This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft File: tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft (raw, json) Hash identifier: wuwvJAlrWnPpJ7DpXgCErJPQmBqs0RgcBYkWk9XjgnE= Subject key identifier: 67:C3:FF:3C:65:89:61:72:23:32:26:B1:F5:C7:DE:B4:1F:D0:8B:8E Authority key identifier: B5:94:EB:B6:74:8F:DC:12:12:7C:3F:92:7E:7F:B9:B1:AF:89:26:2C Certificate issuer: /CN=b594ebb6748fdc12127c3f927e7fb9b1af89262c Certificate serial: 019AF31B76A593AF90FE8C71490F426A9BCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZTrtnSP3BISfD-Sfn-5sa-JJiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:00:54 +0000 Manifest this update: Sat 06 Dec 2025 10:00:54 +0000 Manifest next update: Sun 07 Dec 2025 10:00:54 +0000 Files and hashes: 1: tZTrtnSP3BISfD-Sfn-5sa-JJiw.crl (hash: pbsIp2HWlMoXXyvNsaFsMRyeW1H5e1zqm/F+kv64XWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft rsync://rpki.ripe.net/repository/DEFAULT/tZTrtnSP3BISfD-Sfn-5sa-JJiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:76:a5:93:af:90:fe:8c:71:49:0f:42:6a:9b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b594ebb6748fdc12127c3f927e7fb9b1af89262c Validity Not Before: Dec 6 10:00:54 2025 GMT Not After : Dec 7 10:00:54 2025 GMT Subject: CN=67c3ff3c65896172233226b1f5c7deb41fd08b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:35:99:eb:19:86:80:d6:47:41:05:55:1c:43: ec:24:65:69:6c:7c:98:2e:12:84:04:dc:b0:e8:aa: 12:ed:17:17:73:5c:5b:91:89:81:17:5d:ee:c1:58: d4:39:0d:ca:17:7a:65:3d:1b:67:54:ae:2f:42:a0: fc:6e:c4:e9:66:df:be:01:a7:f3:bb:78:7e:3f:5f: d7:9b:b7:de:1a:d3:fc:0c:fd:7c:da:08:a2:4c:d8: 95:a2:cb:cd:d5:33:7e:7b:cc:d4:58:d4:25:6a:6d: 3f:b5:ab:80:c3:58:0f:a8:f1:fe:2d:7f:db:46:d0: e4:ab:51:2e:2b:b8:f9:10:3f:04:a0:4f:56:aa:ac: d0:6a:66:84:16:0a:3a:ba:99:3e:ef:45:ec:51:82: e8:a5:5b:84:ff:f9:ab:d1:47:b8:47:45:1c:c0:77: 4c:a6:20:76:38:d3:49:5b:18:eb:3d:fe:a1:21:a8: a7:9a:f5:55:eb:2c:d5:7b:3d:7e:38:a5:15:54:95: ea:8b:90:58:0e:9d:39:f2:6e:fb:d5:00:83:fb:60: bb:56:05:25:08:e5:8f:7a:f7:36:1d:d0:eb:21:e4: 6c:33:44:3d:b9:14:a8:ba:b3:a6:df:5c:f9:a7:11: e0:c9:06:aa:d6:fe:03:2f:e1:9e:0f:76:8e:92:ab: a1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C3:FF:3C:65:89:61:72:23:32:26:B1:F5:C7:DE:B4:1F:D0:8B:8E X509v3 Authority Key Identifier: keyid:B5:94:EB:B6:74:8F:DC:12:12:7C:3F:92:7E:7F:B9:B1:AF:89:26:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZTrtnSP3BISfD-Sfn-5sa-JJiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a3:cf:ea:d6:ae:9e:21:73:48:80:f0:62:fb:8f:ba:57:3b: 59:ac:7b:da:f7:1e:80:d2:72:a0:06:78:92:5e:60:29:28:e2: 06:2c:ce:02:ad:f1:94:3d:27:2f:50:53:2a:94:15:e0:39:ad: 5b:3a:23:5c:4a:25:2d:d4:f6:19:fd:5d:2c:f1:01:41:90:fd: 21:e7:d9:f9:8a:5d:2e:25:9b:17:a4:21:5b:50:7a:d1:be:87: 8c:02:4b:09:cd:bb:71:f1:5a:1f:e9:a0:9c:80:a7:bf:c4:cd: 14:6f:8c:0c:f8:6c:03:f2:6e:2c:b6:42:48:a0:b1:62:54:f0: 78:54:99:bc:40:43:75:0a:4f:03:96:a5:16:26:12:af:15:ab: 40:80:14:be:37:84:d2:5a:2f:c2:f7:f2:77:8b:c2:d3:ae:25: c2:ac:c0:ac:3e:12:88:6c:1b:c6:f4:22:a9:43:48:ae:30:0d: e2:33:f6:68:b8:66:aa:67:91:d1:01:03:e9:44:c5:d1:4a:0f: 46:15:2c:eb:ec:9f:01:a0:66:85:a5:80:be:02:69:fc:85:fd: dc:e6:76:42:b5:82:cb:65:89:44:7a:2c:3c:fc:ec:ba:04:46: ed:49:11:8e:98:96:0a:df:a7:fe:37:1c:71:60:7e:14:7b:b8: f2:24:48:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3alk6+Q/oxxSQ9CapvOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1OTRlYmI2NzQ4ZmRjMTIxMjdjM2Y5MjdlN2ZiOWIxYWY4 OTI2MmMwHhcNMjUxMjA2MTAwMDU0WhcNMjUxMjA3MTAwMDU0WjAzMTEwLwYDVQQD Eyg2N2MzZmYzYzY1ODk2MTcyMjMzMjI2YjFmNWM3ZGViNDFmZDA4YjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jWZ6xmGgNZHQQVVHEPsJGVpbHyY LhKEBNyw6KoS7RcXc1xbkYmBF13uwVjUOQ3KF3plPRtnVK4vQqD8bsTpZt++Aafz u3h+P1/Xm7feGtP8DP182giiTNiVosvN1TN+e8zUWNQlam0/tauAw1gPqPH+LX/b RtDkq1EuK7j5ED8EoE9WqqzQamaEFgo6upk+70XsUYLopVuE//mr0Ue4R0UcwHdM piB2ONNJWxjrPf6hIainmvVV6yzVez1+OKUVVJXqi5BYDp058m771QCD+2C7VgUl COWPevc2HdDrIeRsM0Q9uRSourOm31z5pxHgyQaq1v4DL+GeD3aOkquhUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfD/zxliWFyIzImsfXH3rQf0IuOMB8GA1UdIwQY MBaAFLWU67Z0j9wSEnw/kn5/ubGviSYsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFpUcnRuU1AzQklTZkQtU2ZuLTVzYS1KSml3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84YWEwODEtMzk2OS00MzJjLTk4ZDAt ODIxOTM2YjMxNTE4LzEvdFpUcnRuU1AzQklTZkQtU2ZuLTVzYS1KSml3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC84YWEwODEtMzk2OS00MzJjLTk4ZDAtODIxOTM2YjMxNTE4 LzEvdFpUcnRuU1AzQklTZkQtU2ZuLTVzYS1KSml3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEaPP6tau niFzSIDwYvuPulc7Wax72vcegNJyoAZ4kl5gKSjiBizOAq3xlD0nL1BTKpQV4Dmt WzojXEolLdT2Gf1dLPEBQZD9IefZ+YpdLiWbF6QhW1B60b6HjAJLCc27cfFaH+mg nICnv8TNFG+MDPhsA/JuLLZCSKCxYlTweFSZvEBDdQpPA5alFiYSrxWrQIAUvjeE 0lovwvfyd4vC064lwqzArD4SiGwbxvQiqUNIrjAN4jP2aLhmqmeR0QED6UTF0UoP RhUs6+yfAaBmhaWAvgJp/IX93OZ2QrWCy2WJRHosPPzsugRG7UkRjpiWCt+n/jcc cWB+FHu48iRIYg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:15 2025 by rpki-client