This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json) Hash identifier: UroESJzNoY+ty80bK9qxH4WcoKuvtNVD9h3os0ebxhA= Subject key identifier: 1F:74:C0:04:26:A1:FD:D8:87:62:C1:05:BA:32:24:90:9A:81:A3:37 Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9 Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9 Certificate serial: 019B0E932FB9BEC9CB534943D9F64014C60F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft Manifest number: 0BDC Signing time: Thu 11 Dec 2025 18:01:25 +0000 Manifest this update: Thu 11 Dec 2025 18:01:25 +0000 Manifest next update: Fri 12 Dec 2025 18:01:25 +0000 Files and hashes: 1: BGPcLkk4F9FLxsMbGn-M_F2CXto.roa (hash: PqbiTHE+O2cRLL+2/Q85oltHntGJN/X4GOAuPJ95eug=) 2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: rXpARpkAkuSNHbutZ0JGD0rls+fiMdsIvxJjIlSTwFg=) 3: nGObtVTwcFKea1knaujpvqhbims.roa (hash: l9jwJiOaQQcxbUJC1OWeTnOmsW+JZFElguXsrGzJSD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:2f:b9:be:c9:cb:53:49:43:d9:f6:40:14:c6:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9 Validity Not Before: Dec 11 18:01:25 2025 GMT Not After : Dec 12 18:01:25 2025 GMT Subject: CN=1f74c00426a1fdd88762c105ba3224909a81a337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:65:97:11:8a:96:c2:b7:30:26:f4:19:79:20: 17:82:b1:8c:bf:97:38:18:53:a7:27:1e:42:96:b2: 1d:d0:a0:96:34:b4:a4:47:54:89:56:b8:ea:85:73: 70:4d:2c:8d:91:a5:24:a8:b1:3e:5c:11:50:12:3a: bd:21:ca:03:8e:ed:72:ac:82:fa:9a:d6:2d:db:ac: 37:e8:c4:f2:77:8a:1e:73:af:46:5c:13:74:8d:04: 07:0e:dd:a1:fe:65:ec:66:f0:48:51:66:bb:86:42: f8:42:79:69:38:78:1d:af:89:08:be:02:9d:53:fb: b8:3f:2b:94:2e:8f:51:76:5c:b6:d0:d5:45:20:25: 89:7e:a9:08:65:5a:79:1b:a3:e8:a6:47:dd:cd:d7: bd:47:86:bf:ce:80:09:6b:d3:c0:41:3d:fc:f0:02: 25:fe:10:18:b7:34:3c:97:d3:fe:42:69:8a:ad:f1: c3:af:37:40:3e:24:2b:a9:03:8f:0f:f9:33:88:00: 2f:97:57:bb:f2:e0:eb:9f:bd:d5:8a:a0:77:eb:c1: 64:7d:61:79:12:3d:21:38:fb:01:92:04:59:2c:01: 6e:6a:ff:f0:c8:4d:57:80:23:1f:64:64:c6:16:b7: bf:ce:81:8f:5a:ea:f7:62:4c:c0:47:1a:40:b2:a7: 84:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:74:C0:04:26:A1:FD:D8:87:62:C1:05:BA:32:24:90:9A:81:A3:37 X509v3 Authority Key Identifier: keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:14:d7:4c:6a:07:7d:29:a3:1f:ff:b7:88:bb:dc:48:df:15: ec:75:49:7f:d9:25:3b:ad:b9:0a:76:95:4c:9d:56:03:37:65: 4a:41:b2:e7:91:7b:53:db:cd:04:40:88:6f:58:50:af:11:e6: 1d:11:4e:b7:44:4b:b6:4d:53:d7:d4:6d:3b:a3:75:44:d1:1d: 07:29:f3:92:a4:1a:66:0a:aa:62:e9:75:91:4d:4d:00:90:3d: 91:80:d4:83:fa:fa:b8:d6:8e:e4:a1:39:a5:1e:9d:9f:79:0e: 0c:fc:00:a6:89:81:2c:69:42:2f:7c:df:61:56:75:97:a5:75: 2b:17:fb:9e:ee:ce:ec:1d:ce:82:fb:ba:e2:20:4c:00:0f:3a: db:1b:df:67:b1:7d:60:23:0e:8c:cc:c1:a2:ed:88:7b:a5:4d: 65:a9:41:50:15:cd:7f:79:b4:93:31:1b:2e:17:16:ed:25:01: 48:b1:ea:03:9d:ac:ac:9e:14:ef:b5:6a:6f:bc:cd:ea:cd:08: 08:13:34:40:d9:61:18:e8:01:3f:d1:4d:67:6b:96:47:fb:64: dd:ea:c6:c8:f8:0a:38:92:25:08:75:c1:be:ae:0a:0d:a3:b5: aa:31:64:78:86:f3:3f:47:b9:ec:eb:c8:15:69:4d:c5:c3:4b: f0:96:8b:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOky+5vsnLU0lD2fZAFMYPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzlmOGI4ZmViYWI2ZDIwOWEyNDk4MWUzOTlmZDYwNDMy ZTFjYzkwHhcNMjUxMjExMTgwMTI1WhcNMjUxMjEyMTgwMTI1WjAzMTEwLwYDVQQD EygxZjc0YzAwNDI2YTFmZGQ4ODc2MmMxMDViYTMyMjQ5MDlhODFhMzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2WXEYqWwrcwJvQZeSAXgrGMv5c4 GFOnJx5ClrId0KCWNLSkR1SJVrjqhXNwTSyNkaUkqLE+XBFQEjq9IcoDju1yrIL6 mtYt26w36MTyd4oec69GXBN0jQQHDt2h/mXsZvBIUWa7hkL4QnlpOHgdr4kIvgKd U/u4PyuULo9Rdly20NVFICWJfqkIZVp5G6Popkfdzde9R4a/zoAJa9PAQT388AIl /hAYtzQ8l9P+QmmKrfHDrzdAPiQrqQOPD/kziAAvl1e78uDrn73ViqB368FkfWF5 Ej0hOPsBkgRZLAFuav/wyE1XgCMfZGTGFre/zoGPWur3YkzARxpAsqeElwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB90wAQmof3Yh2LBBboyJJCagaM3MB8GA1UdIwQY MBaAFEw5+Lj+urbSCaJJgeOZ/WBDLhzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYt OTMyMGZlMTNlNWZlLzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYtOTMyMGZlMTNlNWZl LzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRTXTGoH fSmjH/+3iLvcSN8V7HVJf9klO625CnaVTJ1WAzdlSkGy55F7U9vNBECIb1hQrxHm HRFOt0RLtk1T19RtO6N1RNEdBynzkqQaZgqqYul1kU1NAJA9kYDUg/r6uNaO5KE5 pR6dn3kODPwApomBLGlCL3zfYVZ1l6V1Kxf7nu7O7B3Ogvu64iBMAA862xvfZ7F9 YCMOjMzBou2Ie6VNZalBUBXNf3m0kzEbLhcW7SUBSLHqA52srJ4U77Vqb7zN6s0I CBM0QNlhGOgBP9FNZ2uWR/tk3erGyPgKOJIlCHXBvq4KDaO1qjFkeIbzP0e57OvI FWlNxcNL8JaLTg== -----END CERTIFICATE-----Generated at Thu Dec 11 21:25:09 2025 by rpki-client