This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft File: tT8fJDLiJL3km_qxn2dTYpq1cH8.mft (raw, json) Hash identifier: RQKTorsJLOkdbn6pYHPgSKhjmWzM+7wAvKZW72csgYw= Subject key identifier: 15:B6:24:C2:76:0F:AF:FE:86:62:B5:3A:AF:0F:FE:E8:D5:D7:E2:D5 Authority key identifier: B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F Certificate issuer: /CN=b53f1f2432e224bde49bfab19f6753629ab5707f Certificate serial: 019B3E6C2749E02290F908206CC4987F54D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft Manifest number: 0DE6 Signing time: Sun 21 Dec 2025 01:00:33 +0000 Manifest this update: Sun 21 Dec 2025 01:00:33 +0000 Manifest next update: Mon 22 Dec 2025 01:00:33 +0000 Files and hashes: 1: tT8fJDLiJL3km_qxn2dTYpq1cH8.crl (hash: 0fR1kA9FUNAZ//aYxXhKmeVwOeDBbDhTGG9bIiSdFpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:27:49:e0:22:90:f9:08:20:6c:c4:98:7f:54:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b53f1f2432e224bde49bfab19f6753629ab5707f Validity Not Before: Dec 21 01:00:33 2025 GMT Not After : Dec 22 01:00:33 2025 GMT Subject: CN=15b624c2760faffe8662b53aaf0ffee8d5d7e2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:22:3f:75:b8:9f:6a:59:59:59:20:1c:42:dc: ab:bf:06:33:ad:82:af:3e:03:e4:73:70:3d:07:13: d7:68:a6:36:63:5c:47:f4:e5:83:4f:cf:5d:39:d0: 92:c9:2d:18:82:ab:81:d5:e3:08:98:a9:ec:2f:5e: 72:84:30:8a:7d:1b:e2:c4:3b:46:bd:72:ea:b3:0e: c4:1a:31:78:7e:ab:3f:3a:21:a5:e4:d5:23:82:14: 21:b5:35:b4:26:7a:5e:6c:28:a7:4c:70:d6:0a:98: 42:d0:4c:57:2b:8f:ce:95:3b:b9:cb:cc:64:e8:57: ea:55:04:b4:45:0e:73:5f:bb:04:dd:b1:00:22:b0: 93:6c:47:c1:8d:bd:03:98:82:8c:61:d1:be:f0:e4: 51:ca:9e:d3:18:33:c0:d9:9e:a8:98:4e:43:18:95: 4a:08:a7:20:88:4d:fb:b9:7e:f6:cc:37:cb:0d:ad: 2e:62:82:62:f2:97:51:14:c6:43:c5:56:31:81:8e: 87:17:25:d6:dd:6e:a8:f8:51:a7:dd:30:45:17:91: 43:3d:25:a3:8e:29:d8:a5:1d:57:b7:2c:ff:fb:25: ca:eb:42:69:e7:99:84:86:77:ee:3d:47:99:04:88: a3:96:93:ca:07:b6:89:1e:c9:f3:af:82:67:b3:af: 55:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B6:24:C2:76:0F:AF:FE:86:62:B5:3A:AF:0F:FE:E8:D5:D7:E2:D5 X509v3 Authority Key Identifier: keyid:B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:0c:0a:48:ce:fd:fd:37:c2:89:fc:b4:91:71:a4:97:fe:6e: 6f:a2:57:db:90:d8:f7:65:2b:89:5d:d6:5a:c3:ab:3a:5c:f0: c7:64:fc:2b:91:b6:9a:8c:02:8b:4c:14:23:c8:a4:aa:7a:27: 3b:d2:19:70:87:65:6f:52:c1:4e:d8:1b:94:41:f7:6d:1e:c0: b9:73:c9:ef:76:16:36:b1:b9:37:62:d2:d2:68:4d:b1:37:63: 34:54:75:e4:85:f3:9f:01:6b:2d:3c:69:5a:20:2d:3a:7b:87: 99:4a:80:44:43:6b:d5:32:39:fa:39:38:f2:dd:4f:ad:ad:97: 6e:46:5e:89:7b:cc:35:ba:d1:5d:3b:9f:e5:6f:fd:a5:07:d7: 96:78:e3:35:9e:ad:5a:a3:18:53:d2:b8:8a:5f:12:f6:f9:82: 7e:71:18:ac:99:a3:fe:e6:f4:e6:77:b1:4c:dc:a1:5a:94:5e: 3f:d1:07:da:03:e3:3c:92:dd:d8:99:a9:35:86:57:90:a2:18: 80:ed:15:dc:b4:0d:c4:16:5e:25:97:1b:28:c1:1b:4c:23:45: e7:28:65:4a:43:7b:62:8a:bc:f1:45:2a:04:1b:da:b4:7b:3f: b1:e6:6e:cb:a5:d0:06:fe:96:7a:dd:7c:1f:d7:20:27:66:12: 8b:0d:d8:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bCdJ4CKQ+QggbMSYf1TQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1M2YxZjI0MzJlMjI0YmRlNDliZmFiMTlmNjc1MzYyOWFi NTcwN2YwHhcNMjUxMjIxMDEwMDMzWhcNMjUxMjIyMDEwMDMzWjAzMTEwLwYDVQQD EygxNWI2MjRjMjc2MGZhZmZlODY2MmI1M2FhZjBmZmVlOGQ1ZDdlMmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyI/dbifallZWSAcQtyrvwYzrYKv PgPkc3A9BxPXaKY2Y1xH9OWDT89dOdCSyS0YgquB1eMImKnsL15yhDCKfRvixDtG vXLqsw7EGjF4fqs/OiGl5NUjghQhtTW0JnpebCinTHDWCphC0ExXK4/OlTu5y8xk 6FfqVQS0RQ5zX7sE3bEAIrCTbEfBjb0DmIKMYdG+8ORRyp7TGDPA2Z6omE5DGJVK CKcgiE37uX72zDfLDa0uYoJi8pdRFMZDxVYxgY6HFyXW3W6o+FGn3TBFF5FDPSWj jinYpR1Xtyz/+yXK60Jp55mEhnfuPUeZBIijlpPKB7aJHsnzr4Jns69VyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBW2JMJ2D6/+hmK1Oq8P/ujV1+LVMB8GA1UdIwQY MBaAFLU/HyQy4iS95Jv6sZ9nU2KatXB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFQ4ZkpETGlKTDNrbV9xeG4yZFRZcHExY0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mZGZmMDEtNzYyZi00M2E5LWE0YmUt N2JiMTg0NDAxNGQ2LzEvdFQ4ZkpETGlKTDNrbV9xeG4yZFRZcHExY0g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9mZGZmMDEtNzYyZi00M2E5LWE0YmUtN2JiMTg0NDAxNGQ2 LzEvdFQ4ZkpETGlKTDNrbV9xeG4yZFRZcHExY0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwwKSM79 /TfCify0kXGkl/5ub6JX25DY92UriV3WWsOrOlzwx2T8K5G2mowCi0wUI8ikqnon O9IZcIdlb1LBTtgblEH3bR7AuXPJ73YWNrG5N2LS0mhNsTdjNFR15IXznwFrLTxp WiAtOnuHmUqARENr1TI5+jk48t1Pra2XbkZeiXvMNbrRXTuf5W/9pQfXlnjjNZ6t WqMYU9K4il8S9vmCfnEYrJmj/ub05nexTNyhWpReP9EH2gPjPJLd2JmpNYZXkKIY gO0V3LQNxBZeJZcbKMEbTCNF5yhlSkN7Yoq88UUqBBvatHs/seZuy6XQBv6Wet18 H9cgJ2YSiw3YZw== -----END CERTIFICATE-----Generated at Sun Dec 21 05:49:27 2025 by rpki-client