This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft File: tt41SvltyILzXBLU9fpnUHY6tyA.mft (raw, json) Hash identifier: wVeWTjDbUKb5EvYVH6yAAjbT7B8qN/zhASkuSgmevdw= Subject key identifier: BF:30:A4:93:A0:CE:8C:3C:CC:C3:2A:DA:45:8E:F0:BA:00:75:44:01 Authority key identifier: B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20 Certificate issuer: /CN=b6de354af96dc882f35c12d4f5fa6750763ab720 Certificate serial: 019B66FC2B0AA2D2B94F2F372B348917333A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft Manifest number: 0EC4 Signing time: Sun 28 Dec 2025 22:02:40 +0000 Manifest this update: Sun 28 Dec 2025 22:02:40 +0000 Manifest next update: Mon 29 Dec 2025 22:02:40 +0000 Files and hashes: 1: tt41SvltyILzXBLU9fpnUHY6tyA.crl (hash: pF2Lnn638Zc42nwac9bzGBk+Si+ggiBheH2iIhGTPXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fc:2b:0a:a2:d2:b9:4f:2f:37:2b:34:89:17:33:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6de354af96dc882f35c12d4f5fa6750763ab720 Validity Not Before: Dec 28 22:02:40 2025 GMT Not After : Dec 29 22:02:40 2025 GMT Subject: CN=bf30a493a0ce8c3cccc32ada458ef0ba00754401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:45:9e:c5:57:b5:62:4f:8d:73:68:fd:2f:04: af:ab:6c:81:3e:72:58:4c:4d:65:b6:84:99:f6:7b: 2d:f6:bb:42:72:2c:d8:54:1d:74:ae:d8:69:57:2a: e8:73:59:07:4e:1b:16:bf:ee:8b:44:ba:5f:03:54: 2c:d3:fb:72:07:7b:56:ce:9a:5f:ce:53:79:76:00: db:21:97:0f:c2:19:2d:e8:23:f1:83:30:ba:fe:bb: 66:4c:2a:b2:ad:6d:4a:e4:dd:97:c6:45:a0:e1:9d: 31:92:41:52:34:ae:df:cb:d1:2c:17:e0:6f:bb:f8: 8e:80:4a:ad:05:63:d8:e1:8e:35:e1:7f:52:7d:bf: 30:3c:ac:e9:d8:a5:7a:45:41:9a:df:6c:19:72:32: 0c:be:d9:7d:54:83:74:f8:45:92:8a:25:b6:75:a7: 61:6c:2f:95:41:f9:54:67:74:0e:d3:ae:4a:47:d2: b0:b8:7c:3f:f5:96:9a:b8:b1:a0:4e:9e:32:db:f3: aa:d1:58:20:b4:4c:ce:48:97:42:c9:fe:93:4e:31: b3:52:9b:85:3e:a8:bc:43:e9:49:0b:cc:0b:74:b9: 75:79:fd:c1:88:ca:4f:93:b0:c1:50:14:81:ec:fd: 5f:3b:5a:53:9e:a9:70:50:50:64:f2:57:ab:c1:60: 0b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:30:A4:93:A0:CE:8C:3C:CC:C3:2A:DA:45:8E:F0:BA:00:75:44:01 X509v3 Authority Key Identifier: keyid:B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:47:b6:9c:4a:d9:56:e3:88:d0:e0:91:a9:d5:66:a1:da:87: f8:7b:50:15:3a:52:07:e2:03:2d:74:0e:db:02:e1:11:40:53: 6e:27:21:7b:27:e8:d3:e2:27:db:98:e9:7b:07:76:e9:56:bd: ea:0b:85:d7:81:1f:1f:66:6b:a0:ab:a9:64:5b:c2:fd:b2:94: af:86:98:48:9e:c1:c5:9f:39:37:67:79:7a:74:75:63:49:5c: 33:2c:3a:21:53:dc:cd:e5:a2:61:42:00:54:28:84:56:cd:1c: 96:bc:87:8f:2e:cd:ec:11:14:f1:2c:ed:5b:68:2b:a2:60:9e: a6:8f:fb:c8:11:b6:48:43:8f:bf:29:c9:f8:72:f4:dd:ce:7a: f0:7a:b3:4d:f2:3d:04:f3:ba:5b:94:94:ac:e0:53:15:e8:f3: 69:e5:ad:81:95:1e:a5:7f:32:12:0d:82:7f:af:65:dd:88:0b: 54:25:2e:8b:59:5b:37:28:ba:9e:f7:f9:ad:07:c2:48:6f:f7: 62:d7:ee:97:12:84:1e:72:c1:9b:ea:8e:fc:ea:0f:c7:5a:58: 42:d7:da:e8:6c:99:b1:03:15:7a:a5:ea:34:cb:55:09:55:e1: ff:44:ac:58:b3:bf:af:37:b3:f5:ac:7c:22:b2:4b:3d:f7:48: 0c:b7:46:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm/CsKotK5Ty83KzSJFzM6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZGUzNTRhZjk2ZGM4ODJmMzVjMTJkNGY1ZmE2NzUwNzYz YWI3MjAwHhcNMjUxMjI4MjIwMjQwWhcNMjUxMjI5MjIwMjQwWjAzMTEwLwYDVQQD EyhiZjMwYTQ5M2EwY2U4YzNjY2NjMzJhZGE0NThlZjBiYTAwNzU0NDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkWexVe1Yk+Nc2j9LwSvq2yBPnJY TE1ltoSZ9nst9rtCcizYVB10rthpVyroc1kHThsWv+6LRLpfA1Qs0/tyB3tWzppf zlN5dgDbIZcPwhkt6CPxgzC6/rtmTCqyrW1K5N2XxkWg4Z0xkkFSNK7fy9EsF+Bv u/iOgEqtBWPY4Y414X9Sfb8wPKzp2KV6RUGa32wZcjIMvtl9VIN0+EWSiiW2dadh bC+VQflUZ3QO065KR9KwuHw/9ZaauLGgTp4y2/Oq0VggtEzOSJdCyf6TTjGzUpuF Pqi8Q+lJC8wLdLl1ef3BiMpPk7DBUBSB7P1fO1pTnqlwUFBk8lerwWALZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8wpJOgzow8zMMq2kWO8LoAdUQBMB8GA1UdIwQY MBaAFLbeNUr5bciC81wS1PX6Z1B2OrcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHQ0MVN2bHR5SUx6WEJMVTlmcG5VSFk2dHlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82ZTAwMGUtZTc1NS00N2U2LTk5YTgt MzU0ODcxYTg1YzdhLzEvdHQ0MVN2bHR5SUx6WEJMVTlmcG5VSFk2dHlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82ZTAwMGUtZTc1NS00N2U2LTk5YTgtMzU0ODcxYTg1Yzdh LzEvdHQ0MVN2bHR5SUx6WEJMVTlmcG5VSFk2dHlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUe2nErZ VuOI0OCRqdVmodqH+HtQFTpSB+IDLXQO2wLhEUBTbicheyfo0+In25jpewd26Va9 6guF14EfH2ZroKupZFvC/bKUr4aYSJ7BxZ85N2d5enR1Y0lcMyw6IVPczeWiYUIA VCiEVs0clryHjy7N7BEU8SztW2gromCepo/7yBG2SEOPvynJ+HL03c568HqzTfI9 BPO6W5SUrOBTFejzaeWtgZUepX8yEg2Cf69l3YgLVCUui1lbNyi6nvf5rQfCSG/3 YtfulxKEHnLBm+qO/OoPx1pYQtfa6GyZsQMVeqXqNMtVCVXh/0SsWLO/rzez9ax8 IrJLPfdIDLdG7w== -----END CERTIFICATE-----Generated at Sun Dec 28 23:39:29 2025 by rpki-client