This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft File: TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json) Hash identifier: oNLpsqVs8C8bebrQgSCFdH07CALB1eFT8R/nMOt2ALc= Subject key identifier: AE:E7:5A:0B:D9:79:51:B4:BD:E5:33:5B:49:53:C3:EB:C1:F3:F6:B7 Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D Certificate issuer: /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d Certificate serial: 019B7A4A7DCC03D68839B235945E08093E66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft Manifest number: 17A5 Signing time: Thu 01 Jan 2026 16:01:00 +0000 Manifest this update: Thu 01 Jan 2026 16:01:00 +0000 Manifest next update: Fri 02 Jan 2026 16:01:00 +0000 Files and hashes: 1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: 5hl3ochDiJnLiJGTkGWq5eQF+ynQpQA/ex4h3/UX4uM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 16:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:4a:7d:cc:03:d6:88:39:b2:35:94:5e:08:09:3e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d Validity Not Before: Jan 1 16:01:00 2026 GMT Not After : Jan 2 16:01:00 2026 GMT Subject: CN=aee75a0bd97951b4bde5335b4953c3ebc1f3f6b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:b9:7d:c0:fd:57:79:2e:26:cf:48:65:ad:a8: cb:4f:d9:45:a4:90:b7:3e:2b:dd:6e:7a:a5:0f:2a: 33:bd:13:14:dd:eb:bb:85:6e:65:36:cc:1c:d9:36: 7f:d7:a6:72:4d:70:a4:26:65:e8:78:ab:51:ab:6b: 65:a9:d4:6c:cd:98:6d:a8:13:f1:16:be:c2:9a:b4: c3:9e:82:73:e8:ed:2a:55:ff:95:e6:fd:8a:c2:93: e9:3f:18:75:1b:c1:36:c7:0c:5c:b8:e9:77:61:7c: d8:b9:4a:69:d9:84:44:8c:9d:9d:c6:f1:d0:9e:17: fe:2a:db:01:50:59:1e:9d:5e:b0:65:21:ef:e7:6c: 4e:f1:89:9d:50:39:74:a1:0d:a3:3f:b0:42:8f:9a: aa:52:e8:56:8f:fe:f1:08:0c:49:90:bb:d1:f0:da: cb:6e:cf:49:6b:c7:55:29:1c:e6:38:8d:b0:92:43: bb:ef:7b:e4:9b:8a:dd:31:6a:13:fe:6f:25:04:5c: 1b:06:1f:9e:e5:2b:1d:e9:9e:47:39:26:73:4b:40: b6:2d:08:6d:e3:fc:d1:94:e3:c5:30:fb:9c:62:48: 7e:1e:33:90:ed:f1:ac:c9:64:77:3a:7c:3a:70:86: 65:fc:47:1e:8f:35:1a:68:f1:b3:0f:09:2f:ea:aa: 00:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E7:5A:0B:D9:79:51:B4:BD:E5:33:5B:49:53:C3:EB:C1:F3:F6:B7 X509v3 Authority Key Identifier: keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:e0:59:ec:d7:e7:9d:bc:39:b8:82:c5:2e:f1:e5:84:16:22: 36:99:27:a6:88:31:bb:1c:6b:c8:2d:d0:42:71:bd:25:4d:02: 8c:e5:7d:1f:e4:07:14:34:31:e1:a9:db:35:cc:ea:4b:3f:17: 60:30:2a:01:da:94:2f:83:2a:bd:a2:12:b8:7d:3c:96:46:54: 97:a5:2a:f6:4d:17:5c:48:0c:5f:66:ce:2f:8d:e5:f2:eb:c0: f7:c9:df:2d:73:0d:56:c2:fc:f1:2b:38:af:3c:08:30:6d:18: 4a:d6:1e:c0:a6:c4:3f:48:69:68:ee:4a:c4:25:b5:82:b4:08: 89:bb:09:88:16:d7:11:2d:95:93:db:3d:bc:72:e7:5e:f1:89: 35:e4:47:42:7e:cb:e4:f3:4b:6f:f4:f9:ef:4f:b5:c2:af:40: cb:d1:0c:0e:a4:b1:79:ae:a9:a4:2c:45:4f:ab:f3:87:0e:ac: bc:9a:5c:14:b3:b4:15:31:da:a1:9f:4f:1d:52:1b:b9:b3:fc: 89:83:09:c8:e4:c1:2e:fd:89:a9:bd:2d:84:73:a4:cb:9e:50: 02:38:44:5d:33:95:79:14:4f:06:d7:46:5c:e2:63:cd:91:17: a1:4b:aa:4e:a7:1e:83:c3:8f:6c:dc:b2:56:aa:d2:25:18:42: 85:50:ef:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6Sn3MA9aIObI1lF4ICT5mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkM2E3MWE3N2Y0Y2E5YmE1MzZmOTg2MTJhOWM1NmQ0MGMw YzNiOWQwHhcNMjYwMTAxMTYwMTAwWhcNMjYwMTAyMTYwMTAwWjAzMTEwLwYDVQQD EyhhZWU3NWEwYmQ5Nzk1MWI0YmRlNTMzNWI0OTUzYzNlYmMxZjNmNmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/bl9wP1XeS4mz0hlrajLT9lFpJC3 PivdbnqlDyozvRMU3eu7hW5lNswc2TZ/16ZyTXCkJmXoeKtRq2tlqdRszZhtqBPx Fr7CmrTDnoJz6O0qVf+V5v2KwpPpPxh1G8E2xwxcuOl3YXzYuUpp2YREjJ2dxvHQ nhf+KtsBUFkenV6wZSHv52xO8YmdUDl0oQ2jP7BCj5qqUuhWj/7xCAxJkLvR8NrL bs9Ja8dVKRzmOI2wkkO773vkm4rdMWoT/m8lBFwbBh+e5Ssd6Z5HOSZzS0C2LQht 4/zRlOPFMPucYkh+HjOQ7fGsyWR3Onw6cIZl/EcejzUaaPGzDwkv6qoA/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7nWgvZeVG0veUzW0lTw+vB8/a3MB8GA1UdIwQY MBaAFE06cad/TKm6U2+YYSqcVtQMDDudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84ODc1MDEtNGQ4ZS00YmViLTk1OTAt NjUwNzliNzU4NjhhLzEvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84ODc1MDEtNGQ4ZS00YmViLTk1OTAtNjUwNzliNzU4Njhh LzEvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt+BZ7Nfn nbw5uILFLvHlhBYiNpknpogxuxxryC3QQnG9JU0CjOV9H+QHFDQx4anbNczqSz8X YDAqAdqUL4MqvaISuH08lkZUl6Uq9k0XXEgMX2bOL43l8uvA98nfLXMNVsL88Ss4 rzwIMG0YStYewKbEP0hpaO5KxCW1grQIibsJiBbXES2Vk9s9vHLnXvGJNeRHQn7L 5PNLb/T570+1wq9Ay9EMDqSxea6ppCxFT6vzhw6svJpcFLO0FTHaoZ9PHVIbubP8 iYMJyOTBLv2Jqb0thHOky55QAjhEXTOVeRRPBtdGXOJjzZEXoUuqTqceg8OPbNyy VqrSJRhChVDvOA== -----END CERTIFICATE-----Generated at Thu Jan 1 19:46:49 2026 by rpki-client