This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft File: tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft (raw, json) Hash identifier: /StbFNxz9PSRIY5xyMRQ51pyhIhm/vBxj9KxdRXjFoU= Subject key identifier: CD:8E:D1:F1:51:E8:31:08:EB:0E:0A:35:49:F6:64:1D:33:47:AB:74 Authority key identifier: B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5 Certificate issuer: /CN=b483bc0a71a52d0cf3989522367575959ebdcef5 Certificate serial: 019AF19B3E2D2360C12E4E0F24F80F35FDE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft Manifest number: 16EF Signing time: Sat 06 Dec 2025 03:01:14 +0000 Manifest this update: Sat 06 Dec 2025 03:01:14 +0000 Manifest next update: Sun 07 Dec 2025 03:01:14 +0000 Files and hashes: 1: tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl (hash: y7yoX5NRPd0kH6vAU5iRp4l6TDbZn7ZL/DZtWw6vpnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:3e:2d:23:60:c1:2e:4e:0f:24:f8:0f:35:fd:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b483bc0a71a52d0cf3989522367575959ebdcef5 Validity Not Before: Dec 6 03:01:14 2025 GMT Not After : Dec 7 03:01:14 2025 GMT Subject: CN=cd8ed1f151e83108eb0e0a3549f6641d3347ab74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:18:9e:2d:7f:c9:d7:06:e1:b8:53:d2:eb:8e: e3:e1:1e:2f:5d:39:69:d5:a1:ee:43:5e:a7:00:cc: 54:b5:c3:2b:18:ea:f9:85:29:b9:43:57:fe:f8:b8: 93:9a:88:35:a7:0d:05:ce:74:da:f9:77:e3:f0:5f: 83:8b:ee:e7:d7:eb:e9:c8:a3:79:96:ac:0a:31:14: 94:31:88:0b:36:3d:9e:ee:42:2b:b4:95:5b:6f:2c: ea:94:eb:d9:84:fb:f1:49:c6:41:81:45:04:d5:a8: 09:c9:87:bc:b2:ff:82:70:c7:bd:d4:e1:51:78:80: 2c:95:91:1d:07:3d:68:90:60:40:01:9f:36:ee:17: fa:f0:31:76:13:84:56:d6:13:be:0c:61:3c:56:c8: 6f:83:f2:0f:48:0b:48:87:c6:21:a3:cd:5e:86:c2: 45:48:7d:21:e6:9b:32:e0:fe:cc:be:cf:5a:23:96: d2:73:9d:c7:63:ee:5b:ac:3f:e1:e9:0b:a0:f7:10: d9:b3:ac:39:56:81:fc:85:30:0a:9a:f7:9b:c2:a6: 56:cf:ab:b8:1e:a7:9c:83:1e:bd:bb:6a:7c:0e:29: 77:a4:fc:24:60:77:ed:53:be:d0:1c:b2:8b:7d:73: 05:8c:ec:d4:3d:92:e8:13:81:b7:45:90:93:ca:4e: 43:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8E:D1:F1:51:E8:31:08:EB:0E:0A:35:49:F6:64:1D:33:47:AB:74 X509v3 Authority Key Identifier: keyid:B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:0a:3c:f6:c1:29:49:df:14:5f:e2:88:f0:a9:a2:27:0f:de: 64:56:48:60:3c:14:69:b3:4b:ef:c0:4e:3e:d5:31:2a:0c:ab: fa:97:92:2d:0e:59:5b:b9:37:5d:10:c6:c0:c7:c7:24:db:9f: 05:18:1b:1e:69:64:85:d1:ce:79:5c:48:e4:cb:bd:52:e1:50: 1d:3f:a9:e1:41:01:bf:9d:91:12:10:3b:54:74:69:43:7f:2a: c6:d9:f7:25:cf:b6:52:2b:58:24:54:df:97:27:6e:2a:8c:f8: af:be:fe:c7:e5:42:91:d9:2b:c4:c6:a6:e2:09:22:9d:14:87: c1:6a:76:17:7a:46:d0:88:ad:20:71:9b:16:7c:3c:a8:5c:ac: e5:5c:65:2f:a1:23:27:f1:71:1f:81:39:c6:f2:fb:8e:22:74: d5:84:92:47:51:8e:01:2c:1f:2e:08:98:bc:6d:fa:a8:51:48: 56:aa:91:20:bf:dc:43:83:a1:da:eb:b1:83:ea:9d:c0:eb:6f: 59:8e:60:e8:49:b6:d5:11:6e:27:33:7f:01:d5:fe:8b:49:79: 43:2f:4b:86:21:35:b3:e7:57:a7:98:84:49:c5:5d:af:63:e7: ec:96:68:99:99:8f:4e:7d:84:10:67:9c:51:7d:9f:fc:53:22: 74:7c:08:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmz4tI2DBLk4PJPgPNf3hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODNiYzBhNzFhNTJkMGNmMzk4OTUyMjM2NzU3NTk1OWVi ZGNlZjUwHhcNMjUxMjA2MDMwMTE0WhcNMjUxMjA3MDMwMTE0WjAzMTEwLwYDVQQD EyhjZDhlZDFmMTUxZTgzMTA4ZWIwZTBhMzU0OWY2NjQxZDMzNDdhYjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthieLX/J1wbhuFPS647j4R4vXTlp 1aHuQ16nAMxUtcMrGOr5hSm5Q1f++LiTmog1pw0FznTa+Xfj8F+Di+7n1+vpyKN5 lqwKMRSUMYgLNj2e7kIrtJVbbyzqlOvZhPvxScZBgUUE1agJyYe8sv+CcMe91OFR eIAslZEdBz1okGBAAZ827hf68DF2E4RW1hO+DGE8Vshvg/IPSAtIh8Yho81ehsJF SH0h5psy4P7Mvs9aI5bSc53HY+5brD/h6Qug9xDZs6w5VoH8hTAKmvebwqZWz6u4 Hqecgx69u2p8Dil3pPwkYHftU77QHLKLfXMFjOzUPZLoE4G3RZCTyk5DZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2O0fFR6DEI6w4KNUn2ZB0zR6t0MB8GA1UdIwQY MBaAFLSDvApxpS0M85iVIjZ1dZWevc71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElPOENuR2xMUXp6bUpVaU5uVjFsWjY5enZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mODlmYmQtNTE0Mi00YmNjLWJhYjEt OTk0ZWY4N2RiM2EzLzEvdElPOENuR2xMUXp6bUpVaU5uVjFsWjY5enZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9mODlmYmQtNTE0Mi00YmNjLWJhYjEtOTk0ZWY4N2RiM2Ez LzEvdElPOENuR2xMUXp6bUpVaU5uVjFsWjY5enZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwo89sEp Sd8UX+KI8KmiJw/eZFZIYDwUabNL78BOPtUxKgyr+peSLQ5ZW7k3XRDGwMfHJNuf BRgbHmlkhdHOeVxI5Mu9UuFQHT+p4UEBv52REhA7VHRpQ38qxtn3Jc+2UitYJFTf lyduKoz4r77+x+VCkdkrxMam4gkinRSHwWp2F3pG0IitIHGbFnw8qFys5VxlL6Ej J/FxH4E5xvL7jiJ01YSSR1GOASwfLgiYvG36qFFIVqqRIL/cQ4Oh2uuxg+qdwOtv WY5g6Em21RFuJzN/AdX+i0l5Qy9LhiE1s+dXp5iEScVdr2Pn7JZomZmPTn2EEGec UX2f/FMidHwI8A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:12 2025 by rpki-client