This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft File: TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft (raw, json) Hash identifier: xtuppPEjpmHPaIv1QhlWkw0p75JBDdKpSsZpXtm6R90= Subject key identifier: 4A:7D:48:27:E4:74:62:8F:A1:83:96:1A:09:D2:7C:B0:5D:70:0B:0A Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9 Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9 Certificate serial: 019B34FB695EF38104374E81B0E7546F973F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft Manifest number: 12ED Signing time: Fri 19 Dec 2025 05:00:50 +0000 Manifest this update: Fri 19 Dec 2025 05:00:50 +0000 Manifest next update: Sat 20 Dec 2025 05:00:50 +0000 Files and hashes: 1: 0Y15xTEGHWqAVJeDnj84hoOI0tg.roa (hash: x9AqfYccJqcsHyWL4/sbLsYAD4D5JWU2OTOL9ya8Qzo=) 2: IYab2KOA6Rs-FvpcDRNq2DIlRwA.roa (hash: IVe8cPHTrjQPMjYgTeQH7fMCvrM38QVBDNRacJOqgtc=) 3: TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl (hash: PJaYi/DU3xF91tZwSHw54i46KqRBESRLUpKoSK/3XOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:69:5e:f3:81:04:37:4e:81:b0:e7:54:6f:97:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9 Validity Not Before: Dec 19 05:00:50 2025 GMT Not After : Dec 20 05:00:50 2025 GMT Subject: CN=4a7d4827e474628fa183961a09d27cb05d700b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fc:88:1d:0f:9a:fb:4e:cd:eb:69:dc:e0:c0: fd:20:cb:b1:25:3a:e4:99:0c:59:17:f5:80:cb:17: d1:6d:a7:91:2a:0e:da:47:25:1c:aa:53:c5:91:85: 84:56:ab:44:10:48:59:6a:af:19:ca:82:e3:73:e9: 99:47:42:9d:51:6a:3d:9b:1e:d0:87:be:e9:6f:2e: c2:cd:b8:7a:e0:f6:03:87:db:b9:dc:73:53:bf:17: 5d:31:1a:16:7c:ae:17:fe:a7:8b:47:56:70:3e:21: 45:16:4a:04:3b:02:8f:d3:79:69:4f:7f:c6:60:d7: 2e:01:a7:bb:a2:a2:81:d0:0d:c0:9d:57:1b:c8:b8: c6:ff:b9:cf:a3:a0:99:c7:7f:38:d5:44:3e:15:74: ed:ff:7f:59:b9:26:79:60:30:69:fd:bd:86:68:61: b6:db:7b:7e:8d:2b:c8:75:2b:fd:5a:44:b8:6d:b0: 7c:46:9f:6c:9e:98:38:58:ef:2d:8a:29:b5:af:90: c2:dc:4b:bd:44:5b:15:5f:a0:79:58:60:b3:76:29: 0c:4f:c9:d1:99:60:ac:c2:24:a8:f8:45:48:a4:33: c2:89:02:df:af:85:f5:3e:f0:ea:90:40:55:3f:62: dd:f5:45:a1:b4:df:cd:b9:8c:dc:d8:06:fc:27:8a: 49:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7D:48:27:E4:74:62:8F:A1:83:96:1A:09:D2:7C:B0:5D:70:0B:0A X509v3 Authority Key Identifier: keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:85:ac:8e:16:92:ae:61:b3:d9:2e:d3:aa:68:8a:25:bb:18: 95:6b:4b:f8:b1:1f:35:15:2e:da:72:63:3a:fe:90:b9:ce:7d: 28:cb:14:9a:b5:a7:b9:c0:df:ea:dd:66:3f:d9:34:34:b0:6e: f0:96:58:6c:e3:ac:cc:88:5b:0c:30:00:20:99:a1:8b:ec:69: d5:79:33:d4:db:51:68:8d:1a:78:43:2d:0d:ec:32:b5:3a:84: 05:bb:53:e2:08:97:5d:db:77:ac:14:8b:ac:ba:2b:af:0e:5e: 25:c8:02:ee:56:12:e6:0f:0f:d1:84:df:54:a4:3b:1b:ae:28: 49:a2:d2:bf:6c:b8:b9:38:0f:a1:a1:47:34:b0:9a:c6:27:d6: ac:3e:b2:45:4e:70:cc:af:82:a9:cf:4e:4e:7c:7a:ee:b2:3b: 98:a7:72:43:4f:5b:29:99:c2:f8:7c:5f:a8:56:09:2a:15:0e: 77:31:2e:5e:94:b6:ab:54:28:65:52:b5:ff:17:c2:ef:92:76: ff:4a:ac:f6:c8:e5:20:33:07:99:51:98:05:bc:9e:27:91:fd: b4:58:11:c1:f1:d0:b3:84:45:65:ef:7a:49:2c:98:60:1e:fd: a3:73:eb:a1:3d:2b:9a:6c:3f:93:90:6b:5a:81:fa:14:13:4a: 89:09:0a:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+2le84EEN06BsOdUb5c/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzkwNTVhNjk5MGI4MjQwOGNmMWFiZjI5MzEzNzgwZTI0 OWE0YzkwHhcNMjUxMjE5MDUwMDUwWhcNMjUxMjIwMDUwMDUwWjAzMTEwLwYDVQQD Eyg0YTdkNDgyN2U0NzQ2MjhmYTE4Mzk2MWEwOWQyN2NiMDVkNzAwYjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/yIHQ+a+07N62nc4MD9IMuxJTrk mQxZF/WAyxfRbaeRKg7aRyUcqlPFkYWEVqtEEEhZaq8ZyoLjc+mZR0KdUWo9mx7Q h77pby7Czbh64PYDh9u53HNTvxddMRoWfK4X/qeLR1ZwPiFFFkoEOwKP03lpT3/G YNcuAae7oqKB0A3AnVcbyLjG/7nPo6CZx3841UQ+FXTt/39ZuSZ5YDBp/b2GaGG2 23t+jSvIdSv9WkS4bbB8Rp9snpg4WO8tiim1r5DC3Eu9RFsVX6B5WGCzdikMT8nR mWCswiSo+EVIpDPCiQLfr4X1PvDqkEBVP2Ld9UWhtN/NuYzc2Ab8J4pJzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEp9SCfkdGKPoYOWGgnSfLBdcAsKMB8GA1UdIwQY MBaAFEw5BVppkLgkCM8avykxN4DiSaTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kZjZlMjUtOTIzYy00ODM4LTg2NGYt ZDRiMzdlNDRhYjdjLzEvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kZjZlMjUtOTIzYy00ODM4LTg2NGYtZDRiMzdlNDRhYjdj LzEvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYWsjhaS rmGz2S7TqmiKJbsYlWtL+LEfNRUu2nJjOv6Quc59KMsUmrWnucDf6t1mP9k0NLBu 8JZYbOOszIhbDDAAIJmhi+xp1Xkz1NtRaI0aeEMtDewytTqEBbtT4giXXdt3rBSL rLorrw5eJcgC7lYS5g8P0YTfVKQ7G64oSaLSv2y4uTgPoaFHNLCaxifWrD6yRU5w zK+Cqc9OTnx67rI7mKdyQ09bKZnC+HxfqFYJKhUOdzEuXpS2q1QoZVK1/xfC75J2 /0qs9sjlIDMHmVGYBbyeJ5H9tFgRwfHQs4RFZe96SSyYYB79o3ProT0rmmw/k5Br WoH6FBNKiQkKUQ== -----END CERTIFICATE-----Generated at Fri Dec 19 14:35:37 2025 by rpki-client