This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft File: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft (raw, json) Hash identifier: mKuExO4FNF2Z8gAcOE2CcjJxT+KjOoqXItvwV1MKxKY= Subject key identifier: DD:AC:D0:52:2F:1A:9E:A7:39:73:F4:A9:8E:38:D3:DC:08:DF:81:93 Authority key identifier: 4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E Certificate issuer: /CN=4c8dea04de6e37b190355e03cd2600c47212e18e Certificate serial: 019AF389C2D13B70F058206482FF9C370B37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft Manifest number: 0853 Signing time: Sat 06 Dec 2025 12:01:22 +0000 Manifest this update: Sat 06 Dec 2025 12:01:22 +0000 Manifest next update: Sun 07 Dec 2025 12:01:22 +0000 Files and hashes: 1: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl (hash: dWGd/D6iPA7FWNnI2J7zHarha7Mc8V7DW1n9AZ2SxKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:c2:d1:3b:70:f0:58:20:64:82:ff:9c:37:0b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c8dea04de6e37b190355e03cd2600c47212e18e Validity Not Before: Dec 6 12:01:22 2025 GMT Not After : Dec 7 12:01:22 2025 GMT Subject: CN=ddacd0522f1a9ea73973f4a98e38d3dc08df8193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e9:aa:89:7e:fa:c2:31:14:7b:8c:09:36:60: 4e:29:94:07:e4:98:c3:40:b0:29:eb:79:8b:c2:f4: 36:7c:68:3a:22:0e:7e:cb:0b:b6:ee:1a:3c:85:49: 0e:dd:af:60:54:75:28:70:43:fd:da:d1:60:40:b6: 84:c6:e3:c2:22:d2:15:ed:14:3a:25:08:ed:b3:b2: 9e:21:79:0d:24:7a:ac:e8:1c:7a:fd:e5:e8:79:fb: e2:38:4f:f0:e2:5d:92:99:a8:f6:ea:46:ca:08:86: 5d:4b:ab:02:00:d6:1c:3f:28:00:53:f4:8b:5f:1e: f1:e6:35:68:4c:ab:04:0b:86:ed:70:88:62:15:a6: 07:df:c9:2c:f0:3d:eb:ca:ec:28:38:55:4f:88:2c: 07:ec:25:42:e6:10:f2:14:76:da:9c:dd:08:1d:a5: ab:d1:88:d9:2e:f8:de:3f:72:b7:3f:bf:fd:75:6f: 16:da:d8:af:32:fb:a0:60:59:7c:63:3b:64:b2:6a: 70:72:47:e8:d8:40:75:2a:6c:4a:d7:db:f6:61:0e: 66:34:62:3a:5c:89:84:cf:01:82:be:a6:c5:55:d4: 7e:71:0c:93:b4:25:b5:cf:7f:5e:ce:ee:39:32:38: ac:21:6b:e8:38:cb:b3:fd:47:d8:58:a5:77:ff:ac: 54:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AC:D0:52:2F:1A:9E:A7:39:73:F4:A9:8E:38:D3:DC:08:DF:81:93 X509v3 Authority Key Identifier: keyid:4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:60:66:6a:b9:6f:77:de:a3:76:ec:9d:09:3b:32:d2:44:13: 82:55:39:6a:88:af:20:3c:e2:00:35:6b:d7:2c:bb:53:1f:9e: 74:94:be:d2:f0:a5:cf:f5:5d:7f:f7:2f:51:46:c5:33:05:bf: a5:79:7d:51:1f:aa:45:97:71:3f:27:a4:eb:db:1e:35:4c:db: f6:42:31:23:11:ff:66:e5:92:48:92:f3:23:4a:a8:3c:8c:60: 79:38:b4:a1:ce:88:03:77:2c:a8:89:d1:f0:d2:88:00:6c:2f: f4:60:59:70:86:67:12:8a:35:4c:3f:90:3c:e9:e5:b8:1c:e3: 21:e1:cb:81:67:db:f8:94:2a:a7:bd:9b:77:22:73:88:70:84: fd:d6:5d:45:47:85:43:21:5a:1a:6a:f3:85:f8:c8:d8:48:50: ff:08:c3:10:45:3a:ce:57:47:35:6b:05:ee:b2:0e:c4:1c:89: a2:f3:da:7e:ee:5b:35:b2:84:8c:6e:74:bd:01:f9:c1:4f:00: 47:75:2f:c9:1d:6e:7c:ec:17:08:80:1a:44:ae:a6:48:78:64: 30:7c:3a:75:31:2c:fd:f8:f0:2c:7b:a8:0a:c4:3c:6c:43:34: 4a:ae:74:e7:8f:e6:a1:93:cd:ef:0d:42:1d:d8:f0:4e:a8:10: 2c:72:28:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzicLRO3DwWCBkgv+cNws3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjOGRlYTA0ZGU2ZTM3YjE5MDM1NWUwM2NkMjYwMGM0NzIx MmUxOGUwHhcNMjUxMjA2MTIwMTIyWhcNMjUxMjA3MTIwMTIyWjAzMTEwLwYDVQQD EyhkZGFjZDA1MjJmMWE5ZWE3Mzk3M2Y0YTk4ZTM4ZDNkYzA4ZGY4MTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+mqiX76wjEUe4wJNmBOKZQH5JjD QLAp63mLwvQ2fGg6Ig5+ywu27ho8hUkO3a9gVHUocEP92tFgQLaExuPCItIV7RQ6 JQjts7KeIXkNJHqs6Bx6/eXoefviOE/w4l2Smaj26kbKCIZdS6sCANYcPygAU/SL Xx7x5jVoTKsEC4btcIhiFaYH38ks8D3ryuwoOFVPiCwH7CVC5hDyFHbanN0IHaWr 0YjZLvjeP3K3P7/9dW8W2tivMvugYFl8Yztksmpwckfo2EB1KmxK19v2YQ5mNGI6 XImEzwGCvqbFVdR+cQyTtCW1z39ezu45MjisIWvoOMuz/UfYWKV3/6xUwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2s0FIvGp6nOXP0qY4409wI34GTMB8GA1UdIwQY MBaAFEyN6gTebjexkDVeA80mAMRyEuGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEkzcUJONXVON0dRTlY0RHpTWUF4SElTNFk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lODU5MDMtNzU3NC00YWIzLWI0NDEt NTI2N2Q3MTZlNGNlLzEvVEkzcUJONXVON0dRTlY0RHpTWUF4SElTNFk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9lODU5MDMtNzU3NC00YWIzLWI0NDEtNTI2N2Q3MTZlNGNl LzEvVEkzcUJONXVON0dRTlY0RHpTWUF4SElTNFk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmBmarlv d96jduydCTsy0kQTglU5aoivIDziADVr1yy7Ux+edJS+0vClz/Vdf/cvUUbFMwW/ pXl9UR+qRZdxPyek69seNUzb9kIxIxH/ZuWSSJLzI0qoPIxgeTi0oc6IA3csqInR 8NKIAGwv9GBZcIZnEoo1TD+QPOnluBzjIeHLgWfb+JQqp72bdyJziHCE/dZdRUeF QyFaGmrzhfjI2EhQ/wjDEEU6zldHNWsF7rIOxByJovPafu5bNbKEjG50vQH5wU8A R3UvyR1ufOwXCIAaRK6mSHhkMHw6dTEs/fjwLHuoCsQ8bEM0Sq5054/moZPN7w1C HdjwTqgQLHIo/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 22:56:17 2025 by rpki-client