This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft File: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft (raw, json) Hash identifier: Fn0Lntef6nfmsTDiiy2B6dl18l6dyJrzU/x3KP2roic= Subject key identifier: 4F:C4:08:70:FF:D6:4B:DB:F3:79:41:B0:70:53:08:EA:F2:8A:60:EB Authority key identifier: B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6 Certificate issuer: /CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6 Certificate serial: 019B2F9E31D3BC833538EB5E91537027351F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft Manifest number: 0CDC Signing time: Thu 18 Dec 2025 04:00:55 +0000 Manifest this update: Thu 18 Dec 2025 04:00:55 +0000 Manifest next update: Fri 19 Dec 2025 04:00:55 +0000 Files and hashes: 1: DWyS6ktuYXD1HWtRdim_tw6aAHw.roa (hash: ZpPs8QmClGInLrYdfgabA/tiTnRpT7Agrz+vwk6fAyc=) 2: ebklZqmx0-dRJX-3stcdCCjPSZQ.roa (hash: oxCqtL4IdqqluHjcszErTou8uGJlC2MCnMVsPPzgZCM=) 3: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl (hash: 1vklexM5EewCUhSRl7i1JQGxnxSXvwA4GcsxV1Y64ZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:31:d3:bc:83:35:38:eb:5e:91:53:70:27:35:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6 Validity Not Before: Dec 18 04:00:55 2025 GMT Not After : Dec 19 04:00:55 2025 GMT Subject: CN=4fc40870ffd64bdbf37941b0705308eaf28a60eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a7:61:fe:3a:c0:c4:1e:33:4f:19:ac:cc:24: d1:da:f4:77:8d:19:a6:c9:fd:4c:53:dc:05:47:5a: e6:c8:a4:73:24:3d:dd:57:da:e3:70:e7:0d:23:c6: bf:2c:d9:0c:fb:dc:df:25:f4:8b:7a:e7:38:d6:24: 3a:b7:79:75:77:cc:c9:dd:36:e3:28:29:db:c6:87: b3:df:1b:a5:ce:64:84:4f:7e:f0:cb:08:0f:ee:61: 24:3a:cf:f6:eb:c2:d1:b9:fd:f7:5b:29:6a:00:8e: 7b:6d:01:ec:df:8d:c6:9d:be:c6:7d:55:73:22:17: f0:0b:68:be:cb:bd:88:14:e4:8f:d7:58:91:97:09: 79:fd:80:76:2d:3f:f8:4a:c8:97:e5:e0:32:26:9b: 11:8b:12:ca:13:c8:d2:9d:93:c0:21:07:79:eb:4d: ea:4c:e3:08:f0:ee:61:ba:dc:00:ec:ce:45:f4:a3: 0e:52:d7:84:6c:eb:f8:e0:b9:a3:62:e6:34:bb:03: 5a:c4:11:a5:e9:3c:fc:5f:ca:68:e5:54:54:f7:74: 0c:76:8a:28:3e:5b:c0:ab:fb:02:9e:cb:60:d0:c2: 86:eb:27:05:a5:2b:29:7c:4d:61:5a:d1:d4:e4:68: fc:14:8a:44:21:9b:56:90:5d:5f:06:3a:21:60:6f: 3d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C4:08:70:FF:D6:4B:DB:F3:79:41:B0:70:53:08:EA:F2:8A:60:EB X509v3 Authority Key Identifier: keyid:B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f7:81:16:43:e0:f4:90:e2:e9:36:d7:9b:47:31:f7:5c:98: 40:78:65:0f:91:de:f3:37:72:1e:3d:4d:f7:af:87:a5:df:f6: ac:12:5b:06:58:ee:be:c8:56:78:db:31:51:f4:2f:3f:0d:fd: ae:0a:b4:b6:3f:cc:c2:2a:d6:fe:36:c1:df:27:ba:d2:bc:d7: 6d:4b:66:3f:7f:d5:2b:08:ed:d1:32:39:2e:c5:78:da:f4:b5: 34:10:1a:96:bd:3e:c9:33:76:21:02:6f:62:65:21:07:35:62: 6d:0f:a1:d4:ac:75:33:a3:39:03:4d:c8:e7:28:c2:1a:3a:65: 3e:f3:9d:76:a1:c9:c5:d6:02:65:67:d2:f2:93:ba:c5:3f:a8: 9d:6a:a9:dc:03:27:0f:01:82:3e:dd:d6:f4:6c:ed:09:b4:89: 2d:7e:b9:79:08:14:41:45:8f:8a:34:7c:bf:22:4c:92:fe:5a: c3:75:c2:28:8a:00:77:2a:7f:b3:c1:81:1e:81:01:d4:5e:aa: 5e:05:76:33:2d:b4:2a:c3:6a:cb:95:be:62:49:18:8d:d6:1b: da:07:2d:d0:f0:bc:53:9b:7f:18:36:43:8e:c3:07:b4:80:68: 58:af:b4:5b:86:f0:f4:2b:45:5c:06:d7:f7:9b:96:bc:d1:02: fd:d6:af:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnjHTvIM1OOtekVNwJzUfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2Njc3OWYyMDU1YjI1NGY1ZDViMzI5MmVlYWYwZGQ1Nzk3 NzM3YTYwHhcNMjUxMjE4MDQwMDU1WhcNMjUxMjE5MDQwMDU1WjAzMTEwLwYDVQQD Eyg0ZmM0MDg3MGZmZDY0YmRiZjM3OTQxYjA3MDUzMDhlYWYyOGE2MGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Kdh/jrAxB4zTxmszCTR2vR3jRmm yf1MU9wFR1rmyKRzJD3dV9rjcOcNI8a/LNkM+9zfJfSLeuc41iQ6t3l1d8zJ3Tbj KCnbxoez3xulzmSET37wywgP7mEkOs/268LRuf33WylqAI57bQHs343Gnb7GfVVz IhfwC2i+y72IFOSP11iRlwl5/YB2LT/4SsiX5eAyJpsRixLKE8jSnZPAIQd5603q TOMI8O5hutwA7M5F9KMOUteEbOv44LmjYuY0uwNaxBGl6Tz8X8po5VRU93QMdooo PlvAq/sCnstg0MKG6ycFpSspfE1hWtHU5Gj8FIpEIZtWkF1fBjohYG89KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/ECHD/1kvb83lBsHBTCOryimDrMB8GA1UdIwQY MBaAFLZnefIFWyVPXVsyku6vDdV5dzemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG1kNThnVmJKVTlkV3pLUzdxOE4xWGwzTjZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xZjgyZTUtMzA5OC00NTNhLWFmNjQt Y2FiNzE3YTgwOWU3LzEvdG1kNThnVmJKVTlkV3pLUzdxOE4xWGwzTjZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xZjgyZTUtMzA5OC00NTNhLWFmNjQtY2FiNzE3YTgwOWU3 LzEvdG1kNThnVmJKVTlkV3pLUzdxOE4xWGwzTjZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/eBFkPg 9JDi6TbXm0cx91yYQHhlD5He8zdyHj1N96+Hpd/2rBJbBljuvshWeNsxUfQvPw39 rgq0tj/MwirW/jbB3ye60rzXbUtmP3/VKwjt0TI5LsV42vS1NBAalr0+yTN2IQJv YmUhBzVibQ+h1Kx1M6M5A03I5yjCGjplPvOddqHJxdYCZWfS8pO6xT+onWqp3AMn DwGCPt3W9GztCbSJLX65eQgUQUWPijR8vyJMkv5aw3XCKIoAdyp/s8GBHoEB1F6q XgV2My20KsNqy5W+YkkYjdYb2gct0PC8U5t/GDZDjsMHtIBoWK+0W4bw9CtFXAbX 95uWvNEC/davQw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:26:11 2025 by rpki-client