This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft File: tPo4W-BSv6QF36zSnyarbwAeYEc.mft (raw, json) Hash identifier: DdKoMQ4yz8NWwFBjjqTbCtB8rLEsKJZY5cRrae9VR0s= Subject key identifier: 9E:A6:7E:8A:36:13:3B:54:9E:B3:9F:03:80:74:2D:58:A7:22:73:8A Authority key identifier: B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47 Certificate issuer: /CN=b4fa385be052bfa405dfacd29f26ab6f001e6047 Certificate serial: 019AF42E616E719A748F734158C4B94C6443 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft Manifest number: 05DC Signing time: Sat 06 Dec 2025 15:01:11 +0000 Manifest this update: Sat 06 Dec 2025 15:01:11 +0000 Manifest next update: Sun 07 Dec 2025 15:01:11 +0000 Files and hashes: 1: tPo4W-BSv6QF36zSnyarbwAeYEc.crl (hash: 1uhvQ2LBucTo2eQbthbWKqp4n1lehjac/b5N7SKW1TA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:61:6e:71:9a:74:8f:73:41:58:c4:b9:4c:64:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4fa385be052bfa405dfacd29f26ab6f001e6047 Validity Not Before: Dec 6 15:01:11 2025 GMT Not After : Dec 7 15:01:11 2025 GMT Subject: CN=9ea67e8a36133b549eb39f0380742d58a722738a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:50:8d:17:18:43:f8:f5:02:dd:6a:14:a9:b2: 3b:90:9c:37:7d:a8:33:0a:e8:bf:0f:71:51:b8:af: b6:35:d0:a3:21:87:36:a9:7c:09:6d:8d:7c:87:a0: 52:32:c1:46:e7:d5:b9:e0:e4:c7:13:db:e2:a6:a3: 12:ef:ca:81:9d:66:86:da:94:b4:e6:93:1f:e3:de: b9:fd:90:3e:24:e2:20:aa:55:0c:c3:24:ac:57:70: 58:eb:15:81:a8:0f:b8:97:02:5a:2e:fe:db:15:77: fb:ce:08:dd:6b:4d:e2:f1:2a:79:b8:30:fc:39:f5: 80:9c:ac:9a:fb:55:43:a0:18:2c:f5:91:08:b7:de: a4:a9:4b:5a:94:a1:39:8d:f9:bd:09:07:3d:18:b8: a3:3c:35:39:09:e1:4e:3e:a6:d1:77:d7:9c:2f:8c: f2:40:e3:80:84:9d:59:9c:41:61:0e:f4:ff:04:15: 9b:77:0e:0d:d5:2b:88:46:53:21:14:83:11:f7:8c: 17:93:8c:53:1f:a5:c8:9f:a9:af:e8:7c:1d:d0:a4: 6f:ad:07:e9:9c:14:c8:b1:9b:eb:91:14:be:92:24: 17:b0:66:2c:40:95:35:3f:32:be:cb:cf:17:b8:e0: 7c:ff:0d:a8:85:a2:92:1a:d7:c0:e2:93:1c:39:15: d5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A6:7E:8A:36:13:3B:54:9E:B3:9F:03:80:74:2D:58:A7:22:73:8A X509v3 Authority Key Identifier: keyid:B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:c8:93:04:68:e8:d7:6c:50:74:40:b0:aa:2e:5d:4f:ac:a8: 0c:fa:c6:f5:a5:7d:ed:cd:34:8b:ea:8d:5e:6e:28:5e:9b:15: 91:07:e6:fa:11:83:99:30:18:84:d2:58:47:11:99:f8:75:bc: 6f:74:10:ff:9c:fe:2d:cd:ab:ef:58:3f:6a:5e:0d:86:9a:12: bf:77:38:04:46:a5:e1:82:20:48:96:b4:64:79:7a:f9:53:fe: 92:7c:b6:81:48:c3:90:ae:43:53:d5:61:f8:a4:05:fc:f9:70: b9:26:f8:85:9a:9c:85:04:fb:da:f2:83:80:1e:0c:94:e3:f2: d4:a7:e5:ec:17:a5:3d:d6:b4:77:6d:92:27:70:66:68:d6:44: 1b:43:ed:69:7b:b9:64:e8:46:8a:e1:0e:f4:3b:29:dd:80:de: cc:e3:da:8d:6f:55:ff:5a:59:8e:1c:38:88:bc:ee:e4:0f:75: 15:f0:a9:b1:f5:c5:72:e8:9d:ee:e1:9f:bb:9c:b0:01:e6:58: 54:1f:df:4b:54:a0:f5:33:2b:dd:24:d1:43:f6:7a:ec:5c:ed: 23:64:fd:dc:33:12:db:45:67:ef:de:4b:37:a4:1f:e3:f7:b2: dd:35:a5:70:7c:b9:93:06:f2:31:c7:62:a8:1f:f7:c8:ca:02: 74:09:5e:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LmFucZp0j3NBWMS5TGRDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZmEzODViZTA1MmJmYTQwNWRmYWNkMjlmMjZhYjZmMDAx ZTYwNDcwHhcNMjUxMjA2MTUwMTExWhcNMjUxMjA3MTUwMTExWjAzMTEwLwYDVQQD Eyg5ZWE2N2U4YTM2MTMzYjU0OWViMzlmMDM4MDc0MmQ1OGE3MjI3MzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlCNFxhD+PUC3WoUqbI7kJw3fagz Cui/D3FRuK+2NdCjIYc2qXwJbY18h6BSMsFG59W54OTHE9vipqMS78qBnWaG2pS0 5pMf4965/ZA+JOIgqlUMwySsV3BY6xWBqA+4lwJaLv7bFXf7zgjda03i8Sp5uDD8 OfWAnKya+1VDoBgs9ZEIt96kqUtalKE5jfm9CQc9GLijPDU5CeFOPqbRd9ecL4zy QOOAhJ1ZnEFhDvT/BBWbdw4N1SuIRlMhFIMR94wXk4xTH6XIn6mv6Hwd0KRvrQfp nBTIsZvrkRS+kiQXsGYsQJU1PzK+y88XuOB8/w2ohaKSGtfA4pMcORXVewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6mfoo2EztUnrOfA4B0LVinInOKMB8GA1UdIwQY MBaAFLT6OFvgUr+kBd+s0p8mq28AHmBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBvNFctQlN2NlFGMzZ6U255YXJid0FlWUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi82NzcxMDYtNDA5OS00YWVmLThjYzYt ZTk2MGE1MGNkYzgxLzEvdFBvNFctQlN2NlFGMzZ6U255YXJid0FlWUVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi82NzcxMDYtNDA5OS00YWVmLThjYzYtZTk2MGE1MGNkYzgx LzEvdFBvNFctQlN2NlFGMzZ6U255YXJid0FlWUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFciTBGjo 12xQdECwqi5dT6yoDPrG9aV97c00i+qNXm4oXpsVkQfm+hGDmTAYhNJYRxGZ+HW8 b3QQ/5z+Lc2r71g/al4NhpoSv3c4BEal4YIgSJa0ZHl6+VP+kny2gUjDkK5DU9Vh +KQF/PlwuSb4hZqchQT72vKDgB4MlOPy1Kfl7BelPda0d22SJ3BmaNZEG0PtaXu5 ZOhGiuEO9Dsp3YDezOPajW9V/1pZjhw4iLzu5A91FfCpsfXFcuid7uGfu5ywAeZY VB/fS1Sg9TMr3STRQ/Z67FztI2T93DMS20Vn795LN6Qf4/ey3TWlcHy5kwbyMcdi qB/3yMoCdAleKg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:27 2025 by rpki-client