This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft File: TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json) Hash identifier: df7kX9EUpoIsXAvCaontxbCGJd+nJYmANeWxpOMTTvA= Subject key identifier: 2D:24:A4:94:4F:64:97:E3:3E:41:9E:84:12:1C:02:48:A3:A8:15:7F Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e Certificate serial: 019B0D49496159860E8C37D2B0E3138E9081 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft Manifest number: 0F6F Signing time: Thu 11 Dec 2025 12:01:05 +0000 Manifest this update: Thu 11 Dec 2025 12:01:05 +0000 Manifest next update: Fri 12 Dec 2025 12:01:05 +0000 Files and hashes: 1: 4Jp18k3WgZxFLlIl31FziAZ_pyE.roa (hash: Rdy6GJGskKOgLLcQAYAa6TgfgY93QdTyE4LXA4WR8FE=) 2: J-mZDParjvz3ljIfTzlhasavsBo.roa (hash: X+bwHIE0wlCUwYusUU0uKi4Yc/Kz9/L2eOGJbsIOXJw=) 3: JbzhdefJbSbcMWzYg2HKOZi42yQ.roa (hash: Lr8qqBdkJKxtoR5S2Pga1jAiow0N/LgTqH30jZ9Ys0M=) 4: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: OUQAr8jpdQ9CMoYNNO6RpEE1TbmMKUP1u1FtEG/zg+s=) 5: cxjVghHfKz7r8jK0ajPAm20QF-U.roa (hash: HPsMihI6S6ZtrZUoih477ooLtwdT/SYfO2io/vTyfY8=) 6: d852wo13D922O1kxvHO2L_8C0MU.roa (hash: HBCOzohfyjSX600EtZoiv9El3W7QzIDEos4plB6TxSI=) 7: hDkefyVIo6CtSmC9usLxfbXSHJo.roa (hash: 2L43qW8nvv7ZuypirwxJV5b95hzLgxd1pp/3t2CraNw=) 8: jIbMiSFlsQdlGZXR1HxPoO5c35o.roa (hash: QE4Ii8v6WxF41ed0I+H7egny9WwHZOU3Z66ypjFLn7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 12:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:49:49:61:59:86:0e:8c:37:d2:b0:e3:13:8e:90:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e Validity Not Before: Dec 11 12:01:05 2025 GMT Not After : Dec 12 12:01:05 2025 GMT Subject: CN=2d24a4944f6497e33e419e84121c0248a3a8157f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:46:a5:69:69:40:95:47:c8:67:88:95:75:bc: f1:76:73:03:e3:65:36:ad:1b:ec:98:b0:ec:58:2a: 3c:4e:cf:65:e2:14:b5:8d:f4:86:b6:02:32:e3:50: 52:8b:6c:1a:4b:0d:4e:b7:80:79:f3:a9:98:db:e3: 4e:b9:09:97:df:24:43:cb:b5:bf:fe:b7:67:af:1f: 20:7b:73:82:78:4d:81:62:6a:e9:0a:c4:c9:b4:23: 6f:1a:d0:e8:cb:ac:70:a5:be:f8:2a:c5:ca:ef:41: 4a:db:ed:a9:5f:7a:2f:2d:25:8c:85:46:86:12:aa: fe:21:ed:1b:e9:1b:68:ac:89:97:6d:c4:18:82:e4: 5f:4d:ff:76:44:aa:71:0a:b9:ff:fa:9c:56:77:fa: 77:6a:1c:f1:b4:e8:81:08:5d:68:c6:40:75:d1:de: fa:02:ef:b8:c2:30:d2:a5:04:94:a6:11:45:f8:1a: 93:3b:53:81:9e:ab:b7:99:81:af:b7:ce:f4:19:75: 01:2f:d4:8f:21:95:5d:67:9a:da:b7:85:b5:50:21: 30:38:30:27:5d:0e:47:35:79:74:ee:0c:11:30:4d: d9:2e:9c:3f:2c:68:bd:27:97:5e:41:a7:6c:e0:fb: e2:4c:51:94:6b:c5:77:01:09:90:d9:cb:10:70:09: 46:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:24:A4:94:4F:64:97:E3:3E:41:9E:84:12:1C:02:48:A3:A8:15:7F X509v3 Authority Key Identifier: keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:06:f8:2e:c3:64:e3:b5:2a:05:95:87:70:88:16:f6:01:0d: 4c:9f:9c:5a:42:af:45:9c:d2:9d:39:0d:6e:b2:3e:d3:b9:eb: 77:ee:87:ab:8b:20:07:65:62:a1:ac:a7:97:01:9d:bb:fb:8e: 77:fd:4d:92:d7:cb:dc:f2:a6:ea:cd:0d:bb:12:af:c3:bb:ce: b9:0d:94:8e:81:b2:51:05:b8:13:c6:05:82:da:d4:65:ef:98: 83:92:07:26:dc:9f:db:8e:d9:b0:c5:71:45:4b:cc:0e:de:8b: 6c:17:8c:ae:77:35:3d:ae:90:32:64:98:9a:1e:19:f7:8f:5c: 53:88:14:65:ab:79:16:75:bb:f7:4f:d1:55:40:d3:4c:7d:87: f9:ee:f3:c0:6a:17:c3:86:52:fa:5d:b9:c6:8e:a6:31:20:9b: 18:5e:93:bc:4c:eb:70:88:62:68:5e:55:6e:9b:02:ba:82:7b: 7a:29:8c:5d:ae:c2:23:03:85:36:36:c8:0a:3a:6a:a9:7c:bd: 2c:f9:7b:86:90:14:24:ee:2e:15:24:04:6e:61:a3:f0:51:69: a1:92:2a:e5:de:30:b2:3c:75:f8:1b:0d:ca:27:00:8b:a9:82: a3:72:56:42:96:4a:34:fd:5f:68:f3:8c:28:c5:75:93:73:5d: 81:ad:f5:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNSUlhWYYOjDfSsOMTjpCBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0 NzdmN2UwHhcNMjUxMjExMTIwMTA1WhcNMjUxMjEyMTIwMTA1WjAzMTEwLwYDVQQD EygyZDI0YTQ5NDRmNjQ5N2UzM2U0MTllODQxMjFjMDI0OGEzYTgxNTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0alaWlAlUfIZ4iVdbzxdnMD42U2 rRvsmLDsWCo8Ts9l4hS1jfSGtgIy41BSi2waSw1Ot4B586mY2+NOuQmX3yRDy7W/ /rdnrx8ge3OCeE2BYmrpCsTJtCNvGtDoy6xwpb74KsXK70FK2+2pX3ovLSWMhUaG Eqr+Ie0b6RtorImXbcQYguRfTf92RKpxCrn/+pxWd/p3ahzxtOiBCF1oxkB10d76 Au+4wjDSpQSUphFF+BqTO1OBnqu3mYGvt870GXUBL9SPIZVdZ5rat4W1UCEwODAn XQ5HNXl07gwRME3ZLpw/LGi9J5deQads4PviTFGUa8V3AQmQ2csQcAlG1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0kpJRPZJfjPkGehBIcAkijqBV/MB8GA1UdIwQY MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt OGVhYjdmNGZlNzdlLzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQb4LsNk 47UqBZWHcIgW9gENTJ+cWkKvRZzSnTkNbrI+07nrd+6Hq4sgB2VioaynlwGdu/uO d/1NktfL3PKm6s0NuxKvw7vOuQ2UjoGyUQW4E8YFgtrUZe+Yg5IHJtyf247ZsMVx RUvMDt6LbBeMrnc1Pa6QMmSYmh4Z949cU4gUZat5FnW790/RVUDTTH2H+e7zwGoX w4ZS+l25xo6mMSCbGF6TvEzrcIhiaF5VbpsCuoJ7eimMXa7CIwOFNjbICjpqqXy9 LPl7hpAUJO4uFSQEbmGj8FFpoZIq5d4wsjx1+BsNyicAi6mCo3JWQpZKNP1faPOM KMV1k3Ndga31oA== -----END CERTIFICATE-----Generated at Thu Dec 11 19:40:20 2025 by rpki-client