This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft File: TEYfg3hoy-rKF670hnhPYfSSQ-0.mft (raw, json) Hash identifier: K4/a6yyUm0+h7klcrJB6gb2O7JHqfiomQd6QPTzSdks= Subject key identifier: 92:E7:29:DD:88:16:24:D1:1B:28:56:3E:FB:42:A7:87:9C:43:70:2F Authority key identifier: 4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED Certificate issuer: /CN=4c461f837868cbeaca17aef486784f61f49243ed Certificate serial: 019AF19AA66E9F5673CE0B5A22EAF5D5A513 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft Manifest number: 16F0 Signing time: Sat 06 Dec 2025 03:00:35 +0000 Manifest this update: Sat 06 Dec 2025 03:00:35 +0000 Manifest next update: Sun 07 Dec 2025 03:00:35 +0000 Files and hashes: 1: TEYfg3hoy-rKF670hnhPYfSSQ-0.crl (hash: 83EvxaYf64fPVOWUxNDHMni10aibn7BLj8MRbRDk+hs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.crl rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a6:6e:9f:56:73:ce:0b:5a:22:ea:f5:d5:a5:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c461f837868cbeaca17aef486784f61f49243ed Validity Not Before: Dec 6 03:00:35 2025 GMT Not After : Dec 7 03:00:35 2025 GMT Subject: CN=92e729dd881624d11b28563efb42a7879c43702f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c9:65:96:f9:a9:8f:a7:bf:b9:3b:33:11:e6: 2b:f6:74:11:48:a3:bd:a9:f1:f9:38:42:16:ee:27: 22:ed:20:78:b3:1f:1f:10:47:58:d0:05:26:31:41: b4:f3:53:f7:0c:5c:68:7d:43:c3:97:4a:e9:a0:ce: 40:61:b4:a2:fe:35:c8:92:dc:e3:60:b9:b4:f5:2e: 83:41:c5:0c:ca:35:37:6b:3f:9f:57:e3:20:6f:71: 8e:c1:90:f1:8b:bf:ea:13:a7:d7:df:14:b8:d3:5e: e3:87:c3:ab:b3:43:67:11:f3:dc:66:67:ae:a0:94: ae:9c:96:b9:52:6f:c6:11:8a:4f:ed:4c:de:f8:a3: e6:3d:ea:da:cc:e2:7f:6a:24:f7:f8:e7:db:fa:9f: 89:d3:9c:62:ae:a1:b4:b7:91:7a:41:36:3c:b0:e8: 59:83:b1:6b:3a:91:1c:8e:a4:f8:36:21:38:41:b3: 60:33:3b:6b:18:ee:81:13:94:cd:d0:c3:81:6a:cb: 12:9f:2d:48:b2:45:7c:35:7a:58:a0:db:9c:d3:b6: c1:07:6f:58:b6:5e:37:e9:5e:cc:40:41:4b:6b:6a: 5a:28:c3:63:01:e8:6a:d9:5f:07:ce:78:2b:ad:4c: 95:e0:2c:0b:fc:a4:df:41:d4:66:16:57:17:35:d7: d8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E7:29:DD:88:16:24:D1:1B:28:56:3E:FB:42:A7:87:9C:43:70:2F X509v3 Authority Key Identifier: keyid:4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:7d:a9:cb:83:bb:87:b6:bf:32:94:00:63:07:f0:a5:d7:37: 04:05:a3:45:aa:ca:9a:10:6b:f0:df:32:2d:c9:22:93:68:4e: dc:84:29:fd:e8:a5:c7:b2:a9:2c:e0:75:80:ae:67:02:03:95: d1:db:4f:b9:c9:83:7c:ac:17:a9:a8:81:1c:7a:a1:de:52:17: bb:39:73:91:6d:3c:0e:4b:b7:88:c8:05:52:65:8f:24:62:62: 70:94:b4:00:5e:08:84:f6:fc:7a:44:76:af:af:75:c6:80:5f: 7e:74:05:47:6e:5f:ab:fd:26:fe:f1:93:d0:db:2d:ff:1f:1b: 1e:cf:1d:6d:f2:88:39:05:0f:54:f8:b6:43:dc:d8:88:53:ab: 7b:2c:1c:0d:4c:35:5a:ac:15:dc:6d:cf:2f:cc:81:8c:cd:09: 89:12:07:9c:bc:e4:9a:cc:d3:5a:74:2e:c0:78:8b:02:34:0b: de:de:24:3d:f3:d5:48:4b:be:a2:7f:be:b1:c2:fe:1c:7e:94: d8:15:d4:5f:3f:ff:de:ca:57:69:ce:7a:ce:5f:b3:e7:02:ee: e3:be:08:d9:03:56:4d:56:05:e0:ac:8b:fb:84:c6:e5:9b:fd: 20:51:cc:f6:29:6e:eb:5d:3a:cf:d2:40:d3:3c:9a:8a:61:ea: 63:37:51:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqZun1ZzzgtaIur11aUTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNDYxZjgzNzg2OGNiZWFjYTE3YWVmNDg2Nzg0ZjYxZjQ5 MjQzZWQwHhcNMjUxMjA2MDMwMDM1WhcNMjUxMjA3MDMwMDM1WjAzMTEwLwYDVQQD Eyg5MmU3MjlkZDg4MTYyNGQxMWIyODU2M2VmYjQyYTc4NzljNDM3MDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8lllvmpj6e/uTszEeYr9nQRSKO9 qfH5OEIW7ici7SB4sx8fEEdY0AUmMUG081P3DFxofUPDl0rpoM5AYbSi/jXIktzj YLm09S6DQcUMyjU3az+fV+Mgb3GOwZDxi7/qE6fX3xS4017jh8Ors0NnEfPcZmeu oJSunJa5Um/GEYpP7Uze+KPmPerazOJ/aiT3+Ofb+p+J05xirqG0t5F6QTY8sOhZ g7FrOpEcjqT4NiE4QbNgMztrGO6BE5TN0MOBassSny1IskV8NXpYoNuc07bBB29Y tl436V7MQEFLa2paKMNjAehq2V8HzngrrUyV4CwL/KTfQdRmFlcXNdfYkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLnKd2IFiTRGyhWPvtCp4ecQ3AvMB8GA1UdIwQY MBaAFExGH4N4aMvqyheu9IZ4T2H0kkPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEVZZmczaG95LXJLRjY3MGhuaFBZZlNTUS0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lNGMzMTktNzIyMy00MjQ2LWI2NmIt ZjlkMDk2NTI0YzEzLzEvVEVZZmczaG95LXJLRjY3MGhuaFBZZlNTUS0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9lNGMzMTktNzIyMy00MjQ2LWI2NmItZjlkMDk2NTI0YzEz LzEvVEVZZmczaG95LXJLRjY3MGhuaFBZZlNTUS0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFH2py4O7 h7a/MpQAYwfwpdc3BAWjRarKmhBr8N8yLckik2hO3IQp/eilx7KpLOB1gK5nAgOV 0dtPucmDfKwXqaiBHHqh3lIXuzlzkW08Dku3iMgFUmWPJGJicJS0AF4IhPb8ekR2 r691xoBffnQFR25fq/0m/vGT0Nst/x8bHs8dbfKIOQUPVPi2Q9zYiFOreywcDUw1 WqwV3G3PL8yBjM0JiRIHnLzkmszTWnQuwHiLAjQL3t4kPfPVSEu+on++scL+HH6U 2BXUXz//3spXac56zl+z5wLu474I2QNWTVYF4KyL+4TG5Zv9IFHM9ilu6106z9JA 0zyaimHqYzdRPg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:29:05 2025 by rpki-client