This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft File: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft (raw, json) Hash identifier: 3oGhQeG3/HvI6p9YWToqfrNyvockudKAknBx9J1xzt4= Subject key identifier: 0E:97:DF:02:E8:8C:D0:D2:C0:81:28:E9:D7:B1:7B:4E:0E:6A:1A:75 Authority key identifier: 4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34 Certificate issuer: /CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034 Certificate serial: 019AF19B4CE610CE26FD78F93FF0137412AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 03:01:18 +0000 Manifest this update: Sat 06 Dec 2025 03:01:18 +0000 Manifest next update: Sun 07 Dec 2025 03:01:18 +0000 Files and hashes: 1: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl (hash: /9bNm1INwtVCu/ovvYjRD03fNYBilNwOq8XqgXcFo+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:4c:e6:10:ce:26:fd:78:f9:3f:f0:13:74:12:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034 Validity Not Before: Dec 6 03:01:18 2025 GMT Not After : Dec 7 03:01:18 2025 GMT Subject: CN=0e97df02e88cd0d2c08128e9d7b17b4e0e6a1a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:48:0d:a2:b9:54:f2:a5:4a:cd:15:7a:e0:40: e2:5b:7d:41:82:cf:6c:4f:b5:97:12:6a:78:7a:af: e7:8d:5c:7d:cb:04:cf:fa:09:13:65:cd:b3:2c:26: 74:bc:0e:60:96:1d:f6:68:9c:aa:25:87:6d:fc:76: b6:ba:88:34:62:8a:24:f6:9f:37:e1:53:db:9d:c7: 74:2f:68:f7:c8:a4:09:bd:41:e3:d2:52:93:2b:ed: 97:c4:e4:e2:ad:e3:b6:a1:9c:13:aa:35:a7:cf:13: e7:dc:a6:39:c6:df:72:7e:a9:a0:9a:e0:1e:84:ba: 29:36:0c:9f:d0:43:1c:78:20:a4:d7:37:fb:41:64: 61:18:fd:04:53:45:77:92:f4:58:89:86:57:14:cd: 20:71:4b:b9:53:f7:6d:83:e2:58:2b:ef:54:fc:3e: 98:44:ab:39:1a:51:dd:e3:d1:a6:5a:7f:98:c4:4f: b5:ea:cb:28:df:74:fc:ee:03:a6:c3:a4:e2:5a:5f: d9:b4:4f:b4:b9:00:7e:b1:8d:12:40:21:cd:aa:9a: 81:f8:c4:a6:f0:39:80:ae:05:6b:d9:a8:3d:aa:0f: b3:d8:50:87:94:45:85:7b:33:3c:02:b7:38:5f:ab: e8:98:ba:4a:91:a8:c0:29:c1:d0:29:c1:0e:a0:bf: b2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:97:DF:02:E8:8C:D0:D2:C0:81:28:E9:D7:B1:7B:4E:0E:6A:1A:75 X509v3 Authority Key Identifier: keyid:4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:58:01:1b:a4:78:be:73:a1:76:56:5e:cf:cb:3d:ad:a4:ea: fd:7b:6c:3d:b2:11:84:8e:16:75:fa:3f:ac:b3:79:e0:cd:03: c3:11:a0:34:49:38:53:2d:42:90:05:fb:b5:13:29:bb:8a:55: c0:95:eb:9a:2a:a2:ed:98:49:3f:44:72:df:d1:0c:86:f9:87: 30:ed:89:a0:33:5d:f4:76:9e:b9:ab:59:99:bc:02:f3:cc:ad: 74:f6:af:67:05:e4:3b:22:37:f0:2a:45:12:fa:ca:bf:d1:16: cf:c0:f1:f4:15:50:29:e1:e4:fe:71:da:32:af:63:62:8a:db: 6a:3c:db:9a:1b:d1:11:a6:1d:de:2d:e7:98:21:18:24:90:60: f4:77:f5:73:b3:2d:0c:60:03:f9:c3:6d:3f:64:10:1d:5e:03: b4:c3:a6:c3:b2:58:71:14:21:15:24:54:28:a2:d9:52:06:86: 4f:2b:0b:59:89:fd:9d:da:6a:a1:19:39:42:f3:12:e3:86:54: a8:46:e1:55:80:56:34:4a:39:28:34:d5:a1:33:6d:00:c0:7f: 37:23:02:fa:66:17:8c:5c:30:c6:98:55:e1:6e:c2:30:7e:31: 89:6a:9a:92:e8:c5:30:5b:10:c7:98:39:0f:f2:53:01:2a:52: 2e:32:5e:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0zmEM4m/Xj5P/ATdBKqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNDg5ZjY2MTU5Zjc3YmI1OGQyYmJjN2U0ZmMxZGZkOWRk Y2IwMzQwHhcNMjUxMjA2MDMwMTE4WhcNMjUxMjA3MDMwMTE4WjAzMTEwLwYDVQQD EygwZTk3ZGYwMmU4OGNkMGQyYzA4MTI4ZTlkN2IxN2I0ZTBlNmExYTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkgNorlU8qVKzRV64EDiW31Bgs9s T7WXEmp4eq/njVx9ywTP+gkTZc2zLCZ0vA5glh32aJyqJYdt/Ha2uog0Yook9p83 4VPbncd0L2j3yKQJvUHj0lKTK+2XxOTireO2oZwTqjWnzxPn3KY5xt9yfqmgmuAe hLopNgyf0EMceCCk1zf7QWRhGP0EU0V3kvRYiYZXFM0gcUu5U/dtg+JYK+9U/D6Y RKs5GlHd49GmWn+YxE+16sso33T87gOmw6TiWl/ZtE+0uQB+sY0SQCHNqpqB+MSm 8DmArgVr2ag9qg+z2FCHlEWFezM8Arc4X6vomLpKkajAKcHQKcEOoL+y4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6X3wLojNDSwIEo6dexe04Oahp1MB8GA1UdIwQY MBaAFE5In2YVn3e7WNK7x+T8Hf2d3LA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGtpZlpoV2ZkN3RZMHJ2SDVQd2RfWjNjc0RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hNTgxOTctZWIwOS00NDE1LWE2MWQt YWJkNjFhYTgyNDI2LzEvVGtpZlpoV2ZkN3RZMHJ2SDVQd2RfWjNjc0RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9hNTgxOTctZWIwOS00NDE1LWE2MWQtYWJkNjFhYTgyNDI2 LzEvVGtpZlpoV2ZkN3RZMHJ2SDVQd2RfWjNjc0RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1gBG6R4 vnOhdlZez8s9raTq/XtsPbIRhI4Wdfo/rLN54M0DwxGgNEk4Uy1CkAX7tRMpu4pV wJXrmiqi7ZhJP0Ry39EMhvmHMO2JoDNd9HaeuatZmbwC88ytdPavZwXkOyI38CpF EvrKv9EWz8Dx9BVQKeHk/nHaMq9jYorbajzbmhvREaYd3i3nmCEYJJBg9Hf1c7Mt DGAD+cNtP2QQHV4DtMOmw7JYcRQhFSRUKKLZUgaGTysLWYn9ndpqoRk5QvMS44ZU qEbhVYBWNEo5KDTVoTNtAMB/NyMC+mYXjFwwxphV4W7CMH4xiWqakujFMFsQx5g5 D/JTASpSLjJeEw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:11 2025 by rpki-client