This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft File: TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft (raw, json) Hash identifier: FLlsaJ1oHC0po0kaeS/C7/vZRtkUmMYYa1WAIahpIZs= Subject key identifier: 3D:19:ED:B0:39:81:A6:75:25:5C:1D:55:10:FF:63:D5:62:7D:D7:1E Authority key identifier: 4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F Certificate issuer: /CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f Certificate serial: 019B6E464B63D89409D1533F417A2DBC8FEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft Manifest number: 11BC Signing time: Tue 30 Dec 2025 08:00:59 +0000 Manifest this update: Tue 30 Dec 2025 08:00:59 +0000 Manifest next update: Wed 31 Dec 2025 08:00:59 +0000 Files and hashes: 1: TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl (hash: tt4P2/dQtbRoEPtKibuhqwM5fvUV2UtAYEy/lauCHQI=) 2: WDEZ3ZaDac1rHXOITo0Y0_gA1WA.roa (hash: 2eqZynI8QAeqviBK64M0ctiXcb1WfCdmlsqvsre2oAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:46:4b:63:d8:94:09:d1:53:3f:41:7a:2d:bc:8f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f Validity Not Before: Dec 30 08:00:59 2025 GMT Not After : Dec 31 08:00:59 2025 GMT Subject: CN=3d19edb03981a675255c1d5510ff63d5627dd71e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:73:34:3c:90:23:a1:ae:11:37:b0:b6:2c:02: 6d:f7:09:b7:d9:da:cd:11:5f:0c:7f:32:a3:7b:b7: 2d:f6:44:e3:4f:25:03:b9:20:61:bc:6d:8f:ae:0d: 10:09:85:11:87:9a:73:1e:22:26:7a:4b:3b:f7:29: f7:94:ab:1b:d7:ee:1e:7c:46:f8:b0:1e:7d:94:af: 82:fc:8c:af:25:1b:45:e0:6a:46:fb:e5:13:a8:04: 0d:7d:bd:02:7e:7f:b8:8f:c9:80:10:f0:12:d0:9b: 1f:12:3c:08:c7:d2:67:d0:98:ed:f1:54:07:33:56: aa:30:75:52:57:b9:b5:54:77:60:d5:61:b6:44:1d: 8f:1f:0d:f9:fa:c3:26:d5:5a:62:1e:11:dd:23:d6: aa:ed:0e:87:42:ba:f9:f9:f8:99:13:ed:3d:d9:31: ad:d9:15:bc:d6:b0:48:6e:39:e8:e5:f8:ed:37:85: 07:5e:c5:b1:8f:4e:d8:8e:78:53:d6:d3:43:41:b8: c8:ae:7a:03:ca:96:9a:d9:11:51:54:5b:96:d2:3c: 88:e6:58:f7:14:2c:2f:9f:96:f3:08:a9:1c:38:1d: e2:a8:83:d7:b4:17:59:0d:21:16:5c:21:1a:19:3a: 5f:ad:8a:c0:37:ed:b4:ca:1c:16:4d:07:a4:fb:4a: 12:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:19:ED:B0:39:81:A6:75:25:5C:1D:55:10:FF:63:D5:62:7D:D7:1E X509v3 Authority Key Identifier: keyid:4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:4b:bc:bc:b9:01:7c:6f:a1:8c:d4:b9:4a:a5:c6:5b:ef:9b: 61:c5:95:26:ed:10:fc:a4:db:ba:8d:03:61:24:ee:4a:80:7a: 08:e2:bf:f2:1a:6c:87:99:19:cf:70:77:ab:90:4d:25:71:2c: d7:b9:54:ea:e7:dc:cb:d7:7b:39:5c:8a:48:ea:7e:2b:df:b0: 79:76:ef:73:31:6e:11:ae:b1:b0:05:2c:12:7b:b3:a8:9a:31: a7:1b:3f:0c:c9:e4:39:4e:03:53:5d:2c:64:18:bd:c2:7d:da: dd:e6:85:f9:cb:e4:b9:57:58:68:64:49:b2:de:a4:36:1e:03: db:38:98:ff:bd:44:a9:52:cf:9e:3a:50:3f:dc:2b:1d:f2:e9: f6:ba:17:60:88:14:af:17:a6:f0:97:0b:65:72:2e:90:b8:3a: 38:c8:c0:39:52:59:9c:17:52:6c:f9:ab:c1:b5:02:62:45:2f: 24:4e:0f:72:8d:2e:c4:25:39:f3:d1:3c:8d:13:5f:3a:44:94: fa:f2:e8:ca:d0:f3:ee:ab:b8:ee:81:85:ea:e9:ab:6a:4d:86: c7:9e:09:cd:ab:fd:6d:16:2f:5e:30:5c:27:63:19:4e:cc:2d: cd:09:86:d6:7b:d3:05:32:14:fb:43:42:68:13:7f:4a:e1:f1: ba:f0:90:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuRktj2JQJ0VM/QXotvI/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkY2JlZjA2YWQwNWZkNmU2ZTdlN2IxMDg0Y2IxZDdkNjVl NjQyNmYwHhcNMjUxMjMwMDgwMDU5WhcNMjUxMjMxMDgwMDU5WjAzMTEwLwYDVQQD EygzZDE5ZWRiMDM5ODFhNjc1MjU1YzFkNTUxMGZmNjNkNTYyN2RkNzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnM0PJAjoa4RN7C2LAJt9wm32drN EV8MfzKje7ct9kTjTyUDuSBhvG2Prg0QCYURh5pzHiImeks79yn3lKsb1+4efEb4 sB59lK+C/IyvJRtF4GpG++UTqAQNfb0Cfn+4j8mAEPAS0JsfEjwIx9Jn0Jjt8VQH M1aqMHVSV7m1VHdg1WG2RB2PHw35+sMm1VpiHhHdI9aq7Q6HQrr5+fiZE+092TGt 2RW81rBIbjno5fjtN4UHXsWxj07YjnhT1tNDQbjIrnoDypaa2RFRVFuW0jyI5lj3 FCwvn5bzCKkcOB3iqIPXtBdZDSEWXCEaGTpfrYrAN+20yhwWTQek+0oSmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0Z7bA5gaZ1JVwdVRD/Y9VifdceMB8GA1UdIwQY MBaAFE3L7watBf1ubn57EITLHX1l5kJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGN2dkJxMEZfVzV1Zm5zUWhNc2RmV1htUW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yYTZlYWEtZTQzNy00M2JjLTk3MmUt M2UzYmZhYTE5MGRmLzEvVGN2dkJxMEZfVzV1Zm5zUWhNc2RmV1htUW04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yYTZlYWEtZTQzNy00M2JjLTk3MmUtM2UzYmZhYTE5MGRm LzEvVGN2dkJxMEZfVzV1Zm5zUWhNc2RmV1htUW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuku8vLkB fG+hjNS5SqXGW++bYcWVJu0Q/KTbuo0DYSTuSoB6COK/8hpsh5kZz3B3q5BNJXEs 17lU6ufcy9d7OVyKSOp+K9+weXbvczFuEa6xsAUsEnuzqJoxpxs/DMnkOU4DU10s ZBi9wn3a3eaF+cvkuVdYaGRJst6kNh4D2ziY/71EqVLPnjpQP9wrHfLp9roXYIgU rxem8JcLZXIukLg6OMjAOVJZnBdSbPmrwbUCYkUvJE4Pco0uxCU589E8jRNfOkSU +vLoytDz7qu47oGF6umrak2Gx54Jzav9bRYvXjBcJ2MZTswtzQmG1nvTBTIU+0NC aBN/SuHxuvCQSA== -----END CERTIFICATE-----Generated at Tue Dec 30 09:04:50 2025 by rpki-client