This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft File: TE6QpGzZL4_8sZJLk7cdG60xMBI.mft (raw, json) Hash identifier: YQO7uzw//zgR4p3Ljol2NNWsCh3/YLAUnmFZurt63EI= Subject key identifier: A7:DB:B0:80:74:7B:CD:CD:F9:B3:ED:E2:60:AE:19:03:61:F1:6C:49 Authority key identifier: 4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12 Certificate issuer: /CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012 Certificate serial: 019AF20969BB51EE2AC5866DB8D6C1A16089 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft Manifest number: 0F5F Signing time: Sat 06 Dec 2025 05:01:34 +0000 Manifest this update: Sat 06 Dec 2025 05:01:34 +0000 Manifest next update: Sun 07 Dec 2025 05:01:34 +0000 Files and hashes: 1: TE6QpGzZL4_8sZJLk7cdG60xMBI.crl (hash: uy5/GX0NkZ8bFk9uDTUGiaB0DIBAYj5lLx3s+gEbuuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:69:bb:51:ee:2a:c5:86:6d:b8:d6:c1:a1:60:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012 Validity Not Before: Dec 6 05:01:34 2025 GMT Not After : Dec 7 05:01:34 2025 GMT Subject: CN=a7dbb080747bcdcdf9b3ede260ae190361f16c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:09:bc:dd:21:e2:6f:17:6d:2c:66:9d:bf:b9: c8:f9:5a:7f:61:04:8f:25:5d:9e:ed:46:ea:28:29: 0f:7a:e1:ff:aa:3c:50:8e:31:9f:1b:ba:bb:3e:b3: 22:3c:7d:da:a8:28:4c:ce:c6:15:20:07:ef:af:c9: 51:a1:2f:4d:c6:dc:a7:96:d0:2f:f0:f9:68:b2:c9: 8e:1a:2a:b4:04:4d:63:58:fc:b3:c5:d9:88:78:c4: f9:b2:dc:b0:44:b5:f9:a6:16:8b:f5:6d:76:52:bf: a7:c6:b3:39:8c:a8:17:df:ff:51:47:d2:3d:71:de: ea:12:c7:93:c3:17:7a:92:d0:10:ea:e8:a3:68:84: 62:5f:d7:3a:26:45:54:84:60:72:77:e2:c3:f1:d5: 50:38:f4:fc:42:82:62:b2:27:58:31:44:cc:f8:e0: 7a:49:de:66:17:d7:af:76:53:34:3e:1c:06:f8:69: 6c:7c:39:43:e3:b2:90:14:66:44:8a:de:22:b6:7b: 67:a3:ea:e3:d7:35:ca:db:38:52:ea:8a:8e:1b:47: 45:17:14:9e:c2:94:99:3e:42:74:64:d1:b9:a0:34: 29:18:ed:ee:c4:d8:98:10:f9:90:87:34:9c:62:c4: b5:82:81:7d:ff:5c:7c:6b:82:96:97:07:f2:0d:4e: 9e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DB:B0:80:74:7B:CD:CD:F9:B3:ED:E2:60:AE:19:03:61:F1:6C:49 X509v3 Authority Key Identifier: keyid:4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:56:b1:98:1c:02:a2:4b:a2:7c:8d:2a:11:e0:5c:1b:58:00: 17:fd:5d:2a:8b:b5:2f:f4:d0:4f:e0:db:db:f6:15:9f:fe:83: e1:5b:e4:ea:17:bf:02:92:8f:0a:91:13:41:c2:63:0a:99:ae: c5:9d:74:89:db:82:4a:82:c0:76:5a:d8:99:39:f7:83:93:a0: 21:f5:a9:25:5b:a1:d1:74:f7:e5:ab:d9:72:d7:2b:78:ba:c0: e8:a1:a9:8c:b8:4a:46:71:a2:ae:1d:86:e8:71:c6:19:79:12: 34:2f:95:ec:5e:25:2f:66:f1:28:33:23:38:75:bd:f8:a5:b8: 84:d5:7e:bd:57:91:ee:a4:28:ce:4b:62:c3:9d:e5:96:a1:7c: 28:26:0f:44:82:aa:dc:15:33:26:92:c4:2a:02:b9:ff:25:0a: 4f:02:7c:ff:ee:2e:ed:f7:17:66:77:e1:ba:d1:c3:5d:b6:5a: e4:14:45:43:40:cc:4a:3f:ef:d7:5a:74:c4:1a:c4:df:a6:d2: ac:e1:79:f8:d5:94:d7:20:f2:1d:99:1f:26:de:9f:eb:1b:af: 0d:b4:39:f9:32:8b:51:83:43:e7:e3:41:29:e8:f9:1c:6f:74: 7b:51:bd:94:76:3d:f9:a2:98:8a:4d:64:a2:64:2c:54:82:c4: 90:7d:7c:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWm7Ue4qxYZtuNbBoWCJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNGU5MGE0NmNkOTJmOGZmY2IxOTI0YjkzYjcxZDFiYWQz MTMwMTIwHhcNMjUxMjA2MDUwMTM0WhcNMjUxMjA3MDUwMTM0WjAzMTEwLwYDVQQD EyhhN2RiYjA4MDc0N2JjZGNkZjliM2VkZTI2MGFlMTkwMzYxZjE2YzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgm83SHibxdtLGadv7nI+Vp/YQSP JV2e7UbqKCkPeuH/qjxQjjGfG7q7PrMiPH3aqChMzsYVIAfvr8lRoS9NxtynltAv 8PlossmOGiq0BE1jWPyzxdmIeMT5stywRLX5phaL9W12Ur+nxrM5jKgX3/9RR9I9 cd7qEseTwxd6ktAQ6uijaIRiX9c6JkVUhGByd+LD8dVQOPT8QoJisidYMUTM+OB6 Sd5mF9evdlM0PhwG+GlsfDlD47KQFGZEit4itntno+rj1zXK2zhS6oqOG0dFFxSe wpSZPkJ0ZNG5oDQpGO3uxNiYEPmQhzScYsS1goF9/1x8a4KWlwfyDU6eAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfbsIB0e83N+bPt4mCuGQNh8WxJMB8GA1UdIwQY MBaAFExOkKRs2S+P/LGSS5O3HRutMTASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jMjdlZWMtNzE0MS00NTc1LTlhNmYt YzQ1NzI4YzU2ZjNiLzEvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9jMjdlZWMtNzE0MS00NTc1LTlhNmYtYzQ1NzI4YzU2ZjNi LzEvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVaxmBwC okuifI0qEeBcG1gAF/1dKou1L/TQT+Db2/YVn/6D4Vvk6he/ApKPCpETQcJjCpmu xZ10iduCSoLAdlrYmTn3g5OgIfWpJVuh0XT35avZctcreLrA6KGpjLhKRnGirh2G 6HHGGXkSNC+V7F4lL2bxKDMjOHW9+KW4hNV+vVeR7qQozktiw53llqF8KCYPRIKq 3BUzJpLEKgK5/yUKTwJ8/+4u7fcXZnfhutHDXbZa5BRFQ0DMSj/v11p0xBrE36bS rOF5+NWU1yDyHZkfJt6f6xuvDbQ5+TKLUYND5+NBKej5HG90e1G9lHY9+aKYik1k omQsVILEkH18Zw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:10:55 2025 by rpki-client