This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft File: TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft (raw, json) Hash identifier: ZQqonYdlr28XR5djq7DlwKI4jPU+fFbCPix4VhGSWOs= Subject key identifier: F1:D5:4D:64:EF:EC:C2:16:00:8D:92:03:A8:88:64:4B:7A:AE:C1:A9 Authority key identifier: 4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44 Certificate issuer: /CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244 Certificate serial: 019AF1645287802D59F1C918FB50E5A131F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 02:01:14 +0000 Manifest this update: Sat 06 Dec 2025 02:01:14 +0000 Manifest next update: Sun 07 Dec 2025 02:01:14 +0000 Files and hashes: 1: TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl (hash: EfhVoP3RvqWssYx7pXtIMM1wRm1qC9r19CJ1JVAv9S8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:52:87:80:2d:59:f1:c9:18:fb:50:e5:a1:31:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244 Validity Not Before: Dec 6 02:01:14 2025 GMT Not After : Dec 7 02:01:14 2025 GMT Subject: CN=f1d54d64efecc216008d9203a888644b7aaec1a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cc:e1:b1:57:ac:57:a8:9f:ff:24:03:19:eb: 96:0d:cb:00:13:87:fd:a4:c2:7a:22:28:a2:56:4b: 99:00:8b:1b:d6:f4:cb:a7:a5:2b:b1:a1:c6:5b:af: 0e:01:f4:e0:05:6e:5d:f2:f6:f5:32:50:42:6f:12: ce:f9:fd:9c:d9:e2:5c:db:d9:02:61:27:8f:04:39: 39:70:73:52:59:78:b5:7f:a0:96:98:b1:c3:bf:9d: 17:cc:84:b3:63:5f:9a:a1:31:8f:de:80:ef:f2:cb: 5c:1d:bb:2a:ff:a2:13:8f:07:7f:af:b0:4b:86:cf: a2:ba:0f:1f:67:74:6e:5e:55:d1:22:c3:b2:a4:84: e6:e9:9b:01:1e:54:49:66:0f:cb:6b:aa:02:02:48: 56:d2:82:19:ad:aa:01:9f:03:30:9e:a1:65:13:92: 35:e7:e1:0a:c0:e5:a7:a7:14:9b:c9:b6:59:83:63: ee:d6:42:2d:92:31:d2:db:3c:76:62:38:b2:51:ec: b1:d9:bc:ef:fb:75:da:d2:6f:8b:da:e6:16:e0:a2: e0:a0:90:49:66:c7:ac:1c:8c:29:68:8b:4e:4d:37: a6:57:b1:32:bc:61:08:d0:d4:b8:b6:02:3c:08:38: 77:b9:77:4d:55:8c:38:72:da:aa:b9:c1:77:78:86: b0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D5:4D:64:EF:EC:C2:16:00:8D:92:03:A8:88:64:4B:7A:AE:C1:A9 X509v3 Authority Key Identifier: keyid:4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:95:5e:17:78:53:b1:e2:2a:27:75:98:1d:f6:9d:85:79:75: c4:59:6a:96:93:c5:1a:1d:ee:d1:71:a1:fd:b7:7e:7c:de:a0: 2e:34:8f:fc:e1:45:c7:08:61:a6:a4:d9:55:c2:a1:50:a3:fc: 8f:7e:a7:e6:93:a3:1a:ca:0b:5a:09:70:1d:9c:3c:34:38:fd: 6b:da:09:5f:7b:f4:e3:af:cc:da:b3:9f:fa:27:64:0c:b4:86: e3:fe:53:40:5a:2b:c5:ba:b3:e7:46:7a:8a:d4:51:d9:48:7f: 88:61:89:df:45:5a:64:20:cf:b5:b7:b3:66:9d:55:8f:c5:6d: 9b:8e:cb:78:91:60:a7:83:42:03:ae:a9:d6:7b:26:7e:ac:21: 37:57:90:3e:16:49:9f:ca:fb:f9:bb:00:e0:ab:11:f9:b3:a5: 19:a4:61:1a:a0:89:f8:d3:fe:86:be:5d:9e:01:1c:d3:72:80: 7a:f8:fd:36:ff:7d:42:b6:3c:02:d6:4f:d2:49:db:72:8b:8c: 06:84:ad:82:6b:82:09:c5:00:6b:c9:c3:22:f6:67:4c:fa:4c: 8f:39:02:cc:53:ef:3b:54:90:d3:67:84:2d:da:6f:ab:2b:39: 07:77:bb:2b:83:cf:08:f7:0d:10:33:f4:59:d9:d8:22:70:e8: 38:5e:48:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFKHgC1Z8ckY+1DloTH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNGNmY2U2MGM5YjBmMmQ0N2IzNjI4NjRkOGZlYmIyMjVi YjUyNDQwHhcNMjUxMjA2MDIwMTE0WhcNMjUxMjA3MDIwMTE0WjAzMTEwLwYDVQQD EyhmMWQ1NGQ2NGVmZWNjMjE2MDA4ZDkyMDNhODg4NjQ0YjdhYWVjMWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArczhsVesV6if/yQDGeuWDcsAE4f9 pMJ6IiiiVkuZAIsb1vTLp6UrsaHGW68OAfTgBW5d8vb1MlBCbxLO+f2c2eJc29kC YSePBDk5cHNSWXi1f6CWmLHDv50XzISzY1+aoTGP3oDv8stcHbsq/6ITjwd/r7BL hs+iug8fZ3RuXlXRIsOypITm6ZsBHlRJZg/La6oCAkhW0oIZraoBnwMwnqFlE5I1 5+EKwOWnpxSbybZZg2Pu1kItkjHS2zx2YjiyUeyx2bzv+3Xa0m+L2uYW4KLgoJBJ ZsesHIwpaItOTTemV7EyvGEI0NS4tgI8CDh3uXdNVYw4ctqqucF3eIawNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHVTWTv7MIWAI2SA6iIZEt6rsGpMB8GA1UdIwQY MBaAFExM/OYMmw8tR7Nihk2P67Ilu1JEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEV6ODVneWJEeTFIczJLR1RZX3JzaVc3VWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iZjhiMGUtYmVkYS00YTU2LWJhZjAt ODJhZDExNjI2ZWVkLzEvVEV6ODVneWJEeTFIczJLR1RZX3JzaVc3VWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iZjhiMGUtYmVkYS00YTU2LWJhZjAtODJhZDExNjI2ZWVk LzEvVEV6ODVneWJEeTFIczJLR1RZX3JzaVc3VWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5VeF3hT seIqJ3WYHfadhXl1xFlqlpPFGh3u0XGh/bd+fN6gLjSP/OFFxwhhpqTZVcKhUKP8 j36n5pOjGsoLWglwHZw8NDj9a9oJX3v046/M2rOf+idkDLSG4/5TQForxbqz50Z6 itRR2Uh/iGGJ30VaZCDPtbezZp1Vj8Vtm47LeJFgp4NCA66p1nsmfqwhN1eQPhZJ n8r7+bsA4KsR+bOlGaRhGqCJ+NP+hr5dngEc03KAevj9Nv99QrY8AtZP0knbcouM BoStgmuCCcUAa8nDIvZnTPpMjzkCzFPvO1SQ02eELdpvqys5B3e7K4PPCPcNEDP0 WdnYInDoOF5IqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:57 2025 by rpki-client