This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft File: tPSWmNCOjCg8DfKoLxaZfmJZurY.mft (raw, json) Hash identifier: 0naiWb53kA2GZ2IdTQAuJTaD6nvI718uMJ5dmtye/+Q= Subject key identifier: 1F:57:0E:19:52:77:73:27:38:A2:2D:31:CA:A1:A6:D4:A9:87:1C:B7 Authority key identifier: B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6 Certificate issuer: /CN=b4f49698d08e8c283c0df2a82f16997e6259bab6 Certificate serial: 019AF2095B9DA6D053D4DC9493936C56A239 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft Manifest number: 092E Signing time: Sat 06 Dec 2025 05:01:30 +0000 Manifest this update: Sat 06 Dec 2025 05:01:30 +0000 Manifest next update: Sun 07 Dec 2025 05:01:30 +0000 Files and hashes: 1: tPSWmNCOjCg8DfKoLxaZfmJZurY.crl (hash: QnA97IGNEkz1hMe86tabV6hWPM3HIM3t1RpXn5XJwn0=) 2: xzawIGSZ9gaUq6klJYybOrl_u8k.roa (hash: 1673awjNQrA/kSjVn3AcQmjZN9mvF8MpaJPKmYa0E/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:5b:9d:a6:d0:53:d4:dc:94:93:93:6c:56:a2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f49698d08e8c283c0df2a82f16997e6259bab6 Validity Not Before: Dec 6 05:01:30 2025 GMT Not After : Dec 7 05:01:30 2025 GMT Subject: CN=1f570e195277732738a22d31caa1a6d4a9871cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e1:9c:27:03:00:66:af:25:6e:84:c9:08:f8: 85:e7:1e:24:87:dc:56:3d:c5:e4:c6:88:a6:95:6f: e3:ae:18:d8:bc:07:ac:55:cd:be:b2:6c:ea:83:5b: 6a:62:1c:c4:a8:d1:d0:0a:ac:19:a0:a3:ad:de:df: ff:10:ec:a6:24:e0:a3:03:8e:8f:df:e7:8c:25:e5: 99:3e:32:8b:dc:e9:06:03:81:52:79:98:49:15:87: 68:f8:26:39:8a:d8:1b:f6:4a:ea:5e:c8:1d:7f:f9: 87:6e:66:37:cd:12:41:44:dc:27:17:dc:e0:77:05: de:46:ce:ef:23:a4:71:eb:ac:cb:de:67:2b:4c:b1: 85:4f:cd:28:da:dd:58:d9:c2:7c:33:3c:d3:f1:a7: 0c:3e:f2:b6:67:87:9d:a7:78:83:6d:ee:2f:f5:4c: 3d:46:d6:87:f0:22:bb:00:a4:84:49:4d:65:15:3e: 02:d3:2d:cf:6f:7b:0b:3c:a2:06:d7:10:96:bd:fb: 13:95:25:e9:74:aa:a0:db:e5:60:00:b8:d6:e2:4a: 6c:68:10:59:13:6c:33:2b:de:57:fd:ee:b4:e2:08: a7:31:26:c4:69:5b:7a:61:6d:9a:00:e9:d6:e2:47: 3b:96:e3:7d:e6:7f:27:28:87:bb:0e:df:1c:28:b2: c0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:57:0E:19:52:77:73:27:38:A2:2D:31:CA:A1:A6:D4:A9:87:1C:B7 X509v3 Authority Key Identifier: keyid:B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a0:fa:23:06:47:80:6b:93:e6:78:ba:a0:86:04:e5:b6:b7: f8:b9:aa:ef:62:ff:c7:15:9a:32:c4:5d:ab:c9:86:f6:48:1f: cf:df:95:5f:b2:85:79:fb:7d:d1:8c:94:44:41:0c:e2:5a:62: 2e:90:07:f8:16:b4:6e:63:87:05:f8:b9:7b:cc:c5:eb:c5:e9: 8e:1a:48:df:53:57:f9:54:df:db:17:48:6a:87:eb:29:3b:33: 28:c4:77:80:5b:77:99:1c:04:69:58:1f:19:b1:e2:44:47:d4: b4:ab:c6:b8:86:e5:32:56:5c:f4:3f:cb:f2:9d:e8:18:b8:1b: 8a:4e:7c:58:9b:3b:a3:8f:aa:5b:97:4b:6e:ca:f7:10:e2:6a: e7:b3:ef:e5:82:13:6c:f5:73:ae:8c:32:ae:1d:a6:ba:99:5c: e0:87:e3:d7:f8:3a:5f:a4:31:9f:3c:cd:eb:1b:2a:27:aa:aa: 31:2c:61:e5:81:80:f5:f7:54:78:c7:18:4b:c2:cb:01:88:49: b8:b1:df:1f:0c:ae:5e:2e:6e:78:bf:96:ae:2a:0a:75:d8:4c: c1:27:e6:81:4c:a8:e0:6f:a9:0a:cc:59:4b:73:3d:73:0a:3d: c8:9a:e6:c4:1a:55:a3:58:fb:6d:fe:25:cb:48:b1:86:7e:79: d5:6b:54:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVudptBT1NyUk5NsVqI5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZjQ5Njk4ZDA4ZThjMjgzYzBkZjJhODJmMTY5OTdlNjI1 OWJhYjYwHhcNMjUxMjA2MDUwMTMwWhcNMjUxMjA3MDUwMTMwWjAzMTEwLwYDVQQD EygxZjU3MGUxOTUyNzc3MzI3MzhhMjJkMzFjYWExYTZkNGE5ODcxY2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuGcJwMAZq8lboTJCPiF5x4kh9xW PcXkxoimlW/jrhjYvAesVc2+smzqg1tqYhzEqNHQCqwZoKOt3t//EOymJOCjA46P 3+eMJeWZPjKL3OkGA4FSeZhJFYdo+CY5itgb9krqXsgdf/mHbmY3zRJBRNwnF9zg dwXeRs7vI6Rx66zL3mcrTLGFT80o2t1Y2cJ8MzzT8acMPvK2Z4edp3iDbe4v9Uw9 RtaH8CK7AKSESU1lFT4C0y3Pb3sLPKIG1xCWvfsTlSXpdKqg2+VgALjW4kpsaBBZ E2wzK95X/e604ginMSbEaVt6YW2aAOnW4kc7luN95n8nKIe7Dt8cKLLA7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9XDhlSd3MnOKItMcqhptSphxy3MB8GA1UdIwQY MBaAFLT0lpjQjowoPA3yqC8WmX5iWbq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBTV21OQ09qQ2c4RGZLb0x4YVpmbUpadXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mNjNkNzYtMmZiNi00M2EyLWJmZWMt OWY3YWEwOTQzMDNiLzEvdFBTV21OQ09qQ2c4RGZLb0x4YVpmbUpadXJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mNjNkNzYtMmZiNi00M2EyLWJmZWMtOWY3YWEwOTQzMDNi LzEvdFBTV21OQ09qQ2c4RGZLb0x4YVpmbUpadXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6D6IwZH gGuT5ni6oIYE5ba3+Lmq72L/xxWaMsRdq8mG9kgfz9+VX7KFeft90YyUREEM4lpi LpAH+Ba0bmOHBfi5e8zF68XpjhpI31NX+VTf2xdIaofrKTszKMR3gFt3mRwEaVgf GbHiREfUtKvGuIblMlZc9D/L8p3oGLgbik58WJs7o4+qW5dLbsr3EOJq57Pv5YIT bPVzrowyrh2muplc4Ifj1/g6X6QxnzzN6xsqJ6qqMSxh5YGA9fdUeMcYS8LLAYhJ uLHfHwyuXi5ueL+WrioKddhMwSfmgUyo4G+pCsxZS3M9cwo9yJrmxBpVo1j7bf4l y0ixhn551WtUZA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:50 2025 by rpki-client