This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft File: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft (raw, json) Hash identifier: keLmF3zx3GARMCuyAfVu8kr9mUhkH8LdpuAopLdOJZQ= Subject key identifier: 4F:13:0D:44:62:1B:BB:27:93:7D:C5:97:6B:C0:91:6E:FA:B3:CB:10 Authority key identifier: 4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1 Certificate issuer: /CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1 Certificate serial: 019AF3C037620E2B25E5545E55124FFC20D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 13:00:51 +0000 Manifest this update: Sat 06 Dec 2025 13:00:51 +0000 Manifest next update: Sun 07 Dec 2025 13:00:51 +0000 Files and hashes: 1: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl (hash: LO+SRozROEIzFj0eYtrLbOv6lp1ruOKN5iZEGhfBAoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:37:62:0e:2b:25:e5:54:5e:55:12:4f:fc:20:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1 Validity Not Before: Dec 6 13:00:51 2025 GMT Not After : Dec 7 13:00:51 2025 GMT Subject: CN=4f130d44621bbb27937dc5976bc0916efab3cb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:fc:cd:6e:cd:9f:53:54:58:75:79:18:a5: 9d:d8:f1:80:8d:49:34:5a:a1:96:fe:57:1b:37:b6: 4c:d0:7c:e9:41:c4:78:f0:02:7e:34:88:bb:c2:8a: 86:aa:7f:7e:90:a2:3b:0f:2e:da:3c:d9:b2:af:96: 64:5a:a7:c7:a0:c9:a4:5f:96:5e:d3:62:66:36:5e: b2:9e:65:9e:29:f3:94:78:6a:0e:f0:5e:55:70:5b: c9:ed:fe:74:9b:8a:88:c1:04:b4:0c:04:04:33:e8: 6b:24:c6:cc:62:47:6b:a9:25:e8:36:b8:92:ab:b2: 11:4c:6e:7b:bf:1f:0f:b7:85:62:a3:4e:56:d9:33: c1:30:46:fa:39:11:d9:de:c6:9d:af:25:8e:29:40: 0c:bf:e3:62:01:a7:50:d6:91:0b:2e:62:9b:c7:93: 69:f3:0c:dc:80:d7:ac:e0:0f:16:c1:ae:78:dc:9c: 0b:28:28:da:1b:29:3f:6b:bb:9b:7e:84:5b:6e:d1: d0:2c:df:00:de:ac:1d:4c:ee:d6:c5:2a:78:7d:d6: 10:29:f6:a4:4a:4f:f6:fe:58:86:67:c1:3d:00:6f: dc:30:cd:6a:94:24:4a:02:e7:52:eb:70:7b:d2:f1: 56:26:17:6f:88:2c:ff:20:f0:34:4d:82:95:dc:c3: 99:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:13:0D:44:62:1B:BB:27:93:7D:C5:97:6B:C0:91:6E:FA:B3:CB:10 X509v3 Authority Key Identifier: keyid:4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:db:62:6a:cb:82:42:84:8b:4f:e9:b6:7f:ba:d3:30:ca:e0: 97:c1:13:11:a7:8b:a9:01:43:48:62:c9:54:13:59:b4:e9:2d: d5:16:ea:31:0a:93:46:7e:db:74:4f:f7:cf:74:d4:2b:02:3f: 4a:d0:89:2a:76:9b:28:39:23:7e:32:24:a0:88:84:88:17:26: 04:d2:07:0c:25:3a:20:98:c8:12:69:36:c6:8d:33:e3:8c:c2: 2b:99:01:1e:f4:f7:2c:19:18:97:a5:eb:7c:15:a0:8e:f2:b5: ee:26:3e:6f:9f:47:25:7e:90:bc:da:c0:00:aa:e8:da:48:f4: 8d:92:2d:8a:97:c8:a0:e2:ab:e0:aa:e2:e9:ae:13:3f:e8:fe: 13:ad:6d:29:f0:5f:91:3c:62:17:db:9e:0f:3a:8b:cf:cb:53: d7:c8:88:86:8c:26:43:15:92:93:7d:8d:bd:e1:ec:7d:1c:55: 27:f6:35:dd:a3:ad:de:bd:0c:c8:9f:ba:c0:a7:39:b1:d7:31: 52:e0:60:fa:7a:1b:55:1b:83:70:a8:b1:7f:92:a5:32:8e:f8: 93:18:cc:75:87:0d:c4:6b:19:0c:a5:3d:73:b3:84:e8:31:4a: 10:1e:e9:4b:ae:d9:d4:00:09:83:eb:5c:92:28:68:41:e5:cd: c7:35:50:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwDdiDisl5VReVRJP/CDVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkOGMwY2E5YzIxZmExOWRjMDU5MzJiZWZkOTA2MGIxNjBl ZGM1YzEwHhcNMjUxMjA2MTMwMDUxWhcNMjUxMjA3MTMwMDUxWjAzMTEwLwYDVQQD Eyg0ZjEzMGQ0NDYyMWJiYjI3OTM3ZGM1OTc2YmMwOTE2ZWZhYjNjYjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNX8zW7Nn1NUWHV5GKWd2PGAjUk0 WqGW/lcbN7ZM0HzpQcR48AJ+NIi7woqGqn9+kKI7Dy7aPNmyr5ZkWqfHoMmkX5Ze 02JmNl6ynmWeKfOUeGoO8F5VcFvJ7f50m4qIwQS0DAQEM+hrJMbMYkdrqSXoNriS q7IRTG57vx8Pt4Vio05W2TPBMEb6ORHZ3sadryWOKUAMv+NiAadQ1pELLmKbx5Np 8wzcgNes4A8Wwa543JwLKCjaGyk/a7ubfoRbbtHQLN8A3qwdTO7WxSp4fdYQKfak Sk/2/liGZ8E9AG/cMM1qlCRKAudS63B70vFWJhdviCz/IPA0TYKV3MOZVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8TDURiG7snk33Fl2vAkW76s8sQMB8GA1UdIwQY MBaAFE2MDKnCH6GdwFkyvv2QYLFg7cXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFl3TXFjSWZvWjNBV1RLLV9aQmdzV0R0eGNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC83OTAwOTktMmY5MC00M2JjLWJmMGQt NmQ1NDk2Y2IxYTQyLzEvVFl3TXFjSWZvWjNBV1RLLV9aQmdzV0R0eGNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC83OTAwOTktMmY5MC00M2JjLWJmMGQtNmQ1NDk2Y2IxYTQy LzEvVFl3TXFjSWZvWjNBV1RLLV9aQmdzV0R0eGNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidtiasuC QoSLT+m2f7rTMMrgl8ETEaeLqQFDSGLJVBNZtOkt1RbqMQqTRn7bdE/3z3TUKwI/ StCJKnabKDkjfjIkoIiEiBcmBNIHDCU6IJjIEmk2xo0z44zCK5kBHvT3LBkYl6Xr fBWgjvK17iY+b59HJX6QvNrAAKro2kj0jZItipfIoOKr4Kri6a4TP+j+E61tKfBf kTxiF9ueDzqLz8tT18iIhowmQxWSk32NveHsfRxVJ/Y13aOt3r0MyJ+6wKc5sdcx UuBg+nobVRuDcKixf5KlMo74kxjMdYcNxGsZDKU9c7OE6DFKEB7pS67Z1AAJg+tc kihoQeXNxzVQYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:53:18 2025 by rpki-client