This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft File: tDtWqlNz6PXng0dnQkDv98KCctw.mft (raw, json) Hash identifier: QtcYHmU+BqEYjGlPZ1t5YPXzuU+TLb9o4QKkjNU33Z4= Subject key identifier: 6E:7D:74:15:26:F4:B8:69:B5:CD:D1:E3:F9:74:A7:DD:CD:94:B9:46 Authority key identifier: B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC Certificate issuer: /CN=b43b56aa5373e8f5e78347674240eff7c28272dc Certificate serial: 019AF12E06CC4B5BAF77AF96267CDB135A5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft Manifest number: 1099 Signing time: Sat 06 Dec 2025 01:01:56 +0000 Manifest this update: Sat 06 Dec 2025 01:01:56 +0000 Manifest next update: Sun 07 Dec 2025 01:01:56 +0000 Files and hashes: 1: tDtWqlNz6PXng0dnQkDv98KCctw.crl (hash: DeZHTYTNK/cc+9S5/U9eTXICqm21fARXshwHRZ/1cP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:06:cc:4b:5b:af:77:af:96:26:7c:db:13:5a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43b56aa5373e8f5e78347674240eff7c28272dc Validity Not Before: Dec 6 01:01:56 2025 GMT Not After : Dec 7 01:01:56 2025 GMT Subject: CN=6e7d741526f4b869b5cdd1e3f974a7ddcd94b946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b3:27:85:8a:4a:83:a6:e2:79:94:e4:11:96: 1c:9f:58:a3:39:2e:8e:5e:db:6a:79:2f:bd:15:ec: 36:62:4e:fc:1d:cf:d6:96:ac:0d:fb:2a:39:3d:f3: a0:fb:28:a3:a0:ea:5b:81:82:9b:c1:bb:d5:f0:dd: 2a:3c:ce:d8:e5:a7:d9:4c:fe:c4:58:77:a1:2c:0d: ae:ab:5b:b7:29:82:aa:41:4d:35:e0:75:b3:22:74: 1b:b7:09:cc:4b:d6:56:e3:53:db:fb:da:2a:42:d3: 04:d7:54:86:72:6e:a8:32:95:34:f6:02:c0:a5:72: 81:bc:fa:0f:cb:a0:70:ee:c9:49:c3:95:8e:2e:26: ea:a2:3c:63:7f:1f:3e:0c:64:3f:7b:e4:42:54:46: 8f:a3:b2:99:6b:b0:52:f3:e1:9f:be:75:37:cb:1a: 9d:ae:ad:7a:f5:b2:92:49:4a:b5:3b:c9:d2:84:99: cc:85:4a:90:c7:1d:a8:62:a2:bc:37:f1:72:24:ba: e3:18:bc:0e:c0:6d:52:27:2b:bd:22:51:15:a1:5b: 9c:f5:58:09:1a:43:ff:72:29:92:b5:29:2a:3c:56: 95:d5:92:cf:07:b9:dd:da:b0:c9:33:1e:e9:cc:1c: df:6b:c6:fa:9b:ed:0d:3f:29:41:19:0f:a7:61:ad: 23:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7D:74:15:26:F4:B8:69:B5:CD:D1:E3:F9:74:A7:DD:CD:94:B9:46 X509v3 Authority Key Identifier: keyid:B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:d1:a1:31:38:66:48:b2:cc:0a:c3:82:4d:6d:f3:05:e5:ed: 76:9e:70:4e:26:cf:66:56:ba:4e:86:c5:25:72:f1:59:ee:1f: 23:ec:89:f8:f3:15:33:2a:05:fd:eb:7b:03:48:05:c7:68:1a: 22:a3:51:78:0c:0d:e2:d9:5d:c3:8a:23:d8:ca:c1:42:6a:41: 9a:5c:4a:ac:46:ea:bc:b6:46:19:01:13:85:a1:cc:1f:1f:3d: 21:74:34:bf:9e:03:3d:fc:e8:9b:55:0f:58:b6:52:bb:1b:c5: 77:ce:e7:70:db:26:2c:db:cb:20:9e:7a:8e:1e:8d:00:48:6d: c2:d7:6e:f3:0f:45:d1:fb:c7:f9:36:ff:e6:6e:4a:a0:15:ce: 46:6b:5c:3c:45:75:d5:0e:93:c7:e1:b5:ee:1e:1c:10:51:72: f8:46:e5:38:95:9f:83:00:02:9b:16:a3:8d:de:1a:f9:e3:99: c5:f6:7b:55:16:82:75:40:77:f9:79:c6:68:ed:83:70:41:fd: 54:2c:7b:73:7d:d1:70:36:56:e6:b0:99:44:d3:9e:be:71:da: 38:2f:02:43:be:08:f3:7d:2b:d8:4e:c3:9d:1b:34:b2:cd:21: d5:b0:91:eb:8a:be:12:7c:09:c0:c3:f0:14:1e:7f:2c:06:85: c6:55:20:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgbMS1uvd6+WJnzbE1peMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0M2I1NmFhNTM3M2U4ZjVlNzgzNDc2NzQyNDBlZmY3YzI4 MjcyZGMwHhcNMjUxMjA2MDEwMTU2WhcNMjUxMjA3MDEwMTU2WjAzMTEwLwYDVQQD Eyg2ZTdkNzQxNTI2ZjRiODY5YjVjZGQxZTNmOTc0YTdkZGNkOTRiOTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7MnhYpKg6bieZTkEZYcn1ijOS6O XttqeS+9Few2Yk78Hc/WlqwN+yo5PfOg+yijoOpbgYKbwbvV8N0qPM7Y5afZTP7E WHehLA2uq1u3KYKqQU014HWzInQbtwnMS9ZW41Pb+9oqQtME11SGcm6oMpU09gLA pXKBvPoPy6Bw7slJw5WOLibqojxjfx8+DGQ/e+RCVEaPo7KZa7BS8+GfvnU3yxqd rq169bKSSUq1O8nShJnMhUqQxx2oYqK8N/FyJLrjGLwOwG1SJyu9IlEVoVuc9VgJ GkP/cimStSkqPFaV1ZLPB7nd2rDJMx7pzBzfa8b6m+0NPylBGQ+nYa0jPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG59dBUm9Lhptc3R4/l0p93NlLlGMB8GA1UdIwQY MBaAFLQ7VqpTc+j154NHZ0JA7/fCgnLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdER0V3FsTno2UFhuZzBkblFrRHY5OEtDY3R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNGFlZGYtY2FiNS00MTk5LWEyMDct NWNmNjc0OGQ4Nzg0LzEvdER0V3FsTno2UFhuZzBkblFrRHY5OEtDY3R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9hNGFlZGYtY2FiNS00MTk5LWEyMDctNWNmNjc0OGQ4Nzg0 LzEvdER0V3FsTno2UFhuZzBkblFrRHY5OEtDY3R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdGhMThm SLLMCsOCTW3zBeXtdp5wTibPZla6TobFJXLxWe4fI+yJ+PMVMyoF/et7A0gFx2ga IqNReAwN4tldw4oj2MrBQmpBmlxKrEbqvLZGGQEThaHMHx89IXQ0v54DPfzom1UP WLZSuxvFd87ncNsmLNvLIJ56jh6NAEhtwtdu8w9F0fvH+Tb/5m5KoBXORmtcPEV1 1Q6Tx+G17h4cEFFy+EblOJWfgwACmxajjd4a+eOZxfZ7VRaCdUB3+XnGaO2DcEH9 VCx7c33RcDZW5rCZRNOevnHaOC8CQ74I830r2E7DnRs0ss0h1bCR64q+EnwJwMPw FB5/LAaFxlUgmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:51 2025 by rpki-client