This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft File: T2L75L_BSBjG6c5mewVq1x_vKsM.mft (raw, json) Hash identifier: sd6eGuDrcdFPiVQzGwE/ikjwZaX1ZUbnDMJx4ymfASE= Subject key identifier: 39:AF:C5:02:F1:A2:05:1E:47:DA:6D:E4:4F:CD:89:2D:3F:B3:13:D4 Authority key identifier: 4F:62:FB:E4:BF:C1:48:18:C6:E9:CE:66:7B:05:6A:D7:1F:EF:2A:C3 Certificate issuer: /CN=4f62fbe4bfc14818c6e9ce667b056ad71fef2ac3 Certificate serial: 019AF276B0FAAB145352BCC2042D4243B8CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft Manifest number: 025F Signing time: Sat 06 Dec 2025 07:00:56 +0000 Manifest this update: Sat 06 Dec 2025 07:00:56 +0000 Manifest next update: Sun 07 Dec 2025 07:00:56 +0000 Files and hashes: 1: T2L75L_BSBjG6c5mewVq1x_vKsM.crl (hash: RSxeSIHbSE4JETpnV7e2JsihKO/uSSiIkhDzvoUe6SA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b0:fa:ab:14:53:52:bc:c2:04:2d:42:43:b8:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f62fbe4bfc14818c6e9ce667b056ad71fef2ac3 Validity Not Before: Dec 6 07:00:56 2025 GMT Not After : Dec 7 07:00:56 2025 GMT Subject: CN=39afc502f1a2051e47da6de44fcd892d3fb313d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:db:c4:e9:8c:c1:14:80:ad:c2:09:e4:66:3b: a7:0d:af:7b:33:1c:73:17:e2:23:98:bf:5f:df:a6: 89:5f:eb:b7:7b:ec:0f:9d:b8:11:f3:ce:8b:c3:e4: 45:40:f7:cd:1e:0a:40:bc:df:48:4a:bb:b5:97:19: 7f:8e:c2:39:61:36:01:ed:c9:1e:ae:2f:6f:2e:02: 00:08:3a:14:d6:56:0a:92:5b:7a:c7:24:6e:27:fc: 84:53:1c:6f:f2:82:4e:fd:fd:3c:6d:f7:be:d0:cb: 09:8b:cf:4a:1c:2a:fa:f1:8b:1b:b7:09:7d:3d:ac: 35:0b:58:ac:d1:bc:56:4b:d0:50:d6:99:50:3a:f3: 8c:67:c5:12:3f:c9:05:6a:21:da:7c:e7:b9:0b:aa: 66:0f:71:b2:95:c5:0d:cb:cf:fb:4d:86:72:97:bf: 89:b1:a1:ff:2f:a8:72:68:c5:d0:98:b4:5a:ef:6f: 82:f4:7e:3d:11:fe:30:b3:47:fc:f5:96:22:82:40: 70:ac:47:4a:da:4f:fd:c7:d5:50:e8:48:22:02:86: 29:b6:73:e4:ff:0b:a1:ab:18:49:71:f9:5c:70:a5: dd:a4:a0:db:1c:92:05:fc:83:ab:09:47:22:e5:eb: 2c:d5:c5:dd:d5:be:62:9c:e5:55:65:04:1b:00:f9: 1e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AF:C5:02:F1:A2:05:1E:47:DA:6D:E4:4F:CD:89:2D:3F:B3:13:D4 X509v3 Authority Key Identifier: keyid:4F:62:FB:E4:BF:C1:48:18:C6:E9:CE:66:7B:05:6A:D7:1F:EF:2A:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:2a:c6:df:48:da:00:6e:ef:ae:96:bd:ad:ba:64:5b:54:61: bf:95:2d:54:19:e2:fe:0e:d5:52:5d:95:37:35:71:fa:44:0a: 25:4e:be:6d:2b:fb:6b:54:54:cc:6d:71:6e:59:b8:35:30:2a: 6c:5a:2f:86:1e:75:b2:e5:a8:1c:15:c3:75:ad:38:2e:24:b1: 17:72:27:f0:1b:3e:72:28:56:cd:e8:47:97:12:af:14:21:cb: e7:bf:fe:42:8a:f8:9c:f5:e6:de:05:50:01:4f:a1:e3:16:8f: ac:c5:dc:67:fb:5e:2a:44:44:52:8c:ef:1a:6c:b2:60:e0:0d: 31:17:b1:de:dc:35:72:ca:2b:c6:14:22:6f:06:8d:ce:eb:06: a3:16:6d:92:0f:bd:de:e4:d5:6f:08:96:10:f0:e9:18:68:a0: d4:a3:5f:7d:c6:2c:75:df:94:8a:d6:b6:e8:45:05:bc:85:54: 39:1b:21:65:91:44:5a:a0:1c:f8:f7:d4:fe:4c:43:5a:0a:c8: 51:06:48:0c:c5:58:b0:1b:bd:dd:3d:87:68:4c:f6:ba:99:e4: 59:20:bb:d9:8f:91:a9:88:ef:fe:7d:57:72:e4:3d:63:c3:f0: c1:d7:7b:ff:8e:a5:53:f2:3c:71:65:e7:6a:5b:5d:45:de:be: b6:ed:bb:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrD6qxRTUrzCBC1CQ7jMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNjJmYmU0YmZjMTQ4MThjNmU5Y2U2NjdiMDU2YWQ3MWZl ZjJhYzMwHhcNMjUxMjA2MDcwMDU2WhcNMjUxMjA3MDcwMDU2WjAzMTEwLwYDVQQD EygzOWFmYzUwMmYxYTIwNTFlNDdkYTZkZTQ0ZmNkODkyZDNmYjMxM2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtvE6YzBFICtwgnkZjunDa97Mxxz F+IjmL9f36aJX+u3e+wPnbgR886Lw+RFQPfNHgpAvN9ISru1lxl/jsI5YTYB7cke ri9vLgIACDoU1lYKklt6xyRuJ/yEUxxv8oJO/f08bfe+0MsJi89KHCr68Ysbtwl9 Paw1C1is0bxWS9BQ1plQOvOMZ8USP8kFaiHafOe5C6pmD3GylcUNy8/7TYZyl7+J saH/L6hyaMXQmLRa72+C9H49Ef4ws0f89ZYigkBwrEdK2k/9x9VQ6EgiAoYptnPk /wuhqxhJcflccKXdpKDbHJIF/IOrCUci5ess1cXd1b5inOVVZQQbAPkelQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmvxQLxogUeR9pt5E/NiS0/sxPUMB8GA1UdIwQY MBaAFE9i++S/wUgYxunOZnsFatcf7yrDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJMNzVMX0JTQmpHNmM1bWV3VnExeF92S3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy80ZWE5YzMtMjgwMC00NjY3LWE0NGMt YWZhZjdmZGQ4ZGZkLzEvVDJMNzVMX0JTQmpHNmM1bWV3VnExeF92S3NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy80ZWE5YzMtMjgwMC00NjY3LWE0NGMtYWZhZjdmZGQ4ZGZk LzEvVDJMNzVMX0JTQmpHNmM1bWV3VnExeF92S3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqyrG30ja AG7vrpa9rbpkW1Rhv5UtVBni/g7VUl2VNzVx+kQKJU6+bSv7a1RUzG1xblm4NTAq bFovhh51suWoHBXDda04LiSxF3In8Bs+cihWzehHlxKvFCHL57/+Qor4nPXm3gVQ AU+h4xaPrMXcZ/teKkREUozvGmyyYOANMRex3tw1csorxhQibwaNzusGoxZtkg+9 3uTVbwiWEPDpGGig1KNffcYsdd+Uita26EUFvIVUORshZZFEWqAc+PfU/kxDWgrI UQZIDMVYsBu93T2HaEz2upnkWSC72Y+RqYjv/n1XcuQ9Y8Pwwdd7/46lU/I8cWXn altdRd6+tu27HQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:50 2025 by rpki-client