This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft File: TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft (raw, json) Hash identifier: buW54wDbtpN5JD+lR7fsrkb1shyO7XuaDPUEZe/+Ids= Subject key identifier: 28:DE:52:B1:2E:E0:6E:5B:41:1E:A9:3A:90:F6:CD:AD:E8:5E:CB:D2 Authority key identifier: 4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44 Certificate issuer: /CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244 Certificate serial: 019B6354C30E4A48F8D514ABEE8F3DF94CCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft Manifest number: 1799 Signing time: Sun 28 Dec 2025 05:00:57 +0000 Manifest this update: Sun 28 Dec 2025 05:00:57 +0000 Manifest next update: Mon 29 Dec 2025 05:00:57 +0000 Files and hashes: 1: TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl (hash: o0cMshh6lKPUY5WP7+Q466MEV3dbDaXBP9bluk9pJ2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:54:c3:0e:4a:48:f8:d5:14:ab:ee:8f:3d:f9:4c:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244 Validity Not Before: Dec 28 05:00:57 2025 GMT Not After : Dec 29 05:00:57 2025 GMT Subject: CN=28de52b12ee06e5b411ea93a90f6cdade85ecbd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6b:d0:4c:47:28:7c:ee:3e:01:56:be:8b:6a: 1c:cb:02:bf:71:af:da:49:17:3f:05:04:81:32:35: 96:47:f5:05:ba:06:d1:90:43:50:9d:fa:38:8b:ef: f2:c9:9b:d8:90:2b:f3:a7:32:44:b7:23:d2:85:40: 33:b3:93:5e:5b:ce:30:eb:48:43:5b:54:65:e5:7c: 97:74:dd:d6:c8:a0:e1:8d:ed:9e:9e:13:81:9d:46: dc:80:59:6f:44:a8:fd:98:e3:0e:17:6a:2a:b1:24: 5a:01:df:95:df:c6:c8:37:c3:51:71:78:a3:82:ad: 3b:a6:ae:f0:24:3b:24:56:d4:7d:04:1d:83:d2:a3: 0e:d0:cc:e3:6e:12:63:92:45:52:80:7e:65:13:ae: 62:02:6d:b3:14:88:41:2e:44:b2:b1:85:08:85:74: 48:94:77:13:f3:2a:43:3c:ef:4e:5a:df:8f:4f:52: da:47:01:b5:3b:3e:f9:41:12:54:bc:9b:fd:38:e6: 21:6f:a2:dd:44:3d:4f:73:a4:f4:3e:d8:7a:94:b6: 78:c1:88:62:bf:07:ca:fe:c8:5e:e1:19:5c:5c:df: 12:92:7b:f7:c5:14:77:76:a1:18:4e:68:a4:9a:47: a2:cb:91:9b:7e:73:b2:9f:2f:46:40:27:d2:b7:bd: ee:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DE:52:B1:2E:E0:6E:5B:41:1E:A9:3A:90:F6:CD:AD:E8:5E:CB:D2 X509v3 Authority Key Identifier: keyid:4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:23:13:f3:33:cf:f5:75:f0:e1:d4:ca:01:69:a3:cc:e8:59: 17:79:49:e8:c7:6f:52:48:fa:f9:f7:d9:35:ec:25:b5:e7:5d: be:45:d9:72:f7:76:fe:a8:fe:5a:e4:4b:36:ff:a4:d6:8e:6a: 8f:cc:13:da:9e:a6:e6:ff:aa:c8:f1:4c:ad:27:44:c8:e7:c8: 8b:5b:d7:a7:b0:a2:ca:75:97:50:36:01:72:a0:67:e3:8e:2f: b5:96:e4:fb:b5:5f:00:da:79:b3:36:0b:a1:2d:8f:13:1e:49: ed:c3:78:b8:50:e4:a3:17:3c:92:95:2d:64:ee:71:b8:2f:c4: 6b:bb:5c:91:45:61:43:f8:7f:fa:c6:f1:e9:c8:ef:2d:48:57: 8d:d2:74:04:39:b0:0d:eb:9b:ac:4a:e1:f3:ed:4d:52:86:07: f7:91:14:1b:20:8a:3c:5d:61:d7:3b:35:c6:94:d2:bd:a2:b4: d1:6b:5c:8e:58:a2:69:9d:21:54:6a:30:fa:70:c4:e1:ac:21: c7:e4:7f:4f:62:51:00:67:33:f1:3a:25:df:6f:3a:9b:d8:95: e0:b7:45:b9:9c:7e:88:88:d5:ee:e7:ad:c1:13:fa:33:fb:ad: 32:f5:17:d5:5f:f6:32:41:97:d3:c5:ae:48:26:7a:6f:25:66: 80:e1:cb:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjVMMOSkj41RSr7o89+UzPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNGNmY2U2MGM5YjBmMmQ0N2IzNjI4NjRkOGZlYmIyMjVi YjUyNDQwHhcNMjUxMjI4MDUwMDU3WhcNMjUxMjI5MDUwMDU3WjAzMTEwLwYDVQQD EygyOGRlNTJiMTJlZTA2ZTViNDExZWE5M2E5MGY2Y2RhZGU4NWVjYmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWvQTEcofO4+AVa+i2ocywK/ca/a SRc/BQSBMjWWR/UFugbRkENQnfo4i+/yyZvYkCvzpzJEtyPShUAzs5NeW84w60hD W1Rl5XyXdN3WyKDhje2enhOBnUbcgFlvRKj9mOMOF2oqsSRaAd+V38bIN8NRcXij gq07pq7wJDskVtR9BB2D0qMO0MzjbhJjkkVSgH5lE65iAm2zFIhBLkSysYUIhXRI lHcT8ypDPO9OWt+PT1LaRwG1Oz75QRJUvJv9OOYhb6LdRD1Pc6T0Pth6lLZ4wYhi vwfK/she4RlcXN8Sknv3xRR3dqEYTmikmkeiy5GbfnOyny9GQCfSt73uMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjeUrEu4G5bQR6pOpD2za3oXsvSMB8GA1UdIwQY MBaAFExM/OYMmw8tR7Nihk2P67Ilu1JEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEV6ODVneWJEeTFIczJLR1RZX3JzaVc3VWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iZjhiMGUtYmVkYS00YTU2LWJhZjAt ODJhZDExNjI2ZWVkLzEvVEV6ODVneWJEeTFIczJLR1RZX3JzaVc3VWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iZjhiMGUtYmVkYS00YTU2LWJhZjAtODJhZDExNjI2ZWVk LzEvVEV6ODVneWJEeTFIczJLR1RZX3JzaVc3VWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnyMT8zPP 9XXw4dTKAWmjzOhZF3lJ6MdvUkj6+ffZNewlteddvkXZcvd2/qj+WuRLNv+k1o5q j8wT2p6m5v+qyPFMrSdEyOfIi1vXp7CiynWXUDYBcqBn444vtZbk+7VfANp5szYL oS2PEx5J7cN4uFDkoxc8kpUtZO5xuC/Ea7tckUVhQ/h/+sbx6cjvLUhXjdJ0BDmw DeubrErh8+1NUoYH95EUGyCKPF1h1zs1xpTSvaK00WtcjliiaZ0hVGow+nDE4awh x+R/T2JRAGcz8Tol3286m9iV4LdFuZx+iIjV7uetwRP6M/utMvUX1V/2MkGX08Wu SCZ6byVmgOHLkA== -----END CERTIFICATE-----Generated at Sun Dec 28 07:30:12 2025 by rpki-client