This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft File: tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft (raw, json) Hash identifier: e9FrhPRBcB05IKqxhl/UprkiI8iANqc9XmEPev4zwoc= Subject key identifier: C6:32:CF:93:C7:BE:A1:5B:14:44:7E:4D:03:4D:81:30:FA:88:3D:E4 Authority key identifier: B6:05:D1:90:1C:57:11:00:B8:9A:5C:48:C3:A7:06:57:84:15:71:96 Certificate issuer: /CN=b605d1901c571100b89a5c48c3a7065784157196 Certificate serial: 019AF19B67A2E4DE681B586B9F2DC316F8AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft Manifest number: 09C6 Signing time: Sat 06 Dec 2025 03:01:24 +0000 Manifest this update: Sat 06 Dec 2025 03:01:24 +0000 Manifest next update: Sun 07 Dec 2025 03:01:24 +0000 Files and hashes: 1: tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl (hash: psSOy9wsaq7jzaiNrz76K4IyTR2Y534B/Tv+BWTCzIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:67:a2:e4:de:68:1b:58:6b:9f:2d:c3:16:f8:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b605d1901c571100b89a5c48c3a7065784157196 Validity Not Before: Dec 6 03:01:24 2025 GMT Not After : Dec 7 03:01:24 2025 GMT Subject: CN=c632cf93c7bea15b14447e4d034d8130fa883de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d1:92:17:5d:c1:71:e1:39:24:d8:45:8c:5c: a8:3a:f5:91:b2:20:e6:87:30:64:ee:43:b2:d6:90: 63:8a:64:55:fa:e3:1f:62:ac:d9:37:18:52:d7:1e: ef:05:ca:6d:7c:1b:2a:39:18:09:b3:58:df:a9:ba: b0:09:e9:88:a2:ab:31:25:a2:46:02:0a:56:94:e2: db:10:fe:9b:6d:e2:6d:55:fd:b3:b9:ea:45:6f:31: 01:a8:b6:62:62:4a:7e:ef:ac:1f:d5:c5:bd:1a:28: 9e:a6:8f:3d:d3:e5:89:a5:f9:84:6c:72:c2:7c:74: b7:04:d0:08:d9:03:d4:63:ff:7d:86:1e:24:55:1c: d4:5d:eb:ea:31:da:66:01:15:d4:8c:b9:91:29:89: 93:11:47:b1:a0:a8:f3:7f:cb:92:ba:09:89:3c:05: d5:86:4c:58:8c:8c:13:84:06:b3:8e:38:39:19:5f: c1:da:f6:a1:13:30:a9:09:8f:68:be:4b:27:1e:dc: 1a:a3:b6:6d:95:69:a4:e2:13:6c:ef:75:c6:6b:43: ca:22:2d:80:5e:d0:ad:29:35:8f:e5:7d:39:c1:e7: 93:ae:ac:80:be:6d:0f:c8:57:08:bf:43:5f:e6:59: 25:e9:ea:47:2d:20:1d:be:64:e7:44:40:a7:ea:a1: 2b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:32:CF:93:C7:BE:A1:5B:14:44:7E:4D:03:4D:81:30:FA:88:3D:E4 X509v3 Authority Key Identifier: keyid:B6:05:D1:90:1C:57:11:00:B8:9A:5C:48:C3:A7:06:57:84:15:71:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:86:84:36:b5:88:9f:ba:f9:04:35:ed:f1:c9:53:d3:6a:2d: 10:da:fe:e3:f1:6e:89:53:a9:be:15:1f:08:07:c1:06:81:58: 89:41:54:5d:ce:b0:5e:d7:1f:f9:12:e8:39:06:5e:7f:46:4b: 3a:c9:a1:1e:c0:c8:1f:b8:c9:4a:26:fc:18:23:3e:24:a1:f2: e5:ec:14:2f:6a:fc:ae:6d:c0:d8:1a:c7:d8:3e:bd:41:9b:5a: 35:f0:34:98:51:11:77:30:7b:db:86:ec:e0:34:db:ef:5b:7e: 03:0d:21:44:cd:dc:76:ee:fe:56:4e:33:da:20:eb:ce:b5:2f: 91:f3:cf:c3:05:e5:e7:de:7c:a3:33:0a:2f:4a:11:25:a4:12: 8d:7f:a9:f3:b9:2d:3f:c5:28:c2:5d:04:c9:45:fc:3b:62:9f: 45:d2:68:6e:2c:ee:cb:e5:d1:ce:28:4d:11:b1:e5:5d:48:eb: ec:16:b7:75:61:50:cc:1e:cd:0c:63:a7:d1:79:98:08:b4:4f: 47:8d:6e:fa:d9:73:34:7b:c8:3c:2b:02:bf:8a:7e:75:0f:25: 5f:f3:78:fc:45:a6:29:a4:34:1e:07:d8:7c:33:4f:dd:17:ba: bc:9e:83:90:da:c1:d8:0f:ec:6f:a5:c6:a1:ae:48:86:6f:a7: 70:13:e5:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2ei5N5oG1hrny3DFvirMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDVkMTkwMWM1NzExMDBiODlhNWM0OGMzYTcwNjU3ODQx NTcxOTYwHhcNMjUxMjA2MDMwMTI0WhcNMjUxMjA3MDMwMTI0WjAzMTEwLwYDVQQD EyhjNjMyY2Y5M2M3YmVhMTViMTQ0NDdlNGQwMzRkODEzMGZhODgzZGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NGSF13BceE5JNhFjFyoOvWRsiDm hzBk7kOy1pBjimRV+uMfYqzZNxhS1x7vBcptfBsqORgJs1jfqbqwCemIoqsxJaJG AgpWlOLbEP6bbeJtVf2zuepFbzEBqLZiYkp+76wf1cW9Giiepo890+WJpfmEbHLC fHS3BNAI2QPUY/99hh4kVRzUXevqMdpmARXUjLmRKYmTEUexoKjzf8uSugmJPAXV hkxYjIwThAazjjg5GV/B2vahEzCpCY9ovksnHtwao7ZtlWmk4hNs73XGa0PKIi2A XtCtKTWP5X05weeTrqyAvm0PyFcIv0Nf5lkl6epHLSAdvmTnRECn6qErUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYyz5PHvqFbFER+TQNNgTD6iD3kMB8GA1UdIwQY MBaAFLYF0ZAcVxEAuJpcSMOnBleEFXGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdYUmtCeFhFUUM0bWx4SXc2Y0dWNFFWY1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85MDA4MGEtMzEyZS00N2QzLWI2Y2Et ZThlYzA1YzkzMjdkLzEvdGdYUmtCeFhFUUM0bWx4SXc2Y0dWNFFWY1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS85MDA4MGEtMzEyZS00N2QzLWI2Y2EtZThlYzA1YzkzMjdk LzEvdGdYUmtCeFhFUUM0bWx4SXc2Y0dWNFFWY1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4aENrWI n7r5BDXt8clT02otENr+4/FuiVOpvhUfCAfBBoFYiUFUXc6wXtcf+RLoOQZef0ZL OsmhHsDIH7jJSib8GCM+JKHy5ewUL2r8rm3A2BrH2D69QZtaNfA0mFERdzB724bs 4DTb71t+Aw0hRM3cdu7+Vk4z2iDrzrUvkfPPwwXl5958ozMKL0oRJaQSjX+p87kt P8Uowl0EyUX8O2KfRdJobizuy+XRzihNEbHlXUjr7Ba3dWFQzB7NDGOn0XmYCLRP R41u+tlzNHvIPCsCv4p+dQ8lX/N4/EWmKaQ0HgfYfDNP3Re6vJ6DkNrB2A/sb6XG oa5Ihm+ncBPlaA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:29:15 2025 by rpki-client