This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft File: TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft (raw, json) Hash identifier: LBXWXKiSw4jnxiC+Gs5hsU2iEYb6rASmgw2jV8lV4U4= Subject key identifier: FF:12:97:4C:74:4F:6F:CE:E2:90:7E:E1:96:F3:37:51:84:36:89:7C Authority key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17 Certificate issuer: /CN=4c38a306a37ee87bebff7236553e0d3cb672cd17 Certificate serial: 019B1CBC81921CBA5B33C84C1A8798491C54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft Manifest number: 024D Signing time: Sun 14 Dec 2025 12:01:14 +0000 Manifest this update: Sun 14 Dec 2025 12:01:14 +0000 Manifest next update: Mon 15 Dec 2025 12:01:14 +0000 Files and hashes: 1: 54qil-gtsg-VmWMUKBbSoP89Sh4.roa (hash: +lFuYFZIeWq9AFirWvNO/gLe0U+wLrmb+nny8MFDRhE=) 2: TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl (hash: 55jqvk+BmDcS/my5+SaENFbw56grU3M54DHPYQQ36Vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bc:81:92:1c:ba:5b:33:c8:4c:1a:87:98:49:1c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17 Validity Not Before: Dec 14 12:01:14 2025 GMT Not After : Dec 15 12:01:14 2025 GMT Subject: CN=ff12974c744f6fcee2907ee196f337518436897c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:17:64:a2:d8:12:01:c4:90:7c:dc:27:c2:bc: 34:c0:25:b2:10:a0:cd:b2:eb:d9:2b:e2:07:4e:73: 2e:9b:4e:6a:47:a7:e0:08:5b:2c:71:d6:20:56:8a: f6:75:ee:ea:cf:fb:2d:b1:4a:cd:b2:0b:39:1e:ca: 43:b8:9b:d4:31:77:c2:3d:8d:67:79:5c:81:39:ed: 81:01:a9:13:f4:70:0f:ae:71:5c:7f:57:1f:11:2e: 8f:87:07:d6:c0:33:b3:f4:70:9c:80:ce:00:d8:52: 53:ee:d1:64:73:4e:6a:fe:52:38:f5:ab:3c:59:0f: 01:4a:d8:16:9e:09:cf:1e:1b:d0:a1:45:a6:f2:82: b9:13:6d:3a:a3:28:3b:8f:c4:3f:bd:e7:d9:07:27: 5b:ea:81:48:57:02:74:ad:5f:6a:56:06:56:e4:c5: c1:7b:8b:d8:87:ea:07:f8:67:d0:b1:de:24:ac:b5: 3e:5f:bc:59:ec:35:04:88:38:de:c3:f2:33:86:cc: cd:d9:6e:f5:d3:a4:29:b7:8b:55:41:ca:63:90:bb: 8b:43:3e:43:55:71:5f:d0:22:7e:79:60:44:e5:01: 46:e3:4e:8e:b0:26:29:48:3d:35:d9:ae:0f:3f:af: 1f:ce:69:88:ca:23:4d:d1:bc:8a:71:ac:9a:ba:f1: 39:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:12:97:4C:74:4F:6F:CE:E2:90:7E:E1:96:F3:37:51:84:36:89:7C X509v3 Authority Key Identifier: keyid:4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f0:49:b3:48:08:2a:1e:e0:ac:ae:3f:f6:be:48:02:52:c8: 69:0b:b8:14:64:8b:69:10:e5:8d:44:5f:34:51:d0:f6:a7:52: 50:37:8a:a4:b7:b7:22:c7:c8:71:76:fb:ce:89:8a:d5:1a:e0: 05:60:0a:65:cc:ed:7c:f0:30:7b:50:ed:41:b1:92:fc:54:35: e1:9b:34:f9:b7:ae:b1:dc:3f:b1:9e:99:a6:c7:52:b1:f5:bd: 25:81:db:8b:3a:9a:db:c4:ae:91:3c:1d:33:47:bb:2b:bd:23: 49:66:2e:c6:51:8e:b1:cd:37:b4:10:66:53:b6:89:a4:5e:03: 21:37:c8:03:05:33:c9:37:a3:1e:d5:e4:81:a9:dd:e0:22:45: 12:a9:0a:e2:47:1b:29:4d:f2:94:fa:6e:8d:d4:10:94:1b:01: 6e:b8:bf:bd:2d:6a:6c:10:35:4c:2a:3b:6a:08:15:87:4d:f5: dc:15:f2:b3:68:3e:dd:ea:e8:4a:8a:4d:3e:2f:a9:67:50:ba: ff:90:50:a1:b0:88:c5:a7:d9:06:4c:cd:58:f1:5f:14:b4:1f: 9a:51:87:b0:db:06:82:ad:58:5e:38:49:51:3d:6d:92:d9:3f: 04:a8:e0:40:08:0a:18:b5:1c:00:61:cb:89:14:2a:25:93:d8: 9c:72:53:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscvIGSHLpbM8hMGoeYSRxUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzhhMzA2YTM3ZWU4N2JlYmZmNzIzNjU1M2UwZDNjYjY3 MmNkMTcwHhcNMjUxMjE0MTIwMTE0WhcNMjUxMjE1MTIwMTE0WjAzMTEwLwYDVQQD EyhmZjEyOTc0Yzc0NGY2ZmNlZTI5MDdlZTE5NmYzMzc1MTg0MzY4OTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxdkotgSAcSQfNwnwrw0wCWyEKDN suvZK+IHTnMum05qR6fgCFsscdYgVor2de7qz/stsUrNsgs5HspDuJvUMXfCPY1n eVyBOe2BAakT9HAPrnFcf1cfES6PhwfWwDOz9HCcgM4A2FJT7tFkc05q/lI49as8 WQ8BStgWngnPHhvQoUWm8oK5E206oyg7j8Q/vefZBydb6oFIVwJ0rV9qVgZW5MXB e4vYh+oH+GfQsd4krLU+X7xZ7DUEiDjew/IzhszN2W7106Qpt4tVQcpjkLuLQz5D VXFf0CJ+eWBE5QFG406OsCYpSD012a4PP68fzmmIyiNN0byKcayauvE5mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8Sl0x0T2/O4pB+4ZbzN1GENol8MB8GA1UdIwQY MBaAFEw4owajfuh76/9yNlU+DTy2cs0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wOGNkOTMtMDg3Ni00M2ZkLTkyYzAt Yjg2M2MwYTk4YjJkLzEvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8wOGNkOTMtMDg3Ni00M2ZkLTkyYzAtYjg2M2MwYTk4YjJk LzEvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfBJs0gI Kh7grK4/9r5IAlLIaQu4FGSLaRDljURfNFHQ9qdSUDeKpLe3IsfIcXb7zomK1Rrg BWAKZcztfPAwe1DtQbGS/FQ14Zs0+beusdw/sZ6ZpsdSsfW9JYHbizqa28SukTwd M0e7K70jSWYuxlGOsc03tBBmU7aJpF4DITfIAwUzyTejHtXkgand4CJFEqkK4kcb KU3ylPpujdQQlBsBbri/vS1qbBA1TCo7aggVh0313BXys2g+3eroSopNPi+pZ1C6 /5BQobCIxafZBkzNWPFfFLQfmlGHsNsGgq1YXjhJUT1tktk/BKjgQAgKGLUcAGHL iRQqJZPYnHJTUA== -----END CERTIFICATE-----Generated at Sun Dec 14 17:25:31 2025 by rpki-client