This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft File: TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft (raw, json) Hash identifier: 9oZnpm8JS+GARoF9zeLrmpYWge85Pci49nf+pbHV32Q= Subject key identifier: B5:2D:44:97:46:64:46:C0:2E:6E:F9:D3:B7:AE:FE:2B:13:4B:B4:B5 Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9 Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9 Certificate serial: 019B1DCF20F619342BF156279C0D48F742B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft Manifest number: 12E1 Signing time: Sun 14 Dec 2025 17:01:12 +0000 Manifest this update: Sun 14 Dec 2025 17:01:12 +0000 Manifest next update: Mon 15 Dec 2025 17:01:12 +0000 Files and hashes: 1: 0Y15xTEGHWqAVJeDnj84hoOI0tg.roa (hash: x9AqfYccJqcsHyWL4/sbLsYAD4D5JWU2OTOL9ya8Qzo=) 2: IYab2KOA6Rs-FvpcDRNq2DIlRwA.roa (hash: IVe8cPHTrjQPMjYgTeQH7fMCvrM38QVBDNRacJOqgtc=) 3: TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl (hash: q95eSON9907h0ub1Bn6ViAg35zRKZOp+HYDfJJpcKns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:cf:20:f6:19:34:2b:f1:56:27:9c:0d:48:f7:42:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9 Validity Not Before: Dec 14 17:01:12 2025 GMT Not After : Dec 15 17:01:12 2025 GMT Subject: CN=b52d4497466446c02e6ef9d3b7aefe2b134bb4b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c9:6b:42:88:db:b7:99:f1:ed:da:98:b6:42: df:a1:53:8c:2a:ef:da:01:5c:54:3c:4f:ed:35:95: bc:a9:67:eb:2b:e3:8e:c2:cc:80:85:c7:00:85:c7: a4:21:fd:03:98:25:98:31:ef:e2:57:9a:5c:1e:6c: 11:a0:9d:e4:7b:5f:fc:d5:37:bc:6f:f9:2f:cb:1f: 97:87:13:54:2c:39:2a:fe:70:cf:ca:1e:de:9e:d6: 46:62:4c:78:74:2f:a0:c0:47:00:6b:a9:fa:0b:7e: 84:eb:9a:16:8b:ae:09:69:1f:e2:20:76:72:2d:3b: 1a:56:28:a2:29:f0:07:d5:2a:3b:49:63:7f:00:4f: 17:9e:55:6a:72:f5:88:d3:f3:4d:1b:15:9c:a6:9b: 8d:a2:6e:b3:e4:63:bb:53:4a:7c:ff:c1:9a:4d:a9: 72:70:e2:41:a1:0d:2c:4e:c9:b0:2c:25:78:f0:6d: 25:7d:b5:db:07:1f:45:c2:51:e7:3e:a9:97:0f:bd: b7:5d:4e:c2:5f:09:9a:9f:b3:5c:ea:e1:63:73:fb: d0:81:db:94:f7:09:22:f9:cb:6c:d0:6b:4b:3f:10: 0f:7d:83:48:eb:c0:0d:48:88:cc:51:91:6a:09:e7: dd:06:25:05:78:1c:e9:11:58:62:b2:48:3c:81:08: 7b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2D:44:97:46:64:46:C0:2E:6E:F9:D3:B7:AE:FE:2B:13:4B:B4:B5 X509v3 Authority Key Identifier: keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:79:d0:5b:22:39:e5:b3:b6:3d:de:d2:c2:64:28:41:e9:e4: 49:eb:e9:c0:f0:82:a3:92:24:f1:57:e9:67:39:8b:95:63:ec: 3a:0f:5b:d7:55:e8:4d:70:d3:55:9e:88:b9:08:ab:99:6c:1b: 6c:c5:d3:64:65:15:8d:4d:c8:c3:b6:08:76:fc:ed:d6:3c:fe: d0:c6:4f:60:a0:b0:7e:2c:40:40:48:30:74:05:3e:7d:32:ef: 8e:62:28:4a:5c:b3:af:8e:ae:b8:0f:54:ff:01:e3:ac:63:e0: c9:82:02:5c:4a:19:6e:e1:88:da:12:97:a6:bc:e2:94:45:03: 48:6e:eb:2d:7e:c8:b2:e6:ac:92:5d:36:2e:1a:d6:d8:72:9d: b5:f9:ef:3c:4b:e5:bb:eb:6f:e2:fc:94:6e:39:70:37:3f:d4: 58:dc:e5:ed:8f:e3:7d:27:30:c2:17:0b:25:b6:78:9d:f7:c9: e3:32:08:40:41:c4:cd:98:1e:1c:da:ab:62:d9:a1:e7:b6:d0: 0b:c2:7d:1e:2d:18:4d:04:55:2d:0c:3f:bc:5c:af:ee:ed:a9: 36:27:03:5c:46:39:a4:e5:19:7e:9b:5e:55:6b:79:a7:4e:ad: b0:04:c0:3a:45:09:33:bc:25:3f:32:79:90:01:45:19:5d:22: 08:71:f9:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdzyD2GTQr8VYnnA1I90KzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzkwNTVhNjk5MGI4MjQwOGNmMWFiZjI5MzEzNzgwZTI0 OWE0YzkwHhcNMjUxMjE0MTcwMTEyWhcNMjUxMjE1MTcwMTEyWjAzMTEwLwYDVQQD EyhiNTJkNDQ5NzQ2NjQ0NmMwMmU2ZWY5ZDNiN2FlZmUyYjEzNGJiNGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MlrQojbt5nx7dqYtkLfoVOMKu/a AVxUPE/tNZW8qWfrK+OOwsyAhccAhcekIf0DmCWYMe/iV5pcHmwRoJ3ke1/81Te8 b/kvyx+XhxNULDkq/nDPyh7entZGYkx4dC+gwEcAa6n6C36E65oWi64JaR/iIHZy LTsaViiiKfAH1So7SWN/AE8XnlVqcvWI0/NNGxWcppuNom6z5GO7U0p8/8GaTaly cOJBoQ0sTsmwLCV48G0lfbXbBx9FwlHnPqmXD723XU7CXwman7Nc6uFjc/vQgduU 9wki+cts0GtLPxAPfYNI68ANSIjMUZFqCefdBiUFeBzpEVhiskg8gQh7kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUtRJdGZEbALm7507eu/isTS7S1MB8GA1UdIwQY MBaAFEw5BVppkLgkCM8avykxN4DiSaTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kZjZlMjUtOTIzYy00ODM4LTg2NGYt ZDRiMzdlNDRhYjdjLzEvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kZjZlMjUtOTIzYy00ODM4LTg2NGYtZDRiMzdlNDRhYjdj LzEvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHnQWyI5 5bO2Pd7SwmQoQenkSevpwPCCo5Ik8VfpZzmLlWPsOg9b11XoTXDTVZ6IuQirmWwb bMXTZGUVjU3Iw7YIdvzt1jz+0MZPYKCwfixAQEgwdAU+fTLvjmIoSlyzr46uuA9U /wHjrGPgyYICXEoZbuGI2hKXprzilEUDSG7rLX7Isuaskl02LhrW2HKdtfnvPEvl u+tv4vyUbjlwNz/UWNzl7Y/jfScwwhcLJbZ4nffJ4zIIQEHEzZgeHNqrYtmh57bQ C8J9Hi0YTQRVLQw/vFyv7u2pNicDXEY5pOUZfpteVWt5p06tsATAOkUJM7wlPzJ5 kAFFGV0iCHH5cA== -----END CERTIFICATE-----Generated at Sun Dec 14 22:54:03 2025 by rpki-client