This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft File: tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft (raw, json) Hash identifier: PTXW6XXpI235OJjx+/owI2vZzdTsZDAuDE3qJ52H2gk= Subject key identifier: 7E:FF:51:CB:6D:C7:8D:A9:F9:BF:FF:A4:D0:66:4F:5B:DB:A1:25:3A Authority key identifier: B6:9A:AE:F1:CE:A1:9F:2F:92:6F:57:09:61:54:5C:FE:4E:D6:9A:F6 Certificate issuer: /CN=b69aaef1cea19f2f926f570961545cfe4ed69af6 Certificate serial: 019AF31D019E42F428083883B8F4F96CF8E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpqu8c6hny-Sb1cJYVRc_k7WmvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft Manifest number: 0701 Signing time: Sat 06 Dec 2025 10:02:35 +0000 Manifest this update: Sat 06 Dec 2025 10:02:35 +0000 Manifest next update: Sun 07 Dec 2025 10:02:35 +0000 Files and hashes: 1: tpqu8c6hny-Sb1cJYVRc_k7WmvY.crl (hash: c5ZwS9IWkPd3v3vQ/vl9uzRbi7UuaVvGjxiDRYO2CAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft rsync://rpki.ripe.net/repository/DEFAULT/tpqu8c6hny-Sb1cJYVRc_k7WmvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:01:9e:42:f4:28:08:38:83:b8:f4:f9:6c:f8:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b69aaef1cea19f2f926f570961545cfe4ed69af6 Validity Not Before: Dec 6 10:02:35 2025 GMT Not After : Dec 7 10:02:35 2025 GMT Subject: CN=7eff51cb6dc78da9f9bfffa4d0664f5bdba1253a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b6:b9:07:18:08:3b:e1:e5:0d:36:53:55:9a: e9:24:cf:6c:66:21:75:c2:da:72:5c:c5:37:80:5d: 7d:39:5d:e8:66:c0:ba:61:0f:e0:c8:2d:a3:ca:b2: 4e:79:de:b5:9a:20:b9:dd:d0:c1:9c:42:f0:8a:f1: 48:7e:84:a2:1c:6e:2f:11:eb:85:0d:c2:1d:af:0a: 0b:a4:93:08:58:73:e2:bf:ad:fa:59:7f:0e:5e:ca: 61:6a:05:51:6b:c4:a8:cc:4d:01:4d:f2:99:6a:e8: 8e:b3:0a:74:02:40:0b:a0:f0:aa:38:a9:8a:a5:c1: 88:0f:03:2a:c4:0a:1a:0e:f4:85:ee:fb:4f:1b:42: c1:fa:ab:cf:32:16:43:a7:8a:1e:6b:bd:7a:70:f9: 7a:84:77:fb:e3:7b:ca:a7:6d:d9:40:ca:a5:eb:20: 19:0d:bb:f9:32:29:bb:19:ce:ba:6f:63:56:7a:2a: fd:f3:d3:7f:b4:f5:f1:a3:ff:40:bd:5a:54:5a:0f: dc:f1:9e:49:4d:9e:d8:18:a1:38:04:62:37:31:82: 45:97:f6:40:cc:77:97:52:e4:bc:3f:c4:b8:3f:9e: bf:84:a2:d4:7c:58:7e:73:d4:47:64:41:19:c3:20: 58:25:12:18:dc:90:71:b4:bc:92:d8:10:9a:52:45: 21:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FF:51:CB:6D:C7:8D:A9:F9:BF:FF:A4:D0:66:4F:5B:DB:A1:25:3A X509v3 Authority Key Identifier: keyid:B6:9A:AE:F1:CE:A1:9F:2F:92:6F:57:09:61:54:5C:FE:4E:D6:9A:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpqu8c6hny-Sb1cJYVRc_k7WmvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a5:08:56:43:16:bc:9e:37:d1:09:38:d7:ac:c3:9b:de:bf: 3c:c8:bb:4a:96:7f:46:24:20:3d:ab:0a:81:c5:a0:05:ae:11: dc:11:7c:06:93:5e:92:4e:d3:58:19:1f:d1:59:df:a4:77:7e: 47:42:76:38:12:9c:fe:ee:a0:b7:c4:7d:45:ea:63:5e:08:b2: 57:ce:b4:22:55:11:ab:a5:8f:c1:f2:80:15:2c:cc:a2:96:6b: 1a:7a:22:e1:1d:2c:ef:57:91:c2:f3:45:48:91:28:ce:db:94: b5:ca:ba:e4:8f:fb:88:24:c1:1b:b7:f8:a1:fd:bb:80:69:49: 0c:23:45:3a:19:18:99:89:6a:f7:34:50:2d:de:d9:b8:22:56: 00:d1:ba:de:13:d6:51:77:88:5e:52:56:a7:ca:61:4e:a8:97: 4d:7c:5e:0b:db:19:81:49:ed:84:67:7e:33:8f:e2:82:a8:f8: ca:0d:aa:65:08:c5:32:42:3e:6e:bb:65:5d:f9:21:87:86:cf: c1:6a:b5:e7:ea:a3:33:6d:e4:17:59:7a:fb:da:34:a8:aa:f2: 20:67:83:89:4a:01:56:85:fa:a4:59:81:10:e8:9c:3d:de:1b: 10:02:9e:e4:2b:aa:3e:ed:33:b0:d4:3c:42:d4:c7:19:95:e6: 74:bd:74:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHQGeQvQoCDiDuPT5bPjlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OWFhZWYxY2VhMTlmMmY5MjZmNTcwOTYxNTQ1Y2ZlNGVk NjlhZjYwHhcNMjUxMjA2MTAwMjM1WhcNMjUxMjA3MTAwMjM1WjAzMTEwLwYDVQQD Eyg3ZWZmNTFjYjZkYzc4ZGE5ZjliZmZmYTRkMDY2NGY1YmRiYTEyNTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvba5BxgIO+HlDTZTVZrpJM9sZiF1 wtpyXMU3gF19OV3oZsC6YQ/gyC2jyrJOed61miC53dDBnELwivFIfoSiHG4vEeuF DcIdrwoLpJMIWHPiv636WX8OXsphagVRa8SozE0BTfKZauiOswp0AkALoPCqOKmK pcGIDwMqxAoaDvSF7vtPG0LB+qvPMhZDp4oea716cPl6hHf743vKp23ZQMql6yAZ Dbv5Mim7Gc66b2NWeir989N/tPXxo/9AvVpUWg/c8Z5JTZ7YGKE4BGI3MYJFl/ZA zHeXUuS8P8S4P56/hKLUfFh+c9RHZEEZwyBYJRIY3JBxtLyS2BCaUkUhYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7/Ucttx42p+b//pNBmT1vboSU6MB8GA1UdIwQY MBaAFLaarvHOoZ8vkm9XCWFUXP5O1pr2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHBxdThjNmhueS1TYjFjSllWUmNfazdXbXZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mMDE3MTItNzJiYi00MDg4LThiNjEt N2ZlMjBmMmVmZWQ0LzEvdHBxdThjNmhueS1TYjFjSllWUmNfazdXbXZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mMDE3MTItNzJiYi00MDg4LThiNjEtN2ZlMjBmMmVmZWQ0 LzEvdHBxdThjNmhueS1TYjFjSllWUmNfazdXbXZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqUIVkMW vJ430Qk416zDm96/PMi7SpZ/RiQgPasKgcWgBa4R3BF8BpNekk7TWBkf0VnfpHd+ R0J2OBKc/u6gt8R9RepjXgiyV860IlURq6WPwfKAFSzMopZrGnoi4R0s71eRwvNF SJEoztuUtcq65I/7iCTBG7f4of27gGlJDCNFOhkYmYlq9zRQLd7ZuCJWANG63hPW UXeIXlJWp8phTqiXTXxeC9sZgUnthGd+M4/igqj4yg2qZQjFMkI+brtlXfkhh4bP wWq15+qjM23kF1l6+9o0qKryIGeDiUoBVoX6pFmBEOicPd4bEAKe5CuqPu0zsNQ8 QtTHGZXmdL10nw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:49 2025 by rpki-client