This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft File: TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft (raw, json) Hash identifier: j++Lk5d5q+WoBwdVW1xcytHmQDjigD3glLLcHp9NgtU= Subject key identifier: 8B:45:2D:DB:A4:AF:E5:70:D5:89:B6:CA:CA:6E:D0:10:18:08:00:DF Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE Certificate issuer: /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee Certificate serial: 019B3644E45BA0135146073F54C72762335E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft Manifest number: 01CB Signing time: Fri 19 Dec 2025 11:00:42 +0000 Manifest this update: Fri 19 Dec 2025 11:00:42 +0000 Manifest next update: Sat 20 Dec 2025 11:00:42 +0000 Files and hashes: 1: QQ_XASovNo3q1eWLyoB1-wbVIbw.roa (hash: +nHnAk51WEvv/rAlJaGO2P/ZVC3It8+Q00l0lZIdxpE=) 2: TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl (hash: 6IpiYASyM5LqoBeIfC21LjuxkKatG9hfQYIH7F7JfHM=) 3: nD6BDJDA_dWwFQl4pf7gAHlOGhg.roa (hash: 1WAvivFyuRPy1SS+2soFEsbLPwjNLXdysbcvAmnfq4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:44:e4:5b:a0:13:51:46:07:3f:54:c7:27:62:33:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee Validity Not Before: Dec 19 11:00:42 2025 GMT Not After : Dec 20 11:00:42 2025 GMT Subject: CN=8b452ddba4afe570d589b6caca6ed010180800df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:90:f4:95:fa:98:af:fe:02:54:24:79:76:de: 1b:41:29:5a:a8:2d:d7:cc:e8:d3:39:66:34:af:92: a3:e3:6d:94:45:a2:ad:9f:77:4f:2e:10:4c:7a:b1: b5:83:6d:9c:ea:8f:88:85:60:bc:51:fb:20:d3:d9: a7:1b:01:80:b5:53:cd:cf:9d:d9:06:63:00:d4:ca: 3b:7e:94:72:72:a8:ae:12:b5:1d:30:6f:63:50:65: 03:10:3e:16:34:d6:b7:1a:f0:de:fa:77:58:dc:af: f1:93:35:e2:b3:b2:0d:e7:67:20:35:4d:e7:69:9e: 4f:7d:d4:c6:a6:a8:99:08:2d:39:53:d7:b1:9d:e5: 6f:e8:a7:38:58:6c:5f:64:a7:e4:45:f2:74:39:de: da:60:f1:19:71:de:1d:c3:64:a8:44:08:c7:e7:c3: cb:b2:45:af:5b:8b:91:4a:f7:4d:f3:a8:86:7b:53: 91:87:14:ee:58:a2:ec:a0:79:51:3f:00:c1:21:08: 84:07:c9:77:8a:c5:6d:71:ec:c0:9e:ac:07:e4:63: 1c:ea:82:aa:fa:14:9c:61:11:ed:35:2f:a9:c8:82: 3f:a9:e0:c0:52:f2:d4:8a:4a:0c:28:52:8c:d5:a6: ca:bd:7d:7c:1a:27:73:3d:97:72:e4:4c:c6:4a:3d: c7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:45:2D:DB:A4:AF:E5:70:D5:89:B6:CA:CA:6E:D0:10:18:08:00:DF X509v3 Authority Key Identifier: keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:2c:55:5e:a6:16:5f:92:d2:b5:d9:d5:4c:ba:e6:2f:50:05: 48:25:81:5d:ec:04:ec:2a:ce:62:6e:d7:29:7e:b4:c9:e4:56: 49:b8:d5:2d:42:f1:be:38:f0:ae:2a:df:f5:bf:df:c5:4d:01: c2:1c:3d:a2:19:f9:3e:ad:f4:02:9b:e5:c8:89:b7:fe:eb:71: 39:2d:6a:cf:49:0e:26:cd:04:a3:a7:2e:6a:56:e0:bd:6b:6d: 36:fe:87:8b:97:ca:6b:c9:62:1b:19:d4:fc:4d:38:5f:8c:9e: fe:eb:cb:89:87:c0:9c:3a:31:b4:33:43:72:cb:30:87:30:6c: 51:34:82:2a:2f:c8:17:38:59:bb:a4:3f:d4:0e:ca:cd:e4:e7: bd:0f:f6:8e:38:a7:10:a5:a4:2e:9a:12:7f:8d:9e:e5:64:03: 6d:65:dc:26:83:70:a6:a6:61:c1:7b:e9:04:01:30:a2:3b:d5: 31:f7:be:77:b9:16:e1:7a:c5:b9:fe:5f:da:c0:26:70:26:1b: 7f:81:4c:27:19:4e:44:e8:e2:0c:99:02:71:27:5b:5e:d6:3e: df:f8:d5:13:20:fb:8f:ec:63:cf:1c:22:d7:81:31:c1:7e:3e: 5a:72:ff:60:8c:66:ff:6c:71:16:4c:98:0c:77:7b:b2:94:e0: c3:b3:f1:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RORboBNRRgc/VMcnYjNeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjM2M2NjVlNTFjYzRjYjVjYWYwNWI4Mjk0ODQzZTI3MzNh MTNkZWUwHhcNMjUxMjE5MTEwMDQyWhcNMjUxMjIwMTEwMDQyWjAzMTEwLwYDVQQD Eyg4YjQ1MmRkYmE0YWZlNTcwZDU4OWI2Y2FjYTZlZDAxMDE4MDgwMGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+JD0lfqYr/4CVCR5dt4bQSlaqC3X zOjTOWY0r5Kj422URaKtn3dPLhBMerG1g22c6o+IhWC8Ufsg09mnGwGAtVPNz53Z BmMA1Mo7fpRycqiuErUdMG9jUGUDED4WNNa3GvDe+ndY3K/xkzXis7IN52cgNU3n aZ5PfdTGpqiZCC05U9exneVv6Kc4WGxfZKfkRfJ0Od7aYPEZcd4dw2SoRAjH58PL skWvW4uRSvdN86iGe1ORhxTuWKLsoHlRPwDBIQiEB8l3isVtcezAnqwH5GMc6oKq +hScYRHtNS+pyII/qeDAUvLUikoMKFKM1abKvX18GidzPZdy5EzGSj3HKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItFLdukr+Vw1Ym2yspu0BAYCADfMB8GA1UdIwQY MBaAFEw8Zl5RzEy1yvBbgpSEPiczoT3uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVER4bVhsSE1UTFhLOEZ1Q2xJUS1Kek9oUGU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82YjY2YjQtMDY0Yy00MmVlLWE1ZWUt MWE2NWI5MWJlZTU4LzEvVER4bVhsSE1UTFhLOEZ1Q2xJUS1Kek9oUGU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS82YjY2YjQtMDY0Yy00MmVlLWE1ZWUtMWE2NWI5MWJlZTU4 LzEvVER4bVhsSE1UTFhLOEZ1Q2xJUS1Kek9oUGU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyxVXqYW X5LStdnVTLrmL1AFSCWBXewE7CrOYm7XKX60yeRWSbjVLULxvjjwrirf9b/fxU0B whw9ohn5Pq30ApvlyIm3/utxOS1qz0kOJs0Eo6cualbgvWttNv6Hi5fKa8liGxnU /E04X4ye/uvLiYfAnDoxtDNDcsswhzBsUTSCKi/IFzhZu6Q/1A7KzeTnvQ/2jjin EKWkLpoSf42e5WQDbWXcJoNwpqZhwXvpBAEwojvVMfe+d7kW4XrFuf5f2sAmcCYb f4FMJxlOROjiDJkCcSdbXtY+3/jVEyD7j+xjzxwi14ExwX4+WnL/YIxm/2xxFkyY DHd7spTgw7PxCg== -----END CERTIFICATE-----Generated at Fri Dec 19 12:47:41 2025 by rpki-client