This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft File: TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft (raw, json) Hash identifier: rzhJ92anRwigX9p6ZyEaqsc2KVjyXnbv3b0YUdVhm9M= Subject key identifier: 2F:CB:42:55:05:3F:69:FD:10:F5:26:10:B9:12:79:F0:F3:5A:C0:82 Authority key identifier: 4E:91:16:2B:B0:D9:B5:51:BF:5F:7B:1C:15:EE:31:5A:51:A6:77:F4 Certificate issuer: /CN=4e91162bb0d9b551bf5f7b1c15ee315a51a677f4 Certificate serial: 019B4136E9322DADD26AA8A6BE3C1C994E39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TpEWK7DZtVG_X3scFe4xWlGmd_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft Manifest number: 0CFD Signing time: Sun 21 Dec 2025 14:01:16 +0000 Manifest this update: Sun 21 Dec 2025 14:01:16 +0000 Manifest next update: Mon 22 Dec 2025 14:01:16 +0000 Files and hashes: 1: TpEWK7DZtVG_X3scFe4xWlGmd_Q.crl (hash: 6g4Sz0Ckl8PsjHymPurFi94TM4Ulzxe3HlF86hECCY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/TpEWK7DZtVG_X3scFe4xWlGmd_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:e9:32:2d:ad:d2:6a:a8:a6:be:3c:1c:99:4e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e91162bb0d9b551bf5f7b1c15ee315a51a677f4 Validity Not Before: Dec 21 14:01:16 2025 GMT Not After : Dec 22 14:01:16 2025 GMT Subject: CN=2fcb4255053f69fd10f52610b91279f0f35ac082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f0:8c:6f:c3:e3:fe:24:d8:b5:89:3a:d2:62: 60:ec:4c:8a:e5:b1:80:88:e0:cc:32:14:f9:46:fd: bc:af:38:11:d5:54:6e:4a:60:c2:90:fd:3e:31:a3: 8a:0b:96:28:28:0f:4c:03:1e:91:1f:a4:d1:4c:17: 0d:fa:c3:e8:5f:a3:72:97:fb:8d:1a:6a:be:39:0b: 1e:93:66:1c:2f:17:6b:d0:3a:1b:7b:75:17:0e:04: 6c:2f:55:1c:de:83:79:94:2b:32:44:11:d9:8b:bd: 82:9c:20:9a:48:da:0a:42:e1:5e:3a:42:e1:03:82: c8:d0:89:4d:64:9e:3c:c2:28:f1:d9:e6:f1:a9:70: 0b:00:ad:82:f3:f9:b4:69:e0:1d:9f:04:f8:cf:f4: 9f:51:30:d8:96:fd:4f:ec:32:71:e5:f5:63:e5:f5: 7b:76:d2:e1:59:fe:f8:7a:5d:3b:c0:47:34:f2:9b: f6:05:ad:df:49:b9:bd:b1:64:dd:ac:3f:50:e1:74: 5d:5e:59:f4:54:e6:85:13:f4:4e:8d:36:1a:33:d9: e3:4d:6d:6f:3a:90:5c:f8:65:ba:48:38:9b:cd:9f: 12:60:1c:56:40:77:69:df:ac:a8:00:2b:49:31:09: 50:29:b7:bd:23:1c:31:6e:56:c9:6c:0f:22:10:77: ad:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CB:42:55:05:3F:69:FD:10:F5:26:10:B9:12:79:F0:F3:5A:C0:82 X509v3 Authority Key Identifier: keyid:4E:91:16:2B:B0:D9:B5:51:BF:5F:7B:1C:15:EE:31:5A:51:A6:77:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TpEWK7DZtVG_X3scFe4xWlGmd_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:64:0e:e2:c6:6c:5e:06:a5:3f:fa:8b:14:37:87:61:65:19: 2d:cc:97:44:53:f0:0c:5e:b8:72:c6:e5:ad:08:6b:fb:93:03: 09:dd:9c:62:be:a5:d4:5b:09:59:96:9c:8f:f5:c7:50:84:eb: e0:eb:c3:7f:1f:da:b7:4d:7b:dd:09:74:e3:37:8e:66:85:15: d3:16:11:51:a1:f2:2d:30:e1:0d:36:c7:0a:5a:29:2b:1e:54: a9:05:7f:bd:ad:04:ff:4a:a5:5b:9d:03:4d:6f:c8:e1:d6:ad: 39:f8:56:01:c7:d2:e3:6b:e4:a0:47:57:0c:4e:6c:bc:f2:ce: ef:51:d4:5c:b4:c7:f9:69:84:fe:e3:46:f7:22:86:e6:d2:26: d0:bb:bf:1f:65:11:de:69:57:e8:8e:70:b2:bd:f3:48:56:18: 6b:bc:6e:64:7c:fb:1d:12:7a:b2:49:8c:02:53:61:42:bc:af: 20:2d:20:72:a2:97:f6:56:61:2f:1d:69:4a:a7:38:0c:64:f0: 3e:54:40:d3:34:04:6b:2c:18:00:8b:39:8c:e1:52:09:43:cb: cb:fc:d5:62:fb:7b:45:5c:b1:d3:3f:74:57:b0:81:5d:aa:17: fb:8e:20:a7:6c:a1:df:c0:b5:89:48:e2:4c:38:5c:9c:53:80: 07:bb:07:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNukyLa3SaqimvjwcmU45MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlOTExNjJiYjBkOWI1NTFiZjVmN2IxYzE1ZWUzMTVhNTFh Njc3ZjQwHhcNMjUxMjIxMTQwMTE2WhcNMjUxMjIyMTQwMTE2WjAzMTEwLwYDVQQD EygyZmNiNDI1NTA1M2Y2OWZkMTBmNTI2MTBiOTEyNzlmMGYzNWFjMDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPCMb8Pj/iTYtYk60mJg7EyK5bGA iODMMhT5Rv28rzgR1VRuSmDCkP0+MaOKC5YoKA9MAx6RH6TRTBcN+sPoX6Nyl/uN Gmq+OQsek2YcLxdr0Dobe3UXDgRsL1Uc3oN5lCsyRBHZi72CnCCaSNoKQuFeOkLh A4LI0IlNZJ48wijx2ebxqXALAK2C8/m0aeAdnwT4z/SfUTDYlv1P7DJx5fVj5fV7 dtLhWf74el07wEc08pv2Ba3fSbm9sWTdrD9Q4XRdXln0VOaFE/ROjTYaM9njTW1v OpBc+GW6SDibzZ8SYBxWQHdp36yoACtJMQlQKbe9IxwxblbJbA8iEHetbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/LQlUFP2n9EPUmELkSefDzWsCCMB8GA1UdIwQY MBaAFE6RFiuw2bVRv197HBXuMVpRpnf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHBFV0s3RFp0VkdfWDNzY0ZlNHhXbEdtZF9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yMjljM2YtOTk3Mi00M2Q2LThlNDIt NTcxM2YxNzQ5YzFkLzEvVHBFV0s3RFp0VkdfWDNzY0ZlNHhXbEdtZF9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8yMjljM2YtOTk3Mi00M2Q2LThlNDItNTcxM2YxNzQ5YzFk LzEvVHBFV0s3RFp0VkdfWDNzY0ZlNHhXbEdtZF9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmQO4sZs XgalP/qLFDeHYWUZLcyXRFPwDF64csblrQhr+5MDCd2cYr6l1FsJWZacj/XHUITr 4OvDfx/at0173Ql04zeOZoUV0xYRUaHyLTDhDTbHClopKx5UqQV/va0E/0qlW50D TW/I4datOfhWAcfS42vkoEdXDE5svPLO71HUXLTH+WmE/uNG9yKG5tIm0Lu/H2UR 3mlX6I5wsr3zSFYYa7xuZHz7HRJ6skmMAlNhQryvIC0gcqKX9lZhLx1pSqc4DGTw PlRA0zQEaywYAIs5jOFSCUPLy/zVYvt7RVyx0z90V7CBXaoX+44gp2yh38C1iUji TDhcnFOAB7sHhA== -----END CERTIFICATE-----Generated at Sun Dec 21 22:26:57 2025 by rpki-client