This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft File: TT2CE15FkxVfpq1vt_7LAfE4GLI.mft (raw, json) Hash identifier: 2jXTN5EgotrEJmapZBCS1OiQlMn0nePBs5d6qdcafzc= Subject key identifier: 7C:D9:B4:09:A9:C7:A2:CC:8E:E5:4A:48:D4:B0:42:BD:2E:27:78:28 Authority key identifier: 4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2 Certificate issuer: /CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2 Certificate serial: 019B691FC80DB4C5F58548513D3A8A35A515 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft Manifest number: 0C10 Signing time: Mon 29 Dec 2025 08:00:49 +0000 Manifest this update: Mon 29 Dec 2025 08:00:49 +0000 Manifest next update: Tue 30 Dec 2025 08:00:49 +0000 Files and hashes: 1: TT2CE15FkxVfpq1vt_7LAfE4GLI.crl (hash: usCdBuJsR+g0uD0ldWDkbXmO9VgLovvv6AJ0E/Hkv18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:1f:c8:0d:b4:c5:f5:85:48:51:3d:3a:8a:35:a5:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2 Validity Not Before: Dec 29 08:00:49 2025 GMT Not After : Dec 30 08:00:49 2025 GMT Subject: CN=7cd9b409a9c7a2cc8ee54a48d4b042bd2e277828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:05:fd:8f:a6:a3:4c:cc:83:da:83:9f:6a:07: a0:71:70:e3:ca:f3:5e:71:92:1f:17:24:8c:58:c2: 19:e0:51:1d:2a:a2:ae:73:db:60:1a:4b:5f:e4:e4: d9:e9:c1:78:aa:1f:de:91:89:e5:65:55:52:58:57: 15:3a:6b:f3:4e:a9:5c:ed:1b:bb:0e:d9:46:24:9b: c3:21:b4:0d:d8:5a:0b:2f:af:c9:c0:fb:7b:40:78: bd:6f:2b:23:e2:fc:20:a5:05:db:17:1b:53:a2:3f: ef:be:7a:b6:a0:55:ce:63:79:ce:98:cd:23:a0:3a: 3d:4a:a3:5d:85:0d:34:04:60:5f:e7:ea:33:8c:b7: bf:46:f9:51:04:16:42:22:e7:5d:a8:74:4f:e7:ab: cb:4f:69:2c:b7:e4:2e:48:79:75:eb:1f:f0:69:cf: ad:2e:aa:43:cb:16:b8:49:62:d6:f1:7f:04:ce:5b: cd:49:66:b2:79:37:95:1e:4d:d4:08:e7:ce:23:52: 12:8c:23:d9:c6:74:98:ab:bb:52:32:08:96:f6:8a: ff:a4:de:43:eb:a5:a0:bb:47:0f:47:9a:ea:11:fa: 46:00:20:09:ed:31:c5:e9:24:78:68:c4:60:30:13: 8b:b1:44:1d:aa:76:e1:6b:a8:c3:e3:e9:30:b2:07: 5e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D9:B4:09:A9:C7:A2:CC:8E:E5:4A:48:D4:B0:42:BD:2E:27:78:28 X509v3 Authority Key Identifier: keyid:4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:43:2a:ee:fb:a3:98:96:70:4c:56:ec:1e:a7:da:e9:22:9a: d6:3a:eb:29:d1:68:91:e3:6b:c1:47:fa:9c:f8:d8:78:1c:2a: 64:47:57:90:48:bf:bc:4c:2f:e7:d7:86:26:7d:eb:89:72:ec: 72:2f:52:83:10:d2:57:c1:4e:1b:e4:cd:d2:f1:bb:96:1f:88: 4d:1e:49:f9:be:d1:f4:2f:df:e2:25:7a:ef:2a:50:da:68:12: 63:06:3b:eb:b5:0b:1d:fa:9f:fa:9a:21:4a:4d:8e:07:87:4d: fd:f6:2a:1b:1e:4c:b2:30:b0:de:78:69:8a:71:af:7c:97:fb: 58:d3:cc:1a:11:30:87:7f:06:d3:52:f3:7b:f2:74:96:13:a3: b3:7f:37:2a:1e:bf:6f:21:78:65:3e:7d:bc:51:c3:3e:66:92: b5:ac:f6:87:c6:ba:6c:58:a2:c8:d1:dd:b5:8b:cb:5c:cd:f5: 10:4f:96:df:f5:ce:d4:dc:79:1f:cf:8b:2c:c6:14:eb:2f:c9: 11:0e:63:de:e1:69:b7:60:23:a6:c7:b6:4b:fd:c7:3d:6b:4e: 4c:4b:bf:fc:83:00:fc:8c:14:42:36:44:fb:92:99:3a:cd:5b: af:a4:0f:18:09:92:86:d6:2b:e6:81:8a:a3:51:9a:37:16:f3: 47:05:5c:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpH8gNtMX1hUhRPTqKNaUVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkM2Q4MjEzNWU0NTkzMTU1ZmE2YWQ2ZmI3ZmVjYjAxZjEz ODE4YjIwHhcNMjUxMjI5MDgwMDQ5WhcNMjUxMjMwMDgwMDQ5WjAzMTEwLwYDVQQD Eyg3Y2Q5YjQwOWE5YzdhMmNjOGVlNTRhNDhkNGIwNDJiZDJlMjc3ODI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAX9j6ajTMyD2oOfagegcXDjyvNe cZIfFySMWMIZ4FEdKqKuc9tgGktf5OTZ6cF4qh/ekYnlZVVSWFcVOmvzTqlc7Ru7 DtlGJJvDIbQN2FoLL6/JwPt7QHi9bysj4vwgpQXbFxtToj/vvnq2oFXOY3nOmM0j oDo9SqNdhQ00BGBf5+ozjLe/RvlRBBZCIuddqHRP56vLT2kst+QuSHl16x/wac+t LqpDyxa4SWLW8X8EzlvNSWayeTeVHk3UCOfOI1ISjCPZxnSYq7tSMgiW9or/pN5D 66Wgu0cPR5rqEfpGACAJ7THF6SR4aMRgMBOLsUQdqnbha6jD4+kwsgdeDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzZtAmpx6LMjuVKSNSwQr0uJ3goMB8GA1UdIwQY MBaAFE09ghNeRZMVX6atb7f+ywHxOBiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFQyQ0UxNUZreFZmcHExdnRfN0xBZkU0R0xJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81OGJiOTMtZjZhMi00ODk4LWJmZDgt MDVkODc1NmYwOTJlLzEvVFQyQ0UxNUZreFZmcHExdnRfN0xBZkU0R0xJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81OGJiOTMtZjZhMi00ODk4LWJmZDgtMDVkODc1NmYwOTJl LzEvVFQyQ0UxNUZreFZmcHExdnRfN0xBZkU0R0xJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkMq7vuj mJZwTFbsHqfa6SKa1jrrKdFokeNrwUf6nPjYeBwqZEdXkEi/vEwv59eGJn3riXLs ci9SgxDSV8FOG+TN0vG7lh+ITR5J+b7R9C/f4iV67ypQ2mgSYwY767ULHfqf+poh Sk2OB4dN/fYqGx5MsjCw3nhpinGvfJf7WNPMGhEwh38G01Lze/J0lhOjs383Kh6/ byF4ZT59vFHDPmaStaz2h8a6bFiiyNHdtYvLXM31EE+W3/XO1Nx5H8+LLMYU6y/J EQ5j3uFpt2Ajpse2S/3HPWtOTEu//IMA/IwUQjZE+5KZOs1br6QPGAmShtYr5oGK o1GaNxbzRwVcQg== -----END CERTIFICATE-----Generated at Mon Dec 29 10:01:32 2025 by rpki-client