This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft File: TOdM9jcjwCadUoOxBlghrzhKmiY.mft (raw, json) Hash identifier: kqbp2sYBjlVsy32+EukTjVeFH1rSSJgw4LNJtmDmNmU= Subject key identifier: 26:89:D5:99:CE:49:DE:1B:D4:C2:8F:80:17:F8:7C:A6:C1:22:90:86 Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26 Certificate issuer: /CN=4ce74cf63723c0269d5283b1065821af384a9a26 Certificate serial: 019B3CEC49FA0094D4AC192C8CDDD273C780 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft Manifest number: 081F Signing time: Sat 20 Dec 2025 18:01:16 +0000 Manifest this update: Sat 20 Dec 2025 18:01:16 +0000 Manifest next update: Sun 21 Dec 2025 18:01:16 +0000 Files and hashes: 1: CEobCVyOq89vMXgU83DpMwfT0Wo.roa (hash: DcQa6f54mwH80zIkbXchOx9QQQsb0gD6KDYchnHbpMk=) 2: HmvWFjOJ5QNe_0VBD7eTmwN-1XQ.roa (hash: StcAstNQR/UIdmTZ6Q1iuGPLcyfmxWT20PZ/h6s9A5g=) 3: TOdM9jcjwCadUoOxBlghrzhKmiY.crl (hash: p5Ui71q2DeXWS0gqsZjZdVqi3yQaF14jk61Zd9JLnfc=) 4: ysuILm8GTM9rr0tx4VWy1ub_M3Y.roa (hash: wnzsKo97TxUOdXYRLd6GXvYrsFQQtPcVycGoHAT6hoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:49:fa:00:94:d4:ac:19:2c:8c:dd:d2:73:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26 Validity Not Before: Dec 20 18:01:16 2025 GMT Not After : Dec 21 18:01:16 2025 GMT Subject: CN=2689d599ce49de1bd4c28f8017f87ca6c1229086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:36:bd:6d:d9:9e:db:90:6f:cc:ae:9f:21:83: dd:ff:c2:b0:e4:e1:30:6e:e3:f3:a8:01:2f:79:61: d6:44:e2:dd:3a:d9:0d:69:88:e7:8c:38:d9:a5:86: 0f:bd:fb:ad:1c:9b:82:e8:43:6d:3e:f0:81:48:de: 04:c9:c3:db:85:e6:28:b7:c2:d7:86:97:aa:82:e4: 8e:43:da:e9:70:3a:d3:ce:92:c6:37:e7:f8:b1:7a: e4:54:3b:19:ac:41:96:f9:c4:e3:f6:29:44:c0:58: 5d:51:a4:69:87:e7:3d:4d:40:eb:40:fc:62:e9:c4: 00:f0:56:7a:96:2b:1c:d6:59:a6:44:c3:95:02:42: de:b5:b6:e3:e0:f3:68:5c:46:35:b4:78:a6:65:64: 65:f3:64:3f:87:48:6f:06:22:d6:ea:a9:32:33:3a: 3d:a0:5c:42:99:87:be:48:02:8c:26:43:d6:cc:5f: 11:8d:32:de:f9:87:65:ed:2f:07:da:ab:5e:f0:61: fa:e8:0d:bb:27:08:37:0c:32:00:d8:d7:66:30:32: c6:52:0d:61:96:6e:a6:62:4d:b1:ab:59:c9:c8:49: 71:1f:79:1d:99:b9:05:e4:cc:d1:3a:02:82:c5:98: c0:68:a5:79:5c:2e:dd:ee:35:0c:b4:6d:73:2c:47: d7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:89:D5:99:CE:49:DE:1B:D4:C2:8F:80:17:F8:7C:A6:C1:22:90:86 X509v3 Authority Key Identifier: keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:23:16:fd:38:34:56:9b:3f:b3:26:d7:74:5b:cd:f5:99:e2: e2:2f:17:c0:98:39:fa:ba:8b:b4:2d:fe:d5:39:db:c5:17:d0: 9c:a2:49:d8:ca:2c:ae:6d:75:bf:e6:37:9e:40:ed:60:73:ac: 70:5b:72:e8:bd:55:ea:30:1a:92:31:5c:77:69:e4:88:cb:c8: 8e:96:02:22:29:7f:a7:f0:02:72:32:e2:e6:05:37:59:51:43: 0a:b0:00:1e:58:b6:24:d8:ab:0e:33:60:70:c6:18:67:a1:55: 6e:22:fc:66:3a:69:b5:0a:13:a5:e9:4b:12:09:fc:1d:2e:c7: 7d:be:d0:46:7b:8d:65:48:9c:1e:b5:06:a5:dc:4b:5c:8b:4e: c4:d3:19:76:ad:eb:91:cb:22:8e:16:41:fe:5e:61:69:49:d6: 9a:86:6c:b5:a1:f8:ee:56:a5:de:3d:55:a4:74:c0:31:30:7c: 94:d7:59:7a:1c:08:d0:b5:09:2f:ad:dd:61:76:37:ec:47:bc: ac:a4:96:0e:a6:fb:29:0d:77:7e:93:a2:08:95:0c:30:ac:60: f1:5c:34:70:aa:03:dc:2a:77:c7:d7:9f:16:d6:23:60:f1:2f: 6a:e8:e2:2f:d2:43:34:69:9c:eb:24:9a:6a:14:c5:6e:02:20: c1:48:de:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87En6AJTUrBksjN3Sc8eAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTc0Y2Y2MzcyM2MwMjY5ZDUyODNiMTA2NTgyMWFmMzg0 YTlhMjYwHhcNMjUxMjIwMTgwMTE2WhcNMjUxMjIxMTgwMTE2WjAzMTEwLwYDVQQD EygyNjg5ZDU5OWNlNDlkZTFiZDRjMjhmODAxN2Y4N2NhNmMxMjI5MDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Da9bdme25BvzK6fIYPd/8Kw5OEw buPzqAEveWHWROLdOtkNaYjnjDjZpYYPvfutHJuC6ENtPvCBSN4EycPbheYot8LX hpeqguSOQ9rpcDrTzpLGN+f4sXrkVDsZrEGW+cTj9ilEwFhdUaRph+c9TUDrQPxi 6cQA8FZ6lisc1lmmRMOVAkLetbbj4PNoXEY1tHimZWRl82Q/h0hvBiLW6qkyMzo9 oFxCmYe+SAKMJkPWzF8RjTLe+Ydl7S8H2qte8GH66A27Jwg3DDIA2NdmMDLGUg1h lm6mYk2xq1nJyElxH3kdmbkF5MzROgKCxZjAaKV5XC7d7jUMtG1zLEfX+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaJ1ZnOSd4b1MKPgBf4fKbBIpCGMB8GA1UdIwQY MBaAFEznTPY3I8AmnVKDsQZYIa84SpomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzkt OTI0MWZmNmVjM2JmLzEvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzktOTI0MWZmNmVjM2Jm LzEvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCMW/Tg0 Vps/sybXdFvN9Zni4i8XwJg5+rqLtC3+1TnbxRfQnKJJ2Mosrm11v+Y3nkDtYHOs cFty6L1V6jAakjFcd2nkiMvIjpYCIil/p/ACcjLi5gU3WVFDCrAAHli2JNirDjNg cMYYZ6FVbiL8ZjpptQoTpelLEgn8HS7Hfb7QRnuNZUicHrUGpdxLXItOxNMZdq3r kcsijhZB/l5haUnWmoZstaH47lal3j1VpHTAMTB8lNdZehwI0LUJL63dYXY37Ee8 rKSWDqb7KQ13fpOiCJUMMKxg8Vw0cKoD3Cp3x9efFtYjYPEvaujiL9JDNGmc6ySa ahTFbgIgwUje9Q== -----END CERTIFICATE-----Generated at Sat Dec 20 23:09:34 2025 by rpki-client