This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft File: TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json) Hash identifier: O9t87Q4JdynL6eqsMDn38AU4AVmNzsG1DnAze41afy8= Subject key identifier: 58:DF:8B:09:6F:30:5E:2A:83:1C:B9:2B:E7:80:75:65:F8:D7:15:3B Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8 Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8 Certificate serial: 019B19BADEDEA47FC97AD480F3913F0FD71B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft Manifest number: 1775 Signing time: Sat 13 Dec 2025 22:00:35 +0000 Manifest this update: Sat 13 Dec 2025 22:00:35 +0000 Manifest next update: Sun 14 Dec 2025 22:00:35 +0000 Files and hashes: 1: B9-Xs7dhnKZZ3y2oqYpIdAWmlNw.roa (hash: TgNafOFIPNxSy2OvvIzhsdKUEZp12L7C7S2Pd52eKm0=) 2: QNGb0gtG4GRClc-idD7pOZ3NKu4.roa (hash: RBMmyAJB99vMalTNtIMZJrCnoBdNekiveW7iLd5Zyt4=) 3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: NBIybAHRsrJLMq3nWHZos3SvfCJQu+xio0kz177q43M=) 4: uL8wQ5suTSJs6R1LegMqq0w_KnA.roa (hash: q1cpaZXwQ8FTgzr+1V+AjkI0yfC5jTYIkOuwUOw+jNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:ba:de:de:a4:7f:c9:7a:d4:80:f3:91:3f:0f:d7:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8 Validity Not Before: Dec 13 22:00:35 2025 GMT Not After : Dec 14 22:00:35 2025 GMT Subject: CN=58df8b096f305e2a831cb92be7807565f8d7153b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:14:79:69:e7:78:cd:a2:84:0a:8f:bc:6f:38: 90:ae:6c:30:1f:d1:a8:36:25:7a:eb:bd:85:6a:27: c6:2c:bd:a7:4e:42:d7:72:e1:9e:f5:f5:7f:d9:45: 71:46:bc:d4:19:9f:85:51:c9:9a:7a:00:2d:0e:a6: 74:25:01:f2:1f:be:a1:fc:c1:34:e6:7a:45:54:43: ec:5b:16:3c:d1:bb:29:ad:c9:7a:98:a3:ef:38:f2: a3:fe:41:34:ea:58:f8:b4:a8:3e:84:05:66:bb:7b: bb:af:3f:20:4c:b0:51:55:a0:29:1d:0f:85:04:42: 9f:6f:e4:71:3f:18:10:8c:3e:2e:9f:8c:69:e4:d7: 6e:d4:fa:76:80:26:8d:67:cc:41:35:93:2a:b5:4d: 10:98:ee:95:76:3f:41:8e:e3:7f:d7:36:33:02:93: b0:db:af:0c:52:24:be:62:00:05:bf:89:b6:75:77: 1b:5f:7d:35:1a:f5:b0:ba:59:d2:70:e6:e6:a7:16: 6b:d2:69:18:5b:0c:93:07:7d:b3:e6:95:d6:c5:c0: 7e:60:2f:13:c6:ca:da:fa:af:a6:b2:c5:49:16:18: 0e:4f:f6:f0:42:7b:1e:8b:09:41:83:af:7f:7c:cd: 2b:ec:54:78:7e:b5:ce:df:71:76:d6:81:51:b1:18: 42:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DF:8B:09:6F:30:5E:2A:83:1C:B9:2B:E7:80:75:65:F8:D7:15:3B X509v3 Authority Key Identifier: keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:a1:3b:a8:4f:75:ff:5e:b3:17:4f:f6:1b:66:50:e9:9f:6c: ad:ce:0d:44:0d:2e:ab:1a:5e:c5:dc:f6:08:70:32:c4:5c:96: 5d:7b:5c:53:9e:85:a6:e8:1a:e8:3d:53:f8:f9:eb:8a:fd:3c: a5:62:6a:d2:9a:ee:bd:f4:84:d9:56:7e:63:03:23:48:90:ef: b7:14:f5:d0:40:86:a7:fa:c0:51:8c:c0:e9:b9:ff:c5:60:dd: d4:8e:89:9c:63:d9:d1:3a:c4:69:5a:33:11:04:49:6d:50:44: ec:a1:ea:b8:0b:e4:c8:66:6d:c1:5e:a0:b7:21:9e:24:35:38: 2f:56:84:6a:3c:3c:ed:27:41:f8:a8:7b:59:f5:31:24:67:0c: 2e:b2:3b:61:a2:88:a9:83:f1:54:2a:14:af:56:2a:5a:66:43: d7:6d:83:18:1b:8e:52:3e:2e:70:04:f7:b7:cd:5d:a0:4c:f1: 11:06:c8:59:a1:5a:18:76:59:4d:46:ce:1d:c2:83:95:f1:8c: e0:7a:4b:2c:87:b9:8d:d6:bd:1f:fc:cd:67:67:89:22:89:a4: 6f:52:84:e5:3f:3a:50:e1:45:df:e6:4f:11:21:d7:dd:90:10: 57:be:1d:03:3c:64:9a:31:67:9d:6a:04:d4:85:b8:bb:c8:74: 88:82:bc:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZut7epH/JetSA85E/D9cbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYzM5MWRjNjE1ZmQ0YTNhZDEwYzBmMmFiOGIwYTUwNmQw MzllZDgwHhcNMjUxMjEzMjIwMDM1WhcNMjUxMjE0MjIwMDM1WjAzMTEwLwYDVQQD Eyg1OGRmOGIwOTZmMzA1ZTJhODMxY2I5MmJlNzgwNzU2NWY4ZDcxNTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRR5aed4zaKECo+8bziQrmwwH9Go NiV6672FaifGLL2nTkLXcuGe9fV/2UVxRrzUGZ+FUcmaegAtDqZ0JQHyH76h/ME0 5npFVEPsWxY80bsprcl6mKPvOPKj/kE06lj4tKg+hAVmu3u7rz8gTLBRVaApHQ+F BEKfb+RxPxgQjD4un4xp5Ndu1Pp2gCaNZ8xBNZMqtU0QmO6Vdj9BjuN/1zYzApOw 268MUiS+YgAFv4m2dXcbX301GvWwulnScObmpxZr0mkYWwyTB32z5pXWxcB+YC8T xsra+q+mssVJFhgOT/bwQnseiwlBg69/fM0r7FR4frXO33F21oFRsRhCmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjfiwlvMF4qgxy5K+eAdWX41xU7MB8GA1UdIwQY MBaAFE3DkdxhX9SjrRDA8quLClBtA57YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEt ZmQyOTE1ZDRjZDVhLzEvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEtZmQyOTE1ZDRjZDVh LzEvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqE7qE91 /16zF0/2G2ZQ6Z9src4NRA0uqxpexdz2CHAyxFyWXXtcU56Fpuga6D1T+Pnriv08 pWJq0pruvfSE2VZ+YwMjSJDvtxT10ECGp/rAUYzA6bn/xWDd1I6JnGPZ0TrEaVoz EQRJbVBE7KHquAvkyGZtwV6gtyGeJDU4L1aEajw87SdB+Kh7WfUxJGcMLrI7YaKI qYPxVCoUr1YqWmZD122DGBuOUj4ucAT3t81doEzxEQbIWaFaGHZZTUbOHcKDlfGM 4HpLLIe5jda9H/zNZ2eJIomkb1KE5T86UOFF3+ZPESHX3ZAQV74dAzxkmjFnnWoE 1IW4u8h0iIK8/A== -----END CERTIFICATE-----Generated at Sun Dec 14 01:56:55 2025 by rpki-client