This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft File: tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft (raw, json) Hash identifier: 6lB65bJMQ8EsO6c5UCiyJQRIi8027k0UyiC9RKW3Ez4= Subject key identifier: 35:1B:91:92:EB:BF:29:72:D5:47:90:65:FC:83:53:54:D9:3F:92:D0 Authority key identifier: B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41 Certificate issuer: /CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41 Certificate serial: 019AF12D14CEEB2C4819CBE8C6EFBE2820BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft Manifest number: 0F49 Signing time: Sat 06 Dec 2025 01:00:54 +0000 Manifest this update: Sat 06 Dec 2025 01:00:54 +0000 Manifest next update: Sun 07 Dec 2025 01:00:54 +0000 Files and hashes: 1: tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl (hash: fYFgHu7hRPNEXqC5vbTLgpUnF6sD07WeS0PElmbdQOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:14:ce:eb:2c:48:19:cb:e8:c6:ef:be:28:20:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41 Validity Not Before: Dec 6 01:00:54 2025 GMT Not After : Dec 7 01:00:54 2025 GMT Subject: CN=351b9192ebbf2972d5479065fc835354d93f92d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:07:65:9c:0c:e7:05:30:68:2c:1d:a8:5a:16: ae:4d:74:5a:e9:e5:44:30:1d:3c:07:da:2c:62:58: 61:6e:28:e0:b0:e3:ef:a4:b3:16:60:f7:cf:fc:27: 43:57:22:7f:ab:a5:42:7a:9e:94:2c:28:b8:9a:0c: f3:7e:7e:bd:23:18:3d:73:13:53:36:31:31:37:c8: c8:cc:ce:9b:a8:00:e3:7d:3f:14:bc:86:43:64:fa: ef:60:24:76:63:60:df:c2:97:ee:ba:c5:46:f1:17: cb:09:e6:9e:e1:21:ee:1a:50:97:ec:39:01:93:ff: 92:c7:72:18:75:8b:5e:a8:e0:f3:67:c1:05:eb:2e: 6f:77:51:f0:45:39:a8:9e:33:b6:29:b0:5e:c1:1d: 44:e7:e0:a4:23:2b:5d:b9:c2:46:7a:4f:a6:3d:0a: 15:a4:1b:c6:92:50:36:9d:2b:34:1b:08:5b:27:2b: 7a:e5:19:fa:16:1c:4a:94:1c:1a:59:e1:2c:07:5f: 5d:33:5e:67:0c:0d:30:6a:c8:ae:85:d3:72:2e:31: b3:99:df:a4:b1:c2:bd:f4:fc:e5:63:c0:4a:08:ff: 91:07:74:99:0c:ac:fb:2a:31:d0:57:c9:5f:55:42: cf:78:3a:2f:4a:5e:ff:6d:bd:7f:ed:97:24:7f:d3: 19:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1B:91:92:EB:BF:29:72:D5:47:90:65:FC:83:53:54:D9:3F:92:D0 X509v3 Authority Key Identifier: keyid:B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d4:c9:3c:00:f3:0c:be:eb:fa:48:9c:58:33:b8:b7:1e:94: 2a:fc:78:c1:f0:e7:4a:ce:6d:ab:7c:9b:8d:24:6a:16:07:c1: e5:15:5a:9b:07:14:3a:f2:54:62:02:11:58:3e:94:9b:c6:2f: d9:2a:0e:b3:5f:59:54:3b:f9:da:fc:63:b7:bb:4e:90:22:50: de:3b:81:db:96:37:e0:ad:51:d1:0e:d8:3c:ee:f2:6a:6b:3e: c6:f4:f2:a7:44:c7:f5:ad:b0:f3:8a:a2:d4:8a:ea:a0:86:9d: 85:43:e1:bf:1a:f0:1e:04:64:77:89:ae:6d:9f:3f:d6:53:c5: 7b:d7:77:ac:e7:9b:2d:14:07:67:75:be:04:a1:84:38:dc:ad: b9:d5:23:bd:a6:bd:a2:99:d1:04:8f:a1:6b:f0:38:f7:db:f1: b2:7d:ba:1c:50:5b:7b:96:e1:94:0a:3a:58:2d:09:34:be:bb: 38:a7:d7:1a:15:ab:d1:f6:6c:20:c4:0e:7e:c1:f1:2e:b8:e7: c3:76:f4:0b:6c:c4:43:f9:61:f9:7a:23:57:ed:9f:fb:0d:59: 11:5d:ae:d4:92:7f:13:8f:d5:96:c2:73:a3:c2:80:ea:a0:56: eb:6c:a4:bd:a4:2c:9a:f7:8f:2a:84:dc:64:a0:0f:ae:19:4e: d1:58:6d:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRTO6yxIGcvoxu++KCC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NWNmZTc3MWNmMjg0ZmVlOGQwYzI3YmJjZjExZGUxODc5 Y2NjNDEwHhcNMjUxMjA2MDEwMDU0WhcNMjUxMjA3MDEwMDU0WjAzMTEwLwYDVQQD EygzNTFiOTE5MmViYmYyOTcyZDU0NzkwNjVmYzgzNTM1NGQ5M2Y5MmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygdlnAznBTBoLB2oWhauTXRa6eVE MB08B9osYlhhbijgsOPvpLMWYPfP/CdDVyJ/q6VCep6ULCi4mgzzfn69Ixg9cxNT NjExN8jIzM6bqADjfT8UvIZDZPrvYCR2Y2DfwpfuusVG8RfLCeae4SHuGlCX7DkB k/+Sx3IYdYteqODzZ8EF6y5vd1HwRTmonjO2KbBewR1E5+CkIytducJGek+mPQoV pBvGklA2nSs0GwhbJyt65Rn6FhxKlBwaWeEsB19dM15nDA0wasiuhdNyLjGzmd+k scK99PzlY8BKCP+RB3SZDKz7KjHQV8lfVULPeDovSl7/bb1/7Zckf9MZDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUbkZLrvyly1UeQZfyDU1TZP5LQMB8GA1UdIwQY MBaAFLVc/ncc8oT+6NDCe7zxHeGHnMxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZ6LWR4enloUDdvME1KN3ZQRWQ0WWVjekVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84NDQ0MDUtN2E4Zi00MjMyLTk1Yjgt NjVjOTI4YzdiMGJmLzEvdFZ6LWR4enloUDdvME1KN3ZQRWQ0WWVjekVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny84NDQ0MDUtN2E4Zi00MjMyLTk1YjgtNjVjOTI4YzdiMGJm LzEvdFZ6LWR4enloUDdvME1KN3ZQRWQ0WWVjekVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdTJPADz DL7r+kicWDO4tx6UKvx4wfDnSs5tq3ybjSRqFgfB5RVamwcUOvJUYgIRWD6Um8Yv 2SoOs19ZVDv52vxjt7tOkCJQ3juB25Y34K1R0Q7YPO7yams+xvTyp0TH9a2w84qi 1IrqoIadhUPhvxrwHgRkd4mubZ8/1lPFe9d3rOebLRQHZ3W+BKGEONytudUjvaa9 opnRBI+ha/A499vxsn26HFBbe5bhlAo6WC0JNL67OKfXGhWr0fZsIMQOfsHxLrjn w3b0C2zEQ/lh+XojV+2f+w1ZEV2u1JJ/E4/VlsJzo8KA6qBW62ykvaQsmvePKoTc ZKAPrhlO0Vhtzw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:29:37 2025 by rpki-client