This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft File: TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft (raw, json) Hash identifier: v7sR7lLVRg5Yc54ALczZOJcfC5iGt6xepwc0n713++4= Subject key identifier: AF:9A:A3:06:B8:17:12:78:A3:3E:2D:45:FE:30:8F:E3:DD:02:79:72 Authority key identifier: 4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F Certificate issuer: /CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f Certificate serial: 019AF2ADBF72DCD341347989290F3B89FD76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft Manifest number: 117C Signing time: Sat 06 Dec 2025 08:01:04 +0000 Manifest this update: Sat 06 Dec 2025 08:01:04 +0000 Manifest next update: Sun 07 Dec 2025 08:01:04 +0000 Files and hashes: 1: TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl (hash: 4Qb6+QVLkfYEmX8Za/HhIRBtEt+kjuqSkqJnaaD5w9I=) 2: WDEZ3ZaDac1rHXOITo0Y0_gA1WA.roa (hash: 2eqZynI8QAeqviBK64M0ctiXcb1WfCdmlsqvsre2oAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:bf:72:dc:d3:41:34:79:89:29:0f:3b:89:fd:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f Validity Not Before: Dec 6 08:01:04 2025 GMT Not After : Dec 7 08:01:04 2025 GMT Subject: CN=af9aa306b8171278a33e2d45fe308fe3dd027972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2c:d0:0b:c4:8f:89:9d:b0:72:da:3b:88:fa: b7:31:57:45:ba:3d:3a:75:61:82:08:1d:07:02:91: 05:f8:ad:b7:d9:4c:a7:0b:3a:8d:ac:7e:0e:e2:d2: e0:20:d5:ef:06:a6:ed:71:df:c8:12:19:17:06:57: 08:45:d2:e3:d6:ba:c9:f6:48:bd:e1:a8:2c:38:7d: b7:26:c0:c0:f1:04:c4:57:1b:4a:e0:e6:c3:df:ce: a8:ba:8e:cf:f6:0a:47:b2:95:de:f0:c9:45:99:c8: 63:56:72:e9:72:36:77:cb:8e:d1:f5:c8:cb:0b:01: 8f:11:00:ef:6d:4c:d7:85:f6:a3:df:72:d2:5a:81: 2d:e0:c2:17:cd:0b:fa:dd:f6:b0:43:4d:62:54:29: 71:ac:3a:bb:f4:21:05:4a:58:d3:f2:12:c4:2f:5b: a5:91:27:e5:59:1e:08:31:11:45:39:27:e1:98:42: 5d:03:58:2c:55:ad:b7:61:a8:ea:c8:da:13:87:41: a5:40:d0:a9:be:17:1a:a1:0b:14:dd:a8:22:c6:20: 5f:6a:dd:2d:21:f0:19:8c:f5:f2:94:9b:ea:fe:3d: ce:7b:62:67:96:5b:f6:f4:1d:60:04:7b:41:3a:88: 75:ed:7c:65:e3:bf:f6:97:88:48:30:6c:51:e0:37: cf:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9A:A3:06:B8:17:12:78:A3:3E:2D:45:FE:30:8F:E3:DD:02:79:72 X509v3 Authority Key Identifier: keyid:4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e4:0c:b1:58:eb:ff:96:4a:2d:d7:8f:fd:ef:63:63:6c:87: bf:72:f4:fd:cb:a9:0d:c4:00:a7:e6:8e:ef:a6:6b:03:d1:fd: fc:d6:2c:81:12:96:14:c0:01:b1:62:d8:94:6f:98:33:0c:8d: 0a:63:47:c0:35:4c:20:a3:d8:36:be:6c:e3:88:1e:16:2f:78: c6:24:f9:75:73:e0:e7:ad:10:f1:39:07:b7:a3:5c:c7:84:59: 71:fc:f4:65:c0:14:a7:ec:c3:7a:69:b3:54:fb:4b:97:53:f9: 03:ce:1e:33:23:b9:b1:47:0e:23:0a:2a:ab:f3:2b:ed:28:c6: 73:18:1e:c8:61:d5:fe:b8:6a:a0:3f:c9:88:72:4a:5a:ff:99: 64:aa:a4:7f:ef:38:b3:95:b5:64:68:fc:7c:82:f4:fb:f5:7d: 1e:b6:43:4c:3c:95:1d:16:24:c9:0a:d2:83:ff:fa:65:e0:05: 25:63:51:cf:81:c3:03:8d:37:97:55:f7:12:2f:c7:19:2a:64: 6f:9f:8f:8e:eb:ce:d3:d5:08:a9:21:8b:d3:61:62:d4:c5:5e: ee:c4:78:39:3e:9c:a0:ca:be:24:f2:c6:7a:8e:23:d4:ff:69: ac:0a:fc:5e:d1:d8:5b:74:41:5c:fe:b3:60:c6:6d:7e:d5:87: 6b:16:26:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrb9y3NNBNHmJKQ87if12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkY2JlZjA2YWQwNWZkNmU2ZTdlN2IxMDg0Y2IxZDdkNjVl NjQyNmYwHhcNMjUxMjA2MDgwMTA0WhcNMjUxMjA3MDgwMTA0WjAzMTEwLwYDVQQD EyhhZjlhYTMwNmI4MTcxMjc4YTMzZTJkNDVmZTMwOGZlM2RkMDI3OTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSzQC8SPiZ2wcto7iPq3MVdFuj06 dWGCCB0HApEF+K232UynCzqNrH4O4tLgINXvBqbtcd/IEhkXBlcIRdLj1rrJ9ki9 4agsOH23JsDA8QTEVxtK4ObD386ouo7P9gpHspXe8MlFmchjVnLpcjZ3y47R9cjL CwGPEQDvbUzXhfaj33LSWoEt4MIXzQv63fawQ01iVClxrDq79CEFSljT8hLEL1ul kSflWR4IMRFFOSfhmEJdA1gsVa23YajqyNoTh0GlQNCpvhcaoQsU3agixiBfat0t IfAZjPXylJvq/j3Oe2Jnllv29B1gBHtBOoh17Xxl47/2l4hIMGxR4DfPrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+aowa4FxJ4oz4tRf4wj+PdAnlyMB8GA1UdIwQY MBaAFE3L7watBf1ubn57EITLHX1l5kJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGN2dkJxMEZfVzV1Zm5zUWhNc2RmV1htUW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yYTZlYWEtZTQzNy00M2JjLTk3MmUt M2UzYmZhYTE5MGRmLzEvVGN2dkJxMEZfVzV1Zm5zUWhNc2RmV1htUW04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yYTZlYWEtZTQzNy00M2JjLTk3MmUtM2UzYmZhYTE5MGRm LzEvVGN2dkJxMEZfVzV1Zm5zUWhNc2RmV1htUW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+QMsVjr /5ZKLdeP/e9jY2yHv3L0/cupDcQAp+aO76ZrA9H9/NYsgRKWFMABsWLYlG+YMwyN CmNHwDVMIKPYNr5s44geFi94xiT5dXPg560Q8TkHt6Ncx4RZcfz0ZcAUp+zDemmz VPtLl1P5A84eMyO5sUcOIwoqq/Mr7SjGcxgeyGHV/rhqoD/JiHJKWv+ZZKqkf+84 s5W1ZGj8fIL0+/V9HrZDTDyVHRYkyQrSg//6ZeAFJWNRz4HDA403l1X3Ei/HGSpk b5+PjuvO09UIqSGL02Fi1MVe7sR4OT6coMq+JPLGeo4j1P9prAr8XtHYW3RBXP6z YMZtftWHaxYmrg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:29 2025 by rpki-client