This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft File: TNN3vorxFHipq-Jx-L3i3j0zNAg.mft (raw, json) Hash identifier: Bf3uAwrl+l/oakfRpM7ya7W9STDe/c/OGqKp4LZJ22Q= Subject key identifier: 9B:E0:29:01:4E:3A:0F:04:FC:ED:78:89:81:68:48:74:F1:37:FB:2C Authority key identifier: 4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08 Certificate issuer: /CN=4cd377be8af11478a9abe271f8bde2de3d333408 Certificate serial: 019AF19B706D635C54FA88C6836DC1568031 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft Manifest number: 09B1 Signing time: Sat 06 Dec 2025 03:01:27 +0000 Manifest this update: Sat 06 Dec 2025 03:01:27 +0000 Manifest next update: Sun 07 Dec 2025 03:01:27 +0000 Files and hashes: 1: TNN3vorxFHipq-Jx-L3i3j0zNAg.crl (hash: J4JWSYsTbk9hOaimQWJ92OkF7SHTLQrnEgTmXD/kvDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:70:6d:63:5c:54:fa:88:c6:83:6d:c1:56:80:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cd377be8af11478a9abe271f8bde2de3d333408 Validity Not Before: Dec 6 03:01:27 2025 GMT Not After : Dec 7 03:01:27 2025 GMT Subject: CN=9be029014e3a0f04fced788981684874f137fb2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:bb:11:e2:fa:da:4d:d5:6c:5f:6f:8c:2f: 68:15:dd:a4:f5:7b:83:f4:7a:f0:37:ee:c9:16:7a: d3:7f:c9:46:b8:35:6a:28:56:cd:5b:da:fa:2c:86: 2b:e6:88:9a:18:ad:cc:e7:3d:ed:19:76:5a:eb:0d: 51:ee:8d:3d:ed:1b:e5:83:69:56:a3:dd:96:4c:74: ea:b5:c1:f0:07:c2:e0:1d:fc:b5:8f:dc:34:ed:a1: 07:45:fc:c6:f0:f0:7b:a5:af:a0:92:91:78:9d:57: 4e:fd:fb:11:35:a7:20:97:95:91:4a:91:8a:38:70: a6:ac:71:cd:34:3b:7e:57:c8:6c:1a:e4:df:44:7c: 08:b2:aa:3a:de:d3:32:95:14:9f:36:6a:16:3d:7a: 78:2d:46:e9:7d:69:e7:d5:aa:4f:6d:a8:3d:2d:2c: 15:a2:cf:d4:ca:7b:d2:80:14:ce:a3:f4:ae:0c:04: 38:77:b9:b3:af:5f:c4:0e:e9:8c:dd:93:a4:b9:a8: 47:0c:72:a1:e4:83:55:d0:c1:2d:78:47:33:93:03: 3d:24:b0:83:b0:e3:7c:0f:50:62:44:f4:5f:3d:cd: 03:25:4e:f9:a2:f0:7c:05:f6:c5:58:f7:44:bd:7a: 3c:eb:a2:bd:38:5e:01:d8:50:56:89:00:51:52:ee: d0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E0:29:01:4E:3A:0F:04:FC:ED:78:89:81:68:48:74:F1:37:FB:2C X509v3 Authority Key Identifier: keyid:4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:3b:fe:ab:34:98:9b:b5:65:a0:0a:88:5f:11:ea:ba:b5:88: ce:5c:b8:b5:9a:c5:21:0d:7a:c8:c7:22:d4:b8:96:97:90:f2: 8d:a3:50:24:35:4b:4b:ff:84:e0:99:ca:53:64:73:98:eb:73: 5e:32:22:44:27:7f:81:b6:fe:05:74:8d:c3:a8:40:9a:3b:3e: b9:09:98:a7:a7:61:2d:74:9b:f7:8e:77:83:76:26:0d:20:70: ad:cb:7c:e6:11:a4:7e:40:7e:37:29:57:ab:f9:fe:71:e5:7c: 5a:1c:5c:71:65:bb:e6:4f:41:fa:e4:ad:6d:6d:8f:21:fa:2e: 64:97:06:19:ba:8a:16:56:0e:b1:20:4d:bf:2e:2b:c9:54:ff: 93:56:47:fd:a9:00:7e:5b:57:be:fd:8d:98:4a:83:07:89:78: 6c:8f:21:80:8f:91:c3:3c:a0:78:6d:13:8f:91:f7:c5:0c:ee: 05:76:d1:e0:f5:d9:aa:e6:a9:f0:06:40:04:13:61:94:d9:74: 5e:88:1f:c9:b3:16:ec:1d:94:b9:c6:65:f1:86:8e:a3:2f:3a: 22:c1:b9:07:c9:17:79:b8:e4:f9:e7:19:d5:44:2a:0e:fe:2f: ef:6d:6e:5e:4b:35:2a:df:78:ce:73:e5:bb:74:b2:84:ff:5a: 1d:95:21:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3BtY1xU+ojGg23BVoAxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZDM3N2JlOGFmMTE0NzhhOWFiZTI3MWY4YmRlMmRlM2Qz MzM0MDgwHhcNMjUxMjA2MDMwMTI3WhcNMjUxMjA3MDMwMTI3WjAzMTEwLwYDVQQD Eyg5YmUwMjkwMTRlM2EwZjA0ZmNlZDc4ODk4MTY4NDg3NGYxMzdmYjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviS7EeL62k3VbF9vjC9oFd2k9XuD 9HrwN+7JFnrTf8lGuDVqKFbNW9r6LIYr5oiaGK3M5z3tGXZa6w1R7o097Rvlg2lW o92WTHTqtcHwB8LgHfy1j9w07aEHRfzG8PB7pa+gkpF4nVdO/fsRNacgl5WRSpGK OHCmrHHNNDt+V8hsGuTfRHwIsqo63tMylRSfNmoWPXp4LUbpfWnn1apPbag9LSwV os/UynvSgBTOo/SuDAQ4d7mzr1/EDumM3ZOkuahHDHKh5INV0MEteEczkwM9JLCD sON8D1BiRPRfPc0DJU75ovB8BfbFWPdEvXo866K9OF4B2FBWiQBRUu7QcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvgKQFOOg8E/O14iYFoSHTxN/ssMB8GA1UdIwQY MBaAFEzTd76K8RR4qavicfi94t49MzQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE5OM3ZvcnhGSGlwcS1KeC1MM2kzajB6TkFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81MWU4YjUtN2UyYy00MDA4LWJmODMt YjEyZWIxY2VhYTE0LzEvVE5OM3ZvcnhGSGlwcS1KeC1MM2kzajB6TkFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81MWU4YjUtN2UyYy00MDA4LWJmODMtYjEyZWIxY2VhYTE0 LzEvVE5OM3ZvcnhGSGlwcS1KeC1MM2kzajB6TkFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTv+qzSY m7VloAqIXxHqurWIzly4tZrFIQ16yMci1LiWl5DyjaNQJDVLS/+E4JnKU2RzmOtz XjIiRCd/gbb+BXSNw6hAmjs+uQmYp6dhLXSb9453g3YmDSBwrct85hGkfkB+NylX q/n+ceV8WhxccWW75k9B+uStbW2PIfouZJcGGbqKFlYOsSBNvy4ryVT/k1ZH/akA fltXvv2NmEqDB4l4bI8hgI+RwzygeG0Tj5H3xQzuBXbR4PXZquap8AZABBNhlNl0 XogfybMW7B2UucZl8YaOoy86IsG5B8kXebjk+ecZ1UQqDv4v721uXks1Kt94znPl u3SyhP9aHZUhFw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:03:26 2025 by rpki-client