6:18:c1:01:e2:08:86:14:a2:62:a7:a6:91:8a:b6:51:54: a1:90:f6:dd:bf:5b:e9:60:08:6b:0f:9c:98:c5:e1:83:c2:34: cb:dd:af:b0:96:b9:bc:8e:f5:99:11:d0:4b:06:92:99:a3:b8: 7d:48:0e:f3:73:be:59:3f:36:14:24:f0:7c:b5:86:c0:c2:c5: 43:9d:6b:e9:e6:2e:a7:2e:10:72:19:88:d9:f6:17:32:4a:47: 40:e6:c8:68:07:35:71:9c:5e:32:29:aa:7d:11:39:60:60:ad: 6b:11:d3:b8:33:b0:7e:cb:77:bc:ad:ee:75:5a:98:ff:c8:d0: 53:5a:a1:4b:80:5a:93:f5:93:83:0c:dd:a9:c7:a9:0a:11:68: bc:92:d4:6a:c4:c3:0a:c4:30:7c:23:62:0c:b0:73:3c:0f:aa: b5:12:49:cd:7b:17:c0:3e:b5:f5:d9:0f:a1:f5:6b:6b:e1:8b: cf:19:1a:37:e0:30:bd:15:8b:6a:3a:36:cb:10:28:a9:c3:0e: ce:ba:fc:ad:f4:1b:2f:95:b3:c3:38:ec:1f:3f:11:95:28:bd: 15:4a:08:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLk98ANOOa3HL2YrFdlVoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1M2YxZjI0MzJlMjI0YmRlNDliZmFiMTlmNjc1MzYyOWFi NTcwN2YwHhcNMjUxMjA2MDEwMjE1WhcNMjUxMjA3MDEwMjE1WjAzMTEwLwYDVQQD EyhlNjA1MjRkOTM0YWUyOGIwNzdjNDNkMTczZDA0M2YwODI0MWM4OTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui5C0uGkEtxrd4d9rQGLJsCHKarE ccT28slBvu+QuKjkcZJ2zRfprNtiUnMJMw0bg4wY9TabFtldMhQ4s8Y0mmey4UdK FBmQS0yhlSq2+A/rRrD/RKWWN7nuBmOaIB2gy/tdjSK3AsNsLijokKRKNmUYe0Jp FMPFIv5ZRdDCkoh+5F6ZkhwDXO72fYc190fOb9IDnmqr9+P6VujgTZFio4QNR8c7 O8lVkNFGpWRi0kPPrGVNe9Ig5ICTSG3EfhIgaIT7dmIxmDhuU1HzCLWd1RX2r7Zi 5XUZqfz5yISRg1DkTsaWJ4izwYQFWRXpL2MOwDkSk/RaokSHwdsxwUvgMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYFJNk0riiwd8Q9Fz0EPwgkHImUMB8GA1UdIwQY MBaAFLU/HyQy4iS95Jv6sZ9nU2KatXB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFQ4ZkpETGlKTDNrbV9xeG4yZFRZcHExY0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mZGZmMDEtNzYyZi00M2E5LWE0YmUt N2JiMTg0NDAxNGQ2LzEvdFQ4ZkpETGlKTDNrbV9xeG4yZFRZcHExY0g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9mZGZmMDEtNzYyZi00M2E5LWE0YmUtN2JiMTg0NDAxNGQ2 LzEvdFQ4ZkpETGlKTDNrbV9xeG4yZFRZcHExY0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1tBYQO87 abyENqlAOIVTLpTsxP8zKxLsnykLHwuPYg62apBmB+YYwQHiCIYUomKnppGKtlFU oZD23b9b6WAIaw+cmMXhg8I0y92vsJa5vI71mRHQSwaSmaO4fUgO83O+WT82FCTw fLWGwMLFQ51r6eYupy4QchmI2fYXMkpHQObIaAc1cZxeMimqfRE5YGCtaxHTuDOw fst3vK3udVqY/8jQU1qhS4Bak/WTgwzdqcepChFovJLUasTDCsQwfCNiDLBzPA+q tRJJzXsXwD619dkPofVra+GLzxkaN+AwvRWLajo2yxAoqcMOzrr8rfQbL5Wzwzjs Hz8RlSi9FUoISQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:31 2025 by rpki-client