This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft File: TF_Sw94QWTTPD_SdJtnciFjOXdE.mft (raw, json) Hash identifier: rDK9KmdJCjUhy/M2VdZ9AUBHM6mQDpQHHQd4V5XheMw= Subject key identifier: E4:A7:0A:BD:05:5E:BB:B9:A4:A3:AD:40:8B:41:7C:EC:3F:EB:4A:FA Authority key identifier: 4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1 Certificate issuer: /CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1 Certificate serial: 019B650C6944C3A0EA6BEBAFE8642F0C3E94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft Manifest number: 115A Signing time: Sun 28 Dec 2025 13:01:10 +0000 Manifest this update: Sun 28 Dec 2025 13:01:10 +0000 Manifest next update: Mon 29 Dec 2025 13:01:10 +0000 Files and hashes: 1: TF_Sw94QWTTPD_SdJtnciFjOXdE.crl (hash: OcdZcCh+xsggaDKhum+jxxlXkbw7/9NwRT6TDEbn9kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0c:69:44:c3:a0:ea:6b:eb:af:e8:64:2f:0c:3e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1 Validity Not Before: Dec 28 13:01:10 2025 GMT Not After : Dec 29 13:01:10 2025 GMT Subject: CN=e4a70abd055ebbb9a4a3ad408b417cec3feb4afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0c:41:78:0a:d4:21:07:4d:d6:f7:5e:9d:fa: 1f:69:e1:a4:36:f2:da:24:4a:40:f9:39:76:14:f0: 7c:a7:dc:93:7c:74:ee:31:f4:fc:2f:78:5b:32:c2: 58:dc:7a:ff:0d:53:b1:3d:e6:56:8d:af:33:b3:62: 12:cc:0b:01:9c:b6:69:8b:51:a8:fc:5d:af:b7:50: e6:34:83:0b:63:2c:bf:62:65:59:63:b1:a3:97:5c: 5e:68:6b:a6:c3:5a:b5:b3:6d:95:2a:6f:a9:c7:e3: a9:c1:02:b0:13:94:b5:b3:47:7f:f9:90:8c:48:19: d9:7d:2a:17:4f:5e:5d:e0:4f:1e:23:16:0d:e2:d3: 3b:4b:ec:96:9b:dd:89:a6:36:6d:09:4f:82:32:d2: 16:b8:28:28:19:e2:a3:88:c5:0e:83:e2:da:6d:96: c1:d5:b8:16:21:65:bf:4c:ac:cb:47:fc:c3:a3:e6: 4d:93:ab:0a:d5:4a:db:a5:3a:66:64:9c:bb:de:00: 80:f3:40:fb:6b:04:dc:9a:17:23:3e:1d:b5:f2:77: 98:96:8b:48:e4:f8:2b:e5:c2:ea:cb:69:c0:91:d0: 2c:c0:c3:e3:bf:20:6d:fb:3a:88:90:82:a2:f0:ae: cd:4e:1b:55:48:9a:6e:e1:57:aa:fa:4d:e3:a2:4f: 86:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A7:0A:BD:05:5E:BB:B9:A4:A3:AD:40:8B:41:7C:EC:3F:EB:4A:FA X509v3 Authority Key Identifier: keyid:4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:6d:aa:eb:f8:22:43:87:a2:c6:2c:24:3f:d2:a0:22:d8:ed: 74:a1:0f:be:77:47:e8:93:6a:66:47:c2:14:f7:9d:07:f8:75: b7:ed:f2:4f:f3:03:36:ac:0d:08:20:0b:88:7a:e0:a2:d6:9d: b8:7a:a9:eb:4f:13:ab:5b:0e:55:30:f5:1d:81:c3:b9:b2:af: d8:12:13:26:95:77:6f:8a:33:e7:38:31:67:37:25:2a:f0:37: b4:bf:11:95:a8:9b:4f:84:2a:0f:fe:af:b2:f9:75:21:d9:1b: aa:58:45:3e:59:a8:46:07:64:3f:a1:6a:65:62:bd:b6:4b:86: a7:07:b6:7e:7a:2f:96:23:2f:d8:88:cc:2f:64:76:a4:7e:28: df:c7:8d:78:cf:10:d7:f8:33:2a:fb:cb:82:25:41:51:d0:67: df:e2:4a:6f:42:52:54:ca:0e:78:9f:84:7e:a0:70:28:61:d1: d5:7a:f7:ae:a3:97:9b:e3:33:d9:33:97:4d:33:b7:fa:00:90: be:67:55:30:d8:e1:85:62:f6:95:f1:05:d7:88:c8:83:58:5b: e5:7d:48:93:5f:82:60:26:cd:92:6f:7d:96:e8:bf:dc:51:b9: 9d:77:4e:52:8e:60:8f:bc:92:f4:04:f7:55:5a:04:0f:9a:35: 6a:e4:2c:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDGlEw6Dqa+uv6GQvDD6UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNWZkMmMzZGUxMDU5MzRjZjBmZjQ5ZDI2ZDlkYzg4NThj ZTVkZDEwHhcNMjUxMjI4MTMwMTEwWhcNMjUxMjI5MTMwMTEwWjAzMTEwLwYDVQQD EyhlNGE3MGFiZDA1NWViYmI5YTRhM2FkNDA4YjQxN2NlYzNmZWI0YWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgxBeArUIQdN1vdenfofaeGkNvLa JEpA+Tl2FPB8p9yTfHTuMfT8L3hbMsJY3Hr/DVOxPeZWja8zs2ISzAsBnLZpi1Go /F2vt1DmNIMLYyy/YmVZY7Gjl1xeaGumw1q1s22VKm+px+OpwQKwE5S1s0d/+ZCM SBnZfSoXT15d4E8eIxYN4tM7S+yWm92JpjZtCU+CMtIWuCgoGeKjiMUOg+LabZbB 1bgWIWW/TKzLR/zDo+ZNk6sK1UrbpTpmZJy73gCA80D7awTcmhcjPh218neYlotI 5Pgr5cLqy2nAkdAswMPjvyBt+zqIkIKi8K7NThtVSJpu4Veq+k3jok+GkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSnCr0FXru5pKOtQItBfOw/60r6MB8GA1UdIwQY MBaAFExf0sPeEFk0zw/0nSbZ3IhYzl3RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEZfU3c5NFFXVFRQRF9TZEp0bmNpRmpPWGRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81NGY2MDItYzcxMi00ZDcyLWE0NmEt MjA4NTY1YmIyZDYzLzEvVEZfU3c5NFFXVFRQRF9TZEp0bmNpRmpPWGRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81NGY2MDItYzcxMi00ZDcyLWE0NmEtMjA4NTY1YmIyZDYz LzEvVEZfU3c5NFFXVFRQRF9TZEp0bmNpRmpPWGRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGW2q6/gi Q4eixiwkP9KgItjtdKEPvndH6JNqZkfCFPedB/h1t+3yT/MDNqwNCCALiHrgotad uHqp608Tq1sOVTD1HYHDubKv2BITJpV3b4oz5zgxZzclKvA3tL8RlaibT4QqD/6v svl1IdkbqlhFPlmoRgdkP6FqZWK9tkuGpwe2fnovliMv2IjML2R2pH4o38eNeM8Q 1/gzKvvLgiVBUdBn3+JKb0JSVMoOeJ+EfqBwKGHR1Xr3rqOXm+Mz2TOXTTO3+gCQ vmdVMNjhhWL2lfEF14jIg1hb5X1Ik1+CYCbNkm99lui/3FG5nXdOUo5gj7yS9AT3 VVoED5o1auQs5Q== -----END CERTIFICATE-----Generated at Sun Dec 28 23:22:09 2025 by rpki-client