This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft File: TeztaXzW72A8kPgBiBg7zjAgQOE.mft (raw, json) Hash identifier: V0BEdwJIvNNe3g5uUin7U4F5+k8aHKMpnn0OWs9dDNY= Subject key identifier: 53:47:87:82:9B:8F:A9:02:60:5A:C2:A8:C1:A9:88:89:76:B6:2B:D4 Authority key identifier: 4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1 Certificate issuer: /CN=4deced697cd6ef603c90f80188183bce302040e1 Certificate serial: 019AF3C0AD936ECD2DA546CE0F49642BF087 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft Manifest number: 0700 Signing time: Sat 06 Dec 2025 13:01:22 +0000 Manifest this update: Sat 06 Dec 2025 13:01:22 +0000 Manifest next update: Sun 07 Dec 2025 13:01:22 +0000 Files and hashes: 1: TeztaXzW72A8kPgBiBg7zjAgQOE.crl (hash: UWUzl9kAp9QjAOyi1dJXaSifK83hOhCtCMJ/4xUzAw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:ad:93:6e:cd:2d:a5:46:ce:0f:49:64:2b:f0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4deced697cd6ef603c90f80188183bce302040e1 Validity Not Before: Dec 6 13:01:22 2025 GMT Not After : Dec 7 13:01:22 2025 GMT Subject: CN=534787829b8fa902605ac2a8c1a9888976b62bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bb:11:ef:f6:5a:ea:4a:54:0a:b3:d3:9b:34: 4b:14:3f:08:1d:66:b2:dd:42:9c:40:ed:48:f1:ad: 11:02:41:91:d9:12:46:67:c0:0f:8e:25:ff:47:54: 68:db:19:08:93:f4:1d:4f:df:7c:e0:57:db:8f:49: 80:17:a5:8a:33:6e:08:e6:b8:35:f4:53:d6:31:7a: 7a:6d:60:24:ec:0e:93:b6:55:ff:71:c1:98:03:fa: 74:bf:3a:f2:0a:48:97:5f:7f:16:b7:18:18:b1:7f: 9e:7c:04:cb:16:d2:ac:98:d7:90:7e:6a:5c:4c:32: f7:81:da:a2:01:22:d0:12:30:54:19:7e:fd:c0:f0: 8d:7d:5c:93:ec:b3:1a:32:dc:90:a6:b9:8d:cb:9c: 00:74:e5:37:35:b9:0b:cf:28:5a:bd:7f:90:7c:a6: 2d:60:eb:c8:3a:8a:1c:8a:07:fe:6f:18:19:8f:8b: 7c:d0:aa:ed:11:7c:b1:31:8e:a9:b0:62:90:2b:10: 1b:44:43:e4:44:cf:35:97:b7:23:84:cf:2b:a9:07: 3d:88:43:4b:0d:c6:f8:2c:d4:0c:37:fd:9a:ae:64: d9:1c:48:ae:db:4c:9d:69:06:35:54:75:28:b2:4a: 4a:79:02:67:6d:dc:10:b3:bb:af:3c:1d:e5:38:41: de:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:47:87:82:9B:8F:A9:02:60:5A:C2:A8:C1:A9:88:89:76:B6:2B:D4 X509v3 Authority Key Identifier: keyid:4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:8e:cd:15:e0:40:d3:6c:21:c8:c0:61:b6:7e:44:b9:2f:cc: 84:66:f4:3f:0f:8c:f0:c0:f6:30:8e:9b:c7:2e:c6:64:84:82: ba:a2:d1:d0:a2:c4:21:cb:69:ae:e5:23:d7:99:75:7b:84:e6: 99:59:36:bb:26:8f:e4:9c:c2:e5:f4:15:0d:7d:a5:dc:39:93: 74:17:12:0e:63:d7:45:ef:f6:99:e1:7e:ba:f8:95:de:2a:de: 76:42:12:6d:a2:15:d0:61:7c:15:1e:68:e7:0b:c6:3d:e5:1a: 45:dc:b4:1f:a4:9e:81:89:88:9c:ee:10:88:1f:fd:b3:45:be: 29:f4:f9:12:dc:8d:49:4c:a4:d1:59:02:42:82:59:e4:f4:7f: 62:a0:2b:a6:d2:fc:fc:68:ab:4f:4d:a4:38:f7:e7:d9:94:6c: 07:dd:02:ce:a3:f6:99:cb:cf:54:b1:fe:47:cf:d3:87:af:ba: de:80:d4:7c:b1:be:d9:bc:fd:9e:05:86:6d:4c:81:d9:fe:74: 36:8c:40:87:43:5c:fe:dd:ac:a2:73:b3:f0:66:0d:36:ea:e1: a5:49:47:8c:35:e7:18:cc:db:fa:b7:5d:4c:6f:c4:e3:45:97: 69:5e:98:98:e7:b2:e6:81:34:cc:a4:36:85:69:86:16:40:11: 62:04:67:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwK2Tbs0tpUbOD0lkK/CHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZWNlZDY5N2NkNmVmNjAzYzkwZjgwMTg4MTgzYmNlMzAy MDQwZTEwHhcNMjUxMjA2MTMwMTIyWhcNMjUxMjA3MTMwMTIyWjAzMTEwLwYDVQQD Eyg1MzQ3ODc4MjliOGZhOTAyNjA1YWMyYThjMWE5ODg4OTc2YjYyYmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLsR7/Za6kpUCrPTmzRLFD8IHWay 3UKcQO1I8a0RAkGR2RJGZ8APjiX/R1Ro2xkIk/QdT9984Ffbj0mAF6WKM24I5rg1 9FPWMXp6bWAk7A6TtlX/ccGYA/p0vzryCkiXX38WtxgYsX+efATLFtKsmNeQfmpc TDL3gdqiASLQEjBUGX79wPCNfVyT7LMaMtyQprmNy5wAdOU3NbkLzyhavX+QfKYt YOvIOoocigf+bxgZj4t80KrtEXyxMY6psGKQKxAbREPkRM81l7cjhM8rqQc9iENL Dcb4LNQMN/2armTZHEiu20ydaQY1VHUoskpKeQJnbdwQs7uvPB3lOEHe/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNHh4Kbj6kCYFrCqMGpiIl2tivUMB8GA1UdIwQY MBaAFE3s7Wl81u9gPJD4AYgYO84wIEDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGV6dGFYelc3MkE4a1BnQmlCZzd6akFnUU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi83N2NlMzgtNDAyYy00Y2I5LTg1ODIt MjIxNDQ5MTE4MzA5LzEvVGV6dGFYelc3MkE4a1BnQmlCZzd6akFnUU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi83N2NlMzgtNDAyYy00Y2I5LTg1ODItMjIxNDQ5MTE4MzA5 LzEvVGV6dGFYelc3MkE4a1BnQmlCZzd6akFnUU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa47NFeBA 02whyMBhtn5EuS/MhGb0Pw+M8MD2MI6bxy7GZISCuqLR0KLEIctpruUj15l1e4Tm mVk2uyaP5JzC5fQVDX2l3DmTdBcSDmPXRe/2meF+uviV3iredkISbaIV0GF8FR5o 5wvGPeUaRdy0H6SegYmInO4QiB/9s0W+KfT5EtyNSUyk0VkCQoJZ5PR/YqArptL8 /GirT02kOPfn2ZRsB90CzqP2mcvPVLH+R8/Th6+63oDUfLG+2bz9ngWGbUyB2f50 NoxAh0Nc/t2sonOz8GYNNurhpUlHjDXnGMzb+rddTG/E40WXaV6YmOey5oE0zKQ2 hWmGFkARYgRnZg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:06:49 2025 by rpki-client