This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft File: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft (raw, json) Hash identifier: AEDMvyn8nOXzn1KkgzYsCxl7qK0VQzuQ+21Wd26AdRY= Subject key identifier: 06:8C:95:EB:8C:21:F9:49:8A:66:BE:2F:D7:14:CF:91:32:21:26:17 Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1 Certificate issuer: /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1 Certificate serial: 019B1BA9D44275B71769919713A68D889F43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft Manifest number: 0837 Signing time: Sun 14 Dec 2025 07:01:13 +0000 Manifest this update: Sun 14 Dec 2025 07:01:13 +0000 Manifest next update: Mon 15 Dec 2025 07:01:13 +0000 Files and hashes: 1: CmDicAfDfoz93maibb20vLFeJSE.roa (hash: T8rIp3ZOIEv2U6cB/WhgBqnN/oGzchfMmPBfz5rrS5E=) 2: D2t0G5l-no81p6rarPw2-EpQMYw.roa (hash: Ao7GMS7CFmzAFJghE2/XSbtoAU6qWDBHEwHUCZKTHwY=) 3: DGY9DRUJrYLpsverneGppUeA19c.roa (hash: BCikbUDAbYpSarrQzlAQJBis5jeq62TU6gwB+aPdaEk=) 4: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl (hash: ZEuTLnKQZEMhCndDLcbZr4M7cTGbo2ONq2oprHSwf0o=) 5: wVkI_Szt3pr4XGdNEoWckhxFxCk.roa (hash: g7wpqUCSc32Jx8X0zDboKVFnJQIoCmmZncv7BRTwxHA=) 6: yZi5kswzr7A4DzlGCWa5weE8ZXs.roa (hash: Anf6GmhoZMZWxPMhTL0WiBitC7uHDJE3iNPWcCU2CB0=) 7: yaeBzALTksFutDMDSo14HWi1pcc.roa (hash: TCSIw7g3HWASSSDxcMQYHErKzGbepcCJReN+FTRV2MI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:a9:d4:42:75:b7:17:69:91:97:13:a6:8d:88:9f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1 Validity Not Before: Dec 14 07:01:13 2025 GMT Not After : Dec 15 07:01:13 2025 GMT Subject: CN=068c95eb8c21f9498a66be2fd714cf9132212617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f6:24:d2:52:a4:34:f0:81:c1:fc:9a:3e:36: e9:99:dc:1b:32:24:79:5e:e2:b9:14:85:9e:ab:1b: 08:ac:00:6c:f0:98:98:9c:eb:e2:9a:d7:dc:4f:8f: 02:ad:ab:9b:e7:0c:28:7f:c0:01:45:88:86:4e:e4: fd:17:c8:01:cf:de:10:1c:b2:13:1a:a4:7d:24:7a: f6:0d:f1:81:e7:89:19:11:f9:ea:c1:a0:8d:e2:49: c8:ae:de:e2:0c:52:0b:b6:d9:a8:19:c0:3a:29:d1: dc:d0:92:c8:67:dd:e0:0b:91:8e:f2:82:4e:44:bc: bb:e9:88:58:79:a2:68:fd:83:3b:cf:0f:28:6d:7f: b1:73:00:72:f7:bc:90:1e:b6:9a:7b:a7:5a:9e:96: ef:1b:f4:13:6e:eb:be:f6:cd:3e:26:6e:42:8f:00: 8f:79:0e:85:4b:b5:06:3c:91:cc:ef:54:8c:a5:6f: 4a:39:9a:a0:cc:da:c9:ce:9b:c9:10:a9:e6:1c:47: 63:84:26:bd:ec:9a:07:14:15:4c:56:5b:e3:1c:b9: 2b:7a:c2:07:59:6e:96:5c:f8:47:28:3f:b6:28:61: 28:79:c9:18:5e:83:67:1e:04:be:7c:ba:4c:0a:47: 8b:38:88:b4:30:a3:9e:f7:2c:f6:f6:15:05:94:b6: 55:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8C:95:EB:8C:21:F9:49:8A:66:BE:2F:D7:14:CF:91:32:21:26:17 X509v3 Authority Key Identifier: keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:de:77:f0:f0:85:e4:39:71:59:00:ce:2b:5c:b6:36:f3:11: 70:ab:d2:2b:11:93:c8:19:ff:5a:7c:55:a5:da:a2:c2:eb:89: d9:a1:a9:14:30:33:17:07:39:4f:4b:ec:2a:93:b3:ad:7e:f9: 4e:46:8f:77:dc:df:5f:ac:a7:60:83:51:55:d2:d9:4c:9c:14: a8:51:f9:3e:dc:be:5f:30:f3:99:9f:00:e0:d0:6f:9f:3b:f3: db:9c:ea:4a:ec:55:b3:15:ba:73:c2:8c:2e:e3:42:d9:35:05: 05:6c:05:1f:52:30:4e:d5:22:26:3b:82:80:77:4f:12:40:47: c8:3b:c9:11:5e:4a:5f:28:e9:77:32:11:ac:b3:72:ef:d0:05: 42:6e:c9:3b:6e:69:76:85:bf:07:5e:11:25:9a:35:ce:a0:62: e3:b6:65:c1:3a:a3:b3:b3:5a:8f:86:46:4f:d3:3e:ea:54:ed: a3:aa:71:e8:cb:10:03:a2:b4:ba:f4:9b:fd:5c:9b:f7:8d:f4: 4e:44:8c:61:88:20:bd:bc:94:16:eb:31:c6:c6:59:f8:fe:97: 65:2b:b2:ec:ef:f6:d3:1c:03:19:a3:9b:43:4d:53:cb:32:2c: 9b:4e:0f:d8:60:ef:aa:63:82:ad:48:61:73:19:6d:92:e6:0c: 3f:d9:7b:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqdRCdbcXaZGXE6aNiJ9DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzc4OWVjZjY3ZTA0Mjk4YzVlZTQ0YzY3ZDhmYjdmNWQ2 ZDk1YTEwHhcNMjUxMjE0MDcwMTEzWhcNMjUxMjE1MDcwMTEzWjAzMTEwLwYDVQQD EygwNjhjOTVlYjhjMjFmOTQ5OGE2NmJlMmZkNzE0Y2Y5MTMyMjEyNjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfYk0lKkNPCBwfyaPjbpmdwbMiR5 XuK5FIWeqxsIrABs8JiYnOvimtfcT48Craub5wwof8ABRYiGTuT9F8gBz94QHLIT GqR9JHr2DfGB54kZEfnqwaCN4knIrt7iDFILttmoGcA6KdHc0JLIZ93gC5GO8oJO RLy76YhYeaJo/YM7zw8obX+xcwBy97yQHraae6danpbvG/QTbuu+9s0+Jm5CjwCP eQ6FS7UGPJHM71SMpW9KOZqgzNrJzpvJEKnmHEdjhCa97JoHFBVMVlvjHLkresIH WW6WXPhHKD+2KGEoeckYXoNnHgS+fLpMCkeLOIi0MKOe9yz29hUFlLZVGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAaMleuMIflJima+L9cUz5EyISYXMB8GA1UdIwQY MBaAFEw3iez2fgQpjF7kTGfY+39dbZWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMt MWRjNTRkMWMwM2EzLzEvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMtMWRjNTRkMWMwM2Ez LzEvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPd538PCF 5DlxWQDOK1y2NvMRcKvSKxGTyBn/WnxVpdqiwuuJ2aGpFDAzFwc5T0vsKpOzrX75 TkaPd9zfX6ynYINRVdLZTJwUqFH5Pty+XzDzmZ8A4NBvnzvz25zqSuxVsxW6c8KM LuNC2TUFBWwFH1IwTtUiJjuCgHdPEkBHyDvJEV5KXyjpdzIRrLNy79AFQm7JO25p doW/B14RJZo1zqBi47ZlwTqjs7Naj4ZGT9M+6lTto6px6MsQA6K0uvSb/Vyb9430 TkSMYYggvbyUFusxxsZZ+P6XZSuy7O/20xwDGaObQ01TyzIsm04P2GDvqmOCrUhh cxltkuYMP9l72g== -----END CERTIFICATE-----Generated at Sun Dec 14 15:00:17 2025 by rpki-client