This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft File: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft (raw, json) Hash identifier: vvhPUpAuz4GLGxVdMke8VmmYINr2EacKKgZngMRlhvU= Subject key identifier: 81:AB:38:38:46:BD:55:4E:C9:B8:9E:E4:51:AF:80:C1:D7:33:58:04 Authority key identifier: B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4 Certificate issuer: /CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4 Certificate serial: 019B341FA325296C2F0FC11447754FE3FDC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 01:00:47 +0000 Manifest this update: Fri 19 Dec 2025 01:00:47 +0000 Manifest next update: Sat 20 Dec 2025 01:00:47 +0000 Files and hashes: 1: E5ldtRDNq7PF5yZrAMEvxowWuR0.roa (hash: 4L7DIoeLgHz0Qv5KkaEDn/KJszMLQY8xsxtNREAtJGQ=) 2: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl (hash: 2bZTHHkuPoO5ra89VWqSy/0Zx7M6UBjLUaCvdmbCJC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:a3:25:29:6c:2f:0f:c1:14:47:75:4f:e3:fd:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4 Validity Not Before: Dec 19 01:00:47 2025 GMT Not After : Dec 20 01:00:47 2025 GMT Subject: CN=81ab383846bd554ec9b89ee451af80c1d7335804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:83:b4:57:34:12:fb:cd:8b:67:41:b4:62:ac: 93:23:8d:00:2b:52:5d:9c:81:de:f4:0e:19:18:2d: 1d:58:97:83:52:e9:11:ce:cf:00:9e:3f:7c:8e:03: 15:f4:c4:df:a5:c5:ad:fa:e4:3e:f4:10:00:1d:56: c4:75:ff:0e:5f:9f:af:0b:67:cf:4c:87:5a:14:fa: a3:00:6f:79:6a:f7:7d:de:63:24:a4:b9:b4:ee:8f: 97:57:2b:65:e1:39:af:0c:e1:45:91:72:1b:42:01: 36:22:23:1b:b1:00:74:10:ce:fa:21:9a:75:ab:4f: 49:86:f0:00:af:08:3a:d4:e0:79:ef:31:09:fd:1c: 44:0e:fd:c3:2a:5d:ff:68:e0:cb:9c:e4:74:9a:58: a3:fd:e7:ab:4f:15:cf:13:63:1b:fd:c9:f9:93:2f: 04:02:90:ad:75:e9:83:40:d1:d4:a9:9b:24:c6:70: 9a:2a:b5:b1:9e:a8:a0:84:c6:7a:be:78:77:38:1d: 3b:4e:dc:8b:6c:f8:0d:de:af:fa:e0:c5:29:ea:c5: d4:c9:ec:e4:16:78:00:8a:47:b4:93:eb:d3:14:b2: 49:77:17:86:4d:dc:4c:50:61:30:3d:f0:6e:89:72: a0:4e:cb:c4:57:79:38:51:f3:66:54:04:a3:18:85: c1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AB:38:38:46:BD:55:4E:C9:B8:9E:E4:51:AF:80:C1:D7:33:58:04 X509v3 Authority Key Identifier: keyid:B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c6:0d:6f:c7:d7:19:29:b8:ed:5e:0e:01:b3:de:2f:1e:93: 1e:f5:b1:75:6f:60:dd:d1:5e:6a:81:40:76:a3:36:bc:a5:d5: 15:48:32:5d:3f:13:c4:8e:ce:50:3d:79:2d:f3:0f:12:f4:f8: f5:4d:ce:c1:57:54:f2:f6:27:a3:36:10:2d:28:ce:16:74:0c: 31:c2:24:0f:0b:d7:87:b9:b6:92:47:bf:4e:88:ca:9a:c2:61: 17:f5:44:99:a8:5f:7b:e3:88:2b:93:d9:11:54:5f:96:3f:30: b1:df:64:34:e7:bc:bd:2a:c5:8f:8f:4d:2f:0b:e2:cc:96:53: 1c:60:b0:26:71:62:a5:4e:e5:92:45:57:c9:30:0f:a7:21:f4: 96:00:c1:14:44:5b:7c:72:ec:1b:0b:4b:90:67:91:8d:a7:09: 93:f4:cc:e2:27:e9:15:66:02:05:3a:a8:77:1c:28:b6:4f:8e: 32:4e:f3:0e:f5:06:a9:49:7d:26:1f:e1:ed:82:61:0c:92:a1: b2:2e:79:a5:ef:a0:f9:9d:4a:a3:7e:a6:f4:63:82:0b:e7:8e: 05:df:20:13:b8:c1:0c:8a:1b:b5:05:a9:d2:fd:b1:28:24:3a: bc:24:04:94:ca:b4:ad:e2:21:35:23:db:ee:08:9c:b2:ea:6a: 7f:a6:dd:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H6MlKWwvD8EUR3VP4/3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzM0MmYxN2Q1NGE4YTNkYTBjZTRkMzE4YjNiNGMzZmEw NTkzZTQwHhcNMjUxMjE5MDEwMDQ3WhcNMjUxMjIwMDEwMDQ3WjAzMTEwLwYDVQQD Eyg4MWFiMzgzODQ2YmQ1NTRlYzliODllZTQ1MWFmODBjMWQ3MzM1ODA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIO0VzQS+82LZ0G0YqyTI40AK1Jd nIHe9A4ZGC0dWJeDUukRzs8Anj98jgMV9MTfpcWt+uQ+9BAAHVbEdf8OX5+vC2fP TIdaFPqjAG95avd93mMkpLm07o+XVytl4TmvDOFFkXIbQgE2IiMbsQB0EM76IZp1 q09JhvAArwg61OB57zEJ/RxEDv3DKl3/aODLnOR0mlij/eerTxXPE2Mb/cn5ky8E ApCtdemDQNHUqZskxnCaKrWxnqighMZ6vnh3OB07TtyLbPgN3q/64MUp6sXUyezk FngAike0k+vTFLJJdxeGTdxMUGEwPfBuiXKgTsvEV3k4UfNmVASjGIXBfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGrODhGvVVOybie5FGvgMHXM1gEMB8GA1UdIwQY MBaAFLQzQvF9VKij2gzk0xiztMP6BZPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEROQzhYMVVxS1BhRE9UVEdMTzB3X29Gay1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNWEyYzAtNWMwOC00OGJkLWE4YzMt MzY3NGE5MDEwZWZkLzEvdEROQzhYMVVxS1BhRE9UVEdMTzB3X29Gay1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8xNWEyYzAtNWMwOC00OGJkLWE4YzMtMzY3NGE5MDEwZWZk LzEvdEROQzhYMVVxS1BhRE9UVEdMTzB3X29Gay1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8YNb8fX GSm47V4OAbPeLx6THvWxdW9g3dFeaoFAdqM2vKXVFUgyXT8TxI7OUD15LfMPEvT4 9U3OwVdU8vYnozYQLSjOFnQMMcIkDwvXh7m2kke/TojKmsJhF/VEmahfe+OIK5PZ EVRflj8wsd9kNOe8vSrFj49NLwvizJZTHGCwJnFipU7lkkVXyTAPpyH0lgDBFERb fHLsGwtLkGeRjacJk/TM4ifpFWYCBTqodxwotk+OMk7zDvUGqUl9Jh/h7YJhDJKh si55pe+g+Z1Ko36m9GOCC+eOBd8gE7jBDIobtQWp0v2xKCQ6vCQElMq0reIhNSPb 7gicsupqf6bd9A== -----END CERTIFICATE-----Generated at Fri Dec 19 06:44:29 2025 by rpki-client