This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft File: T_TbtnXuCOi72XQHoafv2RkZ5zg.mft (raw, json) Hash identifier: Xe/muGiidA03zEhGJlc6+a8cDs6veIuDuKCww4WjO9k= Subject key identifier: B8:0C:E1:D7:C3:20:02:C1:C4:83:E8:86:0C:32:99:53:6A:76:C3:AD Authority key identifier: 4F:F4:DB:B6:75:EE:08:E8:BB:D9:74:07:A1:A7:EF:D9:19:19:E7:38 Certificate issuer: /CN=4ff4dbb675ee08e8bbd97407a1a7efd91919e738 Certificate serial: 019AF50B9E48BE0FD8B5CFC86361DE57AF86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_TbtnXuCOi72XQHoafv2RkZ5zg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft Manifest number: 1079 Signing time: Sat 06 Dec 2025 19:02:50 +0000 Manifest this update: Sat 06 Dec 2025 19:02:50 +0000 Manifest next update: Sun 07 Dec 2025 19:02:50 +0000 Files and hashes: 1: T_TbtnXuCOi72XQHoafv2RkZ5zg.crl (hash: Re+Pd1n/IXANWQtES+s8r3jNyTKQrWhVBu/Zy7Kk5pQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft rsync://rpki.ripe.net/repository/DEFAULT/T_TbtnXuCOi72XQHoafv2RkZ5zg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:9e:48:be:0f:d8:b5:cf:c8:63:61:de:57:af:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ff4dbb675ee08e8bbd97407a1a7efd91919e738 Validity Not Before: Dec 6 19:02:50 2025 GMT Not After : Dec 7 19:02:50 2025 GMT Subject: CN=b80ce1d7c32002c1c483e8860c3299536a76c3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:df:c5:0e:31:51:1c:3d:8b:19:3b:42:16:45: f2:3f:54:4d:3c:d1:53:49:61:f9:02:20:49:93:4a: ba:5c:63:9a:bb:5c:de:3d:ce:fd:4d:bf:7d:fc:b6: 85:05:3b:af:1b:f3:bf:34:f4:15:1a:01:cc:67:0e: ea:a1:e6:37:94:63:d0:90:d9:ee:e9:95:89:d9:17: 60:a7:d5:d0:0c:fa:c8:45:06:ad:41:c5:f7:33:40: 3f:73:28:3a:78:f2:0a:30:8c:fd:7f:46:17:88:16: f1:7a:74:e5:fd:2d:6d:40:44:8d:c3:a6:a8:1a:fc: 12:4f:88:05:cd:4a:4f:f8:97:fe:8b:3b:21:20:94: 16:2a:43:13:02:0d:2e:f6:c1:df:3a:8c:54:f9:78: fd:9f:9a:df:82:bd:f3:96:89:31:61:29:58:5b:53: 2b:fc:f5:0f:dc:94:26:00:43:1a:22:3e:4c:0d:3e: d0:4f:e2:a0:b0:a5:bc:85:40:21:19:b4:b1:cc:9a: f9:88:12:91:f9:14:f6:ce:6b:0f:b0:da:97:75:ec: 41:a2:31:f5:f4:7d:69:7d:a5:22:e3:6f:68:14:13: 0c:30:6b:61:85:e1:95:64:d4:3e:d4:53:33:05:c5: 2f:68:97:d9:7e:04:d1:a0:42:72:7d:30:35:2e:ba: 84:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0C:E1:D7:C3:20:02:C1:C4:83:E8:86:0C:32:99:53:6A:76:C3:AD X509v3 Authority Key Identifier: keyid:4F:F4:DB:B6:75:EE:08:E8:BB:D9:74:07:A1:A7:EF:D9:19:19:E7:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_TbtnXuCOi72XQHoafv2RkZ5zg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:eb:80:5a:1e:56:3f:6f:5a:5f:6c:0c:cc:4d:0f:83:2e:1d: f5:ea:22:ce:bf:4e:eb:f4:18:fd:9c:5d:0d:84:e7:df:4a:41: e4:07:b0:01:9c:36:94:84:3d:b3:03:58:d9:96:ef:f9:f9:cf: 89:c4:86:be:67:c1:a6:c3:e2:21:39:d0:98:24:56:66:73:24: 28:a7:92:56:f6:3c:15:62:c3:f2:13:1f:1d:7a:ac:a2:1c:ee: 20:6a:69:7e:f6:8f:f9:a4:f5:09:eb:cb:88:7d:51:c6:b9:a1: c8:dc:a7:05:02:de:e6:ee:f4:26:f8:27:29:6b:9c:ad:73:58: 0d:40:2c:2c:53:92:ed:f5:1b:70:0f:78:5b:58:2a:c0:1e:53: a1:a9:1d:3e:d5:0c:07:c6:03:54:d3:0d:59:5c:39:3f:6a:1c: e9:0b:c9:4d:c2:57:bc:94:e7:4f:d8:27:7f:ee:71:f2:e0:40: a9:be:9e:52:ba:35:2f:85:34:bf:86:d0:ba:fd:3a:1e:7d:4e: 37:4e:30:86:9c:58:42:cb:fd:f2:02:37:c3:70:3d:e9:17:c9: 12:4a:a1:86:07:9d:10:9e:32:07:55:67:21:44:1d:a3:65:7f: 40:19:7f:d5:97:a7:39:06:5b:cc:bb:19:ae:4d:3f:ed:29:52: a4:14:32:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C55Ivg/Ytc/IY2HeV6+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmZjRkYmI2NzVlZTA4ZThiYmQ5NzQwN2ExYTdlZmQ5MTkx OWU3MzgwHhcNMjUxMjA2MTkwMjUwWhcNMjUxMjA3MTkwMjUwWjAzMTEwLwYDVQQD EyhiODBjZTFkN2MzMjAwMmMxYzQ4M2U4ODYwYzMyOTk1MzZhNzZjM2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39/FDjFRHD2LGTtCFkXyP1RNPNFT SWH5AiBJk0q6XGOau1zePc79Tb99/LaFBTuvG/O/NPQVGgHMZw7qoeY3lGPQkNnu 6ZWJ2Rdgp9XQDPrIRQatQcX3M0A/cyg6ePIKMIz9f0YXiBbxenTl/S1tQESNw6ao GvwST4gFzUpP+Jf+izshIJQWKkMTAg0u9sHfOoxU+Xj9n5rfgr3zlokxYSlYW1Mr /PUP3JQmAEMaIj5MDT7QT+KgsKW8hUAhGbSxzJr5iBKR+RT2zmsPsNqXdexBojH1 9H1pfaUi429oFBMMMGthheGVZNQ+1FMzBcUvaJfZfgTRoEJyfTA1LrqEoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgM4dfDIALBxIPohgwymVNqdsOtMB8GA1UdIwQY MBaAFE/027Z17gjou9l0B6Gn79kZGec4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVF9UYnRuWHVDT2k3MlhRSG9hZnYyUmtaNXpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mYjkzZWEtNjE2My00N2VjLThiZGMt NjNkOTBlNjY0ODIyLzEvVF9UYnRuWHVDT2k3MlhRSG9hZnYyUmtaNXpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9mYjkzZWEtNjE2My00N2VjLThiZGMtNjNkOTBlNjY0ODIy LzEvVF9UYnRuWHVDT2k3MlhRSG9hZnYyUmtaNXpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROuAWh5W P29aX2wMzE0Pgy4d9eoizr9O6/QY/ZxdDYTn30pB5AewAZw2lIQ9swNY2Zbv+fnP icSGvmfBpsPiITnQmCRWZnMkKKeSVvY8FWLD8hMfHXqsohzuIGppfvaP+aT1CevL iH1RxrmhyNynBQLe5u70JvgnKWucrXNYDUAsLFOS7fUbcA94W1gqwB5ToakdPtUM B8YDVNMNWVw5P2oc6QvJTcJXvJTnT9gnf+5x8uBAqb6eUro1L4U0v4bQuv06Hn1O N04whpxYQsv98gI3w3A96RfJEkqhhgedEJ4yB1VnIUQdo2V/QBl/1ZenOQZbzLsZ rk0/7SlSpBQyLw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:20:07 2025 by rpki-client