This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json) Hash identifier: 5gb4qvYRUajgEWXMI5Wl0xdeqBeZUxQp1VqttKK2miw= Subject key identifier: 24:82:CF:FA:E7:F3:77:A4:64:BA:90:41:4C:CB:FD:A1:7A:89:14:BC Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18 Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318 Certificate serial: 019B1014B1954B3E895A9E762E18DDC04745 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft Manifest number: 1703 Signing time: Fri 12 Dec 2025 01:02:30 +0000 Manifest this update: Fri 12 Dec 2025 01:02:30 +0000 Manifest next update: Sat 13 Dec 2025 01:02:30 +0000 Files and hashes: 1: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: JxEfbdKPRO8mDCUQvVgXxYIRSxjb0kEa7PtB7C1Vwfg=) 2: gjoyy0FPdmf2zrdNnLaoUXfqkA8.roa (hash: RTgHJsDHudCpwL05o4vGq9BVppolqh2KaIXjwJZDWfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:b1:95:4b:3e:89:5a:9e:76:2e:18:dd:c0:47:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318 Validity Not Before: Dec 12 01:02:30 2025 GMT Not After : Dec 13 01:02:30 2025 GMT Subject: CN=2482cffae7f377a464ba90414ccbfda17a8914bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6f:9a:93:0e:84:48:50:f8:27:69:4f:cf:06: 22:2e:40:4b:a5:55:75:50:f0:b0:e8:c4:31:ad:d3: 1d:42:ad:15:80:d7:3f:b9:48:ba:18:c3:48:81:a3: 9c:33:ac:0e:2b:80:7d:62:3f:af:87:85:c7:34:4b: 9d:93:d8:58:eb:61:09:a1:19:b9:25:86:34:7d:b0: 6f:4e:7b:2c:17:f2:9e:78:b0:d2:ee:cf:42:f3:d8: 1c:a1:82:62:88:bc:33:74:84:e0:a8:dc:5e:4c:e7: b3:76:2a:81:2b:a4:98:2e:74:a1:71:69:7f:3d:c9: e0:3a:ce:23:ce:7b:e2:3a:cc:4d:7b:95:af:c0:4a: fa:e9:03:69:11:f4:85:99:19:c4:cb:28:88:43:e8: a4:5a:26:89:aa:c3:07:49:26:87:7b:5b:d0:6f:36: ea:fc:6a:6d:d9:f3:d5:1b:88:3c:43:73:bb:8b:28: f0:b0:bc:45:7a:60:75:a6:d1:5a:8f:05:ff:c5:ed: 7d:93:f0:f2:c9:9d:84:99:c0:48:24:a6:9d:b4:e0: 90:9b:c7:a1:56:f9:4c:86:10:86:36:16:a3:4e:f6: b4:32:d2:11:91:d4:04:a3:5c:31:da:60:da:a4:d0: 02:9e:7a:61:e1:46:6c:1b:8f:3e:e4:9e:8e:21:9d: 9e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:82:CF:FA:E7:F3:77:A4:64:BA:90:41:4C:CB:FD:A1:7A:89:14:BC X509v3 Authority Key Identifier: keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:7e:bb:49:20:14:38:72:29:72:d5:f1:9f:e0:bc:51:66:86: dc:2d:4e:a2:78:8f:48:96:4f:6e:df:dd:a2:1e:48:a9:b3:15: 85:e6:11:b5:c3:8d:8b:ae:9e:b4:0d:20:cb:2d:a6:77:e6:21: b1:b1:f7:53:79:1b:4a:06:59:e9:54:7d:de:ff:2c:e2:2a:3c: 64:51:21:26:b7:07:f2:7b:0c:52:be:b5:25:2f:3b:1a:35:22: 47:a6:64:57:d3:45:fd:0e:7a:bb:c1:7d:aa:9f:12:5a:21:f6: 96:0f:b5:ef:7c:b9:8d:50:f2:37:c9:9e:bb:ad:25:3f:e9:73: d1:1a:b5:65:8c:98:96:1c:62:b2:2b:fa:7f:a3:11:97:08:ae: b2:e1:7d:43:41:94:ec:d9:d5:4a:17:73:16:f9:8f:0a:83:14: 6c:5a:6a:a4:88:76:f6:9c:e9:24:49:01:1f:c2:06:b4:53:eb: 07:dd:c4:4c:39:b3:df:7d:1f:49:36:27:55:42:86:55:ba:69: ca:75:bb:bd:8f:df:89:03:c0:37:7a:28:09:ae:49:a3:8b:cf: 91:e8:24:cd:66:b5:24:ec:c6:89:3c:4d:6c:06:64:d7:08:5a: 1b:14:c2:8c:49:97:02:00:49:e4:46:fd:37:77:e6:b6:2b:b5: 25:f1:db:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFLGVSz6JWp52LhjdwEdFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDZlNzc5YTZjMGYwYjA5MjE2NjIyMzgwNDY3ZGNlMmQx MWEzMTgwHhcNMjUxMjEyMDEwMjMwWhcNMjUxMjEzMDEwMjMwWjAzMTEwLwYDVQQD EygyNDgyY2ZmYWU3ZjM3N2E0NjRiYTkwNDE0Y2NiZmRhMTdhODkxNGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW+akw6ESFD4J2lPzwYiLkBLpVV1 UPCw6MQxrdMdQq0VgNc/uUi6GMNIgaOcM6wOK4B9Yj+vh4XHNEudk9hY62EJoRm5 JYY0fbBvTnssF/KeeLDS7s9C89gcoYJiiLwzdITgqNxeTOezdiqBK6SYLnShcWl/ PcngOs4jznviOsxNe5WvwEr66QNpEfSFmRnEyyiIQ+ikWiaJqsMHSSaHe1vQbzbq /Gpt2fPVG4g8Q3O7iyjwsLxFemB1ptFajwX/xe19k/DyyZ2EmcBIJKadtOCQm8eh VvlMhhCGNhajTva0MtIRkdQEo1wx2mDapNACnnph4UZsG48+5J6OIZ2eIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSCz/rn83ekZLqQQUzL/aF6iRS8MB8GA1UdIwQY MBaAFE3W53mmwPCwkhZiI4BGfc4tEaMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQt YzQ3MmU2MmViZWE4LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQtYzQ3MmU2MmViZWE4 LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaX67SSAU OHIpctXxn+C8UWaG3C1OoniPSJZPbt/doh5IqbMVheYRtcONi66etA0gyy2md+Yh sbH3U3kbSgZZ6VR93v8s4io8ZFEhJrcH8nsMUr61JS87GjUiR6ZkV9NF/Q56u8F9 qp8SWiH2lg+173y5jVDyN8meu60lP+lz0Rq1ZYyYlhxisiv6f6MRlwiusuF9Q0GU 7NnVShdzFvmPCoMUbFpqpIh29pzpJEkBH8IGtFPrB93ETDmz330fSTYnVUKGVbpp ynW7vY/fiQPAN3ooCa5Jo4vPkegkzWa1JOzGiTxNbAZk1whaGxTCjEmXAgBJ5Eb9 N3fmtiu1JfHbWg== -----END CERTIFICATE-----Generated at Fri Dec 12 03:07:20 2025 by rpki-client