This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft File: Tb6Htwra566IC0Zwv6B46QmE1mA.mft (raw, json) Hash identifier: ewvHjGylVcTRKjyRAH2wQWKzWiKtOGWSy0aJnadqOOk= Subject key identifier: AD:0B:8A:1C:CF:B2:69:0E:31:EE:21:4F:A5:98:E4:5D:5D:8F:3B:CC Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60 Certificate issuer: /CN=4dbe87b70adae7ae880b4670bfa078e90984d660 Certificate serial: 019AF1D1A5BD52AF1A2353F546A8DAF57C27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft Manifest number: 1188 Signing time: Sat 06 Dec 2025 04:00:39 +0000 Manifest this update: Sat 06 Dec 2025 04:00:39 +0000 Manifest next update: Sun 07 Dec 2025 04:00:39 +0000 Files and hashes: 1: Tb6Htwra566IC0Zwv6B46QmE1mA.crl (hash: m9Xc7eJnG2jGYW4kv3UI4cfT2wJlgB5NFvc++VC30Qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a5:bd:52:af:1a:23:53:f5:46:a8:da:f5:7c:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660 Validity Not Before: Dec 6 04:00:39 2025 GMT Not After : Dec 7 04:00:39 2025 GMT Subject: CN=ad0b8a1ccfb2690e31ee214fa598e45d5d8f3bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e9:cd:e9:13:e1:f5:bf:da:c4:30:3f:27:0f: 07:48:d3:c0:33:70:ed:cf:10:de:a0:08:43:16:8b: b7:df:6d:ef:29:56:1f:63:e4:dc:8e:03:ce:26:60: c2:92:a2:61:17:0f:ee:e2:dd:4e:7a:06:c9:4c:67: 40:9b:39:74:a5:63:ee:f8:b0:cb:d1:0d:e9:bb:ba: f2:59:ec:8f:15:f3:2c:7c:5e:a9:74:a3:40:65:bc: a5:b9:01:54:29:8b:2c:27:2b:02:f0:92:93:ea:52: 89:10:43:d0:54:fc:bc:a8:cd:36:c9:26:9f:50:81: cc:c1:db:7a:b1:ff:d1:1b:df:ef:32:85:b3:1d:01: d2:a1:71:be:c6:47:ed:9f:cc:a5:84:80:c7:db:58: 86:d5:88:a2:24:a4:28:b0:06:b1:22:12:a7:eb:c3: 07:92:e9:0d:23:47:7d:af:dd:33:07:74:0d:28:b3: 88:86:e2:f0:16:93:56:2c:ed:da:07:4d:cd:d1:66: 85:3b:66:d0:bb:61:34:47:08:3c:9f:8f:5f:ec:8b: a0:59:55:73:61:90:b7:95:f2:a0:12:69:4e:7c:18: cb:34:a4:7f:cd:79:c9:ff:b7:19:88:28:23:dc:bb: 42:f1:ea:72:0a:13:e3:06:36:2d:3d:7e:ee:a7:97: 89:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0B:8A:1C:CF:B2:69:0E:31:EE:21:4F:A5:98:E4:5D:5D:8F:3B:CC X509v3 Authority Key Identifier: keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:5c:81:e1:a3:8f:82:a4:3d:4a:fb:7f:7b:ea:a3:f5:e8:05: 0f:c3:7a:de:a1:e7:db:34:67:24:46:b4:f9:d3:7c:d4:1a:5b: 29:2e:fc:9d:86:cc:fa:5d:7b:22:36:3f:67:f3:55:b5:33:a5: 7d:e6:da:37:e4:9a:25:98:35:ed:e7:a9:8a:78:85:30:a2:b8: 04:96:47:7d:32:a9:6d:d5:1b:dc:05:2e:d1:11:0f:74:0a:3c: a0:9c:47:2c:5d:92:ef:9e:b7:c5:3e:2d:7d:6e:2b:fb:d8:22: e9:af:2a:f1:84:11:16:9d:38:dc:98:5b:82:d9:e1:4d:85:90: 9d:db:00:d3:e7:76:dc:8f:3d:ce:0c:70:09:11:12:4e:b3:d4: 13:c6:cb:04:f4:32:32:4c:00:3f:0e:c9:e7:6e:10:3f:ec:56: 7e:f7:e2:f9:d7:04:86:d9:b6:34:b7:21:43:94:35:69:64:8f: e2:7e:be:40:69:17:69:b3:d1:3d:5c:28:2e:a1:96:52:c0:07: cd:4a:70:03:9a:67:d9:d2:19:04:f0:47:f7:ea:fb:64:62:c2: 08:33:70:d4:04:b6:73:e7:e6:17:2a:29:1b:b6:e3:b5:a3:7d: 2b:7a:35:59:11:26:c6:86:06:5c:6b:97:24:2e:4e:34:4b:3e: d0:3b:9e:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aW9Uq8aI1P1Rqja9XwnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYmU4N2I3MGFkYWU3YWU4ODBiNDY3MGJmYTA3OGU5MDk4 NGQ2NjAwHhcNMjUxMjA2MDQwMDM5WhcNMjUxMjA3MDQwMDM5WjAzMTEwLwYDVQQD EyhhZDBiOGExY2NmYjI2OTBlMzFlZTIxNGZhNTk4ZTQ1ZDVkOGYzYmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAienN6RPh9b/axDA/Jw8HSNPAM3Dt zxDeoAhDFou3323vKVYfY+TcjgPOJmDCkqJhFw/u4t1OegbJTGdAmzl0pWPu+LDL 0Q3pu7ryWeyPFfMsfF6pdKNAZbyluQFUKYssJysC8JKT6lKJEEPQVPy8qM02ySaf UIHMwdt6sf/RG9/vMoWzHQHSoXG+xkftn8ylhIDH21iG1YiiJKQosAaxIhKn68MH kukNI0d9r90zB3QNKLOIhuLwFpNWLO3aB03N0WaFO2bQu2E0Rwg8n49f7IugWVVz YZC3lfKgEmlOfBjLNKR/zXnJ/7cZiCgj3LtC8epyChPjBjYtPX7up5eJ6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0LihzPsmkOMe4hT6WY5F1djzvMMB8GA1UdIwQY MBaAFE2+h7cK2ueuiAtGcL+geOkJhNZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zN2QzZWUtNjQwZi00NzFmLWE5Yjct YWM1YTI5N2Y5YmE0LzEvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zN2QzZWUtNjQwZi00NzFmLWE5YjctYWM1YTI5N2Y5YmE0 LzEvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFyB4aOP gqQ9Svt/e+qj9egFD8N63qHn2zRnJEa0+dN81BpbKS78nYbM+l17IjY/Z/NVtTOl febaN+SaJZg17eepiniFMKK4BJZHfTKpbdUb3AUu0REPdAo8oJxHLF2S7563xT4t fW4r+9gi6a8q8YQRFp043JhbgtnhTYWQndsA0+d23I89zgxwCRESTrPUE8bLBPQy MkwAPw7J524QP+xWfvfi+dcEhtm2NLchQ5Q1aWSP4n6+QGkXabPRPVwoLqGWUsAH zUpwA5pn2dIZBPBH9+r7ZGLCCDNw1AS2c+fmFyopG7bjtaN9K3o1WREmxoYGXGuX JC5ONEs+0DuetA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:19 2025 by rpki-client