This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft File: TT2CE15FkxVfpq1vt_7LAfE4GLI.mft (raw, json) Hash identifier: jhLXo3Vh4cWlbh+dwIyPr78LffyngEUEGzhzqkwc60k= Subject key identifier: 07:7C:A8:B6:62:36:80:1C:2F:79:76:BF:BD:A8:14:9E:9E:2C:F0:7E Authority key identifier: 4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2 Certificate issuer: /CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2 Certificate serial: 019AF163FD9DD28DFB99B88F550113945BC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft Manifest number: 0BD2 Signing time: Sat 06 Dec 2025 02:00:53 +0000 Manifest this update: Sat 06 Dec 2025 02:00:53 +0000 Manifest next update: Sun 07 Dec 2025 02:00:53 +0000 Files and hashes: 1: TT2CE15FkxVfpq1vt_7LAfE4GLI.crl (hash: UkF2u3RNmfTn+mKfLHCdAvjXhnkY3+YrhVmDGd5UFCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:fd:9d:d2:8d:fb:99:b8:8f:55:01:13:94:5b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2 Validity Not Before: Dec 6 02:00:53 2025 GMT Not After : Dec 7 02:00:53 2025 GMT Subject: CN=077ca8b66236801c2f7976bfbda8149e9e2cf07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ac:a3:5b:41:e5:84:ed:f0:f5:8b:98:e3:24: 3b:15:75:ee:a3:7b:08:ed:f3:aa:36:f0:97:af:6e: db:e1:1c:55:a8:8f:c8:b8:86:21:b1:cc:03:58:59: 40:8d:68:da:f5:37:0d:63:6c:2c:f5:75:a8:cc:8d: 7d:35:65:54:fe:8a:fc:31:bb:f6:aa:83:61:a6:00: f6:b6:07:3c:1f:f6:e1:b7:78:39:ac:f8:bb:39:62: d0:5b:61:17:ea:60:b8:6e:ac:c2:c5:96:25:3f:b9: 57:53:52:95:44:56:8d:f6:9d:b2:cb:0b:a7:e0:47: 2d:3c:d5:fd:79:37:a7:cd:6d:0d:9e:45:ae:84:f2: 2d:1a:09:6f:c9:8a:ee:68:44:d7:51:b1:b2:54:24: b4:85:4a:11:2a:53:1e:bd:21:62:98:7d:9a:f8:29: 14:82:06:c5:ce:b3:b2:b3:93:27:75:6c:fe:54:b3: 5f:7e:24:e0:bf:5e:a4:50:1e:21:80:28:d6:f7:18: d1:01:b6:05:43:b6:cf:83:4f:2e:9f:ad:99:f6:a3: 05:71:e6:e2:a3:bb:74:aa:39:43:58:e0:99:e4:5f: 6d:97:58:9f:b8:a4:a7:73:f1:99:48:aa:6b:02:a2: 0f:bb:9f:84:0a:9f:c0:a3:73:73:f5:1b:0e:65:07: 99:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7C:A8:B6:62:36:80:1C:2F:79:76:BF:BD:A8:14:9E:9E:2C:F0:7E X509v3 Authority Key Identifier: keyid:4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:31:26:97:66:b1:ed:7a:6d:aa:fe:07:ff:c7:03:f9:58:7f: 2f:4a:f3:72:d1:0e:d3:05:54:b8:20:58:ba:ae:ec:b5:1b:2a: dc:2d:88:f8:88:56:f1:96:39:ad:c8:6c:e3:b7:da:37:9e:b7: b0:5b:e8:d0:e0:e8:4c:5f:d3:31:fc:93:f8:97:a0:31:f5:71: bf:e5:14:18:89:ea:36:6e:2d:f2:7b:81:a3:f0:47:df:c3:c3: fa:ff:97:41:24:1e:50:28:d1:04:94:c6:42:fe:86:17:74:7c: 8b:c4:93:0f:d8:7e:48:eb:8a:f9:22:da:3c:b9:f2:b8:ca:69: 83:52:69:57:5e:ee:fd:17:e6:dd:70:10:6c:d2:0d:91:0c:78: 76:cd:68:f5:67:1d:a6:b9:c9:5a:22:a8:e6:74:9d:81:7b:da: 0b:99:44:9b:99:44:2a:bb:33:98:e7:de:ed:53:69:86:e8:d3: 58:a5:d1:c4:14:40:b0:ef:86:c3:96:2b:bf:4f:29:3f:88:f1: 98:d5:69:40:a4:aa:55:8d:80:2b:aa:b5:3e:e5:09:28:65:8d: c1:78:f4:2d:83:ee:61:c6:f5:05:fd:66:d5:f6:f0:75:b1:9b: 6f:87:e2:8a:89:cd:5f:ff:e9:fa:61:91:5f:53:63:b7:ef:36: af:7c:84:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/2d0o37mbiPVQETlFvEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkM2Q4MjEzNWU0NTkzMTU1ZmE2YWQ2ZmI3ZmVjYjAxZjEz ODE4YjIwHhcNMjUxMjA2MDIwMDUzWhcNMjUxMjA3MDIwMDUzWjAzMTEwLwYDVQQD EygwNzdjYThiNjYyMzY4MDFjMmY3OTc2YmZiZGE4MTQ5ZTllMmNmMDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvayjW0HlhO3w9YuY4yQ7FXXuo3sI 7fOqNvCXr27b4RxVqI/IuIYhscwDWFlAjWja9TcNY2ws9XWozI19NWVU/or8Mbv2 qoNhpgD2tgc8H/bht3g5rPi7OWLQW2EX6mC4bqzCxZYlP7lXU1KVRFaN9p2yywun 4EctPNX9eTenzW0NnkWuhPItGglvyYruaETXUbGyVCS0hUoRKlMevSFimH2a+CkU ggbFzrOys5MndWz+VLNffiTgv16kUB4hgCjW9xjRAbYFQ7bPg08un62Z9qMFcebi o7t0qjlDWOCZ5F9tl1ifuKSnc/GZSKprAqIPu5+ECp/Ao3Nz9RsOZQeZUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAd8qLZiNoAcL3l2v72oFJ6eLPB+MB8GA1UdIwQY MBaAFE09ghNeRZMVX6atb7f+ywHxOBiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFQyQ0UxNUZreFZmcHExdnRfN0xBZkU0R0xJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81OGJiOTMtZjZhMi00ODk4LWJmZDgt MDVkODc1NmYwOTJlLzEvVFQyQ0UxNUZreFZmcHExdnRfN0xBZkU0R0xJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81OGJiOTMtZjZhMi00ODk4LWJmZDgtMDVkODc1NmYwOTJl LzEvVFQyQ0UxNUZreFZmcHExdnRfN0xBZkU0R0xJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzEml2ax 7Xptqv4H/8cD+Vh/L0rzctEO0wVUuCBYuq7stRsq3C2I+IhW8ZY5rchs47faN563 sFvo0ODoTF/TMfyT+JegMfVxv+UUGInqNm4t8nuBo/BH38PD+v+XQSQeUCjRBJTG Qv6GF3R8i8STD9h+SOuK+SLaPLnyuMppg1JpV17u/Rfm3XAQbNINkQx4ds1o9Wcd prnJWiKo5nSdgXvaC5lEm5lEKrszmOfe7VNphujTWKXRxBRAsO+Gw5Yrv08pP4jx mNVpQKSqVY2AK6q1PuUJKGWNwXj0LYPuYcb1Bf1m1fbwdbGbb4fiionNX//p+mGR X1Njt+82r3yEug== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:30 2025 by rpki-client