This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft File: TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft (raw, json) Hash identifier: 8m03DegieOgu803XY8+ujXDZbB6knokfgE19qk7vA1I= Subject key identifier: CB:3E:91:32:37:FB:41:2F:83:07:F6:66:5D:75:BC:9B:AC:8A:A8:E9 Authority key identifier: 4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3 Certificate issuer: /CN=4c8343edc843542f529fbc3e650cb6578c9206c3 Certificate serial: 019B1A2997143F4141F4778BBB1DEED1A5E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft Manifest number: 0FD1 Signing time: Sun 14 Dec 2025 00:01:31 +0000 Manifest this update: Sun 14 Dec 2025 00:01:31 +0000 Manifest next update: Mon 15 Dec 2025 00:01:31 +0000 Files and hashes: 1: TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl (hash: UEKJiTqMykgw/sRUsSDsPzWbqwcRWjFy/oauIeXwAIY=) 2: yO8yGDlp-pgPsfCtW6-Sdqgf6z8.roa (hash: SH391E3HYBBZSzKR5WZ5E1ALuIU3dss9i9wIgwa0Lyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:97:14:3f:41:41:f4:77:8b:bb:1d:ee:d1:a5:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c8343edc843542f529fbc3e650cb6578c9206c3 Validity Not Before: Dec 14 00:01:31 2025 GMT Not After : Dec 15 00:01:31 2025 GMT Subject: CN=cb3e913237fb412f8307f6665d75bc9bac8aa8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1e:6d:73:ba:00:23:60:59:09:88:7c:db:8b: a4:8f:c3:5f:8f:f1:c4:3c:6e:17:1e:8a:91:7c:8c: 25:90:0f:e5:6a:50:19:5a:59:02:68:b3:28:0e:23: de:48:29:89:51:5a:1b:d8:98:b1:a9:09:5e:66:0b: 1c:82:03:09:60:8d:a6:55:fe:4f:15:e5:fe:fc:9b: 55:91:8f:2c:e8:87:99:85:f9:3d:7d:a2:be:26:c4: 14:51:9e:ae:bb:1e:af:e8:f2:70:ff:06:ba:28:7f: 2a:cd:d7:ce:fd:a6:36:d9:b6:3c:1e:90:07:7b:8b: f3:c6:1a:f3:8c:67:d2:1f:7b:89:26:23:c7:44:ce: 16:de:76:be:ff:8d:34:51:c7:77:26:64:b5:be:d6: c7:df:e2:cd:e8:e2:91:88:27:bf:80:96:34:b3:27: ab:a8:92:27:cf:53:0a:d4:ea:ae:91:ce:41:0f:de: 8f:ed:b3:73:1c:55:3b:03:de:65:59:45:f3:e1:8f: 03:cd:7a:26:d6:b6:fa:5a:07:95:f3:8b:89:89:4c: 0e:7f:bd:50:b3:4c:0e:c2:a9:67:d5:75:98:d0:c3: fa:ef:ea:e1:bd:91:c1:20:90:e8:3e:8b:48:c4:b1: 7a:9b:fa:44:95:41:7e:4c:ef:1e:15:92:71:a7:4f: 9b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3E:91:32:37:FB:41:2F:83:07:F6:66:5D:75:BC:9B:AC:8A:A8:E9 X509v3 Authority Key Identifier: keyid:4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:fa:b5:27:17:59:5b:3a:16:a3:e9:bc:3f:46:11:97:b6:34: a7:47:b1:70:2f:91:3d:62:e0:bb:86:97:1b:e9:57:16:bb:16: bb:f7:71:38:b5:af:94:5a:22:7a:6c:85:cb:af:79:92:07:fe: 9c:0f:36:dc:a1:af:59:8d:ef:32:0e:90:ef:cc:35:0c:ab:55: dc:8d:54:6d:a8:b0:eb:fe:28:10:0c:b9:78:f2:69:74:01:93: d2:4c:ab:34:14:b7:59:bf:03:49:b0:92:e6:ec:78:09:07:84: db:d5:99:ea:ae:67:0c:4f:59:d0:c3:10:1b:73:66:e9:54:50: 23:8d:8c:49:25:10:09:11:7e:28:d0:07:ea:fc:ce:00:59:26: 14:94:64:7d:c6:a3:01:62:ea:e4:29:c5:e1:04:09:24:9e:04: c7:ff:e5:ab:a2:5a:44:4c:86:81:e3:8b:5e:7f:47:e2:ef:0c: 5b:e0:a7:1c:de:0c:cc:49:86:50:55:13:37:f3:a2:9c:73:22: 8c:c8:5d:70:2e:31:0d:ca:30:62:0e:e2:9c:0a:3f:29:45:0e: b4:dd:45:6a:cf:62:df:e0:c6:6a:9a:c1:ad:23:d2:01:62:23: 6c:22:ce:cf:28:c2:b8:82:2c:1f:93:a9:71:a1:56:4f:0d:8d: db:c6:a1:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKZcUP0FB9HeLux3u0aXnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODM0M2VkYzg0MzU0MmY1MjlmYmMzZTY1MGNiNjU3OGM5 MjA2YzMwHhcNMjUxMjE0MDAwMTMxWhcNMjUxMjE1MDAwMTMxWjAzMTEwLwYDVQQD EyhjYjNlOTEzMjM3ZmI0MTJmODMwN2Y2NjY1ZDc1YmM5YmFjOGFhOGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR5tc7oAI2BZCYh824ukj8Nfj/HE PG4XHoqRfIwlkA/lalAZWlkCaLMoDiPeSCmJUVob2JixqQleZgscggMJYI2mVf5P FeX+/JtVkY8s6IeZhfk9faK+JsQUUZ6uux6v6PJw/wa6KH8qzdfO/aY22bY8HpAH e4vzxhrzjGfSH3uJJiPHRM4W3na+/400Ucd3JmS1vtbH3+LN6OKRiCe/gJY0syer qJInz1MK1Oqukc5BD96P7bNzHFU7A95lWUXz4Y8DzXom1rb6WgeV84uJiUwOf71Q s0wOwqln1XWY0MP67+rhvZHBIJDoPotIxLF6m/pElUF+TO8eFZJxp0+bGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMs+kTI3+0Evgwf2Zl11vJusiqjpMB8GA1UdIwQY MBaAFEyDQ+3IQ1QvUp+8PmUMtleMkgbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVElORDdjaERWQzlTbjd3LVpReTJWNHlTQnNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC84ZTgyMTgtNmZiNi00ZTY5LTkyZTYt ZTljZTI5MWQyMThmLzEvVElORDdjaERWQzlTbjd3LVpReTJWNHlTQnNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC84ZTgyMTgtNmZiNi00ZTY5LTkyZTYtZTljZTI5MWQyMThm LzEvVElORDdjaERWQzlTbjd3LVpReTJWNHlTQnNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/q1JxdZ WzoWo+m8P0YRl7Y0p0excC+RPWLgu4aXG+lXFrsWu/dxOLWvlFoiemyFy695kgf+ nA823KGvWY3vMg6Q78w1DKtV3I1Ubaiw6/4oEAy5ePJpdAGT0kyrNBS3Wb8DSbCS 5ux4CQeE29WZ6q5nDE9Z0MMQG3Nm6VRQI42MSSUQCRF+KNAH6vzOAFkmFJRkfcaj AWLq5CnF4QQJJJ4Ex//lq6JaREyGgeOLXn9H4u8MW+CnHN4MzEmGUFUTN/OinHMi jMhdcC4xDcowYg7inAo/KUUOtN1Fas9i3+DGaprBrSPSAWIjbCLOzyjCuIIsH5Op caFWTw2N28ah3w== -----END CERTIFICATE-----Generated at Sun Dec 14 07:49:00 2025 by rpki-client