This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft File: TgyY_GY_7jZUpy9MCBRhxBYc84E.mft (raw, json) Hash identifier: 75G+7oLhqMpKgUxlwByVbWTDNtBDTCWRJkJIwyo5sD0= Subject key identifier: 41:4D:AD:25:50:75:D7:41:26:70:EB:32:6C:BB:24:8D:8C:EE:09:3E Authority key identifier: 4E:0C:98:FC:66:3F:EE:36:54:A7:2F:4C:08:14:61:C4:16:1C:F3:81 Certificate issuer: /CN=4e0c98fc663fee3654a72f4c081461c4161cf381 Certificate serial: 019B6C20B45D775C5BC7D630A4D9ABCA910B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgyY_GY_7jZUpy9MCBRhxBYc84E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft Manifest number: 155E Signing time: Mon 29 Dec 2025 22:00:41 +0000 Manifest this update: Mon 29 Dec 2025 22:00:41 +0000 Manifest next update: Tue 30 Dec 2025 22:00:41 +0000 Files and hashes: 1: TgyY_GY_7jZUpy9MCBRhxBYc84E.crl (hash: +gdrlbO1JIi6PCATvcMIvBQ7PYhr8px8QVujYVFXrSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.crl rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft rsync://rpki.ripe.net/repository/DEFAULT/TgyY_GY_7jZUpy9MCBRhxBYc84E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 22:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:20:b4:5d:77:5c:5b:c7:d6:30:a4:d9:ab:ca:91:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e0c98fc663fee3654a72f4c081461c4161cf381 Validity Not Before: Dec 29 22:00:41 2025 GMT Not After : Dec 30 22:00:41 2025 GMT Subject: CN=414dad255075d7412670eb326cbb248d8cee093e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1d:80:72:55:5e:d7:ff:db:a9:a1:94:32:d0: 82:be:7f:11:5e:bc:67:12:a3:de:c7:54:7f:c6:9d: b5:35:5b:b4:1b:9a:eb:87:4e:ba:19:b8:1f:ad:17: 30:4c:82:fd:71:ac:7f:5c:ae:28:44:3a:71:87:2b: 9b:e0:aa:a6:ef:06:21:6e:7f:b2:d6:9a:ff:91:44: 5b:6e:41:91:08:96:a2:64:10:67:5e:d1:ee:36:5f: f0:12:ed:88:27:86:17:30:02:7b:af:35:90:a2:c3: cc:a9:08:d9:87:53:48:06:54:99:27:ec:99:ac:a1: 78:15:46:08:b2:32:cb:77:51:c8:e8:57:4a:12:7d: a2:55:b0:2e:df:2b:bb:b0:6b:0e:98:27:1b:8b:8d: 9c:85:db:d7:0f:18:08:62:4f:cf:f1:22:61:94:59: bb:19:9b:6e:80:a4:b2:14:e0:29:a1:48:d7:73:bd: 70:60:a6:c1:35:6c:61:8f:d0:3c:ff:b7:c5:50:f0: 59:40:ac:82:d9:c8:b9:2e:5d:33:83:42:4c:f4:c8: 0b:f0:0f:b6:bb:66:51:0d:5f:58:19:76:73:37:d3: cc:75:78:83:0e:8a:f9:8c:71:a6:36:5e:c6:6f:d4: f3:9f:b8:0d:52:30:a4:91:cc:24:9c:68:c3:84:2b: 7e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4D:AD:25:50:75:D7:41:26:70:EB:32:6C:BB:24:8D:8C:EE:09:3E X509v3 Authority Key Identifier: keyid:4E:0C:98:FC:66:3F:EE:36:54:A7:2F:4C:08:14:61:C4:16:1C:F3:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgyY_GY_7jZUpy9MCBRhxBYc84E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:3a:a4:35:b2:c4:b2:cd:55:f3:26:10:ef:9d:0c:a6:4a:7b: 2c:05:f3:d1:db:73:68:86:66:47:5a:4d:2b:4f:eb:52:7e:02: 1a:19:76:15:66:62:7c:da:8e:38:40:66:23:5f:51:17:f6:75: be:83:e1:37:d4:e0:1a:3a:a4:1d:f0:57:3a:6f:c4:bf:5c:e7: 32:ea:49:d2:be:9e:1b:20:cd:44:39:a5:dd:87:74:b9:18:cb: 06:38:b9:5e:a8:59:78:74:f9:92:8d:9e:21:87:63:30:5a:90: f6:9f:a6:e0:af:72:b0:1c:95:83:66:73:7f:7c:a0:96:e3:c4: c2:a3:a1:db:c1:85:76:43:c9:06:9c:63:ea:c7:29:68:92:b2: 86:6e:a5:c3:47:e5:e1:46:8c:01:ae:d8:dd:23:09:3f:e8:7c: 1b:a5:ca:81:f1:ed:f8:ee:2b:5f:8e:e1:c4:25:37:4f:a1:44: 86:29:19:03:1d:e4:cb:0c:26:45:14:86:2e:b9:be:ce:a0:fa: f7:65:69:d2:2c:64:0c:46:d6:93:20:c2:27:40:3a:c1:85:15: e9:c0:e7:1b:ba:5c:1c:12:19:e0:7b:0c:ed:2e:2e:9e:f7:a2: f3:4e:23:8a:87:c2:9f:1b:96:cc:30:2c:02:6f:cf:e4:b2:d7: de:d7:2b:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsILRdd1xbx9YwpNmrypELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMGM5OGZjNjYzZmVlMzY1NGE3MmY0YzA4MTQ2MWM0MTYx Y2YzODEwHhcNMjUxMjI5MjIwMDQxWhcNMjUxMjMwMjIwMDQxWjAzMTEwLwYDVQQD Eyg0MTRkYWQyNTUwNzVkNzQxMjY3MGViMzI2Y2JiMjQ4ZDhjZWUwOTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx2AclVe1//bqaGUMtCCvn8RXrxn EqPex1R/xp21NVu0G5rrh066GbgfrRcwTIL9cax/XK4oRDpxhyub4Kqm7wYhbn+y 1pr/kURbbkGRCJaiZBBnXtHuNl/wEu2IJ4YXMAJ7rzWQosPMqQjZh1NIBlSZJ+yZ rKF4FUYIsjLLd1HI6FdKEn2iVbAu3yu7sGsOmCcbi42chdvXDxgIYk/P8SJhlFm7 GZtugKSyFOApoUjXc71wYKbBNWxhj9A8/7fFUPBZQKyC2ci5Ll0zg0JM9MgL8A+2 u2ZRDV9YGXZzN9PMdXiDDor5jHGmNl7Gb9Tzn7gNUjCkkcwknGjDhCt+HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFNrSVQdddBJnDrMmy7JI2M7gk+MB8GA1UdIwQY MBaAFE4MmPxmP+42VKcvTAgUYcQWHPOBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGd5WV9HWV83alpVcHk5TUNCUmh4QlljODRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iMzllNTItODdlNi00NGZhLWE1NjYt ODlmY2FmNjlhY2M3LzEvVGd5WV9HWV83alpVcHk5TUNCUmh4QlljODRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9iMzllNTItODdlNi00NGZhLWE1NjYtODlmY2FmNjlhY2M3 LzEvVGd5WV9HWV83alpVcHk5TUNCUmh4QlljODRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDqkNbLE ss1V8yYQ750Mpkp7LAXz0dtzaIZmR1pNK0/rUn4CGhl2FWZifNqOOEBmI19RF/Z1 voPhN9TgGjqkHfBXOm/Ev1znMupJ0r6eGyDNRDml3Yd0uRjLBji5XqhZeHT5ko2e IYdjMFqQ9p+m4K9ysByVg2Zzf3ygluPEwqOh28GFdkPJBpxj6scpaJKyhm6lw0fl 4UaMAa7Y3SMJP+h8G6XKgfHt+O4rX47hxCU3T6FEhikZAx3kywwmRRSGLrm+zqD6 92Vp0ixkDEbWkyDCJ0A6wYUV6cDnG7pcHBIZ4HsM7S4unvei804jiofCnxuWzDAs Am/P5LLX3tcr9A== -----END CERTIFICATE-----Generated at Tue Dec 30 06:24:45 2025 by rpki-client