This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft File: TvYP_RC7937OmKeBY1mERCd9v6Q.mft (raw, json) Hash identifier: lbnBEU2/6Cm/23PqI3rY8sX0yrC+5ev74od62vIi05g= Subject key identifier: FB:78:88:62:2B:60:77:61:53:79:AF:3A:97:34:35:C3:E5:F3:CC:5D Authority key identifier: 4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4 Certificate issuer: /CN=4ef60ffd10bbf77ece98a78163598444277dbfa4 Certificate serial: 019AF31CE44675CBDFAB3339FAD064FE5A24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:02:28 +0000 Manifest this update: Sat 06 Dec 2025 10:02:28 +0000 Manifest next update: Sun 07 Dec 2025 10:02:28 +0000 Files and hashes: 1: TvYP_RC7937OmKeBY1mERCd9v6Q.crl (hash: lapochxdpFNJ9Sh368zydJO95Ipfw8PFZNqBqZhzTzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:e4:46:75:cb:df:ab:33:39:fa:d0:64:fe:5a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ef60ffd10bbf77ece98a78163598444277dbfa4 Validity Not Before: Dec 6 10:02:28 2025 GMT Not After : Dec 7 10:02:28 2025 GMT Subject: CN=fb7888622b6077615379af3a973435c3e5f3cc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:90:a7:4a:26:74:a4:3b:e7:90:68:d1:64:37: 6c:f6:ec:16:6e:25:60:34:46:e1:b9:2a:a9:8a:a5: 08:1d:a9:67:12:e8:b2:3f:42:70:03:a6:ea:c7:9d: df:d3:53:af:45:fb:48:ce:4b:e5:d3:d2:db:e9:8f: 59:bf:4a:49:7e:90:27:0e:87:07:2b:77:44:4b:24: 2e:c6:dd:9d:45:f3:00:58:46:34:54:ee:e0:0e:b5: b4:25:e4:8f:25:f7:44:ad:2c:3d:d8:00:ed:92:99: 3c:66:2f:89:31:11:5e:56:50:8d:4d:59:82:6c:0e: 22:97:a5:d8:34:c3:7a:81:6f:42:cb:94:cb:69:ec: 82:69:27:a2:1d:15:34:92:7e:15:ff:84:24:ed:e3: 51:67:82:50:f6:cd:5d:e2:aa:fb:92:01:95:d0:d6: 7b:5e:bb:c3:b0:51:b0:af:f2:52:27:4a:09:c2:60: 1b:5c:05:8c:22:94:0a:c2:d0:10:11:41:63:65:3c: 55:32:81:8d:8f:53:13:10:2c:15:27:c1:0d:ba:72: ad:0a:a4:68:f6:cb:c5:2c:b7:62:af:01:f3:54:3b: 9f:cf:78:78:08:7f:83:a9:17:a9:e7:ef:69:29:24: 08:da:43:0a:59:64:76:20:17:61:18:cf:74:5b:74: 9b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:78:88:62:2B:60:77:61:53:79:AF:3A:97:34:35:C3:E5:F3:CC:5D X509v3 Authority Key Identifier: keyid:4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:58:0f:ae:36:40:12:bc:b5:1e:55:27:0c:f9:00:43:58:bb: 34:ad:cf:64:bd:a8:22:8e:25:48:c1:ae:46:ba:30:3a:d0:83: 2e:71:06:bb:21:4b:fb:44:ca:7f:b5:dc:d1:b9:77:19:60:cb: 38:10:82:e4:56:d3:a6:a6:0c:78:8d:ee:f1:99:a3:ad:19:96: 41:b4:e3:cd:36:2e:3d:b4:81:a8:82:dd:c7:59:0c:cd:cc:a6: b2:8c:26:a2:5a:aa:0b:58:a6:fb:7d:19:c4:2a:c2:87:dc:18: d8:e1:5b:e5:a3:81:ea:d4:be:b9:0d:5d:9b:96:12:65:3d:fd: 83:4b:13:82:35:ca:db:79:0e:a0:be:5d:10:49:00:0d:58:19: d5:1d:0a:5f:e0:cc:1e:3c:db:24:2d:53:2e:e8:cb:bf:cb:51: a8:35:cb:fd:21:8d:51:ba:8d:c8:03:e9:b9:e9:b7:cc:ed:67: 54:e2:6d:b8:c6:30:e7:60:1f:24:69:eb:1a:5c:04:c9:c2:18: fe:21:f8:32:00:92:c1:48:63:56:1e:d4:e0:f0:5a:50:63:32: 09:9e:a2:38:86:ad:71:ce:cc:aa:1d:04:dd:93:f9:cc:56:d5: 14:94:df:5e:f5:17:ba:7a:53:7d:5b:c9:a2:96:b4:c5:a3:54: 3e:0b:3d:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHORGdcvfqzM5+tBk/lokMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZjYwZmZkMTBiYmY3N2VjZTk4YTc4MTYzNTk4NDQ0Mjc3 ZGJmYTQwHhcNMjUxMjA2MTAwMjI4WhcNMjUxMjA3MTAwMjI4WjAzMTEwLwYDVQQD EyhmYjc4ODg2MjJiNjA3NzYxNTM3OWFmM2E5NzM0MzVjM2U1ZjNjYzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5CnSiZ0pDvnkGjRZDds9uwWbiVg NEbhuSqpiqUIHalnEuiyP0JwA6bqx53f01OvRftIzkvl09Lb6Y9Zv0pJfpAnDocH K3dESyQuxt2dRfMAWEY0VO7gDrW0JeSPJfdErSw92ADtkpk8Zi+JMRFeVlCNTVmC bA4il6XYNMN6gW9Cy5TLaeyCaSeiHRU0kn4V/4Qk7eNRZ4JQ9s1d4qr7kgGV0NZ7 XrvDsFGwr/JSJ0oJwmAbXAWMIpQKwtAQEUFjZTxVMoGNj1MTECwVJ8ENunKtCqRo 9svFLLdirwHzVDufz3h4CH+DqRep5+9pKSQI2kMKWWR2IBdhGM90W3SbrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPt4iGIrYHdhU3mvOpc0NcPl88xdMB8GA1UdIwQY MBaAFE72D/0Qu/d+zpingWNZhEQnfb+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHZZUF9SQzc5MzdPbUtlQlkxbUVSQ2Q5djZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82MzllNWYtMDc5Ny00NDczLWFlZmYt NTJmNTc1M2ZjM2JlLzEvVHZZUF9SQzc5MzdPbUtlQlkxbUVSQ2Q5djZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82MzllNWYtMDc5Ny00NDczLWFlZmYtNTJmNTc1M2ZjM2Jl LzEvVHZZUF9SQzc5MzdPbUtlQlkxbUVSQ2Q5djZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1gPrjZA Ery1HlUnDPkAQ1i7NK3PZL2oIo4lSMGuRrowOtCDLnEGuyFL+0TKf7Xc0bl3GWDL OBCC5FbTpqYMeI3u8ZmjrRmWQbTjzTYuPbSBqILdx1kMzcymsowmolqqC1im+30Z xCrCh9wY2OFb5aOB6tS+uQ1dm5YSZT39g0sTgjXK23kOoL5dEEkADVgZ1R0KX+DM HjzbJC1TLujLv8tRqDXL/SGNUbqNyAPpuem3zO1nVOJtuMYw52AfJGnrGlwEycIY /iH4MgCSwUhjVh7U4PBaUGMyCZ6iOIatcc7Mqh0E3ZP5zFbVFJTfXvUXunpTfVvJ opa0xaNUPgs9+A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:21:12 2025 by rpki-client