This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft File: _tvrNJcjK29ayaJodTchEBWihxA.mft (raw, json) Hash identifier: GpKTzonYmCMyWm5r1njDjOOt7E06AmlXm4r4eQHlF/A= Subject key identifier: 98:55:6C:B7:19:4F:C3:47:BD:A3:39:AE:82:0A:CC:DE:B7:E1:AC:33 Authority key identifier: FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10 Certificate issuer: /CN=fedbeb3497232b6f5ac9a2687537211015a28710 Certificate serial: 019AF12E3537808F26F2D1FABE66119FDDE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:02:08 +0000 Manifest this update: Sat 06 Dec 2025 01:02:08 +0000 Manifest next update: Sun 07 Dec 2025 01:02:08 +0000 Files and hashes: 1: _tvrNJcjK29ayaJodTchEBWihxA.crl (hash: pX6+ObplwuWoGHnX/ymXK6gKgnUsqYHC70O88TmSpNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:35:37:80:8f:26:f2:d1:fa:be:66:11:9f:dd:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fedbeb3497232b6f5ac9a2687537211015a28710 Validity Not Before: Dec 6 01:02:08 2025 GMT Not After : Dec 7 01:02:08 2025 GMT Subject: CN=98556cb7194fc347bda339ae820accdeb7e1ac33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:33:2a:70:e4:0a:ba:22:24:5d:27:26:06:a2: dc:81:a6:1c:8a:9a:23:29:e9:8d:29:ac:b2:f9:57: 19:a3:77:2f:39:37:5d:49:3f:06:5d:c6:01:d1:e4: 35:5a:73:3f:01:b0:ff:a9:a0:d9:e4:36:ea:a5:18: 06:0d:ea:2b:ab:c6:13:41:40:37:ef:49:d1:58:bb: 60:08:5c:b4:2b:16:4e:03:85:3e:e1:c4:56:5c:7d: 08:8c:00:ce:5f:5c:70:10:e3:86:26:15:ec:b8:99: 45:a7:b1:7d:c6:2d:8d:b7:7b:24:8f:70:1b:0f:d3: ab:2f:b2:40:19:85:24:9c:98:a0:ec:7e:ac:a3:34: 7a:01:a2:64:3e:81:d9:d4:0b:19:49:4f:ac:e0:e2: 57:14:3b:c8:9a:c7:86:96:82:54:05:56:cf:95:4f: 8d:ec:f2:a4:07:b4:fb:27:40:e5:e6:da:37:ba:55: 56:ef:c4:ba:40:88:b9:28:41:81:59:ae:2b:91:f3: fa:f1:b2:db:b6:df:57:cc:f7:87:3e:23:6a:5f:1a: 7a:06:d1:62:37:11:6d:a3:7e:f8:79:39:de:f3:34: 48:b1:22:11:8c:43:a9:c0:0a:b0:9d:6d:6c:3c:a2: 61:9c:14:0f:7d:6c:0b:bb:e8:f5:cc:14:20:f5:89: 43:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:55:6C:B7:19:4F:C3:47:BD:A3:39:AE:82:0A:CC:DE:B7:E1:AC:33 X509v3 Authority Key Identifier: keyid:FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:5a:d4:50:27:0c:4f:00:ca:97:18:47:11:ad:71:73:cc:b7: 30:b7:90:53:c0:54:0d:48:a0:c7:22:37:94:1a:ac:a3:84:c8: 8d:a8:a5:4d:1f:21:ff:9a:df:a7:bf:c6:e8:83:74:ed:f2:01: 94:d6:56:da:6c:cc:42:c2:d8:b0:38:5f:f5:a4:b2:3a:30:e0: ac:bc:c4:a6:30:2d:7c:75:2a:19:96:f0:89:26:9d:67:51:23: 58:3d:93:91:a8:37:ad:2f:a7:87:2a:f9:e3:5b:45:be:9c:d5: 18:ec:f7:ca:70:45:ce:79:ce:5c:8c:00:33:c5:60:2e:85:15: 90:b9:00:9f:0e:2f:fc:11:af:48:d0:d9:39:61:01:53:04:2c: 14:b1:f1:67:6b:89:9d:6e:f7:80:3a:d3:19:e1:81:0b:62:8b: 7d:87:d8:fc:62:5e:93:43:27:45:12:cd:20:18:e1:e2:44:2a: 5b:8f:3f:4a:32:a4:86:b7:34:03:4c:6f:2c:2f:4a:eb:2c:d4: 23:cb:0c:c5:64:60:e8:22:57:75:e6:bf:36:5d:19:3b:9b:2b: 0e:ef:a8:d1:e9:5c:24:11:7e:0a:a5:80:4b:1f:be:f6:6d:64: ae:39:80:3c:86:72:77:6c:4c:3b:fb:6b:06:5f:a6:32:86:9b: 79:70:11:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjU3gI8m8tH6vmYRn93lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZGJlYjM0OTcyMzJiNmY1YWM5YTI2ODc1MzcyMTEwMTVh Mjg3MTAwHhcNMjUxMjA2MDEwMjA4WhcNMjUxMjA3MDEwMjA4WjAzMTEwLwYDVQQD Eyg5ODU1NmNiNzE5NGZjMzQ3YmRhMzM5YWU4MjBhY2NkZWI3ZTFhYzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDMqcOQKuiIkXScmBqLcgaYcipoj KemNKayy+VcZo3cvOTddST8GXcYB0eQ1WnM/AbD/qaDZ5DbqpRgGDeorq8YTQUA3 70nRWLtgCFy0KxZOA4U+4cRWXH0IjADOX1xwEOOGJhXsuJlFp7F9xi2Nt3skj3Ab D9OrL7JAGYUknJig7H6sozR6AaJkPoHZ1AsZSU+s4OJXFDvImseGloJUBVbPlU+N 7PKkB7T7J0Dl5to3ulVW78S6QIi5KEGBWa4rkfP68bLbtt9XzPeHPiNqXxp6BtFi NxFto374eTne8zRIsSIRjEOpwAqwnW1sPKJhnBQPfWwLu+j1zBQg9YlDAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhVbLcZT8NHvaM5roIKzN634awzMB8GA1UdIwQY MBaAFP7b6zSXIytvWsmiaHU3IRAVoocQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3R2ck5KY2pLMjlheWFKb2RUY2hFQldpaHhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lMjQ1MWMtZTMxYy00YzMwLTg2ZjIt MGU1MTZmOWM0ZDQ1LzEvX3R2ck5KY2pLMjlheWFKb2RUY2hFQldpaHhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lMjQ1MWMtZTMxYy00YzMwLTg2ZjItMGU1MTZmOWM0ZDQ1 LzEvX3R2ck5KY2pLMjlheWFKb2RUY2hFQldpaHhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAalrUUCcM TwDKlxhHEa1xc8y3MLeQU8BUDUigxyI3lBqso4TIjailTR8h/5rfp7/G6IN07fIB lNZW2mzMQsLYsDhf9aSyOjDgrLzEpjAtfHUqGZbwiSadZ1EjWD2Tkag3rS+nhyr5 41tFvpzVGOz3ynBFznnOXIwAM8VgLoUVkLkAnw4v/BGvSNDZOWEBUwQsFLHxZ2uJ nW73gDrTGeGBC2KLfYfY/GJek0MnRRLNIBjh4kQqW48/SjKkhrc0A0xvLC9K6yzU I8sMxWRg6CJXdea/Nl0ZO5srDu+o0elcJBF+CqWASx++9m1krjmAPIZyd2xMO/tr Bl+mMoabeXARMg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:00:57 2025 by rpki-client