This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft File: tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft (raw, json) Hash identifier: SNS34ji3CBkUjSsK/AtV4j91T+SOUftRR8WcdoWeViU= Subject key identifier: 32:BE:70:C8:9D:3D:CA:8B:71:E6:F6:3A:27:55:5E:3A:89:48:DC:26 Authority key identifier: B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03 Certificate issuer: /CN=b641b288b4d413e955fea4460b32bf2cc182af03 Certificate serial: 019AF27729C794DF798EFA73EDC66F1F5CA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 07:01:26 +0000 Manifest this update: Sat 06 Dec 2025 07:01:26 +0000 Manifest next update: Sun 07 Dec 2025 07:01:26 +0000 Files and hashes: 1: tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl (hash: ouroxbG64WuRfc0zJEOKSc07GSeJ3U80cOPiAIE1e6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:29:c7:94:df:79:8e:fa:73:ed:c6:6f:1f:5c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b641b288b4d413e955fea4460b32bf2cc182af03 Validity Not Before: Dec 6 07:01:26 2025 GMT Not After : Dec 7 07:01:26 2025 GMT Subject: CN=32be70c89d3dca8b71e6f63a27555e3a8948dc26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:3d:df:bc:57:3d:a7:de:2a:39:1e:1d:28: 44:ab:96:d2:84:aa:b6:f8:c0:a3:e7:eb:46:35:eb: 89:4b:a2:db:33:69:03:87:2e:9e:80:32:10:6d:25: 82:93:ab:ec:20:96:8e:39:8b:e0:85:79:84:18:d2: 8c:df:a7:55:69:a5:de:7d:17:f1:50:ed:fe:a9:d9: 25:69:f7:ec:ac:98:a1:92:8e:87:2c:a2:38:e8:fc: aa:59:b4:16:75:f0:da:2d:1f:02:fb:e2:02:2f:c8: de:f8:16:6b:e4:75:c2:f1:7b:12:23:f4:af:55:1b: 79:85:98:1a:a3:80:13:a2:d2:e5:94:e1:dc:c6:5c: fa:b8:47:3e:5c:c6:b1:27:12:26:fe:a3:3c:d9:7a: 46:a1:ed:02:dc:5a:90:2f:62:73:98:c2:3f:4a:dc: b7:29:b0:49:9c:a1:ef:a2:99:63:b9:16:02:ec:c4: a8:01:f6:13:d6:8c:45:a0:a7:18:7f:26:fa:66:dd: 66:9d:ba:3e:38:03:94:57:50:86:77:f4:c0:3f:5a: f4:f2:df:8a:41:40:c2:bd:1f:81:aa:f2:5c:9b:31: e6:44:37:a4:85:c7:5f:eb:4a:2e:25:61:d5:75:02: be:bc:cd:aa:e0:31:2e:94:43:b4:4f:18:6a:27:b2: 3d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BE:70:C8:9D:3D:CA:8B:71:E6:F6:3A:27:55:5E:3A:89:48:DC:26 X509v3 Authority Key Identifier: keyid:B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:2e:a7:19:28:06:5d:4e:4d:82:c8:c2:4b:7a:2a:f1:c0:e2: 6e:5a:e1:49:f0:3b:ce:14:91:ff:05:37:22:b3:65:69:d8:42: f5:d1:2c:10:ce:97:19:55:73:0c:f7:9d:35:cf:08:6d:80:fe: 68:d2:3e:6d:bf:27:f9:e6:f9:60:7e:48:ab:60:90:c1:68:00: ce:1b:fe:a2:89:7e:21:77:1a:90:3d:34:63:c4:60:04:cf:61: 27:c0:15:a2:ae:53:30:6c:e7:fd:2f:c0:b7:be:78:cb:52:94: ea:14:b5:cd:99:bf:16:63:74:da:01:25:68:9e:c0:cd:99:9d: f2:bb:0f:e2:84:eb:6f:c4:46:0c:6e:ba:b6:de:12:35:cf:56: a4:85:b9:1a:b8:72:6b:98:30:38:85:cb:0b:c3:4f:63:98:bd: 8c:7b:e5:1e:07:47:04:17:ff:75:96:0a:35:28:79:93:2c:fb: 7c:1b:9d:9e:e6:f3:48:9f:86:fb:6c:b4:09:99:1f:99:1b:19: 79:14:ac:54:98:39:9b:b0:36:ec:77:44:e1:2b:dd:7d:bd:db: cc:0c:ac:05:e0:77:4a:83:95:24:60:1d:d9:38:07:73:04:7f: 3e:89:76:08:bb:23:03:09:81:ad:12:da:d6:41:24:bc:7a:a2: 79:90:cc:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydynHlN95jvpz7cZvH1yhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NDFiMjg4YjRkNDEzZTk1NWZlYTQ0NjBiMzJiZjJjYzE4 MmFmMDMwHhcNMjUxMjA2MDcwMTI2WhcNMjUxMjA3MDcwMTI2WjAzMTEwLwYDVQQD EygzMmJlNzBjODlkM2RjYThiNzFlNmY2M2EyNzU1NWUzYTg5NDhkYzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYc937xXPafeKjkeHShEq5bShKq2 +MCj5+tGNeuJS6LbM2kDhy6egDIQbSWCk6vsIJaOOYvghXmEGNKM36dVaaXefRfx UO3+qdklaffsrJihko6HLKI46PyqWbQWdfDaLR8C++ICL8je+BZr5HXC8XsSI/Sv VRt5hZgao4ATotLllOHcxlz6uEc+XMaxJxIm/qM82XpGoe0C3FqQL2JzmMI/Sty3 KbBJnKHvopljuRYC7MSoAfYT1oxFoKcYfyb6Zt1mnbo+OAOUV1CGd/TAP1r08t+K QUDCvR+BqvJcmzHmRDekhcdf60ouJWHVdQK+vM2q4DEulEO0TxhqJ7I9gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDK+cMidPcqLceb2OidVXjqJSNwmMB8GA1UdIwQY MBaAFLZBsoi01BPpVf6kRgsyvyzBgq8DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGtHeWlMVFVFLWxWX3FSR0N6S19MTUdDcndNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81NDRmMzItN2MzOC00YTdlLTlkN2Et ODYwZWYzM2M1MDRmLzEvdGtHeWlMVFVFLWxWX3FSR0N6S19MTUdDcndNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My81NDRmMzItN2MzOC00YTdlLTlkN2EtODYwZWYzM2M1MDRm LzEvdGtHeWlMVFVFLWxWX3FSR0N6S19MTUdDcndNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAii6nGSgG XU5NgsjCS3oq8cDiblrhSfA7zhSR/wU3IrNladhC9dEsEM6XGVVzDPedNc8IbYD+ aNI+bb8n+eb5YH5Iq2CQwWgAzhv+ool+IXcakD00Y8RgBM9hJ8AVoq5TMGzn/S/A t754y1KU6hS1zZm/FmN02gElaJ7AzZmd8rsP4oTrb8RGDG66tt4SNc9WpIW5Grhy a5gwOIXLC8NPY5i9jHvlHgdHBBf/dZYKNSh5kyz7fBudnubzSJ+G+2y0CZkfmRsZ eRSsVJg5m7A27HdE4Svdfb3bzAysBeB3SoOVJGAd2TgHcwR/Pol2CLsjAwmBrRLa 1kEkvHqieZDMvg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:03 2025 by rpki-client