This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json) Hash identifier: Klwh9GZvRpF3j+neLE6hZu7uo+PN5kFbkBEWmN3u4M8= Subject key identifier: 4C:51:CE:7D:51:2D:CF:DC:FF:C8:F3:D7:3F:29:7A:C0:C0:AF:60:63 Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9 Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9 Certificate serial: 019B21E2472B1A268E07634466189B641839 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft Manifest number: 0BE6 Signing time: Mon 15 Dec 2025 12:00:36 +0000 Manifest this update: Mon 15 Dec 2025 12:00:36 +0000 Manifest next update: Tue 16 Dec 2025 12:00:36 +0000 Files and hashes: 1: BGPcLkk4F9FLxsMbGn-M_F2CXto.roa (hash: PqbiTHE+O2cRLL+2/Q85oltHntGJN/X4GOAuPJ95eug=) 2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: pRopviLd5lKg7Myscspb0lWSxFUbKybnsOKk0Bml3gg=) 3: nGObtVTwcFKea1knaujpvqhbims.roa (hash: l9jwJiOaQQcxbUJC1OWeTnOmsW+JZFElguXsrGzJSD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:47:2b:1a:26:8e:07:63:44:66:18:9b:64:18:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9 Validity Not Before: Dec 15 12:00:36 2025 GMT Not After : Dec 16 12:00:36 2025 GMT Subject: CN=4c51ce7d512dcfdcffc8f3d73f297ac0c0af6063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f1:59:38:ea:0a:8f:ce:93:64:ad:86:c5:80: 3e:aa:fb:8c:c7:65:9c:00:b9:6d:7d:69:eb:35:28: f8:f5:5c:8c:7f:ed:02:1a:c9:ef:08:b4:94:66:8d: 1a:1b:78:ba:40:4f:72:22:a9:bb:1f:01:8b:0c:09: 3e:67:69:57:c2:b8:fb:0b:6f:9d:44:e9:f7:13:4c: b6:e2:fc:e4:92:ed:6f:fb:5b:22:28:40:6a:d1:e1: 46:29:b5:5a:b6:99:04:e4:4a:3a:d1:e8:81:64:4d: 52:2d:72:31:7c:1c:d0:8a:6d:6a:a0:27:49:34:1b: a2:01:ba:b0:d3:ab:69:dc:57:ab:19:d3:85:fd:4c: 28:04:10:dc:b9:93:ba:2e:86:b5:c9:0a:0f:86:0f: 30:4a:67:c3:e3:b6:25:7c:eb:f9:68:09:71:f7:31: 67:58:b9:da:32:07:8b:e5:b2:f5:a8:93:d2:c7:57: a0:74:cd:ed:98:4e:01:56:8d:d7:24:de:49:6d:f3: cd:fa:8d:c4:6a:ed:6e:44:41:3b:be:71:5a:6d:bd: b0:4b:a6:9b:2d:36:a8:da:fd:27:c1:ee:d6:57:19: cc:0a:1a:b9:c3:2f:68:62:73:32:04:a6:4b:4c:97: a7:4c:54:18:01:07:77:61:69:c1:69:da:4f:d3:b7: 47:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:51:CE:7D:51:2D:CF:DC:FF:C8:F3:D7:3F:29:7A:C0:C0:AF:60:63 X509v3 Authority Key Identifier: keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f6:05:a0:92:28:02:10:98:b8:63:38:fd:e4:93:50:c3:21: 72:70:c9:a1:4e:3a:a7:b8:d3:6b:9a:f2:54:ef:e0:66:e0:4b: c1:27:3f:be:49:26:d2:02:64:23:1f:67:05:4c:3b:aa:31:de: ce:5e:13:44:78:bf:ad:71:2d:7a:1c:83:28:6a:2c:13:b5:a9: 03:24:dd:38:c6:c6:51:4a:33:56:9c:af:6f:69:33:c4:45:b9: 83:fb:13:e6:04:ba:0b:3d:8d:44:b0:68:94:1f:c6:04:46:81: 15:a4:fc:cb:20:84:b4:5d:e0:12:29:be:46:70:fa:36:7c:42: 7a:9a:df:66:c4:24:47:62:e9:71:9e:53:ee:2c:91:6f:66:09: 55:81:46:4d:a9:55:01:e6:3b:70:4f:5e:e6:82:c6:a4:ad:7f: 41:b4:6d:72:2f:b7:e5:20:66:03:05:e3:0b:e6:90:2e:e4:dc: d3:14:95:aa:77:56:51:56:ba:98:86:1f:52:09:2e:5c:8d:54: 80:cf:84:92:63:99:75:80:f9:f3:59:e5:22:10:83:4c:97:a7: d1:3a:7b:46:ad:b7:74:ae:d8:be:f5:01:df:17:df:69:c3:b8: e4:9b:59:e7:54:cd:36:89:81:ec:50:b2:95:9f:e8:17:ec:bb: e0:cf:61:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4kcrGiaOB2NEZhibZBg5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzlmOGI4ZmViYWI2ZDIwOWEyNDk4MWUzOTlmZDYwNDMy ZTFjYzkwHhcNMjUxMjE1MTIwMDM2WhcNMjUxMjE2MTIwMDM2WjAzMTEwLwYDVQQD Eyg0YzUxY2U3ZDUxMmRjZmRjZmZjOGYzZDczZjI5N2FjMGMwYWY2MDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvFZOOoKj86TZK2GxYA+qvuMx2Wc ALltfWnrNSj49VyMf+0CGsnvCLSUZo0aG3i6QE9yIqm7HwGLDAk+Z2lXwrj7C2+d ROn3E0y24vzkku1v+1siKEBq0eFGKbVatpkE5Eo60eiBZE1SLXIxfBzQim1qoCdJ NBuiAbqw06tp3FerGdOF/UwoBBDcuZO6Loa1yQoPhg8wSmfD47YlfOv5aAlx9zFn WLnaMgeL5bL1qJPSx1egdM3tmE4BVo3XJN5JbfPN+o3Eau1uREE7vnFabb2wS6ab LTao2v0nwe7WVxnMChq5wy9oYnMyBKZLTJenTFQYAQd3YWnBadpP07dHbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExRzn1RLc/c/8jz1z8pesDAr2BjMB8GA1UdIwQY MBaAFEw5+Lj+urbSCaJJgeOZ/WBDLhzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYt OTMyMGZlMTNlNWZlLzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYtOTMyMGZlMTNlNWZl LzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPYFoJIo AhCYuGM4/eSTUMMhcnDJoU46p7jTa5ryVO/gZuBLwSc/vkkm0gJkIx9nBUw7qjHe zl4TRHi/rXEtehyDKGosE7WpAyTdOMbGUUozVpyvb2kzxEW5g/sT5gS6Cz2NRLBo lB/GBEaBFaT8yyCEtF3gEim+RnD6NnxCeprfZsQkR2LpcZ5T7iyRb2YJVYFGTalV AeY7cE9e5oLGpK1/QbRtci+35SBmAwXjC+aQLuTc0xSVqndWUVa6mIYfUgkuXI1U gM+EkmOZdYD581nlIhCDTJen0Tp7Rq23dK7YvvUB3xffacO45JtZ51TNNomB7FCy lZ/oF+y74M9hKQ== -----END CERTIFICATE-----Generated at Mon Dec 15 16:52:31 2025 by rpki-client