This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft File: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft (raw, json) Hash identifier: HIrmzo+Nyb1p1nKU3VGylO0sUSPt3g58WtKtLCn7aqY= Subject key identifier: DE:77:07:03:30:EA:85:59:A7:FF:C2:AC:CE:CB:BE:9A:65:43:C5:2A Authority key identifier: B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33 Certificate issuer: /CN=b5d87fdc272ae058618786e741707557bf4e1a33 Certificate serial: 019B21073EB85A342E47F11B505BE03B9CB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft Manifest number: 0515 Signing time: Mon 15 Dec 2025 08:01:21 +0000 Manifest this update: Mon 15 Dec 2025 08:01:21 +0000 Manifest next update: Tue 16 Dec 2025 08:01:21 +0000 Files and hashes: 1: qQy9nbutIB840i93Gc6Vw1Yt6lA.roa (hash: 65g5a8+QhFyUXfSxWzLsMCFvk+W/xMxKhOR8kW2aeMw=) 2: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl (hash: cNcB12bRzEnn4r7ztRUIAnaOlVodTrjS0HQk4PB38NY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:07:3e:b8:5a:34:2e:47:f1:1b:50:5b:e0:3b:9c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5d87fdc272ae058618786e741707557bf4e1a33 Validity Not Before: Dec 15 08:01:21 2025 GMT Not After : Dec 16 08:01:21 2025 GMT Subject: CN=de77070330ea8559a7ffc2accecbbe9a6543c52a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:19:61:5c:01:f6:13:26:cd:e6:18:a7:38:ed: 2b:f0:95:6d:c8:b2:30:a4:8b:f3:2a:4e:86:61:2f: f0:d3:8f:a5:19:3b:5d:c7:8a:9c:a8:5b:50:a4:e5: d4:08:20:36:69:56:d7:b5:14:42:f8:82:bd:8e:79: 7b:b3:a3:dc:a3:e1:0b:36:ce:24:3c:54:1c:c1:89: 37:37:4a:81:89:9e:66:2b:5c:9d:39:67:7b:ea:f0: d2:81:90:01:37:0e:48:0e:bc:df:71:df:f5:6c:8d: bf:77:23:6a:86:da:c4:b5:12:b6:c1:36:a8:0a:3f: b8:d6:7e:45:ac:d6:1f:4a:6d:7e:e3:5c:35:87:48: 4b:e0:2d:95:ee:51:58:24:32:54:53:94:22:14:35: 2b:7d:9e:31:ea:54:c7:ed:c1:d0:be:fe:bb:9f:4d: 71:b0:35:50:bc:7f:5f:6e:99:f6:c8:20:7b:73:2d: d6:17:41:3c:09:8d:dd:82:08:89:3d:ff:ba:c9:ca: fc:f8:e9:9a:db:a3:87:e3:f0:bb:63:96:fe:42:31: 9e:5b:90:e0:d6:be:81:23:44:da:ae:4b:1e:f1:03: 4c:25:79:e1:bb:19:a8:67:06:c6:28:d5:3a:28:a5: a7:22:bb:5e:91:1e:80:f6:5a:94:dd:d5:dd:f9:20: 17:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:77:07:03:30:EA:85:59:A7:FF:C2:AC:CE:CB:BE:9A:65:43:C5:2A X509v3 Authority Key Identifier: keyid:B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:e4:c6:a9:9c:58:0b:9e:22:89:7d:c7:b0:e2:c6:53:e7:78: 34:98:67:88:75:77:46:ae:d2:59:20:66:d4:42:28:95:e7:eb: 6f:29:73:a8:33:80:21:f0:f8:43:4a:b0:6f:2a:36:6d:58:87: 5f:0f:94:73:89:fd:62:3a:ce:7f:69:3d:e3:f0:b8:58:f4:ea: 7d:47:c9:88:ef:82:43:00:da:7e:22:dc:7d:ea:c8:20:94:72: 63:a6:65:3c:8f:15:f1:a8:42:63:8e:47:ae:71:fd:3b:c1:fa: a1:b5:e5:28:a4:33:2d:42:6f:4c:1b:02:d0:4a:6c:12:29:16: 49:3e:68:cd:8e:e1:68:65:c6:00:bf:e6:de:09:04:ed:05:28: 75:27:ed:51:aa:84:f5:8d:42:0a:a1:12:23:b8:ae:f7:46:91: 3b:c9:ff:3b:72:08:87:bd:6a:db:1d:0d:0a:63:79:bf:2e:c8: 05:9d:39:54:24:31:d5:d3:5a:ee:04:67:7e:97:d5:e8:9a:79: 6c:ec:25:c4:92:bd:3b:e0:20:5b:2e:3f:64:90:5c:67:56:ff: 05:22:46:b5:90:41:d0:f9:5b:2c:12:5d:d4:b5:a4:47:a2:69: af:d3:54:82:a9:49:c5:d5:c8:9e:21:fa:86:3c:98:b1:e7:f3: ef:30:7c:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshBz64WjQuR/EbUFvgO5yzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZDg3ZmRjMjcyYWUwNTg2MTg3ODZlNzQxNzA3NTU3YmY0 ZTFhMzMwHhcNMjUxMjE1MDgwMTIxWhcNMjUxMjE2MDgwMTIxWjAzMTEwLwYDVQQD EyhkZTc3MDcwMzMwZWE4NTU5YTdmZmMyYWNjZWNiYmU5YTY1NDNjNTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RlhXAH2EybN5hinOO0r8JVtyLIw pIvzKk6GYS/w04+lGTtdx4qcqFtQpOXUCCA2aVbXtRRC+IK9jnl7s6Pco+ELNs4k PFQcwYk3N0qBiZ5mK1ydOWd76vDSgZABNw5IDrzfcd/1bI2/dyNqhtrEtRK2wTao Cj+41n5FrNYfSm1+41w1h0hL4C2V7lFYJDJUU5QiFDUrfZ4x6lTH7cHQvv67n01x sDVQvH9fbpn2yCB7cy3WF0E8CY3dggiJPf+6ycr8+Oma26OH4/C7Y5b+QjGeW5Dg 1r6BI0Tarkse8QNMJXnhuxmoZwbGKNU6KKWnIrtekR6A9lqU3dXd+SAXTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN53BwMw6oVZp//CrM7LvpplQ8UqMB8GA1UdIwQY MBaAFLXYf9wnKuBYYYeG50FwdVe/ThozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGRoXzNDY3E0RmhoaDRiblFYQjFWNzlPR2pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82NzBiMTAtMTBlYi00NzZmLTg0ZWYt MTU2ZWRhMmI1NWI2LzEvdGRoXzNDY3E0RmhoaDRiblFYQjFWNzlPR2pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC82NzBiMTAtMTBlYi00NzZmLTg0ZWYtMTU2ZWRhMmI1NWI2 LzEvdGRoXzNDY3E0RmhoaDRiblFYQjFWNzlPR2pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeTGqZxY C54iiX3HsOLGU+d4NJhniHV3Rq7SWSBm1EIolefrbylzqDOAIfD4Q0qwbyo2bViH Xw+Uc4n9YjrOf2k94/C4WPTqfUfJiO+CQwDafiLcferIIJRyY6ZlPI8V8ahCY45H rnH9O8H6obXlKKQzLUJvTBsC0EpsEikWST5ozY7haGXGAL/m3gkE7QUodSftUaqE 9Y1CCqESI7iu90aRO8n/O3IIh71q2x0NCmN5vy7IBZ05VCQx1dNa7gRnfpfV6Jp5 bOwlxJK9O+AgWy4/ZJBcZ1b/BSJGtZBB0PlbLBJd1LWkR6Jpr9NUgqlJxdXIniH6 hjyYsefz7zB8xw== -----END CERTIFICATE-----Generated at Mon Dec 15 12:03:03 2025 by rpki-client