This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.mft File: TYJcWjaxil5MorUyJtWgW1kN3J4.mft (raw, json) Hash identifier: pWVGxATpwnbNXOugNwqxLPsrX1He7LlHicU64rhuUHE= Subject key identifier: F7:EE:D2:43:BC:F5:1F:08:91:4C:E0:7F:3A:CA:03:54:C2:FA:E4:FC Authority key identifier: 4D:82:5C:5A:36:B1:8A:5E:4C:A2:B5:32:26:D5:A0:5B:59:0D:DC:9E Certificate issuer: /CN=4d825c5a36b18a5e4ca2b53226d5a05b590ddc9e Certificate serial: 019AF2E4363FB7A57C65D4A6DB00E408E0B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYJcWjaxil5MorUyJtWgW1kN3J4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.mft Manifest number: 66 Signing time: Sat 06 Dec 2025 09:00:33 +0000 Manifest this update: Sat 06 Dec 2025 09:00:33 +0000 Manifest next update: Sun 07 Dec 2025 09:00:33 +0000 Files and hashes: 1: TYJcWjaxil5MorUyJtWgW1kN3J4.crl (hash: CBR+ANauVhRfWp0lCfMxYdZbrARp7JMM37veBGbzfMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.mft rsync://rpki.ripe.net/repository/DEFAULT/TYJcWjaxil5MorUyJtWgW1kN3J4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:36:3f:b7:a5:7c:65:d4:a6:db:00:e4:08:e0:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d825c5a36b18a5e4ca2b53226d5a05b590ddc9e Validity Not Before: Dec 6 09:00:33 2025 GMT Not After : Dec 7 09:00:33 2025 GMT Subject: CN=f7eed243bcf51f08914ce07f3aca0354c2fae4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:89:ee:67:d9:a0:8a:c8:f8:c0:ac:50:a0: 80:4b:e5:9b:3e:fa:e0:8e:a9:9f:fc:06:30:2a:55: dc:14:98:ce:0f:f0:20:54:56:19:39:64:02:c6:5d: 6c:67:e3:fd:03:ce:a7:13:10:1d:e2:2b:de:19:2f: a6:11:b4:82:9d:3b:72:88:77:2c:85:ca:01:5d:f1: fc:72:12:d4:9f:84:5b:30:25:95:2d:dc:cd:29:a0: 1f:c3:f0:2e:09:8a:15:6e:8e:03:10:d5:fe:87:6d: e8:b4:e0:76:77:d0:7d:78:39:8b:96:ba:e7:b3:db: fc:27:db:02:ec:86:1d:a3:50:00:9d:f2:0f:d2:ba: 5c:3f:5f:14:ad:e4:f6:a5:92:0e:47:c9:b4:8d:8a: 56:08:d0:c9:7c:8a:63:f9:a1:95:f5:08:d0:2b:e1: 60:ab:2b:cc:32:e7:f8:bb:09:d6:b3:c2:97:03:fa: 7b:4a:a6:c0:c2:be:79:1e:cc:9c:96:1a:04:e4:e4: 21:7a:3b:e7:32:2a:9e:7c:56:a1:bf:a2:98:fa:38: 85:6b:0a:81:4b:5b:a5:31:cb:1b:4c:70:13:77:f3: 4c:96:5c:2f:00:bb:22:88:3a:b9:9b:95:fc:d6:6f: be:74:a2:0f:35:1f:a5:a3:f7:6b:f5:c1:57:7c:4a: 65:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EE:D2:43:BC:F5:1F:08:91:4C:E0:7F:3A:CA:03:54:C2:FA:E4:FC X509v3 Authority Key Identifier: keyid:4D:82:5C:5A:36:B1:8A:5E:4C:A2:B5:32:26:D5:A0:5B:59:0D:DC:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYJcWjaxil5MorUyJtWgW1kN3J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:95:39:f8:57:95:30:43:b3:4d:c3:46:51:79:4b:6c:ac:91: ff:58:74:b5:5e:b7:a6:2f:72:1c:db:67:6f:68:b2:a8:c7:fa: 03:cf:fb:2a:b7:16:db:66:46:d1:4a:e0:08:be:3e:e1:b0:a8: 8b:cb:8a:31:62:44:3d:c6:b2:f8:ec:e2:c6:a3:15:26:fc:a7: 38:64:45:a7:01:59:08:b8:ca:f4:20:05:88:04:ce:74:6a:ab: f2:42:e5:d2:d2:fe:95:b7:f2:d7:91:39:fb:85:1d:64:c1:fc: f8:7f:78:64:02:f6:c0:2a:41:38:4f:c7:66:bb:54:23:14:a4: 53:e1:c1:48:5d:05:2f:1a:1e:f5:89:e6:af:d7:9e:15:78:c7: ea:c5:79:f5:9c:46:db:b3:2a:f8:6a:ac:49:b6:00:e8:bd:00: 37:b5:17:db:49:c6:84:ff:22:ba:bf:89:cc:31:cf:8e:42:f0: 2d:2d:b7:c1:25:db:3e:d1:b2:7c:6e:34:37:a7:9a:6b:21:13: 75:5d:22:41:e8:68:61:86:67:f0:90:e6:e1:16:a7:a5:95:be: 81:64:39:1c:ec:54:06:69:7d:ca:cf:62:08:29:f9:33:72:57: 2d:78:7c:68:85:ae:f2:87:43:15:7e:64:59:8f:93:e5:01:3c: 87:3f:75:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5DY/t6V8ZdSm2wDkCOC4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkODI1YzVhMzZiMThhNWU0Y2EyYjUzMjI2ZDVhMDViNTkw ZGRjOWUwHhcNMjUxMjA2MDkwMDMzWhcNMjUxMjA3MDkwMDMzWjAzMTEwLwYDVQQD EyhmN2VlZDI0M2JjZjUxZjA4OTE0Y2UwN2YzYWNhMDM1NGMyZmFlNGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH+J7mfZoIrI+MCsUKCAS+WbPvrg jqmf/AYwKlXcFJjOD/AgVFYZOWQCxl1sZ+P9A86nExAd4iveGS+mEbSCnTtyiHcs hcoBXfH8chLUn4RbMCWVLdzNKaAfw/AuCYoVbo4DENX+h23otOB2d9B9eDmLlrrn s9v8J9sC7IYdo1AAnfIP0rpcP18UreT2pZIOR8m0jYpWCNDJfIpj+aGV9QjQK+Fg qyvMMuf4uwnWs8KXA/p7SqbAwr55HsyclhoE5OQhejvnMiqefFahv6KY+jiFawqB S1ulMcsbTHATd/NMllwvALsiiDq5m5X81m++dKIPNR+lo/dr9cFXfEplKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfu0kO89R8IkUzgfzrKA1TC+uT8MB8GA1UdIwQY MBaAFE2CXFo2sYpeTKK1MibVoFtZDdyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFlKY1dqYXhpbDVNb3JVeUp0V2dXMWtOM0o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9hNGVkOGUtOWRlOC00ZTExLWIxM2Ut ZWZlY2E0MzE3M2E4LzEvVFlKY1dqYXhpbDVNb3JVeUp0V2dXMWtOM0o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9hNGVkOGUtOWRlOC00ZTExLWIxM2UtZWZlY2E0MzE3M2E4 LzEvVFlKY1dqYXhpbDVNb3JVeUp0V2dXMWtOM0o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt5U5+FeV MEOzTcNGUXlLbKyR/1h0tV63pi9yHNtnb2iyqMf6A8/7KrcW22ZG0UrgCL4+4bCo i8uKMWJEPcay+OzixqMVJvynOGRFpwFZCLjK9CAFiATOdGqr8kLl0tL+lbfy15E5 +4UdZMH8+H94ZAL2wCpBOE/HZrtUIxSkU+HBSF0FLxoe9Ynmr9eeFXjH6sV59ZxG 27Mq+GqsSbYA6L0AN7UX20nGhP8iur+JzDHPjkLwLS23wSXbPtGyfG40N6eaayET dV0iQehoYYZn8JDm4RanpZW+gWQ5HOxUBml9ys9iCCn5M3JXLXh8aIWu8odDFX5k WY+T5QE8hz912g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:44:37 2025 by rpki-client