This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft File: tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft (raw, json) Hash identifier: z4pYh6UEcYkxSmRZCMkd5sNlJLmnsr6yhch9IX1hgYM= Subject key identifier: FA:67:35:2F:6D:46:CD:78:15:32:56:FE:2B:B1:EA:51:DE:96:84:02 Authority key identifier: B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE Certificate issuer: /CN=b57c8ac055c574d8cf13522b964b92314d211eae Certificate serial: 019AF2096F7AA9343E6A85C892310C4E3C3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft Manifest number: 14AE Signing time: Sat 06 Dec 2025 05:01:35 +0000 Manifest this update: Sat 06 Dec 2025 05:01:35 +0000 Manifest next update: Sun 07 Dec 2025 05:01:35 +0000 Files and hashes: 1: tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl (hash: ajHHuBsT/NWZCwZynBZECUACS7ohf7tnou1UTDXrCCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:6f:7a:a9:34:3e:6a:85:c8:92:31:0c:4e:3c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b57c8ac055c574d8cf13522b964b92314d211eae Validity Not Before: Dec 6 05:01:35 2025 GMT Not After : Dec 7 05:01:35 2025 GMT Subject: CN=fa67352f6d46cd78153256fe2bb1ea51de968402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c3:37:8b:cf:8f:be:64:ea:10:33:f1:b4:b1: b0:f9:fc:e7:32:a6:59:bf:e9:ec:d8:1c:e7:5b:aa: e7:bf:81:0d:4e:5c:22:a4:f1:20:f9:80:dc:e7:86: 41:12:99:a9:57:1f:8b:85:99:d5:5a:63:66:f4:f6: 6c:54:07:8c:fc:c7:cf:1b:4d:2e:de:68:c0:d8:da: 91:f3:f8:93:07:ed:f4:97:54:c6:39:0c:6d:3d:4c: f6:f9:a2:6c:8c:9d:04:53:5a:7b:11:06:72:1d:7c: 54:4b:58:ea:3a:89:98:91:d3:7a:36:68:75:79:97: 40:0d:fb:11:f8:1d:40:b4:32:7d:d5:ac:df:c6:d4: 25:e4:b9:34:c3:a4:0b:3e:0e:25:d4:21:5a:4b:6c: 95:8a:33:d9:06:75:c8:ae:6e:79:76:bc:86:b9:9c: fe:ba:70:73:f7:11:09:c8:d5:67:db:57:6b:92:ca: d8:35:5b:eb:30:03:0e:67:a3:de:a7:fa:ae:96:d5: 79:3b:0c:3b:e8:29:8d:eb:b0:52:5a:2d:53:31:08: 94:81:da:4b:c6:8b:ea:88:58:f8:d2:64:a5:36:d8: 04:91:88:66:53:88:c1:56:f3:bd:0b:24:d6:bc:ee: b6:3d:9d:bc:a6:b4:99:71:53:3a:fd:75:59:76:c6: 47:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:67:35:2F:6D:46:CD:78:15:32:56:FE:2B:B1:EA:51:DE:96:84:02 X509v3 Authority Key Identifier: keyid:B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e4:6d:de:0f:84:ec:9c:1c:c2:74:94:96:01:80:a3:c5:7d: 6d:ce:bc:c2:09:56:09:f7:c8:09:f1:d5:fc:f4:7c:22:98:c6: d4:ef:8e:ad:2f:3c:ea:f4:67:57:57:82:e9:6b:e1:44:52:a9: c9:25:5f:c5:20:4d:ea:82:ee:7b:b7:85:c8:0e:a7:d3:11:71: 03:ce:e4:f2:b2:c5:91:88:ca:3c:f0:3b:4e:c2:55:ea:b5:6e: 8d:d7:99:40:51:76:6b:cf:16:4d:d4:9e:b9:df:6e:b6:ae:e6: d7:02:ca:fb:2c:10:51:c2:09:bd:bf:70:0b:0f:0c:5f:00:73: cf:94:95:41:5d:67:c2:df:1a:8c:14:2e:22:e1:46:5b:7c:33: b4:54:f9:59:7f:ed:9e:f8:49:7d:c6:02:d3:a3:bc:c7:11:7d: d9:10:88:5a:af:69:06:4d:56:17:36:8a:5a:d5:7d:44:f6:19: ca:7d:00:d9:c9:22:bf:bf:de:91:e1:06:75:f3:de:ee:fd:09: 90:57:a4:aa:8b:c6:19:18:e0:dd:c2:c7:dc:ce:2f:f4:49:a9: ea:8d:ae:d5:1b:b7:90:76:be:d5:4f:6d:66:30:ea:9f:a0:22: ef:a2:f9:52:7d:62:f2:43:24:3f:06:40:21:bf:c7:c6:fe:85: 8b:55:31:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCW96qTQ+aoXIkjEMTjw9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1N2M4YWMwNTVjNTc0ZDhjZjEzNTIyYjk2NGI5MjMxNGQy MTFlYWUwHhcNMjUxMjA2MDUwMTM1WhcNMjUxMjA3MDUwMTM1WjAzMTEwLwYDVQQD EyhmYTY3MzUyZjZkNDZjZDc4MTUzMjU2ZmUyYmIxZWE1MWRlOTY4NDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MM3i8+PvmTqEDPxtLGw+fznMqZZ v+ns2BznW6rnv4ENTlwipPEg+YDc54ZBEpmpVx+LhZnVWmNm9PZsVAeM/MfPG00u 3mjA2NqR8/iTB+30l1TGOQxtPUz2+aJsjJ0EU1p7EQZyHXxUS1jqOomYkdN6Nmh1 eZdADfsR+B1AtDJ91azfxtQl5Lk0w6QLPg4l1CFaS2yVijPZBnXIrm55dryGuZz+ unBz9xEJyNVn21drksrYNVvrMAMOZ6Pep/qultV5Oww76CmN67BSWi1TMQiUgdpL xovqiFj40mSlNtgEkYhmU4jBVvO9CyTWvO62PZ28prSZcVM6/XVZdsZHlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpnNS9tRs14FTJW/iux6lHeloQCMB8GA1UdIwQY MBaAFLV8isBVxXTYzxNSK5ZLkjFNIR6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFh5S3dGWEZkTmpQRTFJcmxrdVNNVTBoSHE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8yODlmNDAtYTIzMy00YzYzLWI5M2Ut OGU0YzdjN2I2NTA0LzEvdFh5S3dGWEZkTmpQRTFJcmxrdVNNVTBoSHE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8yODlmNDAtYTIzMy00YzYzLWI5M2UtOGU0YzdjN2I2NTA0 LzEvdFh5S3dGWEZkTmpQRTFJcmxrdVNNVTBoSHE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+Rt3g+E 7JwcwnSUlgGAo8V9bc68wglWCffICfHV/PR8IpjG1O+OrS886vRnV1eC6WvhRFKp ySVfxSBN6oLue7eFyA6n0xFxA87k8rLFkYjKPPA7TsJV6rVujdeZQFF2a88WTdSe ud9utq7m1wLK+ywQUcIJvb9wCw8MXwBzz5SVQV1nwt8ajBQuIuFGW3wztFT5WX/t nvhJfcYC06O8xxF92RCIWq9pBk1WFzaKWtV9RPYZyn0A2ckiv7/ekeEGdfPe7v0J kFekqovGGRjg3cLH3M4v9Emp6o2u1Ru3kHa+1U9tZjDqn6Ai76L5Un1i8kMkPwZA Ib/Hxv6Fi1Uxow== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:25 2025 by rpki-client