This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft File: TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json) Hash identifier: f2bir4U6Yid33HFEbfVUesoTHCfQ3u51W5eWicGY1z8= Subject key identifier: 8F:AC:E4:0F:64:E2:9A:67:69:B7:47:67:A9:F9:C3:39:83:E2:0C:F9 Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D Certificate issuer: /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d Certificate serial: 019AF12CC266FDF86825114A6A1CE8C15033 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:00:33 +0000 Manifest this update: Sat 06 Dec 2025 01:00:33 +0000 Manifest next update: Sun 07 Dec 2025 01:00:33 +0000 Files and hashes: 1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: zIkJ0K4U8M9OnR1tEvJr6e4MDgY7SFOivtBtU0VNIcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c2:66:fd:f8:68:25:11:4a:6a:1c:e8:c1:50:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d Validity Not Before: Dec 6 01:00:33 2025 GMT Not After : Dec 7 01:00:33 2025 GMT Subject: CN=8face40f64e29a6769b74767a9f9c33983e20cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cd:05:49:43:97:c0:bd:08:af:85:3e:d3:3f: d0:d8:12:99:cd:fa:68:f1:c6:95:9b:ca:99:ed:73: 36:52:89:5a:d9:72:0a:4e:b7:a5:23:19:88:a9:33: b6:80:1e:3b:f9:5e:81:fd:e1:80:d4:c0:11:da:79: dc:f5:6a:60:57:f1:39:9b:4f:69:40:96:3f:ea:db: 94:1b:ea:8d:2c:e7:a6:20:e1:3a:e4:c6:62:f8:d7: 1f:53:15:00:a0:95:c6:c0:80:df:41:e1:ae:13:25: db:53:56:b7:a0:79:a9:c0:6f:ae:57:b0:b8:54:74: 21:1d:40:0c:d9:c1:07:85:18:91:1b:82:d4:8a:1f: 0a:17:a6:62:88:dc:88:09:d1:f2:80:87:7f:de:ca: b4:91:2a:ce:41:ce:aa:cb:d5:da:af:67:5c:97:1b: 71:6c:d8:58:93:b7:2f:7b:6e:31:8b:3a:04:21:7f: 5e:19:66:8a:c5:a9:7a:6c:5a:a6:5d:50:14:11:aa: b9:26:8c:c5:31:19:e4:7e:d1:3e:15:7e:7b:71:e4: 9b:16:4e:32:ab:73:32:27:ef:06:67:5b:ba:2f:b4: 70:f8:c3:da:a4:f2:be:d4:b6:52:78:f7:51:5b:8e: 07:72:3b:6a:58:72:7a:0b:31:27:39:65:9c:6e:dd: 66:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AC:E4:0F:64:E2:9A:67:69:B7:47:67:A9:F9:C3:39:83:E2:0C:F9 X509v3 Authority Key Identifier: keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:b0:58:2e:8a:7d:5a:f3:79:d0:2f:c3:ca:a9:e2:94:78:fe: e7:81:83:6b:f6:de:37:d3:2f:f5:20:af:d4:c5:fa:37:47:63: b8:ff:49:83:78:22:84:50:45:ae:fa:64:89:d2:c9:cb:a2:a1: ae:b4:d3:9c:eb:70:da:10:a9:41:dd:e9:7f:90:a4:8d:aa:e5: fb:7f:f1:14:ce:11:c4:d4:e3:a4:3d:81:4c:fc:26:c7:88:f3: fa:c4:cc:40:ac:62:60:7c:fc:9a:df:f3:90:80:13:33:02:22: f2:89:8c:40:54:4d:c3:6b:53:5a:7d:66:f6:ed:ea:7c:d7:6e: 3e:c9:3b:ec:fa:33:d2:2b:fe:a1:97:23:5f:52:84:b3:f8:0c: fd:71:cb:9a:72:f9:f5:fb:89:35:14:4e:5a:65:e9:80:5a:66: 0a:7b:e7:3d:75:bf:98:1b:37:76:64:d1:34:e6:e1:33:88:48: 18:fc:0a:33:79:8a:f3:e7:54:82:a1:b7:da:ed:fb:f9:23:a0: 5b:9a:b0:2f:d8:f3:d3:d0:f4:c1:5c:ae:b2:69:d5:01:3e:e8: 39:44:5e:f8:d9:26:6b:d0:94:0e:7c:b2:27:62:6d:c6:a9:01: 8e:38:00:f0:7f:5d:4c:33:c2:1b:c1:d7:43:e8:7d:99:c9:5f: 95:4b:75:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMJm/fhoJRFKahzowVAzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkM2E3MWE3N2Y0Y2E5YmE1MzZmOTg2MTJhOWM1NmQ0MGMw YzNiOWQwHhcNMjUxMjA2MDEwMDMzWhcNMjUxMjA3MDEwMDMzWjAzMTEwLwYDVQQD Eyg4ZmFjZTQwZjY0ZTI5YTY3NjliNzQ3NjdhOWY5YzMzOTgzZTIwY2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc0FSUOXwL0Ir4U+0z/Q2BKZzfpo 8caVm8qZ7XM2Uola2XIKTrelIxmIqTO2gB47+V6B/eGA1MAR2nnc9WpgV/E5m09p QJY/6tuUG+qNLOemIOE65MZi+NcfUxUAoJXGwIDfQeGuEyXbU1a3oHmpwG+uV7C4 VHQhHUAM2cEHhRiRG4LUih8KF6ZiiNyICdHygId/3sq0kSrOQc6qy9Xar2dclxtx bNhYk7cve24xizoEIX9eGWaKxal6bFqmXVAUEaq5JozFMRnkftE+FX57ceSbFk4y q3MyJ+8GZ1u6L7Rw+MPapPK+1LZSePdRW44HcjtqWHJ6CzEnOWWcbt1mnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+s5A9k4ppnabdHZ6n5wzmD4gz5MB8GA1UdIwQY MBaAFE06cad/TKm6U2+YYSqcVtQMDDudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84ODc1MDEtNGQ4ZS00YmViLTk1OTAt NjUwNzliNzU4NjhhLzEvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84ODc1MDEtNGQ4ZS00YmViLTk1OTAtNjUwNzliNzU4Njhh LzEvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErBYLop9 WvN50C/DyqnilHj+54GDa/beN9Mv9SCv1MX6N0djuP9Jg3gihFBFrvpkidLJy6Kh rrTTnOtw2hCpQd3pf5Ckjarl+3/xFM4RxNTjpD2BTPwmx4jz+sTMQKxiYHz8mt/z kIATMwIi8omMQFRNw2tTWn1m9u3qfNduPsk77Poz0iv+oZcjX1KEs/gM/XHLmnL5 9fuJNRROWmXpgFpmCnvnPXW/mBs3dmTRNObhM4hIGPwKM3mK8+dUgqG32u37+SOg W5qwL9jz09D0wVyusmnVAT7oOURe+Nkma9CUDnyyJ2JtxqkBjjgA8H9dTDPCG8HX Q+h9mclflUt1VQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:29:36 2025 by rpki-client