This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft File: TnxZtb-73klP0T13jm8i3adJYsE.mft (raw, json) Hash identifier: GUSTp+qxlhTLSsv0V/wpoFfkexOdPNCD5F/1Irrkwns= Subject key identifier: CF:87:75:AB:AB:F2:B8:BF:22:6F:13:84:97:E9:86:D2:35:16:9F:3C Authority key identifier: 4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1 Certificate issuer: /CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1 Certificate serial: 019AFCC383D2CB4E722816FB249E643AF7FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft Manifest number: 0AA9 Signing time: Mon 08 Dec 2025 07:01:02 +0000 Manifest this update: Mon 08 Dec 2025 07:01:02 +0000 Manifest next update: Tue 09 Dec 2025 07:01:02 +0000 Files and hashes: 1: TnxZtb-73klP0T13jm8i3adJYsE.crl (hash: NzXu/To9SHBWN76djGa3BHI+DomJalD9IfJnUltmba4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c3:83:d2:cb:4e:72:28:16:fb:24:9e:64:3a:f7:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1 Validity Not Before: Dec 8 07:01:02 2025 GMT Not After : Dec 9 07:01:02 2025 GMT Subject: CN=cf8775ababf2b8bf226f138497e986d235169f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:60:21:d5:15:c7:6b:3f:82:54:19:01:8e:de: a9:86:f4:fe:f1:db:e8:6d:4c:71:5e:51:94:0c:ef: f0:2d:fb:49:6a:c5:a8:69:3d:be:c1:40:00:2d:c2: 9d:de:21:51:4d:14:bd:27:1d:4c:3f:12:54:d2:da: b1:91:41:0e:aa:c3:6f:f0:79:c6:7c:89:2a:77:b9: 20:a5:e4:d7:f3:94:42:bf:6b:09:c5:30:44:af:eb: 74:d9:68:bb:b6:0b:ef:f0:62:4f:3e:4c:14:c6:f0: dc:58:e6:ca:9a:be:84:f6:f7:6a:f1:69:f2:b9:55: 45:85:0f:c9:3f:43:80:07:41:02:d2:73:e7:3d:d1: b9:14:3a:8e:a6:06:96:62:26:8c:c9:cd:f0:27:bd: 93:b0:ec:d6:d7:40:e8:98:4f:22:8b:d7:b9:cc:85: c3:d0:00:d9:75:c9:29:e0:2b:e4:9d:56:75:8f:1a: 6f:1e:1e:63:ff:81:14:99:c5:51:39:8e:c6:c5:8a: 5d:9f:0e:5f:3f:ca:10:5c:45:3c:55:f5:30:50:bf: 79:6a:77:7e:81:bd:5f:0f:71:ce:49:9b:ff:32:14: 66:f8:46:94:95:eb:17:3b:c2:23:42:7f:d3:33:5f: 3a:12:b9:ad:61:1e:62:8f:1b:ee:a2:3a:c5:b1:7d: 6f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:87:75:AB:AB:F2:B8:BF:22:6F:13:84:97:E9:86:D2:35:16:9F:3C X509v3 Authority Key Identifier: keyid:4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:fa:ef:98:f2:94:73:c0:a9:aa:2b:a3:8b:22:b6:8f:03:65: 3d:9f:2f:a5:10:4d:74:07:03:ad:7e:bb:34:11:ad:9b:5c:e2: 33:ca:a2:5d:79:47:29:a9:0c:bf:12:fe:fd:fc:28:b5:95:45: 91:1b:ec:2d:e8:31:ed:28:8d:29:02:ea:29:3b:94:5a:7c:5c: 58:2f:e0:c7:f4:c8:0a:cb:44:88:85:6c:b7:51:26:d1:0a:03: 3a:8c:fa:85:fc:3d:5a:ec:e6:4f:42:aa:52:ae:ac:da:15:34: d0:6b:7b:b0:d5:8b:0f:53:ee:99:50:78:2a:7c:aa:79:92:fa: 5f:62:d4:92:70:4f:05:8c:97:ed:33:3f:4d:b5:ab:22:c5:f3: 2c:93:7f:cf:18:ce:28:f5:4a:26:ad:3f:b2:01:f3:0c:19:4c: c9:3d:e8:d3:b3:44:45:72:19:b7:e7:36:84:e9:05:f0:8a:c8: 76:99:65:c0:9e:b7:d6:49:88:f5:a2:ec:b4:1e:01:2d:2c:1d: 67:d1:b0:4e:22:c0:c0:37:75:80:b4:42:fa:4b:3c:46:2b:23: 3e:fe:23:6e:ca:00:c8:52:7d:44:4c:4f:0a:51:2d:2c:2e:96: fd:ce:bd:6a:b5:e5:32:b2:f9:77:3c:0f:33:37:e1:74:fd:e0: d8:b7:7c:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8w4PSy05yKBb7JJ5kOvf/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlN2M1OWI1YmZiYmRlNDk0ZmQxM2Q3NzhlNmYyMmRkYTc0 OTYyYzEwHhcNMjUxMjA4MDcwMTAyWhcNMjUxMjA5MDcwMTAyWjAzMTEwLwYDVQQD EyhjZjg3NzVhYmFiZjJiOGJmMjI2ZjEzODQ5N2U5ODZkMjM1MTY5ZjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GAh1RXHaz+CVBkBjt6phvT+8dvo bUxxXlGUDO/wLftJasWoaT2+wUAALcKd3iFRTRS9Jx1MPxJU0tqxkUEOqsNv8HnG fIkqd7kgpeTX85RCv2sJxTBEr+t02Wi7tgvv8GJPPkwUxvDcWObKmr6E9vdq8Wny uVVFhQ/JP0OAB0EC0nPnPdG5FDqOpgaWYiaMyc3wJ72TsOzW10DomE8ii9e5zIXD 0ADZdckp4CvknVZ1jxpvHh5j/4EUmcVROY7GxYpdnw5fP8oQXEU8VfUwUL95and+ gb1fD3HOSZv/MhRm+EaUlesXO8IjQn/TM186ErmtYR5ijxvuojrFsX1vYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+Hdaur8ri/Im8ThJfphtI1Fp88MB8GA1UdIwQY MBaAFE58WbW/u95JT9E9d45vIt2nSWLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG54WnRiLTcza2xQMFQxM2ptOGkzYWRKWXNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMzA2MDItNWZhMi00YWI4LTk5ZTct YzA3ZjZjNWEwYWE3LzEvVG54WnRiLTcza2xQMFQxM2ptOGkzYWRKWXNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mMzA2MDItNWZhMi00YWI4LTk5ZTctYzA3ZjZjNWEwYWE3 LzEvVG54WnRiLTcza2xQMFQxM2ptOGkzYWRKWXNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfrvmPKU c8CpqiujiyK2jwNlPZ8vpRBNdAcDrX67NBGtm1ziM8qiXXlHKakMvxL+/fwotZVF kRvsLegx7SiNKQLqKTuUWnxcWC/gx/TICstEiIVst1Em0QoDOoz6hfw9WuzmT0Kq Uq6s2hU00Gt7sNWLD1PumVB4KnyqeZL6X2LUknBPBYyX7TM/TbWrIsXzLJN/zxjO KPVKJq0/sgHzDBlMyT3o07NERXIZt+c2hOkF8IrIdpllwJ631kmI9aLstB4BLSwd Z9GwTiLAwDd1gLRC+ks8RisjPv4jbsoAyFJ9RExPClEtLC6W/c69arXlMrL5dzwP MzfhdP3g2Ld8eg== -----END CERTIFICATE-----Generated at Mon Dec 8 09:41:45 2025 by rpki-client