This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft File: tTk77GZMj073jtxIvs1jnIKlOgU.mft (raw, json) Hash identifier: Zpc+YRo1VBOK6Et3Wl2VbY69PXbM/EWRyq0ns3A7BGE= Subject key identifier: 17:23:8E:B5:25:AE:94:16:FD:68:ED:7A:B5:FC:9E:13:A8:91:3C:7C Authority key identifier: B5:39:3B:EC:66:4C:8F:4E:F7:8E:DC:48:BE:CD:63:9C:82:A5:3A:05 Certificate issuer: /CN=b5393bec664c8f4ef78edc48becd639c82a53a05 Certificate serial: 019AF12D250ED36F3B7942BFE02BBFD5EA58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTk77GZMj073jtxIvs1jnIKlOgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft Manifest number: 1507 Signing time: Sat 06 Dec 2025 01:00:58 +0000 Manifest this update: Sat 06 Dec 2025 01:00:58 +0000 Manifest next update: Sun 07 Dec 2025 01:00:58 +0000 Files and hashes: 1: tTk77GZMj073jtxIvs1jnIKlOgU.crl (hash: 3cwxeuZ6SNqCtI9t6abVJ34fXjaFKckhrutVabueijY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.crl rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft rsync://rpki.ripe.net/repository/DEFAULT/tTk77GZMj073jtxIvs1jnIKlOgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:25:0e:d3:6f:3b:79:42:bf:e0:2b:bf:d5:ea:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5393bec664c8f4ef78edc48becd639c82a53a05 Validity Not Before: Dec 6 01:00:58 2025 GMT Not After : Dec 7 01:00:58 2025 GMT Subject: CN=17238eb525ae9416fd68ed7ab5fc9e13a8913c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c3:17:1a:de:33:e3:14:5e:be:d3:0f:9d:f7: b7:78:27:cc:3a:a2:eb:ad:bf:6c:fa:11:d7:7e:74: 3e:42:89:d4:fc:9b:38:7b:81:92:c0:63:71:57:58: a8:63:c7:1b:56:59:39:4b:08:b6:ba:dd:ba:87:62: e8:eb:dc:24:a5:b6:02:25:dc:7f:56:d5:20:0a:b4: 5a:fb:48:3d:8c:e4:e6:2d:2d:53:5f:72:31:94:e7: dd:9a:26:ed:c5:38:2d:62:c3:fa:e8:8a:ba:dc:0b: 2d:e5:15:d6:fe:f1:0a:65:76:21:f3:5f:42:5d:43: b4:3f:51:42:0d:c2:86:4d:03:e1:04:1e:3b:4b:bd: 7e:88:7a:a6:11:a6:d8:de:ad:b0:c8:a9:f0:ce:44: 05:23:cb:b8:17:27:ff:8f:bb:32:62:56:dd:84:2a: 91:15:51:56:7e:03:ad:63:8e:7b:84:a6:6f:92:94: 26:c3:64:19:5f:fb:f2:3d:95:71:90:0a:89:5d:2d: fc:78:5b:fd:39:4b:9b:cf:2f:35:8a:bb:22:62:63: ee:11:b2:e9:0a:45:89:60:bf:5a:75:8b:c2:a0:77: a5:e9:db:b2:e6:49:6a:4e:3e:ab:7a:92:4a:f7:f8: 19:7a:d9:ed:4e:85:a4:61:8e:23:8b:27:bc:43:5c: 74:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:23:8E:B5:25:AE:94:16:FD:68:ED:7A:B5:FC:9E:13:A8:91:3C:7C X509v3 Authority Key Identifier: keyid:B5:39:3B:EC:66:4C:8F:4E:F7:8E:DC:48:BE:CD:63:9C:82:A5:3A:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTk77GZMj073jtxIvs1jnIKlOgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:25:3e:d3:29:cd:c8:2e:8e:eb:b3:2c:33:34:11:1c:ae:96: b7:3d:4b:8f:9c:b8:08:04:b7:54:f6:5d:19:57:ff:17:e9:14: f3:33:24:a2:e0:30:7a:9b:7d:1b:e5:1b:eb:09:57:e9:a7:75: fc:c4:8b:a0:64:bb:52:5f:bb:ba:72:36:91:de:c2:04:f8:d0: d3:3d:f9:e2:3a:c8:25:90:46:20:83:aa:80:cc:6a:df:a1:23: df:e3:9f:76:ea:b8:24:6d:8f:c6:a5:e4:d1:35:df:a1:32:30: d9:9c:04:d5:e9:dd:7a:29:05:41:0d:2b:64:3a:59:09:34:df: 5d:70:d7:26:25:1e:31:fa:64:7d:d9:9d:42:51:9b:db:3c:8c: e6:e9:5c:2a:0f:b2:6d:71:2b:6c:8c:90:74:cc:0f:f4:76:4f: 58:da:72:dd:d1:45:0c:2f:34:44:57:fd:e7:53:93:00:ba:ba: 8b:69:54:5e:b9:10:9e:a6:55:4e:bf:69:ae:b9:7b:72:7d:59: 87:09:38:b6:cc:ec:d6:9f:dc:ea:32:79:e5:8a:0d:39:4f:be: a6:6c:24:7f:26:b2:70:8f:d5:aa:28:1d:13:c9:44:67:31:5c: 7d:74:27:0a:c5:ab:01:eb:80:4e:55:ba:7e:e5:79:b6:22:09: fa:91:83:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSUO0287eUK/4Cu/1epYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MzkzYmVjNjY0YzhmNGVmNzhlZGM0OGJlY2Q2MzljODJh NTNhMDUwHhcNMjUxMjA2MDEwMDU4WhcNMjUxMjA3MDEwMDU4WjAzMTEwLwYDVQQD EygxNzIzOGViNTI1YWU5NDE2ZmQ2OGVkN2FiNWZjOWUxM2E4OTEzYzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucMXGt4z4xRevtMPnfe3eCfMOqLr rb9s+hHXfnQ+QonU/Js4e4GSwGNxV1ioY8cbVlk5Swi2ut26h2Lo69wkpbYCJdx/ VtUgCrRa+0g9jOTmLS1TX3IxlOfdmibtxTgtYsP66Iq63Ast5RXW/vEKZXYh819C XUO0P1FCDcKGTQPhBB47S71+iHqmEabY3q2wyKnwzkQFI8u4Fyf/j7syYlbdhCqR FVFWfgOtY457hKZvkpQmw2QZX/vyPZVxkAqJXS38eFv9OUubzy81irsiYmPuEbLp CkWJYL9adYvCoHel6duy5klqTj6repJK9/gZetntToWkYY4jiye8Q1x0XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcjjrUlrpQW/WjterX8nhOokTx8MB8GA1UdIwQY MBaAFLU5O+xmTI9O947cSL7NY5yCpToFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFRrNzdHWk1qMDczanR4SXZzMWpuSUtsT2dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny85NGMzYzUtYzliMS00NmUwLWEwNWUt NDc2NGJkMDBkMzEwLzEvdFRrNzdHWk1qMDczanR4SXZzMWpuSUtsT2dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny85NGMzYzUtYzliMS00NmUwLWEwNWUtNDc2NGJkMDBkMzEw LzEvdFRrNzdHWk1qMDczanR4SXZzMWpuSUtsT2dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSU+0ynN yC6O67MsMzQRHK6Wtz1Lj5y4CAS3VPZdGVf/F+kU8zMkouAwept9G+Ub6wlX6ad1 /MSLoGS7Ul+7unI2kd7CBPjQ0z354jrIJZBGIIOqgMxq36Ej3+Ofduq4JG2PxqXk 0TXfoTIw2ZwE1endeikFQQ0rZDpZCTTfXXDXJiUeMfpkfdmdQlGb2zyM5ulcKg+y bXErbIyQdMwP9HZPWNpy3dFFDC80RFf951OTALq6i2lUXrkQnqZVTr9prrl7cn1Z hwk4tszs1p/c6jJ55YoNOU++pmwkfyaycI/VqigdE8lEZzFcfXQnCsWrAeuATlW6 fuV5tiIJ+pGDtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:49 2025 by rpki-client