This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft File: tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft (raw, json) Hash identifier: e6y4ftDIhe9CfnJhuPfCPFxoMeC5R+ZV49FsNiwVrL0= Subject key identifier: A0:33:CE:41:54:86:81:33:BA:07:35:6A:AD:DB:46:C7:96:4E:31:5D Authority key identifier: B5:0E:DF:C9:6D:2B:61:78:86:89:53:31:42:96:9E:65:56:65:12:AA Certificate issuer: /CN=b50edfc96d2b61788689533142969e65566512aa Certificate serial: 019AF208A6D68E6A41662D642ED96A9E9528 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft Manifest number: 16E2 Signing time: Sat 06 Dec 2025 05:00:44 +0000 Manifest this update: Sat 06 Dec 2025 05:00:44 +0000 Manifest next update: Sun 07 Dec 2025 05:00:44 +0000 Files and hashes: 1: tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl (hash: twjaWmQ1vRttTrh+ZC3R3iSVFx0Tu4Lq+laxCxfKvUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a6:d6:8e:6a:41:66:2d:64:2e:d9:6a:9e:95:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b50edfc96d2b61788689533142969e65566512aa Validity Not Before: Dec 6 05:00:44 2025 GMT Not After : Dec 7 05:00:44 2025 GMT Subject: CN=a033ce4154868133ba07356aaddb46c7964e315d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b3:94:7f:8a:08:c9:f1:55:9d:7d:fc:f1:10: 04:dc:ce:f0:09:34:69:7f:25:a9:d3:56:b6:52:9f: be:4a:d8:f2:a7:d6:b1:1f:38:0f:ce:15:04:da:4b: 89:79:02:0b:27:37:8f:f6:5c:77:3a:15:93:2a:dc: 97:3a:86:3d:8b:be:d1:4d:df:af:ad:0c:6e:c8:2d: 62:4e:2a:bb:2e:ef:ea:48:dd:76:c7:72:d2:65:21: de:0d:e8:68:cb:a4:58:0b:46:7b:ae:81:34:3f:25: f6:c5:4a:55:f4:02:8c:bd:aa:b6:76:cf:fb:72:f2: ce:71:9e:47:5c:42:1a:95:99:0d:2b:fa:4c:7b:77: ca:a2:a4:b4:2b:96:db:64:e8:4d:6d:e4:52:75:d2: 0e:2a:e4:e7:be:aa:ab:66:a3:e3:96:0e:9d:22:4e: d1:9f:ee:5e:dc:bb:d7:da:a9:eb:64:3c:37:ef:ea: af:f1:b0:4c:c4:b3:16:11:d8:3d:86:43:27:cb:5c: 8e:25:0c:43:38:43:a6:b8:37:24:ef:7e:99:d3:9b: 8b:2e:5d:b2:3e:57:b4:2a:9b:3f:05:c4:00:5c:bc: f2:0b:db:20:b4:45:9b:56:bb:5a:2b:90:00:86:4e: fc:64:b0:ff:a4:a4:05:19:1f:07:85:0d:7b:86:ee: 37:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:33:CE:41:54:86:81:33:BA:07:35:6A:AD:DB:46:C7:96:4E:31:5D X509v3 Authority Key Identifier: keyid:B5:0E:DF:C9:6D:2B:61:78:86:89:53:31:42:96:9E:65:56:65:12:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:fb:95:d9:78:62:44:11:ce:83:ba:8c:c5:f6:92:5c:39:f2: 1d:ef:b7:f1:93:9e:35:c9:26:c6:69:d3:06:88:1c:ac:45:fa: a7:43:5f:85:18:b5:0c:73:5b:93:7e:5c:40:91:c2:ff:9b:b6: dd:6a:22:e0:d6:48:fb:a3:45:7e:01:ac:a5:12:71:21:bb:75: 05:ca:d1:33:ce:2c:57:bf:92:a9:35:73:f4:bd:04:e2:44:4f: c7:fb:fb:4c:99:33:03:e3:0a:93:53:6a:00:b6:f5:5c:f0:93: fa:0e:46:9a:59:0b:c8:34:aa:b2:63:0c:d6:e3:02:c1:42:a2: 34:b6:bb:0d:c4:18:41:df:6e:50:ea:ff:1e:41:a8:56:b0:3c: 6b:57:ce:3b:b2:20:12:17:a6:21:84:13:00:d0:00:ee:5d:57: 03:59:1a:33:6e:7b:c1:d2:89:c4:1d:25:f3:38:77:a9:4a:82: e4:d2:a5:9f:b5:22:e5:f0:08:ea:e5:3b:d8:52:38:33:59:f8: 00:ee:06:df:01:73:f9:2e:64:60:a7:e8:90:09:a5:80:de:8e: fe:ac:23:e3:fd:83:a8:a1:3a:f0:24:2c:e2:aa:d0:08:d7:48: 20:ec:5e:5d:c3:86:b7:ca:c2:d8:e8:f2:8a:b4:c2:01:9c:b4: 2b:20:87:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKbWjmpBZi1kLtlqnpUoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MGVkZmM5NmQyYjYxNzg4Njg5NTMzMTQyOTY5ZTY1NTY2 NTEyYWEwHhcNMjUxMjA2MDUwMDQ0WhcNMjUxMjA3MDUwMDQ0WjAzMTEwLwYDVQQD EyhhMDMzY2U0MTU0ODY4MTMzYmEwNzM1NmFhZGRiNDZjNzk2NGUzMTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rOUf4oIyfFVnX388RAE3M7wCTRp fyWp01a2Up++Stjyp9axHzgPzhUE2kuJeQILJzeP9lx3OhWTKtyXOoY9i77RTd+v rQxuyC1iTiq7Lu/qSN12x3LSZSHeDehoy6RYC0Z7roE0PyX2xUpV9AKMvaq2ds/7 cvLOcZ5HXEIalZkNK/pMe3fKoqS0K5bbZOhNbeRSddIOKuTnvqqrZqPjlg6dIk7R n+5e3LvX2qnrZDw37+qv8bBMxLMWEdg9hkMny1yOJQxDOEOmuDck736Z05uLLl2y Ple0Kps/BcQAXLzyC9sgtEWbVrtaK5AAhk78ZLD/pKQFGR8HhQ17hu43nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAzzkFUhoEzugc1aq3bRseWTjFdMB8GA1UdIwQY MBaAFLUO38ltK2F4holTMUKWnmVWZRKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFE3ZnlXMHJZWGlHaVZNeFFwYWVaVlpsRXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kYzA5Y2YtNzcwYy00MTcyLWE2ZWUt YjYxMzg0ZmYwZWMyLzEvdFE3ZnlXMHJZWGlHaVZNeFFwYWVaVlpsRXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9kYzA5Y2YtNzcwYy00MTcyLWE2ZWUtYjYxMzg0ZmYwZWMy LzEvdFE3ZnlXMHJZWGlHaVZNeFFwYWVaVlpsRXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/uV2Xhi RBHOg7qMxfaSXDnyHe+38ZOeNckmxmnTBogcrEX6p0NfhRi1DHNbk35cQJHC/5u2 3Woi4NZI+6NFfgGspRJxIbt1BcrRM84sV7+SqTVz9L0E4kRPx/v7TJkzA+MKk1Nq ALb1XPCT+g5GmlkLyDSqsmMM1uMCwUKiNLa7DcQYQd9uUOr/HkGoVrA8a1fOO7Ig EhemIYQTANAA7l1XA1kaM257wdKJxB0l8zh3qUqC5NKln7Ui5fAI6uU72FI4M1n4 AO4G3wFz+S5kYKfokAmlgN6O/qwj4/2DqKE68CQs4qrQCNdIIOxeXcOGt8rC2Ojy irTCAZy0KyCHag== -----END CERTIFICATE-----Generated at Sat Dec 6 15:17:25 2025 by rpki-client