This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft File: tPtrTEeRZokREVxp4mlk89XsovQ.mft (raw, json) Hash identifier: HcORp8wws+jop7rtirE6LLEpZUTtghDOh/gwnKv0TOE= Subject key identifier: 63:BE:01:6B:64:FB:7A:9B:08:98:D0:AF:28:41:CA:D0:22:33:C4:1F Authority key identifier: B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4 Certificate issuer: /CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4 Certificate serial: 019AF49BA88C0AD6B86B1ABBF05185D6F95C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft Manifest number: 04BD Signing time: Sat 06 Dec 2025 17:00:33 +0000 Manifest this update: Sat 06 Dec 2025 17:00:33 +0000 Manifest next update: Sun 07 Dec 2025 17:00:33 +0000 Files and hashes: 1: tPtrTEeRZokREVxp4mlk89XsovQ.crl (hash: DLtNbFbHfVqtMWW4iUtwuWdXn/Bba/+rfOnT2SxKp3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:a8:8c:0a:d6:b8:6b:1a:bb:f0:51:85:d6:f9:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4 Validity Not Before: Dec 6 17:00:33 2025 GMT Not After : Dec 7 17:00:33 2025 GMT Subject: CN=63be016b64fb7a9b0898d0af2841cad02233c41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:60:6b:56:6e:d9:22:73:45:01:b8:89:2f:ee: f1:1c:fc:63:91:06:2c:d1:f8:28:3c:cf:46:c5:e0: dd:73:73:65:6c:28:76:5b:40:64:2c:49:df:9f:ab: 38:48:31:53:2d:3a:f0:b7:98:84:99:ec:0f:58:a1: 0c:6a:b9:f7:d4:3f:a6:bd:2f:77:99:59:5b:03:23: 7f:d4:b9:29:cd:12:4a:2b:d4:49:52:b2:cd:25:a1: e3:06:26:d0:17:a5:71:f0:96:d8:6a:1f:6f:e1:2f: 16:6c:e5:08:64:1f:be:3c:5e:79:a0:71:c8:7f:23: 6e:b1:e2:7f:23:d4:54:ad:de:e9:b2:61:cb:ef:32: d2:c5:5d:f6:aa:20:44:52:e1:a6:36:a1:5e:ba:54: 10:80:ac:c3:34:d5:51:b1:14:f6:ee:1f:64:eb:df: 03:34:0f:6a:fe:f7:f2:bd:09:ba:a7:01:b7:52:35: 51:3a:e4:c4:6e:d3:c0:b7:30:86:9f:af:da:bc:a8: e9:fd:f1:2a:d9:26:4c:0b:7a:a4:2c:b7:0b:e2:33: e6:65:7d:38:de:f6:a1:98:d2:58:29:a1:54:c6:27: 16:8f:bd:12:28:1e:66:fb:7c:29:f9:61:23:54:d4: 81:70:78:a4:fb:d5:b6:48:52:f7:84:c7:b4:75:63: c3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BE:01:6B:64:FB:7A:9B:08:98:D0:AF:28:41:CA:D0:22:33:C4:1F X509v3 Authority Key Identifier: keyid:B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:9c:7e:e0:9c:30:d3:bf:cb:5b:fe:8c:c8:eb:3b:a5:e7:81: 61:2d:9e:cd:a4:2e:da:cd:d5:56:05:2f:98:f8:f9:c8:be:7d: 41:f7:55:b3:c1:2e:d6:45:0b:ea:4f:3a:5f:e2:22:a7:0e:9a: 48:1d:7a:8f:0a:f7:44:07:5e:6f:62:22:db:df:35:9b:dc:7f: f4:4c:24:b7:c1:78:db:33:20:60:d4:68:1d:49:06:23:3d:f7: dc:4e:9e:a8:c4:68:c8:14:80:2d:63:71:6e:39:c1:c5:1a:8c: eb:eb:81:64:f8:ed:4d:25:4d:66:4d:5d:02:3f:b9:9d:5d:a6: 5a:98:c0:4d:73:ab:ab:d2:8b:8c:aa:e5:f2:4e:31:1f:22:6d: 3d:40:89:ed:a5:33:07:02:76:db:52:93:48:61:b3:de:23:f9: 2c:40:d8:b9:75:c6:5b:98:7a:ed:7a:c5:5d:88:f4:1c:c4:b5: 21:69:90:2f:14:cd:bc:93:5a:f6:e6:cb:9a:da:88:66:01:ca: 28:9d:d9:42:b9:2e:6d:7f:77:94:f5:ba:f5:de:9a:b6:88:cc: 4a:27:0c:02:ad:be:df:bd:3a:ed:89:c2:fd:03:72:38:ad:59: 76:79:6e:58:06:2f:d3:21:f6:ce:94:57:03:54:9e:0e:dc:4e: 49:ed:8a:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m6iMCta4axq78FGF1vlcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZmI2YjRjNDc5MTY2ODkxMTExNWM2OWUyNjk2NGYzZDVl Y2EyZjQwHhcNMjUxMjA2MTcwMDMzWhcNMjUxMjA3MTcwMDMzWjAzMTEwLwYDVQQD Eyg2M2JlMDE2YjY0ZmI3YTliMDg5OGQwYWYyODQxY2FkMDIyMzNjNDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWBrVm7ZInNFAbiJL+7xHPxjkQYs 0fgoPM9GxeDdc3NlbCh2W0BkLEnfn6s4SDFTLTrwt5iEmewPWKEMarn31D+mvS93 mVlbAyN/1LkpzRJKK9RJUrLNJaHjBibQF6Vx8JbYah9v4S8WbOUIZB++PF55oHHI fyNuseJ/I9RUrd7psmHL7zLSxV32qiBEUuGmNqFeulQQgKzDNNVRsRT27h9k698D NA9q/vfyvQm6pwG3UjVROuTEbtPAtzCGn6/avKjp/fEq2SZMC3qkLLcL4jPmZX04 3vahmNJYKaFUxicWj70SKB5m+3wp+WEjVNSBcHik+9W2SFL3hMe0dWPD2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGO+AWtk+3qbCJjQryhBytAiM8QfMB8GA1UdIwQY MBaAFLT7a0xHkWaJERFcaeJpZPPV7KL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFB0clRFZVJab2tSRVZ4cDRtbGs4OVhzb3ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC85MDE2MDctYjFlZS00OWYwLWJkZTIt N2NiYTM1Y2I2YjgxLzEvdFB0clRFZVJab2tSRVZ4cDRtbGs4OVhzb3ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC85MDE2MDctYjFlZS00OWYwLWJkZTItN2NiYTM1Y2I2Yjgx LzEvdFB0clRFZVJab2tSRVZ4cDRtbGs4OVhzb3ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtpx+4Jww 07/LW/6MyOs7peeBYS2ezaQu2s3VVgUvmPj5yL59QfdVs8Eu1kUL6k86X+Iipw6a SB16jwr3RAdeb2Ii2981m9x/9Ewkt8F42zMgYNRoHUkGIz333E6eqMRoyBSALWNx bjnBxRqM6+uBZPjtTSVNZk1dAj+5nV2mWpjATXOrq9KLjKrl8k4xHyJtPUCJ7aUz BwJ221KTSGGz3iP5LEDYuXXGW5h67XrFXYj0HMS1IWmQLxTNvJNa9ubLmtqIZgHK KJ3ZQrkubX93lPW69d6atojMSicMAq2+37067YnC/QNyOK1ZdnluWAYv0yH2zpRX A1SeDtxOSe2KCw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:51:09 2025 by rpki-client