This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft File: TSE3TacxMU8KBRddJbDYmnb24IE.mft (raw, json) Hash identifier: pVvJ3vYa8tsukVpD9FobAmtc3fg9GmDAvFBF44IWLcE= Subject key identifier: 73:18:AD:98:95:62:71:6D:E4:6C:30:08:F8:BB:27:80:C9:5F:0D:F2 Authority key identifier: 4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81 Certificate issuer: /CN=4d21374da731314f0a05175d25b0d89a76f6e081 Certificate serial: 019AF1D2504DFD5A3CD809E2BCE2AE35FF6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft Manifest number: 06D0 Signing time: Sat 06 Dec 2025 04:01:23 +0000 Manifest this update: Sat 06 Dec 2025 04:01:23 +0000 Manifest next update: Sun 07 Dec 2025 04:01:23 +0000 Files and hashes: 1: TSE3TacxMU8KBRddJbDYmnb24IE.crl (hash: atYGeRZxXUkKqyIlkCF0TPREOwiSjd47xngPj3Mlkeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:50:4d:fd:5a:3c:d8:09:e2:bc:e2:ae:35:ff:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d21374da731314f0a05175d25b0d89a76f6e081 Validity Not Before: Dec 6 04:01:23 2025 GMT Not After : Dec 7 04:01:23 2025 GMT Subject: CN=7318ad989562716de46c3008f8bb2780c95f0df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8b:d3:db:4c:62:0b:59:81:bf:b1:0a:91:bb: 46:12:9a:2a:bd:da:26:12:48:7b:a6:53:a9:5a:5d: e1:fe:d5:7c:37:26:f9:89:de:76:93:8e:6c:7e:60: 57:69:27:38:86:9e:70:21:52:2c:da:fd:ce:f9:cc: 69:46:52:cf:b9:4b:94:3a:12:d5:57:1c:12:14:01: ea:3a:28:2a:35:b1:f0:c7:8c:d0:fa:48:68:3e:c8: eb:be:6a:24:b4:c6:77:b4:af:ed:58:2a:e0:ed:4d: 7c:ea:f6:e7:ac:38:f7:df:2e:3a:ec:bd:a9:e0:15: 41:f1:08:3d:3c:8a:cb:e9:06:13:60:db:bb:77:6d: df:d8:63:76:20:a3:e2:e3:87:13:f7:d0:dd:a2:a7: 6c:c3:cf:76:7d:c3:98:3c:41:d5:db:b6:a4:79:35: c5:d8:c9:03:b4:4a:b5:1c:cf:72:97:8f:3e:66:a2: c3:07:c5:b9:10:af:74:2c:0f:0a:6d:4d:d6:a2:d3: 3b:d8:34:7a:97:a0:57:b0:78:22:53:03:02:af:9d: d0:03:54:6f:c8:6c:b6:7d:8e:5f:c3:ba:87:f3:ec: 6d:1a:6e:49:35:35:86:07:77:7f:7c:0b:46:20:cb: 8b:07:37:5e:3c:a1:57:b7:41:76:2d:55:bb:c7:66: 4f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:18:AD:98:95:62:71:6D:E4:6C:30:08:F8:BB:27:80:C9:5F:0D:F2 X509v3 Authority Key Identifier: keyid:4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d1:ee:2c:4a:5a:9e:0b:93:63:78:8f:a1:a0:a7:35:73:e2: 18:1a:85:e0:04:5d:e3:4b:de:94:2c:ac:76:60:7c:c6:25:89: f0:88:95:5b:89:e2:32:01:0d:00:7d:11:3d:68:c4:78:e1:ac: 1a:ef:42:0e:41:5e:c9:33:55:80:fb:5e:35:d4:5b:18:50:32: aa:15:70:cd:a7:05:e3:e6:fa:0f:1b:62:b2:71:89:7d:ea:50: 4b:e0:2b:3e:3c:8d:df:e0:b4:34:16:0a:d3:98:a4:e0:98:d1: 38:5e:6f:cd:f9:89:7f:40:e9:5b:b9:d4:73:28:15:48:a1:b3: 10:60:16:21:1a:33:0e:55:0e:d2:f7:84:eb:d7:8d:48:c2:22: c6:5a:99:8b:4e:65:12:da:ae:ce:a6:2c:db:bf:a8:2e:d6:b5: 42:df:f6:13:cc:86:d0:ac:1c:64:3b:b8:34:5d:bc:14:05:f5: 4d:81:7b:8a:46:24:39:ae:3e:7b:42:48:79:21:87:b2:be:5b: ff:c2:aa:10:7d:10:3e:4f:6c:36:4f:c2:b3:f4:66:45:14:14: 0b:1f:90:9c:69:59:c2:86:eb:46:77:07:65:42:fc:34:68:a9: 82:f5:20:ff:86:ce:08:6a:8f:66:6e:ce:08:d0:d6:40:57:c1: 3c:87:ac:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lBN/Vo82AnivOKuNf9tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMjEzNzRkYTczMTMxNGYwYTA1MTc1ZDI1YjBkODlhNzZm NmUwODEwHhcNMjUxMjA2MDQwMTIzWhcNMjUxMjA3MDQwMTIzWjAzMTEwLwYDVQQD Eyg3MzE4YWQ5ODk1NjI3MTZkZTQ2YzMwMDhmOGJiMjc4MGM5NWYwZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4vT20xiC1mBv7EKkbtGEpoqvdom Ekh7plOpWl3h/tV8Nyb5id52k45sfmBXaSc4hp5wIVIs2v3O+cxpRlLPuUuUOhLV VxwSFAHqOigqNbHwx4zQ+khoPsjrvmoktMZ3tK/tWCrg7U186vbnrDj33y467L2p 4BVB8Qg9PIrL6QYTYNu7d23f2GN2IKPi44cT99Ddoqdsw892fcOYPEHV27akeTXF 2MkDtEq1HM9yl48+ZqLDB8W5EK90LA8KbU3WotM72DR6l6BXsHgiUwMCr53QA1Rv yGy2fY5fw7qH8+xtGm5JNTWGB3d/fAtGIMuLBzdePKFXt0F2LVW7x2ZPxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMYrZiVYnFt5GwwCPi7J4DJXw3yMB8GA1UdIwQY MBaAFE0hN02nMTFPCgUXXSWw2Jp29uCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFNFM1RhY3hNVThLQlJkZEpiRFltbmIyNElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85YjJmYzEtYmE1OC00OTU3LTg1NDAt ZWIxZWQwYjQ4N2IxLzEvVFNFM1RhY3hNVThLQlJkZEpiRFltbmIyNElFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85YjJmYzEtYmE1OC00OTU3LTg1NDAtZWIxZWQwYjQ4N2Ix LzEvVFNFM1RhY3hNVThLQlJkZEpiRFltbmIyNElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdHuLEpa nguTY3iPoaCnNXPiGBqF4ARd40velCysdmB8xiWJ8IiVW4niMgENAH0RPWjEeOGs Gu9CDkFeyTNVgPteNdRbGFAyqhVwzacF4+b6DxtisnGJfepQS+ArPjyN3+C0NBYK 05ik4JjROF5vzfmJf0DpW7nUcygVSKGzEGAWIRozDlUO0veE69eNSMIixlqZi05l EtquzqYs27+oLta1Qt/2E8yG0KwcZDu4NF28FAX1TYF7ikYkOa4+e0JIeSGHsr5b /8KqEH0QPk9sNk/Cs/RmRRQUCx+QnGlZwobrRncHZUL8NGipgvUg/4bOCGqPZm7O CNDWQFfBPIesRw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:42 2025 by rpki-client