This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: QkkxGq41rYLMWCa4yA0rlSdluhmez3Rpbx6GHCUl85E= Subject key identifier: 00:15:35:72:51:C0:3C:E8:E8:28:A1:8A:62:E8:77:1E:08:AD:52:77 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019AF19B45479B540B79058F163CF009F322 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 16A7 Signing time: Sat 06 Dec 2025 03:01:16 +0000 Manifest this update: Sat 06 Dec 2025 03:01:16 +0000 Manifest next update: Sun 07 Dec 2025 03:01:16 +0000 Files and hashes: 1: 2yubxXoUeTneba4EBY4P8MPWw2Y.roa (hash: O7PLjKUrCeqBSHAuExg3VBC739eTqlxIT5c864VI68U=) 2: 4KBWrJSRLSTWgJmrtXh24O8ptm0.roa (hash: YEBy8eNEfToaA32gL8iYc9FiTV97Xzm5KfvwgQ0Wt0w=) 3: C1goLcvaglCKMUeiu7f9JTdPMmE.roa (hash: efwewT/eqBTWWiPB6aRMJhm21AM7wQI7HEw7mnfby2Y=) 4: GqC3ZO1y9oc4vznv7EbpMYcfENc.roa (hash: Q4sGgT5nLBJ6T1APzes4amjNpmeLdQJEi2Te5mDw21c=) 5: HJEOMkcua2U0CXM_DgKdhgOVJuQ.roa (hash: aaUs28R4Qe5et2iRbl0aLBcKjuiS/pTOpAssm1pVNS4=) 6: QxU1oUg0L71x8I3OUGU7EffxOtQ.roa (hash: x4WguF8OrW9WYJ2uUgagYn93WyWPPdlfvjM3+EJeaQQ=) 7: R27Ys4tdk1dsua9Wj3x9dydBecY.roa (hash: UIHAnpmWiQo69KuTG5bm0hSlODVuPvHPX466b96XgAY=) 8: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: Bl79i01NH2m3vK8uDcY2EwLa0i1rMTMJ/8gS7qoLXcs=) 9: agt3GX3KTzTTaDa4N2bW6FVEPMI.roa (hash: fqDcb6/bbW1xMS84DKiItjbvr35FGCf0jB399be63bg=) 10: hh7Gdh6zfaFogwbFBRa2NVcPr_I.roa (hash: ssBuLOF5j4levhxPJMBnrdwY3/mZUCOBNj16h6KB1U0=) 11: iOPUBhC5tZj2oWAWQvj5PYOPiG4.roa (hash: rupFkWf6CUCaUIdYtY3ZUAkY0dS8bO7d3Kt0O/ec6M8=) 12: mR3Zi8TN-_ArEouFy2dh0k1QmN0.roa (hash: UhEAthq0aKU0HlKv/Jp93RRXMjt0oM6SOsTJA0u5R4o=) 13: sguRLoeWyytYSUNdSCQfoHPwkL0.roa (hash: ipjLZOjUQ4BQnvEOPVMsWMd4gWLlK5VE02q72xwD6zI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:45:47:9b:54:0b:79:05:8f:16:3c:f0:09:f3:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Dec 6 03:01:16 2025 GMT Not After : Dec 7 03:01:16 2025 GMT Subject: CN=0015357251c03ce8e828a18a62e8771e08ad5277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fd:cb:b5:7a:0d:16:ec:69:c4:e9:b5:d0:57: 1f:26:1f:08:fe:cb:5a:d7:01:e3:92:fe:71:c1:c1: f3:b8:58:03:a7:a0:08:2c:84:ad:09:03:c5:7d:16: 55:5d:7a:18:0a:96:da:96:24:56:f1:2b:87:88:a7: ae:b0:6e:38:ed:c7:63:34:1d:57:e2:c5:86:a7:79: e7:dd:b2:71:ad:57:1d:03:cf:b1:90:8a:e3:11:96: bc:f7:fd:a9:fe:69:b9:34:4b:6f:15:1b:f0:7f:02: d5:a3:0c:a0:23:b1:f0:e8:8a:52:41:c1:1a:70:42: 7a:d1:66:11:a9:09:8e:d5:56:15:df:51:c7:a5:0b: f1:96:c9:bb:67:aa:34:5f:a4:e7:11:52:14:23:65: 3e:b4:35:d3:0b:f1:bd:2d:cb:e7:a1:95:5c:3e:5c: a0:3a:fc:82:ce:cd:17:d8:b7:25:f8:fb:30:02:35: 0d:35:4f:29:58:49:c6:d2:87:8e:9a:f8:4f:e9:6d: c3:ee:53:07:ad:0d:d3:a2:de:0d:fb:64:9e:e0:9c: 3a:90:d6:5d:e6:0f:58:06:8e:c0:65:78:24:ef:0e: a7:27:41:7f:7a:dc:82:1b:c7:a6:a1:2e:f3:fd:58: 9f:9c:06:05:cf:9a:66:ee:ef:eb:96:f6:21:e2:6b: 06:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:15:35:72:51:C0:3C:E8:E8:28:A1:8A:62:E8:77:1E:08:AD:52:77 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a0:1a:b4:58:60:e7:2b:08:dc:f0:62:d0:39:9b:a2:e2:b1: 02:df:cd:a2:b4:19:0c:9e:ac:e7:dd:b1:2b:2a:f2:6a:7c:3c: 60:7d:36:e8:a4:7b:70:70:d2:b4:23:67:94:ad:4f:ec:f9:65: 44:f6:fd:00:ef:f3:52:a5:4a:b4:02:31:39:a2:22:b6:d5:87: be:e6:fe:be:38:2f:a6:ab:3a:7b:a2:03:48:4b:87:72:32:07: 94:c5:f6:93:1c:b9:24:64:35:5e:1a:6e:fa:ef:71:89:7d:c9: 5a:c2:fa:47:c5:f1:cf:f7:9b:15:61:fc:13:e0:9c:16:36:40: 26:4c:dc:57:9f:9c:50:e8:e4:6e:4f:33:af:df:ac:a0:a3:8f: 53:7b:64:5c:52:15:8f:cc:78:db:a9:a2:ca:6f:82:d8:b2:c4: 17:48:ba:60:a9:55:b8:eb:71:5c:79:d7:ae:f3:8e:a0:37:a5: 3d:94:01:f0:e0:b2:f9:9e:69:ae:e6:8c:08:20:46:e3:9d:cd: 6f:ea:5f:d3:1c:53:95:6d:1a:c4:0b:fa:9e:2f:0c:70:a9:a6: e3:a8:64:26:22:5e:1e:bc:bd:ec:eb:a4:fe:91:dd:cd:02:25: da:cb:ae:30:8b:c8:71:3a:f3:a5:a4:85:e6:85:6d:d0:7b:4b: ca:80:02:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0VHm1QLeQWPFjzwCfMiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjUxMjA2MDMwMTE2WhcNMjUxMjA3MDMwMTE2WjAzMTEwLwYDVQQD EygwMDE1MzU3MjUxYzAzY2U4ZTgyOGExOGE2MmU4NzcxZTA4YWQ1Mjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP3LtXoNFuxpxOm10FcfJh8I/sta 1wHjkv5xwcHzuFgDp6AILIStCQPFfRZVXXoYCpbaliRW8SuHiKeusG447cdjNB1X 4sWGp3nn3bJxrVcdA8+xkIrjEZa89/2p/mm5NEtvFRvwfwLVowygI7Hw6IpSQcEa cEJ60WYRqQmO1VYV31HHpQvxlsm7Z6o0X6TnEVIUI2U+tDXTC/G9LcvnoZVcPlyg OvyCzs0X2Lcl+PswAjUNNU8pWEnG0oeOmvhP6W3D7lMHrQ3Tot4N+2Se4Jw6kNZd 5g9YBo7AZXgk7w6nJ0F/etyCG8emoS7z/VifnAYFz5pm7u/rlvYh4msGBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAVNXJRwDzo6CihimLodx4IrVJ3MB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6AatFhg 5ysI3PBi0DmbouKxAt/NorQZDJ6s592xKyryanw8YH026KR7cHDStCNnlK1P7Pll RPb9AO/zUqVKtAIxOaIittWHvub+vjgvpqs6e6IDSEuHcjIHlMX2kxy5JGQ1Xhpu +u9xiX3JWsL6R8Xxz/ebFWH8E+CcFjZAJkzcV5+cUOjkbk8zr9+soKOPU3tkXFIV j8x426miym+C2LLEF0i6YKlVuOtxXHnXrvOOoDelPZQB8OCy+Z5pruaMCCBG453N b+pf0xxTlW0axAv6ni8McKmm46hkJiJeHry97Ouk/pHdzQIl2suuMIvIcTrzpaSF 5oVt0HtLyoACQg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:50:29 2025 by rpki-client