This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft File: tDlkbascuAzWConx-qE0bzlSO_o.mft (raw, json) Hash identifier: oaAEz4RgU2SJ54pvNz++M7Q94a4dEkCcOb1E+yp2W54= Subject key identifier: 88:E9:70:C1:A8:DA:30:97:D8:C3:D3:13:DF:D0:18:99:B8:AB:F9:70 Authority key identifier: B4:39:64:6D:AB:1C:B8:0C:D6:0A:89:F1:FA:A1:34:6F:39:52:3B:FA Certificate issuer: /CN=b439646dab1cb80cd60a89f1faa1346f39523bfa Certificate serial: 019AF12D6435657F6C94BAAFF6832A56966C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDlkbascuAzWConx-qE0bzlSO_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:01:15 +0000 Manifest this update: Sat 06 Dec 2025 01:01:15 +0000 Manifest next update: Sun 07 Dec 2025 01:01:15 +0000 Files and hashes: 1: tDlkbascuAzWConx-qE0bzlSO_o.crl (hash: wsQmaMFDVKeZC6BOAYvgW71a0I2X3BJ/E9DZgy1y+7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft rsync://rpki.ripe.net/repository/DEFAULT/tDlkbascuAzWConx-qE0bzlSO_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:64:35:65:7f:6c:94:ba:af:f6:83:2a:56:96:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b439646dab1cb80cd60a89f1faa1346f39523bfa Validity Not Before: Dec 6 01:01:15 2025 GMT Not After : Dec 7 01:01:15 2025 GMT Subject: CN=88e970c1a8da3097d8c3d313dfd01899b8abf970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c8:c0:9b:25:8e:65:96:cf:a9:d1:f8:1b:1e: df:40:94:2c:ab:05:23:40:4b:cd:0b:d9:18:35:97: 38:53:48:ad:a6:ac:5a:1e:f7:9e:ce:86:ec:6c:c5: de:2c:ff:de:e2:4f:07:6f:cf:81:8e:93:d2:34:2f: 4a:0d:ea:7b:5a:e4:55:8b:1d:29:d0:7b:f6:47:b2: 28:c7:15:41:d2:25:94:8b:06:93:c3:ba:dd:45:c7: b2:0d:f6:df:05:ca:66:08:94:54:05:95:1e:b8:4c: ba:03:70:d0:ce:d5:6e:57:08:65:27:15:dc:83:88: 9f:ae:ba:7e:4b:b8:ce:b5:78:f6:8f:fb:84:81:b9: 96:0f:95:57:f0:64:0d:e4:fd:01:98:67:d3:20:3b: 39:52:35:40:cb:67:0e:8b:eb:7c:e5:8f:25:2b:c9: f8:f5:90:e1:e6:53:99:7f:fb:fe:d1:58:a5:1f:cf: 34:ef:0e:01:c4:21:19:7a:d0:bc:55:44:5c:24:41: db:f1:9d:2a:20:2d:b2:ec:22:d5:cb:57:af:35:85: 74:79:32:c8:9c:1e:8f:ef:5d:93:a3:2b:78:5a:12: a4:1d:c4:63:de:02:9c:72:fd:5a:34:d1:e1:0c:d3: 19:ea:c5:0f:4d:fe:50:96:08:60:db:ee:07:1e:05: 25:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E9:70:C1:A8:DA:30:97:D8:C3:D3:13:DF:D0:18:99:B8:AB:F9:70 X509v3 Authority Key Identifier: keyid:B4:39:64:6D:AB:1C:B8:0C:D6:0A:89:F1:FA:A1:34:6F:39:52:3B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDlkbascuAzWConx-qE0bzlSO_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:85:36:91:fb:3d:a5:46:a7:b8:d7:92:40:5a:2b:84:f2:2b: 88:75:de:88:a6:86:c3:b0:21:2c:42:34:86:5e:d4:3c:15:4d: de:b8:5d:e0:e2:62:27:08:34:69:d7:11:ae:5e:57:e9:11:a6: 36:e0:ae:a1:56:15:ee:0c:c6:7a:07:2e:c8:9c:f4:ad:85:11: d3:99:93:03:d0:8a:33:96:b0:dd:40:02:39:f9:e1:46:5b:a3: 8e:1a:ba:71:e5:fa:0f:c7:c5:1d:e4:c3:de:33:f8:60:e6:73: 06:38:2a:e6:4c:0a:e6:53:08:e6:73:8f:ba:7f:22:d6:f1:fb: e3:f9:74:99:4c:24:d3:ee:30:2c:e2:2b:ea:28:df:2d:1b:da: 69:9b:28:59:43:a3:58:1e:0a:ba:27:63:8b:10:11:c3:5c:20: 3d:b3:28:9a:83:7e:ed:c5:6a:2a:26:7b:7c:40:9e:66:31:31: bc:b6:bf:2e:df:21:19:f5:dc:37:34:58:19:0a:6f:89:6e:b9: 4a:dd:2e:cd:26:43:34:8d:a1:d3:aa:68:01:36:3b:70:28:4c: 98:7f:22:5c:d9:95:44:9e:05:e7:e6:cb:28:ff:5d:1e:f7:e2: 04:fc:7e:3a:4e:65:1e:ac:a5:84:fc:3f:0a:13:4e:00:24:09: b8:5e:c0:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWQ1ZX9slLqv9oMqVpZsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0Mzk2NDZkYWIxY2I4MGNkNjBhODlmMWZhYTEzNDZmMzk1 MjNiZmEwHhcNMjUxMjA2MDEwMTE1WhcNMjUxMjA3MDEwMTE1WjAzMTEwLwYDVQQD Eyg4OGU5NzBjMWE4ZGEzMDk3ZDhjM2QzMTNkZmQwMTg5OWI4YWJmOTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8jAmyWOZZbPqdH4Gx7fQJQsqwUj QEvNC9kYNZc4U0itpqxaHveezobsbMXeLP/e4k8Hb8+BjpPSNC9KDep7WuRVix0p 0Hv2R7IoxxVB0iWUiwaTw7rdRceyDfbfBcpmCJRUBZUeuEy6A3DQztVuVwhlJxXc g4ifrrp+S7jOtXj2j/uEgbmWD5VX8GQN5P0BmGfTIDs5UjVAy2cOi+t85Y8lK8n4 9ZDh5lOZf/v+0VilH8807w4BxCEZetC8VURcJEHb8Z0qIC2y7CLVy1evNYV0eTLI nB6P712Toyt4WhKkHcRj3gKccv1aNNHhDNMZ6sUPTf5Qlghg2+4HHgUl/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjpcMGo2jCX2MPTE9/QGJm4q/lwMB8GA1UdIwQY MBaAFLQ5ZG2rHLgM1gqJ8fqhNG85Ujv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERsa2Jhc2N1QXpXQ29ueC1xRTBiemxTT19vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jZDRmNGQtYWE1OC00YTJmLWEzYzUt N2U4YzU0NWE5N2FlLzEvdERsa2Jhc2N1QXpXQ29ueC1xRTBiemxTT19vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9jZDRmNGQtYWE1OC00YTJmLWEzYzUtN2U4YzU0NWE5N2Fl LzEvdERsa2Jhc2N1QXpXQ29ueC1xRTBiemxTT19vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIU2kfs9 pUanuNeSQForhPIriHXeiKaGw7AhLEI0hl7UPBVN3rhd4OJiJwg0adcRrl5X6RGm NuCuoVYV7gzGegcuyJz0rYUR05mTA9CKM5aw3UACOfnhRlujjhq6ceX6D8fFHeTD 3jP4YOZzBjgq5kwK5lMI5nOPun8i1vH74/l0mUwk0+4wLOIr6ijfLRvaaZsoWUOj WB4KuidjixARw1wgPbMomoN+7cVqKiZ7fECeZjExvLa/Lt8hGfXcNzRYGQpviW65 St0uzSZDNI2h06poATY7cChMmH8iXNmVRJ4F5+bLKP9dHvfiBPx+Ok5lHqylhPw/ ChNOACQJuF7Ahw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:27 2025 by rpki-client