This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft File: TvYP_RC7937OmKeBY1mERCd9v6Q.mft (raw, json) Hash identifier: a249ERMgPEDkC6xz6qouKl1DEt4C80Hl41dtW/ub+8A= Subject key identifier: 17:33:E4:63:6F:0B:A9:E7:02:D0:85:5D:75:19:64:40:C0:62:2D:E3 Authority key identifier: 4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4 Certificate issuer: /CN=4ef60ffd10bbf77ece98a78163598444277dbfa4 Certificate serial: 019B4438B2DF3E8A20D71C35E36F13ACBF18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft Manifest number: 1788 Signing time: Mon 22 Dec 2025 04:02:04 +0000 Manifest this update: Mon 22 Dec 2025 04:02:04 +0000 Manifest next update: Tue 23 Dec 2025 04:02:04 +0000 Files and hashes: 1: TvYP_RC7937OmKeBY1mERCd9v6Q.crl (hash: o/oiRl7ri2WCcmosEM8sPUqv8ObYIXQSMvv9gOhkKIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:b2:df:3e:8a:20:d7:1c:35:e3:6f:13:ac:bf:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ef60ffd10bbf77ece98a78163598444277dbfa4 Validity Not Before: Dec 22 04:02:04 2025 GMT Not After : Dec 23 04:02:04 2025 GMT Subject: CN=1733e4636f0ba9e702d0855d75196440c0622de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ae:e1:d2:82:a4:fb:d2:25:db:2d:9b:54:80: 5c:d0:2f:69:63:03:83:f1:75:de:7c:33:c1:ad:89: 13:b8:cf:a6:34:15:34:fd:5e:03:70:0c:9c:28:cd: f5:7c:7d:07:04:75:cd:96:44:41:df:6b:68:94:93: a3:3a:65:fe:97:4e:a9:fb:ee:ff:28:20:ea:f8:d6: 8a:fe:1f:ab:5b:75:8d:0a:87:86:2a:7b:94:7d:23: 5a:18:ce:84:7b:5f:1d:0b:97:b9:60:f7:a5:55:8a: 31:9c:1a:d5:91:f3:1e:b7:b3:25:68:42:15:e4:d4: 62:f4:99:96:6b:08:fe:47:9d:a7:32:9b:c3:36:4f: e5:49:b7:72:db:9d:d5:fc:a8:58:79:e8:e8:36:2e: 1f:8f:64:1a:13:4d:0c:3a:a4:4d:77:7f:a4:be:89: cf:5e:d3:61:4e:fc:d0:bf:e7:6e:79:ae:7c:fa:b9: 66:ca:c5:69:d4:a0:c2:58:de:b5:55:75:34:20:85: b8:dc:19:ba:f5:87:82:cf:0a:7d:e6:00:5b:f0:4d: 40:89:5d:da:05:d0:cd:dc:e0:94:02:35:3c:2c:6a: 41:98:e9:30:f2:93:84:53:c7:7e:8e:74:d6:7c:cb: 70:8f:5a:77:47:9c:d8:2e:c7:41:6c:cc:45:df:cf: 1e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:33:E4:63:6F:0B:A9:E7:02:D0:85:5D:75:19:64:40:C0:62:2D:E3 X509v3 Authority Key Identifier: keyid:4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9b:99:5f:01:70:7f:f4:4a:e8:e9:50:9a:a3:0f:cf:72:25: 32:0f:1a:7f:db:8c:17:91:42:62:6b:fd:a5:17:43:28:ed:3e: 94:70:56:84:b9:26:70:b6:1d:05:c1:dd:8d:fc:13:ae:ec:d0: 57:d3:fe:7a:8c:1f:37:ba:9a:b1:2b:b8:65:69:09:98:5a:1a: a4:e6:49:f6:18:ad:ec:73:36:9d:c9:19:48:26:1e:e2:b3:2e: 1e:76:ca:3e:ac:b9:cc:72:7a:61:7b:8f:7b:f7:af:ef:f4:e6: 16:b3:52:77:e5:16:80:b0:2e:e7:d0:66:68:af:cb:a5:74:cd: 87:4c:8d:ce:80:cd:fb:44:da:79:6d:b9:c8:48:b7:9b:58:c2: 4e:81:0d:b5:e0:16:83:18:1b:58:2d:26:84:51:52:00:1f:78: a3:fd:6e:e6:69:97:26:3b:ef:fe:dc:47:0c:ee:37:60:1c:fc: f5:10:6b:66:38:ce:fc:5b:99:37:72:a6:bc:a2:78:fc:66:85: 3c:72:65:06:95:ff:b1:5d:24:d1:8a:3b:11:11:b0:51:5f:a2: 71:aa:0f:59:4b:9d:7b:82:43:e1:07:ca:6a:b4:b0:03:b7:23: 19:68:2c:3b:57:17:1a:9f:22:a8:3f:5d:86:e7:7b:67:4c:d9: a3:de:b0:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOLLfPoog1xw1428TrL8YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZjYwZmZkMTBiYmY3N2VjZTk4YTc4MTYzNTk4NDQ0Mjc3 ZGJmYTQwHhcNMjUxMjIyMDQwMjA0WhcNMjUxMjIzMDQwMjA0WjAzMTEwLwYDVQQD EygxNzMzZTQ2MzZmMGJhOWU3MDJkMDg1NWQ3NTE5NjQ0MGMwNjIyZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK7h0oKk+9Il2y2bVIBc0C9pYwOD 8XXefDPBrYkTuM+mNBU0/V4DcAycKM31fH0HBHXNlkRB32tolJOjOmX+l06p++7/ KCDq+NaK/h+rW3WNCoeGKnuUfSNaGM6Ee18dC5e5YPelVYoxnBrVkfMet7MlaEIV 5NRi9JmWawj+R52nMpvDNk/lSbdy253V/KhYeejoNi4fj2QaE00MOqRNd3+kvonP XtNhTvzQv+duea58+rlmysVp1KDCWN61VXU0IIW43Bm69YeCzwp95gBb8E1AiV3a BdDN3OCUAjU8LGpBmOkw8pOEU8d+jnTWfMtwj1p3R5zYLsdBbMxF388ewwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcz5GNvC6nnAtCFXXUZZEDAYi3jMB8GA1UdIwQY MBaAFE72D/0Qu/d+zpingWNZhEQnfb+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHZZUF9SQzc5MzdPbUtlQlkxbUVSQ2Q5djZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82MzllNWYtMDc5Ny00NDczLWFlZmYt NTJmNTc1M2ZjM2JlLzEvVHZZUF9SQzc5MzdPbUtlQlkxbUVSQ2Q5djZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82MzllNWYtMDc5Ny00NDczLWFlZmYtNTJmNTc1M2ZjM2Jl LzEvVHZZUF9SQzc5MzdPbUtlQlkxbUVSQ2Q5djZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5uZXwFw f/RK6OlQmqMPz3IlMg8af9uMF5FCYmv9pRdDKO0+lHBWhLkmcLYdBcHdjfwTruzQ V9P+eowfN7qasSu4ZWkJmFoapOZJ9hit7HM2nckZSCYe4rMuHnbKPqy5zHJ6YXuP e/ev7/TmFrNSd+UWgLAu59BmaK/LpXTNh0yNzoDN+0TaeW25yEi3m1jCToENteAW gxgbWC0mhFFSAB94o/1u5mmXJjvv/txHDO43YBz89RBrZjjO/FuZN3KmvKJ4/GaF PHJlBpX/sV0k0Yo7ERGwUV+icaoPWUude4JD4QfKarSwA7cjGWgsO1cXGp8iqD9d hud7Z0zZo96w6g== -----END CERTIFICATE-----Generated at Mon Dec 22 08:11:18 2025 by rpki-client