This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft File: TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json) Hash identifier: 9SZrwD3xRDNiuRh2ac5XgfeXQjoaYRM522YFKx91Ivg= Subject key identifier: 2E:FA:08:25:94:3A:2A:12:DD:47:01:94:86:61:34:1D:88:37:95:5E Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9 Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9 Certificate serial: 019B38A1B452A86E1AD79806FE11F0B19A73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft Manifest number: 09E6 Signing time: Fri 19 Dec 2025 22:01:20 +0000 Manifest this update: Fri 19 Dec 2025 22:01:20 +0000 Manifest next update: Sat 20 Dec 2025 22:01:20 +0000 Files and hashes: 1: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: Y3edYFa4llUy2BtrRTv+nUGrSzomJPq+OqlfFbzHnjo=) 2: bMiFWbEVmjXACwoqhdLryOI7ecM.roa (hash: y4qa2SV/D4+dXjdntmc66BpYAvlL021xKDW12tsJ7Ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:b4:52:a8:6e:1a:d7:98:06:fe:11:f0:b1:9a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9 Validity Not Before: Dec 19 22:01:20 2025 GMT Not After : Dec 20 22:01:20 2025 GMT Subject: CN=2efa0825943a2a12dd4701948661341d8837955e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:08:cf:39:d4:e7:43:aa:39:2e:b4:b1:9a:5d: 33:2d:b8:98:f7:49:dd:0c:7c:80:10:c9:e7:bf:d5: 74:04:ad:43:07:f0:55:57:a1:26:18:5c:2e:b1:c5: 4a:16:00:78:cc:db:a5:f4:40:73:8f:ca:ae:08:5f: f7:e0:8e:fc:c6:67:fb:67:de:f3:30:9a:46:53:ca: f8:ae:cd:ad:41:1c:7c:e3:0d:f7:5b:54:3f:e8:b0: 6f:9b:00:04:eb:1b:7f:14:93:bb:62:e7:df:43:39: ca:6e:a6:12:e1:a7:c7:dc:1d:05:e5:bf:1a:54:8e: 19:e3:96:48:d8:64:49:13:f6:b0:41:e5:18:62:01: f7:38:9d:a4:05:8b:c1:29:2a:d2:b4:91:30:d5:8d: 7b:cd:0e:07:c9:f8:aa:cd:62:e9:1c:ed:2b:26:1a: ca:64:19:d3:7a:2d:57:68:f4:01:f9:83:2f:a7:d5: 7e:69:ab:b1:57:62:c1:c2:7f:cb:11:0a:76:10:13: a4:0e:fc:36:1b:ae:77:74:94:b8:f1:08:ed:e1:14: 5a:9d:25:71:e5:29:24:3c:f5:59:59:92:6b:bb:15: 02:74:fc:7c:a9:d2:fc:2a:a6:5d:7a:3e:b9:8c:fc: 0f:f4:05:b6:26:df:a2:80:fa:8a:8b:f2:be:da:4b: 15:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FA:08:25:94:3A:2A:12:DD:47:01:94:86:61:34:1D:88:37:95:5E X509v3 Authority Key Identifier: keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:dd:92:41:d7:4b:5f:53:89:19:30:a3:46:6b:b0:ba:c0:b8: 4b:de:5f:9e:ca:f0:1c:e3:0f:03:53:06:d5:96:bc:f9:a4:6c: bb:e5:05:6d:76:8f:67:41:0a:d6:15:40:6d:d1:82:5d:af:92: 96:54:22:87:32:c9:69:28:92:b5:4c:ae:5a:d2:6b:4a:bb:8d: 86:ee:20:2c:11:61:33:ef:43:16:8d:b1:ea:db:13:51:c5:e7: 40:5c:2f:7c:92:c1:23:09:2f:33:b5:ae:45:f8:af:40:56:c4: 07:fc:7a:59:0b:36:18:66:14:bb:ef:72:3f:dd:98:1a:4d:3b: 55:70:a6:ef:9b:52:cb:87:3d:21:39:aa:12:83:2e:f0:8a:81: e9:55:d3:52:a6:ae:40:76:35:64:e2:f4:a5:aa:11:75:46:46: 4a:24:73:a4:75:2f:1b:af:ab:94:e5:79:d2:93:69:39:cc:d9: 74:9d:5c:78:87:aa:ae:b9:1f:55:63:80:b2:79:10:a7:ed:42: 56:be:e1:92:c2:cd:b9:bc:58:62:61:b3:01:90:ea:be:a9:1b: 90:6b:85:83:af:af:07:9e:4e:a7:f9:2e:fc:28:b9:5c:51:85: 3e:05:07:56:f4:7b:43:81:20:fb:d9:38:cb:7c:47:1b:35:3d: 1e:43:09:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4obRSqG4a15gG/hHwsZpzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDAzYTU4NmI5NzhhNzBhYWE4MmUwOTU4YTkwMTUyZTcy Njc5ZDkwHhcNMjUxMjE5MjIwMTIwWhcNMjUxMjIwMjIwMTIwWjAzMTEwLwYDVQQD EygyZWZhMDgyNTk0M2EyYTEyZGQ0NzAxOTQ4NjYxMzQxZDg4Mzc5NTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAjPOdTnQ6o5LrSxml0zLbiY90nd DHyAEMnnv9V0BK1DB/BVV6EmGFwuscVKFgB4zNul9EBzj8quCF/34I78xmf7Z97z MJpGU8r4rs2tQRx84w33W1Q/6LBvmwAE6xt/FJO7YuffQznKbqYS4afH3B0F5b8a VI4Z45ZI2GRJE/awQeUYYgH3OJ2kBYvBKSrStJEw1Y17zQ4HyfiqzWLpHO0rJhrK ZBnTei1XaPQB+YMvp9V+aauxV2LBwn/LEQp2EBOkDvw2G653dJS48Qjt4RRanSVx 5SkkPPVZWZJruxUCdPx8qdL8KqZdej65jPwP9AW2Jt+igPqKi/K+2ksVJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC76CCWUOioS3UcBlIZhNB2IN5VeMB8GA1UdIwQY MBaAFE3QOlhrl4pwqqguCVipAVLnJnnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRBNldHdVhpbkNxcUM0SldLa0JVdWNtZWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jOWQ1MjMtMGJiOS00NTczLTk1OTUt NzZhM2ExMGEyNmYyLzEvVGRBNldHdVhpbkNxcUM0SldLa0JVdWNtZWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9jOWQ1MjMtMGJiOS00NTczLTk1OTUtNzZhM2ExMGEyNmYy LzEvVGRBNldHdVhpbkNxcUM0SldLa0JVdWNtZWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdd2SQddL X1OJGTCjRmuwusC4S95fnsrwHOMPA1MG1Za8+aRsu+UFbXaPZ0EK1hVAbdGCXa+S llQihzLJaSiStUyuWtJrSruNhu4gLBFhM+9DFo2x6tsTUcXnQFwvfJLBIwkvM7Wu RfivQFbEB/x6WQs2GGYUu+9yP92YGk07VXCm75tSy4c9ITmqEoMu8IqB6VXTUqau QHY1ZOL0paoRdUZGSiRzpHUvG6+rlOV50pNpOczZdJ1ceIeqrrkfVWOAsnkQp+1C Vr7hksLNubxYYmGzAZDqvqkbkGuFg6+vB55Op/ku/Ci5XFGFPgUHVvR7Q4Eg+9k4 y3xHGzU9HkMJiA== -----END CERTIFICATE-----Generated at Sat Dec 20 00:53:37 2025 by rpki-client