This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft File: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft (raw, json) Hash identifier: eH1p0Zi+hylaSIeAxBXhge1WCQAZXLFzMMcQeh+Fj8g= Subject key identifier: D0:92:22:58:D4:5B:0A:5C:8E:0F:3B:53:68:DB:D3:05:B9:DA:AA:B6 Authority key identifier: 4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21 Certificate issuer: /CN=4c101ff51b67eefe0d67800e76d3606df4c94721 Certificate serial: 019AF389BBC2942AD8E62E62046159CAFF50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft Manifest number: 06D3 Signing time: Sat 06 Dec 2025 12:01:21 +0000 Manifest this update: Sat 06 Dec 2025 12:01:21 +0000 Manifest next update: Sun 07 Dec 2025 12:01:21 +0000 Files and hashes: 1: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl (hash: GoB122d+dpw/KFBzFGUEkc9B5rti0EgwUjf2+Ntpiog=) 2: cri3ULh6Rj8r6ZDUmdSIkYBmP1o.roa (hash: Lisc7jMorS/4tIMBDxqrdkl7lwX530FUMpT0ozDszqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:bb:c2:94:2a:d8:e6:2e:62:04:61:59:ca:ff:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c101ff51b67eefe0d67800e76d3606df4c94721 Validity Not Before: Dec 6 12:01:21 2025 GMT Not After : Dec 7 12:01:21 2025 GMT Subject: CN=d0922258d45b0a5c8e0f3b5368dbd305b9daaab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9e:1a:82:49:d1:ab:72:9b:2e:45:e2:c2:fc: 48:f2:bb:b3:46:27:26:17:b9:21:ad:0b:a8:e1:24: eb:58:ca:b3:5e:73:89:b4:af:43:f4:12:2b:c0:5b: 6f:13:35:75:ba:6f:10:08:8d:7d:f2:24:c1:63:cb: 13:fd:a9:b5:35:8b:10:55:d7:b6:c2:01:f6:f1:3a: 29:62:37:0b:1e:22:28:0b:ce:7a:5c:fa:e0:f4:50: 57:7e:82:22:ce:20:90:59:f9:88:c4:99:17:38:e1: 90:2f:38:0c:c2:6b:dc:65:93:0d:dc:22:27:c7:3b: bc:5e:3a:f9:59:2c:87:0f:5f:54:ae:ac:75:23:39: ba:d5:64:30:03:05:6d:e3:fd:bc:73:aa:2f:68:3e: 25:93:e4:84:b2:27:08:72:94:7c:b4:66:f5:11:10: 6e:09:ea:cb:8c:4f:49:e7:17:fa:d7:03:a4:be:73: 6e:3b:92:c3:7e:92:7c:16:ab:76:96:93:50:b1:e8: b4:6c:f7:d5:79:08:c5:c6:a8:7f:92:1e:36:e7:53: 05:63:d2:88:9d:d6:15:e5:06:c1:d9:55:48:0f:13: d9:2d:4e:6b:e7:1a:fc:91:a8:7c:0d:ce:15:7d:fe: 1e:64:61:ff:f9:07:56:5a:0f:c7:26:f6:a9:8e:09: 63:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:92:22:58:D4:5B:0A:5C:8E:0F:3B:53:68:DB:D3:05:B9:DA:AA:B6 X509v3 Authority Key Identifier: keyid:4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:8a:29:16:d9:7d:a6:6e:87:cf:b9:fc:74:08:b6:81:7d:4a: df:25:10:6b:50:5a:88:17:8c:b8:8b:04:47:93:3d:12:4f:60: a3:da:8c:7e:ad:74:7f:02:da:28:35:19:00:7d:bb:72:15:bc: 22:f6:12:df:4f:34:3d:8e:a5:1a:21:9d:96:62:b3:b8:b1:de: 9b:e4:2d:24:78:c6:ea:3a:d3:17:51:b0:84:d1:49:c2:74:8f: 57:d3:e8:9f:69:88:c1:bc:bd:f4:0a:3b:30:dd:cf:f8:d8:c1: 9b:71:91:81:14:09:26:71:57:d8:e5:6a:f3:ab:e7:c7:5f:48: 99:f7:12:7c:ef:f9:ab:bc:4c:1d:8b:fa:a1:02:ac:2a:66:75: 9d:0e:30:bf:41:9e:ab:83:83:cc:41:5a:f0:77:71:29:41:00: 3c:be:0f:64:f9:7c:e7:81:b4:7e:a3:7f:3b:47:91:b5:e5:6f: 16:df:b8:f2:1b:09:9d:f2:30:04:07:a3:0b:e6:78:82:51:b0: 5c:26:5a:a2:fa:20:f1:75:35:fb:ee:d7:be:4e:8f:9e:cf:97: 55:66:b7:dd:0d:14:b2:b6:b9:93:eb:48:65:3d:d5:86:4e:e5: b4:38:c0:94:c3:dd:24:c5:9f:70:23:73:2d:05:b8:09:54:56: cb:eb:dd:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzibvClCrY5i5iBGFZyv9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMTAxZmY1MWI2N2VlZmUwZDY3ODAwZTc2ZDM2MDZkZjRj OTQ3MjEwHhcNMjUxMjA2MTIwMTIxWhcNMjUxMjA3MTIwMTIxWjAzMTEwLwYDVQQD EyhkMDkyMjI1OGQ0NWIwYTVjOGUwZjNiNTM2OGRiZDMwNWI5ZGFhYWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ4agknRq3KbLkXiwvxI8ruzRicm F7khrQuo4STrWMqzXnOJtK9D9BIrwFtvEzV1um8QCI198iTBY8sT/am1NYsQVde2 wgH28TopYjcLHiIoC856XPrg9FBXfoIiziCQWfmIxJkXOOGQLzgMwmvcZZMN3CIn xzu8Xjr5WSyHD19Urqx1Izm61WQwAwVt4/28c6ovaD4lk+SEsicIcpR8tGb1ERBu CerLjE9J5xf61wOkvnNuO5LDfpJ8Fqt2lpNQsei0bPfVeQjFxqh/kh4251MFY9KI ndYV5QbB2VVIDxPZLU5r5xr8kah8Dc4Vff4eZGH/+QdWWg/HJvapjgljRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCSIljUWwpcjg87U2jb0wW52qq2MB8GA1UdIwQY MBaAFEwQH/UbZ+7+DWeADnbTYG30yUchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEJBZjlSdG43djROWjRBT2R0TmdiZlRKUnlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81OWRjYmQtNzhiZi00OGVkLTk1NGQt Y2NhYTZlYjNjNTEzLzEvVEJBZjlSdG43djROWjRBT2R0TmdiZlRKUnlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC81OWRjYmQtNzhiZi00OGVkLTk1NGQtY2NhYTZlYjNjNTEz LzEvVEJBZjlSdG43djROWjRBT2R0TmdiZlRKUnlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoopFtl9 pm6Hz7n8dAi2gX1K3yUQa1BaiBeMuIsER5M9Ek9go9qMfq10fwLaKDUZAH27chW8 IvYS3080PY6lGiGdlmKzuLHem+QtJHjG6jrTF1GwhNFJwnSPV9Pon2mIwby99Ao7 MN3P+NjBm3GRgRQJJnFX2OVq86vnx19ImfcSfO/5q7xMHYv6oQKsKmZ1nQ4wv0Ge q4ODzEFa8HdxKUEAPL4PZPl854G0fqN/O0eRteVvFt+48hsJnfIwBAejC+Z4glGw XCZaovog8XU1++7Xvk6Pns+XVWa33Q0Usra5k+tIZT3Vhk7ltDjAlMPdJMWfcCNz LQW4CVRWy+vdHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:38:01 2025 by rpki-client