This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft File: TE38e6TewmWW3IrCMFqR7Y6SnGk.mft (raw, json) Hash identifier: 3uzdr2n9BSdVdYkAajui8dkFKQN3JF6tB0QaRX60ys0= Subject key identifier: 6E:E2:64:52:BF:F6:D1:70:5D:42:A8:5C:75:E9:0D:6B:8C:6D:5C:03 Authority key identifier: 4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69 Certificate issuer: /CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69 Certificate serial: 019AF12CC4B4A9C429ED6200CD7E0E54E9E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft Manifest number: 1193 Signing time: Sat 06 Dec 2025 01:00:34 +0000 Manifest this update: Sat 06 Dec 2025 01:00:34 +0000 Manifest next update: Sun 07 Dec 2025 01:00:34 +0000 Files and hashes: 1: TE38e6TewmWW3IrCMFqR7Y6SnGk.crl (hash: z29LEGzPH50Pp2euRB87D2hf9ci4sJ+cDl0e/HiEV2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c4:b4:a9:c4:29:ed:62:00:cd:7e:0e:54:e9:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69 Validity Not Before: Dec 6 01:00:34 2025 GMT Not After : Dec 7 01:00:34 2025 GMT Subject: CN=6ee26452bff6d1705d42a85c75e90d6b8c6d5c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fd:6f:5c:40:cb:0e:d5:5d:af:4f:76:59:84: b8:53:82:7d:84:6b:93:29:1d:ec:f4:a3:b1:84:28: 0d:69:99:cd:00:1c:ef:22:ac:8f:46:24:43:21:35: cd:17:ab:39:80:d3:5f:44:f0:a6:74:76:e2:37:06: 86:c2:dc:79:27:f6:2e:bf:32:c8:1b:01:c1:69:63: 91:ce:0b:5f:c1:2a:6e:d8:f5:22:70:24:1a:43:ea: d9:83:d9:6a:80:0b:78:b0:96:72:54:52:3a:35:4b: 38:dd:c9:4a:ed:4e:1e:dc:a6:3d:3c:24:b7:df:5e: a2:aa:a8:1d:c3:9c:bc:15:49:df:7f:c4:3c:89:24: 76:d6:34:43:36:b6:3f:75:e3:9f:a1:58:0d:56:f8: cd:1f:bc:25:c7:3f:63:26:1e:34:93:9a:f9:9e:ea: a3:35:18:17:ec:ee:b5:78:1f:76:a7:3c:b5:94:e1: 3c:95:dc:e7:98:77:77:51:86:c2:f2:30:7b:13:05: 91:36:00:9d:2c:b7:23:30:b7:62:fc:51:b8:8c:ca: 58:eb:1b:98:44:0b:3f:4f:80:01:00:6a:fb:3a:2b: 1d:8f:2a:03:63:64:86:0d:0a:1e:a0:ff:ca:c6:a6: 77:e5:f9:ca:c0:12:2c:5b:a3:87:f4:01:6b:24:5b: a4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E2:64:52:BF:F6:D1:70:5D:42:A8:5C:75:E9:0D:6B:8C:6D:5C:03 X509v3 Authority Key Identifier: keyid:4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:42:93:25:94:55:9b:c7:49:41:dc:b8:9e:aa:f4:d8:7a:17: 2f:02:7c:a0:18:c2:da:d5:8e:a5:1c:c7:2b:8a:82:1a:dc:f9: 34:67:cc:5f:d0:ed:59:58:90:3f:81:d9:36:41:3a:81:85:4c: 58:d2:47:67:06:84:c5:27:4c:1e:4d:32:e4:16:1d:62:ee:2a: 4f:c2:1d:d5:8f:1a:d3:ed:01:f1:1a:c8:5a:a6:2a:e9:5c:5b: 64:93:35:20:56:e6:9d:52:97:0c:d6:5c:45:85:f1:13:03:f1: da:06:15:9b:b2:97:f3:89:9d:56:ed:ba:06:af:07:57:e4:5c: 0f:96:db:85:e9:1a:79:2a:a7:f9:dc:40:d7:d9:23:87:68:47: 24:2c:7e:60:e0:97:96:f0:9c:d0:8d:6e:de:9f:30:10:3a:2f: 72:31:48:43:d0:03:e9:98:bd:59:bb:be:08:9d:23:55:70:31: 3a:30:9e:8a:f8:83:8d:fe:aa:86:4e:ee:c7:3f:4a:37:65:d4: 57:62:7f:61:81:95:53:d6:e5:c2:87:9c:aa:58:07:76:b4:6c: e3:a9:bc:50:61:bb:90:03:b2:d2:f3:87:dd:2b:3d:29:3d:b8: ef:1d:71:fb:5c:88:74:70:2e:f2:a9:83:80:2b:bc:b0:cf:6c: ee:48:a3:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMS0qcQp7WIAzX4OVOnhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNGRmYzdiYTRkZWMyNjU5NmRjOGFjMjMwNWE5MWVkOGU5 MjljNjkwHhcNMjUxMjA2MDEwMDM0WhcNMjUxMjA3MDEwMDM0WjAzMTEwLwYDVQQD Eyg2ZWUyNjQ1MmJmZjZkMTcwNWQ0MmE4NWM3NWU5MGQ2YjhjNmQ1YzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3v1vXEDLDtVdr092WYS4U4J9hGuT KR3s9KOxhCgNaZnNABzvIqyPRiRDITXNF6s5gNNfRPCmdHbiNwaGwtx5J/YuvzLI GwHBaWORzgtfwSpu2PUicCQaQ+rZg9lqgAt4sJZyVFI6NUs43clK7U4e3KY9PCS3 316iqqgdw5y8FUnff8Q8iSR21jRDNrY/deOfoVgNVvjNH7wlxz9jJh40k5r5nuqj NRgX7O61eB92pzy1lOE8ldznmHd3UYbC8jB7EwWRNgCdLLcjMLdi/FG4jMpY6xuY RAs/T4ABAGr7OisdjyoDY2SGDQoeoP/KxqZ35fnKwBIsW6OH9AFrJFuk+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7iZFK/9tFwXUKoXHXpDWuMbVwDMB8GA1UdIwQY MBaAFExN/Huk3sJlltyKwjBake2OkpxpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEUzOGU2VGV3bVdXM0lyQ01GcVI3WTZTbkdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9lMmU0NDMtMTQ2Mi00YzRlLWJjMzMt YjI5ZWZmMDkxYmM2LzEvVEUzOGU2VGV3bVdXM0lyQ01GcVI3WTZTbkdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9lMmU0NDMtMTQ2Mi00YzRlLWJjMzMtYjI5ZWZmMDkxYmM2 LzEvVEUzOGU2VGV3bVdXM0lyQ01GcVI3WTZTbkdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnUKTJZRV m8dJQdy4nqr02HoXLwJ8oBjC2tWOpRzHK4qCGtz5NGfMX9DtWViQP4HZNkE6gYVM WNJHZwaExSdMHk0y5BYdYu4qT8Id1Y8a0+0B8RrIWqYq6VxbZJM1IFbmnVKXDNZc RYXxEwPx2gYVm7KX84mdVu26Bq8HV+RcD5bbhekaeSqn+dxA19kjh2hHJCx+YOCX lvCc0I1u3p8wEDovcjFIQ9AD6Zi9Wbu+CJ0jVXAxOjCeiviDjf6qhk7uxz9KN2XU V2J/YYGVU9blwoecqlgHdrRs46m8UGG7kAOy0vOH3Ss9KT247x1x+1yIdHAu8qmD gCu8sM9s7kijAg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:57:17 2025 by rpki-client