This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft File: TVSL_7MhSZGpynyfD1tIVFiLl14.mft (raw, json) Hash identifier: amN5arvta7lonyVU8ATLCIqa45axmESm9voVaw8dbd4= Subject key identifier: 87:E8:2F:56:D9:A0:0E:69:99:CE:87:A9:95:4B:DC:25:94:FB:CF:09 Authority key identifier: 4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E Certificate issuer: /CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e Certificate serial: 019B766DEA1EBAF7C463BF48F860E71603F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft Manifest number: 0888 Signing time: Wed 31 Dec 2025 22:01:13 +0000 Manifest this update: Wed 31 Dec 2025 22:01:13 +0000 Manifest next update: Thu 01 Jan 2026 22:01:13 +0000 Files and hashes: 1: TVSL_7MhSZGpynyfD1tIVFiLl14.crl (hash: +ko40m5Xm7JGoiVnRHQ9oVw3TQCzWhgkHo6XPi9zD/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 22:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:6d:ea:1e:ba:f7:c4:63:bf:48:f8:60:e7:16:03:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e Validity Not Before: Dec 31 22:01:13 2025 GMT Not After : Jan 1 22:01:13 2026 GMT Subject: CN=87e82f56d9a00e6999ce87a9954bdc2594fbcf09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9d:7b:37:86:64:c3:bb:18:b2:a9:59:e0:be: a0:45:b5:e1:44:a4:2a:30:0b:05:51:59:0a:8d:47: f7:74:d0:d3:55:b7:2d:29:27:2a:6a:e8:0a:db:cd: 35:a8:40:3a:86:8f:8e:89:c9:d2:e1:bd:fe:1c:6c: a0:45:0f:2d:b1:5b:21:af:e9:5c:d0:44:74:36:3b: e0:72:25:3c:55:b7:60:56:9f:b9:89:96:17:ec:f3: e4:f6:9e:78:50:7b:32:0c:6f:78:e3:00:aa:40:5e: 05:3f:da:26:e1:a0:1d:86:a2:46:17:ef:cf:cc:2e: e8:f7:a0:99:83:88:51:c1:68:6f:bf:59:41:1b:e6: 88:76:b8:20:16:5e:c4:d1:dc:ed:6f:8c:f8:6d:77: 51:29:0c:f5:f6:61:94:ae:6f:ca:0b:22:9d:db:f1: fa:f1:f4:b9:a3:b9:72:52:e4:39:4b:e8:b4:89:f2: 3f:a3:f7:b9:7b:3d:f1:1b:53:16:cf:33:7c:9f:58: 69:24:2e:e7:e8:03:7e:08:77:18:a2:18:d6:0d:41: 15:bf:2c:35:d2:b7:67:cd:6d:5c:87:07:73:f5:26: fe:d8:5e:87:b6:57:4d:a5:13:32:1f:66:27:08:fb: 33:11:76:22:c6:83:15:30:85:3b:63:11:38:50:8e: 58:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E8:2F:56:D9:A0:0E:69:99:CE:87:A9:95:4B:DC:25:94:FB:CF:09 X509v3 Authority Key Identifier: keyid:4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:47:2a:57:47:90:71:44:e5:af:f8:3c:59:ee:8e:cf:dc:40: ca:a7:44:45:03:dc:c6:1d:65:98:e6:7b:9c:57:9c:b8:16:3e: e2:f6:14:0c:3a:de:6b:a2:59:7a:b2:c7:96:fc:90:42:9e:13: 67:54:91:43:aa:7a:9f:05:d0:c2:69:67:b0:f5:55:15:ff:73: 69:06:02:3b:61:ce:d7:81:06:e7:8b:59:14:99:aa:e2:27:cb: b8:73:47:6e:97:ac:65:11:12:1e:47:be:67:75:bd:08:59:1b: 9d:e1:7e:4d:13:2f:fd:88:58:d5:c1:5f:61:77:f5:b4:58:01: 4f:4f:d2:5e:3f:16:0f:c0:d6:cc:da:c8:2b:7d:ed:a4:5a:52: 0b:ea:20:0f:36:b6:bc:09:1d:c7:f3:00:d4:21:bf:dc:0c:ea: ba:1c:63:0a:0a:ea:da:6a:1c:8f:85:a7:f6:cc:f4:0d:6b:5f: ef:73:64:d9:60:78:fc:31:53:8a:ce:f6:db:ae:ce:95:92:40: ea:90:84:93:9c:77:a0:56:d8:e2:3a:04:c7:43:55:68:3f:61: 05:75:06:fb:33:79:94:4b:ae:72:b5:88:9c:0e:66:96:18:91: 04:35:65:0c:eb:68:5d:95:ab:40:4d:c2:a1:77:35:9a:3b:96: 4b:99:91:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2beoeuvfEY79I+GDnFgPzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNTQ4YmZmYjMyMTQ5OTFhOWNhN2M5ZjBmNWI0ODU0NTg4 Yjk3NWUwHhcNMjUxMjMxMjIwMTEzWhcNMjYwMTAxMjIwMTEzWjAzMTEwLwYDVQQD Eyg4N2U4MmY1NmQ5YTAwZTY5OTljZTg3YTk5NTRiZGMyNTk0ZmJjZjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp17N4Zkw7sYsqlZ4L6gRbXhRKQq MAsFUVkKjUf3dNDTVbctKScqaugK2801qEA6ho+OicnS4b3+HGygRQ8tsVshr+lc 0ER0NjvgciU8VbdgVp+5iZYX7PPk9p54UHsyDG944wCqQF4FP9om4aAdhqJGF+/P zC7o96CZg4hRwWhvv1lBG+aIdrggFl7E0dztb4z4bXdRKQz19mGUrm/KCyKd2/H6 8fS5o7lyUuQ5S+i0ifI/o/e5ez3xG1MWzzN8n1hpJC7n6AN+CHcYohjWDUEVvyw1 0rdnzW1chwdz9Sb+2F6HtldNpRMyH2YnCPszEXYixoMVMIU7YxE4UI5YuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfoL1bZoA5pmc6HqZVL3CWU+88JMB8GA1UdIwQY MBaAFE1Ui/+zIUmRqcp8nw9bSFRYi5deMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFZTTF83TWhTWkdweW55ZkQxdElWRmlMbDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83ZjQ5ZGYtMjcyMi00NWQxLTlkOWIt OTc1OWY5YTc5YWNlLzEvVFZTTF83TWhTWkdweW55ZkQxdElWRmlMbDE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi83ZjQ5ZGYtMjcyMi00NWQxLTlkOWItOTc1OWY5YTc5YWNl LzEvVFZTTF83TWhTWkdweW55ZkQxdElWRmlMbDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUcqV0eQ cUTlr/g8We6Oz9xAyqdERQPcxh1lmOZ7nFecuBY+4vYUDDrea6JZerLHlvyQQp4T Z1SRQ6p6nwXQwmlnsPVVFf9zaQYCO2HO14EG54tZFJmq4ifLuHNHbpesZRESHke+ Z3W9CFkbneF+TRMv/YhY1cFfYXf1tFgBT0/SXj8WD8DWzNrIK33tpFpSC+ogDza2 vAkdx/MA1CG/3AzquhxjCgrq2mocj4Wn9sz0DWtf73Nk2WB4/DFTis72267OlZJA 6pCEk5x3oFbY4joEx0NVaD9hBXUG+zN5lEuucrWInA5mlhiRBDVlDOtoXZWrQE3C oXc1mjuWS5mR6w== -----END CERTIFICATE-----Generated at Thu Jan 1 02:51:06 2026 by rpki-client