This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft File: TE6QpGzZL4_8sZJLk7cdG60xMBI.mft (raw, json) Hash identifier: 8hgpMZGuczGVmmOMCr3K32MSnxvJp8e6y0lArk+f/dU= Subject key identifier: 09:56:D5:F2:FE:E8:5D:46:36:12:DD:11:6F:14:88:CF:E0:E8:55:04 Authority key identifier: 4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12 Certificate issuer: /CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012 Certificate serial: 019B451412AA938AE781DA5883A0C07609CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft Manifest number: 0F8A Signing time: Mon 22 Dec 2025 08:01:41 +0000 Manifest this update: Mon 22 Dec 2025 08:01:41 +0000 Manifest next update: Tue 23 Dec 2025 08:01:41 +0000 Files and hashes: 1: TE6QpGzZL4_8sZJLk7cdG60xMBI.crl (hash: KOhk5+pGlYjxYFO06kNdzVHcOXsfAvNtlcJqL0s/c8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:14:12:aa:93:8a:e7:81:da:58:83:a0:c0:76:09:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012 Validity Not Before: Dec 22 08:01:41 2025 GMT Not After : Dec 23 08:01:41 2025 GMT Subject: CN=0956d5f2fee85d463612dd116f1488cfe0e85504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f7:8e:37:d3:41:32:1c:94:10:c9:7d:83:ac: ab:e2:3d:da:05:ad:b4:fd:21:56:2e:60:30:47:a6: 8d:9d:9a:12:3f:11:0d:7f:15:9e:74:43:68:99:22: 86:0c:8a:5e:6a:8b:bb:ef:5b:09:47:63:bd:39:d9: 80:07:11:97:a1:a9:c6:dc:58:01:28:0e:3d:45:ec: 82:8b:41:ea:2d:93:c1:06:5e:c5:e1:6d:25:3f:37: 8c:63:37:a9:99:ad:6e:b1:b9:4f:43:cf:ad:5c:1c: d1:ed:2c:31:68:17:d3:98:d8:5c:02:c6:8b:5e:f6: 24:cc:af:1f:5d:ad:0a:05:2e:33:b5:c9:f8:ce:ef: 47:8e:c7:0b:23:3d:64:21:5b:0b:3d:25:be:b0:2d: b7:86:f1:76:12:4b:36:a0:89:03:c2:2b:59:b8:5e: 8d:94:4e:20:ad:3e:8f:96:d4:33:65:31:7a:7c:2f: 7d:5d:d9:52:9c:49:ee:18:84:2c:79:ec:45:2a:4a: b1:44:77:83:2c:46:de:0a:56:6d:d5:0e:5e:5f:28: d3:36:60:b1:ac:6e:9d:94:26:26:46:62:33:d2:ed: 97:73:6f:bc:35:8d:7e:38:54:65:10:54:0e:5b:07: 2a:07:f6:d1:f1:f6:1b:53:06:90:30:c6:8b:2e:77: 47:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:56:D5:F2:FE:E8:5D:46:36:12:DD:11:6F:14:88:CF:E0:E8:55:04 X509v3 Authority Key Identifier: keyid:4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:5b:44:f0:8c:a0:ff:0d:82:58:0d:41:33:0f:86:53:4a:97: 56:65:6f:1b:9c:24:d5:14:64:9a:b8:49:cb:f1:83:ec:27:c0: f4:89:9a:36:76:a0:92:33:53:31:18:7b:51:c8:46:61:8e:2d: 8d:3b:40:01:1a:f0:42:ba:65:12:f7:87:b6:53:e2:ab:bb:43: cb:73:d3:6c:41:c3:04:04:97:1a:20:79:53:42:71:82:32:9b: e9:21:82:a7:42:a7:80:5e:5c:06:3b:c5:87:66:da:32:56:d2: b9:79:c6:cf:ce:fc:5e:17:42:81:55:0c:31:48:30:12:35:9f: b2:c3:3a:9f:5d:6c:f7:b3:ed:60:c3:4d:d1:a4:79:ff:42:a7: b9:9c:44:7d:30:80:ae:ef:ce:a3:1f:c0:60:9f:f6:5b:a7:c5: 2c:f7:d5:27:59:41:6f:a5:34:30:9d:01:70:ab:48:5d:00:0a: aa:ba:e0:fd:56:3d:0f:b4:e4:06:bb:0e:86:fa:6d:32:6a:32: 7d:cd:c0:c9:be:ab:2d:46:55:2d:a6:6d:fb:19:fb:1c:0d:41: 57:6f:c0:14:0b:f2:6e:ba:1f:3a:eb:c9:23:6b:ea:28:f9:eb: 43:97:5f:23:94:d8:6c:79:70:2e:69:da:20:9a:5c:12:f3:38: 13:9e:7f:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFFBKqk4rngdpYg6DAdgnMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNGU5MGE0NmNkOTJmOGZmY2IxOTI0YjkzYjcxZDFiYWQz MTMwMTIwHhcNMjUxMjIyMDgwMTQxWhcNMjUxMjIzMDgwMTQxWjAzMTEwLwYDVQQD EygwOTU2ZDVmMmZlZTg1ZDQ2MzYxMmRkMTE2ZjE0ODhjZmUwZTg1NTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7feON9NBMhyUEMl9g6yr4j3aBa20 /SFWLmAwR6aNnZoSPxENfxWedENomSKGDIpeaou771sJR2O9OdmABxGXoanG3FgB KA49ReyCi0HqLZPBBl7F4W0lPzeMYzepma1usblPQ8+tXBzR7SwxaBfTmNhcAsaL XvYkzK8fXa0KBS4ztcn4zu9HjscLIz1kIVsLPSW+sC23hvF2Eks2oIkDwitZuF6N lE4grT6PltQzZTF6fC99XdlSnEnuGIQseexFKkqxRHeDLEbeClZt1Q5eXyjTNmCx rG6dlCYmRmIz0u2Xc2+8NY1+OFRlEFQOWwcqB/bR8fYbUwaQMMaLLndHwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlW1fL+6F1GNhLdEW8UiM/g6FUEMB8GA1UdIwQY MBaAFExOkKRs2S+P/LGSS5O3HRutMTASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jMjdlZWMtNzE0MS00NTc1LTlhNmYt YzQ1NzI4YzU2ZjNiLzEvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9jMjdlZWMtNzE0MS00NTc1LTlhNmYtYzQ1NzI4YzU2ZjNi LzEvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVtE8Iyg /w2CWA1BMw+GU0qXVmVvG5wk1RRkmrhJy/GD7CfA9ImaNnagkjNTMRh7UchGYY4t jTtAARrwQrplEveHtlPiq7tDy3PTbEHDBASXGiB5U0JxgjKb6SGCp0KngF5cBjvF h2baMlbSuXnGz878XhdCgVUMMUgwEjWfssM6n11s97PtYMNN0aR5/0KnuZxEfTCA ru/Oox/AYJ/2W6fFLPfVJ1lBb6U0MJ0BcKtIXQAKqrrg/VY9D7TkBrsOhvptMmoy fc3Ayb6rLUZVLaZt+xn7HA1BV2/AFAvybrofOuvJI2vqKPnrQ5dfI5TYbHlwLmna IJpcEvM4E55/OA== -----END CERTIFICATE-----Generated at Mon Dec 22 09:44:22 2025 by rpki-client