This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft File: tT1dyv8VkDIr61fsPrrvYlBBKVU.mft (raw, json) Hash identifier: sVLyRuDdZDy3FD9pnsG1wFM9cZxhyhlt7TUW4io43pk= Subject key identifier: ED:EA:52:45:7F:D3:B6:88:19:51:5B:D4:79:2F:B7:6A:FB:CB:46:0F Authority key identifier: B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55 Certificate issuer: /CN=b53d5dcaff1590322beb57ec3ebaef6250412955 Certificate serial: 019AF12E02FE66848530385DF041CBD6D878 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft Manifest number: 0A27 Signing time: Sat 06 Dec 2025 01:01:55 +0000 Manifest this update: Sat 06 Dec 2025 01:01:55 +0000 Manifest next update: Sun 07 Dec 2025 01:01:55 +0000 Files and hashes: 1: tT1dyv8VkDIr61fsPrrvYlBBKVU.crl (hash: 4mnPTTVXPP8nVLB3OVc0E5iGDb9ibG4nR8LLfueY/fI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:02:fe:66:84:85:30:38:5d:f0:41:cb:d6:d8:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b53d5dcaff1590322beb57ec3ebaef6250412955 Validity Not Before: Dec 6 01:01:55 2025 GMT Not After : Dec 7 01:01:55 2025 GMT Subject: CN=edea52457fd3b68819515bd4792fb76afbcb460f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ee:12:a0:98:00:41:15:40:b1:f2:24:c9:c1: 47:fa:5a:1a:d0:97:75:b5:5a:b1:77:7a:3b:ad:0a: c6:4e:85:53:31:89:ce:75:a2:cf:a5:d9:eb:70:86: ec:f1:87:2a:c6:8a:d3:e1:7f:31:b2:8a:c8:0b:74: a9:63:9a:5b:47:6d:5b:a2:02:23:36:b7:f1:af:97: 6d:f0:24:59:fc:ea:13:ee:49:93:ca:ff:9e:64:81: af:ad:d9:95:41:4b:42:f7:65:b8:f7:12:53:b5:14: 42:31:6f:8e:c2:f7:06:82:a4:2e:a7:e4:2a:aa:c9: 4c:13:79:3b:59:b1:28:4a:6e:42:86:33:e1:15:5d: cb:4c:62:74:bb:67:82:74:64:64:4d:f0:42:fe:05: ec:fa:4b:07:e4:98:d6:4e:b0:98:bb:8e:90:0e:fc: 41:9f:a9:dd:58:51:e5:62:e3:42:80:6a:c3:d6:cc: c0:d5:d7:df:f4:b0:d7:63:6d:97:8b:79:98:aa:de: e3:c2:50:5c:6c:73:91:1b:b7:67:44:5a:c8:ca:08: 3c:b5:de:0e:5a:f4:cb:fe:bd:fb:76:0e:f7:fc:aa: 57:01:d5:cb:7e:b5:b3:cf:0a:3b:ea:51:e3:9b:1c: 7b:f0:28:5e:2b:e9:52:06:37:1b:15:11:83:3a:b6: ca:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:EA:52:45:7F:D3:B6:88:19:51:5B:D4:79:2F:B7:6A:FB:CB:46:0F X509v3 Authority Key Identifier: keyid:B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a1:71:0b:a5:de:ea:dd:25:98:40:45:23:a6:e2:84:55:34: 5a:44:7e:7f:b4:11:9e:0a:7c:07:d5:db:ab:41:35:e7:f9:84: d5:2b:fe:35:95:ea:92:67:5c:5b:ea:d3:1a:c2:57:ca:ef:9d: 8a:0d:03:7f:3b:a6:be:40:02:06:80:22:13:95:aa:3b:45:d2: 99:5b:da:30:8c:c0:43:a2:51:78:c6:24:c0:b7:d2:e3:7a:17: 5a:be:19:c2:b7:93:b9:b5:bc:d3:13:74:96:c7:9c:44:f3:59: 8f:c7:d2:0b:6f:2a:55:98:10:66:e1:b9:d6:25:4a:aa:3c:d0: 9a:24:4b:9f:79:93:24:48:7f:35:1c:fe:b8:e4:df:a1:a2:4e: 70:9e:e6:70:32:2a:ce:24:72:ce:d9:d9:63:ef:b3:21:93:61: 92:71:af:d1:7d:38:dc:9a:b5:6d:2e:4e:0a:fb:8a:5e:9d:0d: 06:03:52:9c:ce:7d:9a:bc:66:e0:b2:7c:83:df:79:ff:d6:d6: e1:cb:67:0e:58:21:ae:d7:0c:98:dc:9d:57:92:64:ab:ce:1c: ee:bf:59:27:78:a9:90:59:2a:5e:41:d8:a6:92:fb:0a:84:18: 15:c7:7c:0a:6f:c2:ab:90:30:be:1a:27:9e:88:f3:cc:ed:c6: 60:c4:10:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgL+ZoSFMDhd8EHL1th4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1M2Q1ZGNhZmYxNTkwMzIyYmViNTdlYzNlYmFlZjYyNTA0 MTI5NTUwHhcNMjUxMjA2MDEwMTU1WhcNMjUxMjA3MDEwMTU1WjAzMTEwLwYDVQQD EyhlZGVhNTI0NTdmZDNiNjg4MTk1MTViZDQ3OTJmYjc2YWZiY2I0NjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre4SoJgAQRVAsfIkycFH+loa0Jd1 tVqxd3o7rQrGToVTMYnOdaLPpdnrcIbs8YcqxorT4X8xsorIC3SpY5pbR21bogIj Nrfxr5dt8CRZ/OoT7kmTyv+eZIGvrdmVQUtC92W49xJTtRRCMW+OwvcGgqQup+Qq qslME3k7WbEoSm5ChjPhFV3LTGJ0u2eCdGRkTfBC/gXs+ksH5JjWTrCYu46QDvxB n6ndWFHlYuNCgGrD1szA1dff9LDXY22Xi3mYqt7jwlBcbHORG7dnRFrIygg8td4O WvTL/r37dg73/KpXAdXLfrWzzwo76lHjmxx78CheK+lSBjcbFRGDOrbK9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3qUkV/07aIGVFb1Hkvt2r7y0YPMB8GA1UdIwQY MBaAFLU9Xcr/FZAyK+tX7D6672JQQSlVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFQxZHl2OFZrRElyNjFmc1BycnZZbEJCS1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xZjg4OWItNDQ0NS00NzcwLWE5NWUt ZjgwNjMyMzBlMTgzLzEvdFQxZHl2OFZrRElyNjFmc1BycnZZbEJCS1ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xZjg4OWItNDQ0NS00NzcwLWE5NWUtZjgwNjMyMzBlMTgz LzEvdFQxZHl2OFZrRElyNjFmc1BycnZZbEJCS1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaFxC6Xe 6t0lmEBFI6bihFU0WkR+f7QRngp8B9Xbq0E15/mE1Sv+NZXqkmdcW+rTGsJXyu+d ig0DfzumvkACBoAiE5WqO0XSmVvaMIzAQ6JReMYkwLfS43oXWr4ZwreTubW80xN0 lsecRPNZj8fSC28qVZgQZuG51iVKqjzQmiRLn3mTJEh/NRz+uOTfoaJOcJ7mcDIq ziRyztnZY++zIZNhknGv0X043Jq1bS5OCvuKXp0NBgNSnM59mrxm4LJ8g995/9bW 4ctnDlghrtcMmNydV5Jkq84c7r9ZJ3ipkFkqXkHYppL7CoQYFcd8Cm/Cq5Awvhon nojzzO3GYMQQNg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:32 2025 by rpki-client